Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File:                     cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier:          KBnzXtyoxyfegrHwZfZnOm4L7yPrs9llcJJNVuIUf40=
Subject key identifier:   AD:C9:BB:27:8B:F4:C7:BF:EA:CA:C9:BA:18:F6:6A:3C:50:CB:5F:47
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer:       /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial:       01976E86E9F7B882FB157874BA2FAD0ADF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number:          159D
Signing time:             Sat 14 Jun 2025 13:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:24 +0000
Files and hashes:         1: 2ykyLUV8HJgn1salik1J3kOQxCQ.roa (hash: nDi3j9QWu/wqTdD6MOvj0Loav1zxTXnuS+2Or/nURsA=)
                          2: DF0LylBO293Rh5P_Xm-081JdxGQ.roa (hash: 405nlMqZVIUCURUtBGFImyyIgI7CPbrFiQZ6G44Cxus=)
                          3: Ki9qT7YB3e7mHbagrKcYG0NRPww.roa (hash: AoqiULKaxv21ka5UL631Ur1kFJT7xzfFRxQNsWV/3BE=)
                          4: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: UtZQC7WzG6ZF3diSMYC4tjTWEwYU6CqM6rXkE3V7JFs=)
                          5: ecSF9NE211OUQGVVY-gYrorVDo0.roa (hash: AFCEodkMI54VOYg+dE3fMMiMAl/LGN5jW0HDeqocDmM=)
                          6: syjiQ17dBmmkBrrPm3qMJQlfeQw.roa (hash: xvm/Qu4QjTYO005UFyYbS5lkq4TgWn4H6EMhyBLhJuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:86:e9:f7:b8:82:fb:15:78:74:ba:2f:ad:0a:df:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
        Validity
            Not Before: Jun 14 13:00:24 2025 GMT
            Not After : Jun 15 13:00:24 2025 GMT
        Subject: CN=adc9bb278bf4c7bfeacac9ba18f66a3c50cb5f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:75:dc:57:7e:92:18:4c:47:3a:43:c9:30:
                    c8:4d:5e:a6:11:d6:46:54:74:ec:24:ca:6c:1e:df:
                    33:f7:21:76:c4:72:eb:3b:e7:bd:d4:30:a5:b5:4f:
                    44:90:87:ef:15:db:c6:2b:56:78:5d:bb:e5:19:03:
                    5b:9f:aa:ea:1c:41:1b:76:96:e0:12:38:62:6e:b3:
                    b4:b1:84:c7:93:0c:0c:8d:38:a3:d8:ab:7c:3c:f4:
                    4b:ca:d0:f8:a5:6e:12:17:7b:24:b8:53:91:88:75:
                    98:cb:8f:98:b6:a8:e1:32:62:11:01:ee:a4:ea:0b:
                    dc:84:46:95:1d:0c:ca:23:15:92:ce:2f:ec:68:d5:
                    b9:16:99:66:53:5b:29:d9:b7:03:b8:31:43:d6:24:
                    63:bd:10:86:62:cc:5a:8e:d0:7b:1f:5c:9b:79:a7:
                    f0:79:bd:54:3f:46:e4:60:bb:22:3a:83:18:8b:39:
                    d6:62:2d:4c:a8:81:f3:53:1b:a7:a3:3b:d8:64:b3:
                    c4:b9:b6:78:28:d9:df:0b:17:87:04:2c:36:18:43:
                    07:00:95:cd:47:b6:ba:b7:a4:ff:11:10:75:1d:d0:
                    24:c1:18:06:86:7f:ba:02:2c:23:02:b2:4f:27:ad:
                    51:d3:df:37:d1:40:57:4b:16:e5:df:b1:97:e9:61:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C9:BB:27:8B:F4:C7:BF:EA:CA:C9:BA:18:F6:6A:3C:50:CB:5F:47
            X509v3 Authority Key Identifier:
                keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:06:58:c1:9b:4c:31:bc:20:59:cd:db:97:e0:89:e5:6d:
         84:10:fb:42:47:98:0d:bb:59:12:58:7a:1d:c2:c7:3e:f5:00:
         18:2c:73:02:b3:73:e5:23:53:b1:29:bc:d1:e5:77:61:80:48:
         ab:88:3d:a8:54:36:3e:3e:18:ea:af:3c:57:6c:61:84:a2:dc:
         34:37:53:cb:68:d2:3c:f4:04:89:41:6f:49:05:53:c0:9f:6b:
         cf:b1:35:05:32:9c:00:7b:a2:de:b2:d7:9a:95:18:cb:5d:0a:
         c5:4d:fe:f8:9f:99:08:86:ea:08:95:48:e4:91:3d:2a:f8:68:
         2b:f1:42:1f:d8:21:83:b8:d2:6f:0f:23:8c:79:58:8f:f4:57:
         f3:ce:93:28:c8:a8:6a:8e:5a:6d:19:84:61:93:af:9b:ea:a8:
         20:8c:db:88:ec:72:c2:94:40:a9:b5:0e:bf:e4:a4:f3:ce:71:
         76:e8:b3:ba:32:09:a9:99:f2:84:51:e1:07:51:16:59:6a:ae:
         fe:f8:6d:9b:e3:06:2f:13:f4:c1:5a:c1:9a:97:df:ea:40:e2:
         71:92:3e:bb:e4:93:c8:84:ee:8a:dc:51:8e:c2:51:65:83:f1:
         9a:56:e9:22:3a:7a:a8:4d:8f:a0:76:bd:25:78:64:0d:a1:37:
         5a:a5:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:46:36 2025 by rpki-client