Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File:                     86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier:          NYgMXMK7s4wsaJY0Vad53Rhd/ChKEI8YW/c/4JJNBiU=
Subject key identifier:   59:A3:04:40:FA:21:14:8D:A5:12:B1:13:33:36:78:F2:5D:7E:57:D1
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer:       /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial:       019782EA255F68E446B012986F7D430575BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number:          159E
Signing time:             Wed 18 Jun 2025 12:01:12 +0000
Manifest this update:     Wed 18 Jun 2025 12:01:12 +0000
Manifest next update:     Thu 19 Jun 2025 12:01:12 +0000
Files and hashes:         1: 0yNiuwlEmaGi-GMVCrhtb0jD684.roa (hash: 0JYmDVSwa/kA2DCdsSlQFjDnGZq4KcJ5IykJE11qOfk=)
                          2: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: sT7pCBqARavP9s/QxYDANnUmOdtGocz7TeHAOYEeIJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:ea:25:5f:68:e4:46:b0:12:98:6f:7d:43:05:75:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
        Validity
            Not Before: Jun 18 12:01:12 2025 GMT
            Not After : Jun 19 12:01:12 2025 GMT
        Subject: CN=59a30440fa21148da512b113333678f25d7e57d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:15:ed:5d:74:b5:cb:96:89:2f:3a:49:a1:
                    35:e6:5f:cb:3f:ae:61:ff:4a:84:69:d9:39:84:cf:
                    fa:a4:32:35:fd:04:77:6c:22:24:8e:bd:3e:e3:8a:
                    16:e4:2a:98:97:7e:44:df:ac:02:2c:3a:65:52:cd:
                    7d:49:c8:76:7c:85:5e:c6:c0:2d:e0:b5:17:e4:ad:
                    b7:f1:70:31:0c:f0:4f:c2:59:17:35:7c:00:5d:16:
                    f1:75:af:3d:b6:0c:79:44:4c:98:34:28:4c:16:cd:
                    ea:7b:12:65:13:34:b8:18:80:dc:bc:77:6a:29:b2:
                    83:05:b8:db:fb:74:db:23:46:d5:d8:b8:14:be:b3:
                    4e:39:1b:0f:f8:06:49:4d:a6:bb:cb:37:88:ed:13:
                    47:9e:9f:16:1f:cc:10:8b:02:36:90:4d:c6:00:a7:
                    18:d7:21:3f:9e:51:80:d0:3f:a1:6c:6d:db:12:a2:
                    8c:3b:69:e3:65:43:20:44:8b:89:a5:49:7f:bb:d5:
                    46:46:9a:64:24:be:07:3b:96:40:d6:d2:7d:d7:03:
                    6e:5a:85:c8:2b:0d:89:cc:69:64:02:d2:83:b8:83:
                    ab:1a:61:25:39:92:56:97:0a:79:99:1d:60:dd:0f:
                    2b:ca:31:08:2a:7d:2b:a0:6f:b9:08:ba:67:9a:cf:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A3:04:40:FA:21:14:8D:A5:12:B1:13:33:36:78:F2:5D:7E:57:D1
            X509v3 Authority Key Identifier:
                keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:82:32:d9:ce:09:89:81:03:71:d2:46:6f:69:4f:9d:71:
         37:d6:a4:6e:cf:cb:94:82:0e:18:49:36:04:7c:41:b5:7b:bd:
         7d:22:a7:da:33:78:66:ae:8b:48:70:bb:87:53:08:40:e1:98:
         3d:9e:00:a9:6c:b5:d3:9d:3f:b7:88:6c:d4:ec:9c:3c:58:2f:
         34:f7:54:c5:07:d7:1a:c2:08:e0:61:b9:70:6e:a8:05:8f:20:
         95:a8:c8:50:2c:31:5a:77:af:ea:60:a9:f0:02:9a:d3:e6:c5:
         d5:7c:2c:f8:16:b8:ce:db:b2:bb:f1:09:72:7a:81:e6:df:27:
         f1:ba:6f:80:19:11:ee:dd:bf:52:6d:6d:d6:6f:9d:8c:54:3a:
         fd:ef:1f:30:90:c8:4e:1f:0c:3d:f3:e9:d1:50:fa:99:cd:4d:
         6c:fc:30:a5:5f:7d:83:b2:76:41:ed:0d:74:6f:05:35:62:ce:
         ac:43:20:18:76:6a:b1:09:83:c3:54:5b:59:b4:2f:a8:e8:71:
         32:9d:c3:4c:22:f3:74:3b:aa:7e:a7:4a:1f:5a:0f:3c:12:e2:
         0f:a7:0a:31:e0:d8:2c:60:2d:89:2b:46:c0:a7:c4:42:be:fd:
         ab:1e:3f:7a:e6:59:8b:9d:92:b5:2e:f5:44:06:8c:17:6c:e1:
         37:d1:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:11:54 2025 by rpki-client