Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
File:                     ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft (raw, json)
Hash identifier:          81x3/oEsF80PcXE+BPcHeuXrnj1L8LnOR9yfV+FgKLI=
Subject key identifier:   6E:B4:C4:75:1B:CA:20:51:79:9D:EA:69:29:D0:5F:1F:4C:10:BA:C6
Authority key identifier: 81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
Certificate issuer:       /CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Certificate serial:       019768F2B6997F70C5BDEA2FB5DE7138BD6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 11:00:26 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:26 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:26 +0000
Files and hashes:         1: F4qvGIYkJR23AR8i3U55htWfFrA.roa (hash: sLcl2GBXiso+t+Z5Jf9zcobxR79ID28gM2VuGSdiFAw=)
                          2: ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl (hash: hQB6ZPyDb890uzw7/ygWFPHePx2MGOrlUhjTBi4NXeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:b6:99:7f:70:c5:bd:ea:2f:b5:de:71:38:bd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
        Validity
            Not Before: Jun 13 11:00:26 2025 GMT
            Not After : Jun 14 11:00:26 2025 GMT
        Subject: CN=6eb4c4751bca2051799dea6929d05f1f4c10bac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:24:38:5b:67:31:52:2b:a0:43:9f:53:86:
                    4a:96:da:a8:2b:88:38:62:58:22:a2:ab:9d:9a:ec:
                    ca:e4:d4:e4:59:49:0e:32:e4:d1:22:84:8d:cd:2b:
                    ea:75:71:79:ed:5e:b9:63:c0:8e:69:85:39:17:0f:
                    f4:6a:28:a1:0e:2a:78:59:1c:93:ea:d8:20:8c:06:
                    98:fc:b2:05:c7:ee:3a:15:51:1e:6a:70:05:8e:0c:
                    d5:c1:c2:2e:3e:4e:1d:55:20:d1:c2:9e:e3:e0:a0:
                    9c:9c:3c:49:d7:df:9f:55:e2:f2:71:d3:b5:c0:28:
                    6c:9f:9a:05:ab:f4:b8:1a:be:1f:de:b2:3e:c7:e1:
                    f5:3e:a5:2c:b0:ee:05:91:47:f7:53:1c:aa:53:75:
                    28:9a:d8:09:55:cd:5a:e0:ff:e5:06:74:23:bc:65:
                    2c:01:43:c7:b2:2c:d5:c9:0a:a7:f4:76:87:f5:d5:
                    f1:55:a8:28:c1:e4:60:05:93:c7:1c:95:fb:15:1c:
                    86:a9:c0:a3:74:7a:2b:88:70:6f:c4:9d:40:0c:26:
                    b2:08:75:b8:26:06:54:55:d4:f4:b8:67:bb:7c:85:
                    83:1d:87:9c:7f:79:54:5a:04:43:af:0a:27:1d:8f:
                    cd:4b:af:c2:c1:1b:1b:23:49:6f:4d:79:e1:3c:3b:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B4:C4:75:1B:CA:20:51:79:9D:EA:69:29:D0:5F:1F:4C:10:BA:C6
            X509v3 Authority Key Identifier:
                keyid:81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:45:fa:19:65:35:d6:89:f7:c3:41:43:f6:8e:0d:43:20:a0:
         5b:05:f4:96:11:ec:aa:e1:b5:7b:54:7f:43:bf:48:f5:22:65:
         83:53:d3:3c:09:8d:b5:d5:be:a9:53:20:55:4d:5f:72:c7:1d:
         36:e5:cd:ec:c0:45:94:e1:46:a8:84:fd:a2:be:62:11:e0:6a:
         e8:55:74:a0:bb:0b:45:56:f5:3d:42:01:42:ab:3b:0d:60:45:
         9c:d7:f8:e5:a7:e8:fc:65:37:6a:80:d2:f2:7e:db:48:ee:96:
         d0:09:de:e9:33:7f:b5:b6:0d:d5:1b:d1:ec:09:80:e6:42:56:
         21:93:35:16:3c:ae:98:a4:2c:2c:b4:b9:b9:95:da:b7:1e:97:
         18:b8:6e:7e:15:fe:04:ee:97:6c:3a:48:d9:83:83:f1:27:84:
         95:87:79:c2:8d:b9:07:f3:d4:43:9e:00:48:c0:fa:cb:2a:d1:
         0e:c0:26:b0:73:6d:d2:d0:69:04:8e:d5:64:44:4a:0a:fa:b9:
         92:fc:be:d7:c6:e4:7f:bf:e7:f0:d1:5a:54:bd:4d:50:ae:c7:
         1b:3d:2e:c4:77:0f:9e:57:74:c3:ed:e9:63:68:a1:51:63:d2:
         86:bf:02:8b:1e:45:b1:47:ed:ee:e1:b7:2f:52:c5:46:9e:6f:
         04:d8:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:48:11 2025 by rpki-client