Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File:                     IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier:          o6PDIgiIYm4vPzkFDyGr/ii50t92OQbjqnGbOKCCua0=
Subject key identifier:   EA:C9:80:D4:3F:55:61:91:39:FD:98:7A:E8:B3:9E:17:45:AB:BD:37
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer:       /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial:       01977008269EDDA41036B7B988BFAEF0BF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 20:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:11 +0000
Files and hashes:         1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
                          2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: EWd0MTp4tNPTW4DqalcP94gMKtGa+5EX27ZP7MV/0gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:26:9e:dd:a4:10:36:b7:b9:88:bf:ae:f0:bf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
        Validity
            Not Before: Jun 14 20:01:11 2025 GMT
            Not After : Jun 15 20:01:11 2025 GMT
        Subject: CN=eac980d43f55619139fd987ae8b39e1745abbd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:a2:f0:d2:5e:c7:c4:7a:38:a1:6d:42:b6:
                    68:8c:89:41:5b:53:1a:ed:ab:2d:ba:45:87:03:a3:
                    cd:df:0d:03:3d:3a:a6:54:1d:b0:f8:2e:47:37:14:
                    a6:3c:e0:db:64:3e:2d:18:99:db:d3:ed:7f:ed:04:
                    e2:77:b7:9a:6a:ba:1c:72:8f:73:2e:60:05:5c:9d:
                    e6:a8:de:d3:ea:e3:4d:ce:7d:7f:66:d4:6b:e9:40:
                    a3:5e:d0:bc:88:76:33:25:25:1b:14:1e:09:59:7c:
                    0a:f3:82:a3:2a:77:a5:04:8a:14:ee:99:30:de:4c:
                    87:b8:6b:08:34:19:38:17:44:86:58:3e:10:9b:ef:
                    47:91:8e:d9:b0:44:9e:ca:63:17:af:ef:66:db:31:
                    1a:9e:73:35:f7:2c:87:7a:e0:2d:65:ff:70:ad:59:
                    7f:5d:88:6a:ab:07:8a:dd:fe:34:5b:89:40:61:9d:
                    4b:b6:90:43:47:76:67:38:6f:bd:cb:82:59:cd:0d:
                    89:aa:02:7b:fc:c8:df:4e:25:29:65:5d:08:a1:8c:
                    e3:ef:7b:bc:6d:81:b8:9e:61:ef:f7:59:fb:2b:34:
                    06:7a:04:5a:8c:62:2e:a5:59:fa:23:67:0e:05:4e:
                    2a:a7:9b:8f:3a:16:eb:0f:b0:a8:8f:7e:76:ae:96:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C9:80:D4:3F:55:61:91:39:FD:98:7A:E8:B3:9E:17:45:AB:BD:37
            X509v3 Authority Key Identifier:
                keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:df:83:7f:33:2e:fc:bc:c1:7a:b9:22:d8:ba:48:8a:7a:2b:
         5e:4c:a0:7c:5f:8f:dd:d6:cc:54:2c:df:2c:d0:af:3c:51:42:
         63:9b:d5:40:b0:51:36:09:40:66:63:9f:a5:dc:5f:8f:a3:f8:
         78:1f:1b:99:58:d6:2a:32:fd:85:5e:03:f7:35:20:30:ad:85:
         7c:1f:4d:88:13:5d:be:4e:63:62:0c:ec:c1:11:60:3f:da:43:
         1e:de:f2:f1:52:41:15:cd:98:ee:60:44:c1:72:e5:98:ba:92:
         4a:a5:8a:ba:48:2d:e0:7e:f8:3b:cf:a6:4d:bc:1d:6c:00:05:
         a9:e0:9b:a4:c5:65:6c:d3:f3:38:38:d8:d8:88:3d:7a:9f:ce:
         df:9c:1a:d6:27:6c:f3:ca:73:97:fa:9f:bf:7a:64:dd:bf:c8:
         db:fa:cb:ad:4c:0c:88:06:f0:af:67:8a:ec:d6:94:49:5b:7c:
         9e:8d:a5:0a:e5:52:01:3d:4e:53:f2:39:e4:fd:ba:dd:af:43:
         68:50:3f:88:38:82:ce:89:04:0a:f9:36:84:f6:e9:9f:2a:ad:
         f9:b2:77:88:b9:da:7a:4a:7c:a0:5d:d4:bb:29:e9:e5:bd:b2:
         63:eb:1d:60:04:eb:d5:f7:6b:32:28:10:58:64:23:fd:e7:da:
         db:6d:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:13:44 2025 by rpki-client