Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File:                     5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier:          wwBgG2Vhu9BErcteceqCD40Rhe982WT1j8wSRB+0zXQ=
Subject key identifier:   93:8D:D0:70:36:8E:11:63:DC:2C:60:1D:8A:47:2A:1F:03:40:D4:1B
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer:       /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial:       01976DE2455C91E9465688F6AD896D303160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number:          158B
Signing time:             Sat 14 Jun 2025 10:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 10:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 10:00:34 +0000
Files and hashes:         1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: r9gJrNmHC8XwncS9FD1Zy57tsh3VxMet89SDKjv1R4U=)
                          2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:45:5c:91:e9:46:56:88:f6:ad:89:6d:30:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
        Validity
            Not Before: Jun 14 10:00:34 2025 GMT
            Not After : Jun 15 10:00:34 2025 GMT
        Subject: CN=938dd070368e1163dc2c601d8a472a1f0340d41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:f7:58:24:3a:a4:42:d6:c6:79:47:eb:4c:
                    b4:0e:3b:84:3e:6e:f7:4b:92:25:0d:46:b9:6e:fa:
                    1e:40:f0:87:81:75:d7:73:0d:2a:2e:f4:4c:28:99:
                    8d:64:14:61:83:84:7a:fa:1a:1d:94:11:90:d4:19:
                    4d:be:38:aa:82:59:1d:a0:41:4a:37:8c:71:6a:16:
                    fc:2f:9c:8c:b0:9d:9a:53:dd:86:c1:ec:d7:15:c3:
                    5c:f3:3e:4f:4b:06:ee:e3:94:8e:97:d8:28:09:34:
                    ea:34:89:04:46:40:66:9d:8d:c9:68:5d:71:4b:b2:
                    da:54:08:8b:4a:b0:94:2d:b3:ce:b7:28:31:6e:dd:
                    98:8f:31:53:7f:ac:83:6b:fb:54:f5:3d:cb:0f:a3:
                    7f:10:5c:5f:97:f3:f4:36:99:34:d3:a1:1c:d0:57:
                    9a:dd:6b:ba:67:c6:35:ce:c5:e7:89:a0:5b:56:4e:
                    26:68:9a:7e:2c:4a:6c:ca:be:26:2a:07:e5:c7:7e:
                    f8:ea:b8:65:e1:aa:6d:48:7c:f8:de:86:18:d0:fe:
                    41:fb:e9:70:68:37:fc:d5:77:ed:da:ed:27:f2:33:
                    be:b8:41:1e:df:6b:d1:80:31:9e:00:1f:23:00:ae:
                    5a:7f:0c:22:2a:41:ed:8a:7f:4c:06:5b:a5:f8:13:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:D0:70:36:8E:11:63:DC:2C:60:1D:8A:47:2A:1F:03:40:D4:1B
            X509v3 Authority Key Identifier:
                keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:99:a6:ba:85:9c:09:5e:d4:bd:14:68:40:e7:28:30:72:a7:
         56:1f:f1:89:56:7e:d3:5f:39:55:1d:3a:bd:15:18:f0:80:f2:
         cd:81:12:aa:27:ec:c5:51:cf:e9:79:b7:a5:e6:3f:fc:10:64:
         c0:69:8d:5a:db:25:a2:9c:c0:e3:38:c5:63:95:d4:1f:01:79:
         ef:12:b7:10:38:93:1c:85:75:2f:d8:8c:0b:55:04:89:15:71:
         56:0d:68:19:a5:f0:4b:f0:5f:b5:1c:7a:2e:81:d2:d9:d4:31:
         4c:af:bb:ec:df:71:64:3c:ba:54:8d:16:35:02:1a:f3:79:a3:
         f5:9e:2f:0e:14:92:99:66:f5:16:17:d1:3c:e9:18:fb:bf:83:
         86:c5:42:d7:5e:2b:9f:bb:f5:2b:f0:8b:0d:f4:32:45:92:e8:
         71:44:06:25:8e:bf:cc:37:91:83:b7:f8:3f:81:53:98:82:98:
         20:c7:9e:b4:92:27:83:5a:2d:fe:c0:b1:01:8a:ef:ac:89:85:
         b9:9e:2d:d8:10:a0:6e:3b:c7:4a:e6:a6:8b:6a:f4:02:39:40:
         1d:9e:ce:ea:09:df:9b:28:08:9e:48:c9:ae:ed:c2:e8:78:fe:
         c9:ca:cf:39:82:57:47:b2:30:72:31:e3:cb:5b:ea:ed:9a:f8:
         70:57:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:18:56 2025 by rpki-client