Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File:                     tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier:          RNTHP70pI6oByUGj7ysFPYm5MYQEXObd+pE/QDq79jg=
Subject key identifier:   56:1F:0E:AF:26:DB:BC:91:35:B0:D0:A5:8A:64:F1:16:96:71:F2:FD
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer:       /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial:       01976C98FAE35E04B7B88F1ABDCB70128239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 04:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:54 +0000
Files and hashes:         1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=)
                          2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: Bn/e+ntOivsDBXF/katX7ptq/8RJh8agafxPEgeD6xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:fa:e3:5e:04:b7:b8:8f:1a:bd:cb:70:12:82:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
        Validity
            Not Before: Jun 14 04:00:54 2025 GMT
            Not After : Jun 15 04:00:54 2025 GMT
        Subject: CN=561f0eaf26dbbc9135b0d0a58a64f1169671f2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:0b:0a:fc:1a:ca:b8:16:18:eb:26:8a:70:
                    ea:09:66:3d:66:9f:f2:1f:aa:34:10:fa:28:59:1b:
                    99:da:c8:96:0b:cd:a0:e0:b8:2c:de:2d:1d:10:4a:
                    4f:77:9f:25:e3:e8:52:64:33:67:ad:21:1b:7c:4e:
                    e9:a1:9d:7c:ae:26:39:3a:22:2a:89:b1:8c:bd:05:
                    3e:10:67:23:39:db:67:4e:2e:58:55:a9:ac:88:fa:
                    0b:5b:77:7a:ff:91:62:63:2a:b5:34:6c:df:4b:2e:
                    2c:99:e0:3e:cb:de:73:8e:44:30:43:e0:c7:a8:db:
                    25:c5:6b:bd:fe:14:8e:d9:97:90:ee:99:9b:ea:f5:
                    87:9d:0e:5e:4b:d4:29:f0:36:d2:e6:93:23:63:85:
                    10:89:b2:a1:7e:af:9f:0c:5e:6f:37:3c:f7:d8:45:
                    04:9e:d5:b2:c4:e8:e5:a3:bf:90:4c:c1:80:49:e1:
                    59:08:b1:bf:95:57:e3:ec:be:e8:99:8e:67:9e:08:
                    34:45:af:58:74:b0:74:95:95:d0:0f:16:0b:93:b8:
                    89:fa:b4:be:47:76:97:a0:52:3e:bf:b2:3c:74:2a:
                    48:d9:a4:38:88:78:24:35:97:14:57:aa:0e:e3:c4:
                    c3:47:27:f9:80:0f:1c:41:86:be:80:ba:aa:06:b5:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:0E:AF:26:DB:BC:91:35:B0:D0:A5:8A:64:F1:16:96:71:F2:FD
            X509v3 Authority Key Identifier:
                keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:dc:81:a7:98:19:46:a6:8c:ad:4f:95:6a:29:53:bc:0d:
         48:28:d2:2f:a1:55:9e:8a:7b:83:2f:cf:4a:21:cc:77:f0:18:
         f9:95:94:3e:f1:83:76:56:9e:e8:32:ac:d0:34:99:1f:7b:ad:
         70:f7:84:0e:13:be:93:0b:9a:b4:ba:25:f0:d4:bd:a0:f1:75:
         dc:7e:a2:db:b1:8b:4c:3e:2d:f3:8f:8b:28:44:57:4f:7a:b8:
         33:be:da:47:52:27:71:72:e6:af:20:e6:52:c5:f6:1e:10:2b:
         51:0d:97:26:56:8e:71:9d:cd:1f:f3:45:1b:46:b1:90:e7:18:
         e8:c7:9c:d1:4e:89:f4:9f:79:cd:a9:fe:ac:81:1c:e1:65:8c:
         c3:6e:b5:9d:34:2c:58:65:6e:0b:c9:04:13:b0:7b:34:fe:b9:
         9c:b0:95:83:0e:eb:70:db:63:65:18:39:47:79:58:ae:0f:65:
         99:6d:7b:fd:49:51:9b:52:25:78:a1:bb:d5:2f:ce:cd:33:ca:
         17:be:89:ef:5c:5e:e9:15:8e:b3:6e:33:f0:5c:23:f9:b0:4e:
         03:3c:9f:e9:68:b3:4a:ca:4d:59:21:c5:bd:74:0b:d6:41:e9:
         01:3b:ee:a7:54:8b:a0:06:d3:a4:53:95:05:61:35:fb:ec:86:
         31:6c:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:40 2025 by rpki-client