Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File:                     DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier:          oi+ot4du8kQJCNYvj0H6lm2BEDgnYAeTx71jsRtS+J0=
Subject key identifier:   1B:94:46:75:D9:AF:52:E7:E1:49:FA:CD:11:BF:FC:48:6F:FD:FF:DB
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer:       /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial:       01976CCFD5988D57FD1B502042BB43FB6487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 05:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:49 +0000
Files and hashes:         1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: uuBYLeMoJGIkvuTxTvjrK7hlLAj4mrG5Po2GM2ALbfk=)
                          2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:d5:98:8d:57:fd:1b:50:20:42:bb:43:fb:64:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
        Validity
            Not Before: Jun 14 05:00:49 2025 GMT
            Not After : Jun 15 05:00:49 2025 GMT
        Subject: CN=1b944675d9af52e7e149facd11bffc486ffdffdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:72:d8:c1:91:38:39:69:25:ba:96:72:3f:9a:
                    d9:bc:77:72:43:87:a1:c2:fe:91:31:64:fb:fc:4e:
                    ea:0c:94:88:2d:d2:7b:86:27:30:39:a0:2d:7e:3a:
                    7f:e2:13:82:ac:86:c6:16:e2:ee:1e:12:19:6b:e9:
                    23:45:3a:0c:61:3c:de:01:ec:69:0c:0a:14:a3:69:
                    1d:61:e5:cc:ab:19:8f:b3:76:3b:a5:c9:c9:49:63:
                    ce:45:f3:30:92:d9:41:5d:26:53:a6:58:5a:7c:4c:
                    6f:97:a7:80:63:f8:19:8a:5e:b5:d4:ae:e7:d8:09:
                    74:e4:ba:02:3e:c5:76:47:97:03:8c:c9:86:7c:26:
                    3f:37:74:19:b6:af:04:9a:de:17:de:87:1a:9f:4b:
                    e0:7b:3a:b6:3c:ee:e5:19:8f:3d:8f:a0:72:df:3d:
                    f3:f8:d2:61:07:a4:92:cd:ba:d5:7f:26:8c:18:c7:
                    4a:6d:19:50:ec:b7:ea:71:df:32:89:ba:d4:46:e0:
                    d2:02:6d:04:ba:31:0c:22:f5:6a:84:ee:7d:e2:97:
                    11:a7:c3:82:4f:3b:e7:9c:51:a7:d0:07:15:8c:17:
                    9e:04:8f:15:12:c3:51:f4:ec:bd:13:97:b9:ff:02:
                    84:57:2b:e4:ee:e0:86:27:e5:1a:d6:7d:9a:be:78:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:94:46:75:D9:AF:52:E7:E1:49:FA:CD:11:BF:FC:48:6F:FD:FF:DB
            X509v3 Authority Key Identifier:
                keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:06:98:6d:53:d8:6a:89:40:90:5a:bf:d9:45:2a:f0:5c:
         19:59:29:24:1c:56:f5:a1:f0:d7:e7:10:d4:95:8b:ac:a8:52:
         ca:7b:00:62:0f:75:57:05:3b:1c:dc:82:ea:d3:97:e1:7a:8b:
         3d:fc:c8:92:5a:a2:bf:ac:f3:bc:ff:ed:34:57:7e:73:42:c0:
         4b:ad:65:a5:b1:ca:7a:da:7c:14:1f:62:4b:b6:87:16:48:48:
         93:de:89:f3:ef:16:0c:f5:b6:9d:d6:a6:c7:02:e2:42:06:e6:
         ee:ea:a7:f3:9a:3c:61:14:5c:d6:dc:8a:27:cf:ae:75:ce:79:
         27:41:e0:b3:f5:57:78:61:ee:ca:b4:28:b4:fb:4b:d0:fe:77:
         40:d7:b9:15:a7:17:05:53:2a:ef:b9:2e:0a:a1:b5:e2:f4:43:
         0f:7c:77:97:a9:3b:58:91:a9:6d:61:4a:5a:16:68:8b:18:69:
         69:36:24:5d:4a:6f:64:b0:a4:23:de:f1:6c:ff:3e:74:c1:12:
         05:16:47:bd:00:06:e5:4b:bc:82:08:14:77:8b:3f:32:27:23:
         7e:7e:dc:8e:83:0c:91:ea:0b:12:47:dc:61:4b:33:a6:83:a0:
         ea:e7:78:8f:1b:0e:f8:50:4b:a5:44:40:64:f1:f6:29:b9:3b:
         d7:dc:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:53 2025 by rpki-client