Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          VI3zkgdG3pT6KfDZRCoHzmWluq/E4uf2E64dvSp0Rb0=
Subject key identifier:   EE:45:7C:61:ED:61:41:0A:1B:B4:69:B7:FA:49:B7:84:C8:2A:61:6B
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       01976997A1B580E000B7C87040A070374A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 14:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:34 +0000
Files and hashes:         1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: /wq9GaghAIfjSCLih8IF8ZIgX+TiN22baQp62sdEsxc=)
                          2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=)
                          3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=)
                          4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=)
                          5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:a1:b5:80:e0:00:b7:c8:70:40:a0:70:37:4a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Jun 13 14:00:34 2025 GMT
            Not After : Jun 14 14:00:34 2025 GMT
        Subject: CN=ee457c61ed61410a1bb469b7fa49b784c82a616b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:23:bf:cd:aa:cc:af:ef:78:7c:61:ee:ca:
                    01:19:49:75:30:1f:ad:a1:9d:da:da:d5:ca:99:c7:
                    56:26:1d:bc:54:d4:dd:ca:75:78:0f:59:ff:3b:09:
                    7f:59:2c:02:53:46:9d:3a:4b:16:a5:a8:63:2c:0e:
                    cb:2b:37:fe:20:ed:8a:81:33:6e:1e:14:80:17:4e:
                    54:b6:de:a2:7f:3e:11:05:6f:56:6a:82:ff:1a:24:
                    83:0d:e9:45:5a:4a:1a:b6:2d:8e:33:c9:a9:0e:ef:
                    79:92:71:5c:99:d5:fe:29:61:66:c3:2e:d9:d2:00:
                    a5:40:88:2c:ac:f9:95:2c:42:b9:6b:cb:dd:49:88:
                    75:f8:ab:28:9f:8c:06:46:05:e1:3f:da:d1:8c:44:
                    ae:fd:c8:05:e9:84:20:4f:cd:86:a6:9d:26:fd:56:
                    2b:1d:8d:3f:c5:0b:c0:77:8b:61:ba:e0:18:76:64:
                    0f:a3:c7:e1:35:32:eb:58:37:be:77:15:d2:22:30:
                    3c:45:80:40:82:21:8f:f1:30:63:15:df:7f:89:eb:
                    7c:73:ba:83:ac:85:55:9e:53:a4:75:11:b8:e2:24:
                    a3:63:6b:68:0c:65:76:20:66:f3:2b:37:b9:9a:2d:
                    58:0d:62:7f:c4:df:7c:83:3b:24:76:e8:8a:7a:b0:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:7C:61:ED:61:41:0A:1B:B4:69:B7:FA:49:B7:84:C8:2A:61:6B
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:3d:1f:2a:1f:40:23:19:7a:5c:be:1b:d0:17:90:d6:4a:
         89:4f:c9:c8:2c:a4:58:d0:33:d5:84:d1:cd:66:50:83:c2:c2:
         f4:8b:19:b9:47:20:70:ba:31:bc:9b:c4:40:01:93:56:5a:46:
         28:d7:ae:db:96:52:b9:11:13:df:9d:7d:12:7f:97:3f:64:d2:
         06:cb:92:88:fd:07:8f:25:f5:a9:05:8a:d7:35:d8:50:f3:82:
         b0:36:ad:ce:a6:ef:32:4d:44:2d:14:65:c4:86:12:c2:08:eb:
         89:e9:13:36:b6:33:1f:96:86:df:40:ec:57:90:04:5d:b1:44:
         59:f2:70:c0:d3:62:c2:15:c9:ed:2f:4c:38:69:ee:b7:5d:ee:
         d5:69:3a:b3:48:2e:b6:da:58:e2:cd:d9:3e:ee:33:15:76:8f:
         1a:1b:8f:9c:3e:68:ae:83:55:cf:2d:2c:6f:cc:65:a8:eb:b2:
         fd:6e:af:75:cc:d6:60:d5:73:eb:a1:71:26:bc:e0:61:39:ef:
         67:2c:1b:de:9b:99:d0:8e:47:36:44:f1:14:3f:06:2e:9b:9a:
         3e:07:35:cc:0b:44:02:f1:a8:0b:f7:46:92:36:14:c8:af:d6:
         a8:89:3b:90:dd:b5:5f:3e:fe:b8:02:f4:74:17:43:66:fe:6a:
         c9:3c:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:58 2025 by rpki-client