Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File:                     fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier:          z/GP1zCXuWjOetJJ9SbP3uG6oNlJRmTubDzlkDgXRYo=
Subject key identifier:   7B:3E:87:9B:45:72:6C:44:D3:E0:13:B3:76:85:24:42:FB:0B:35:EA
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer:       /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial:       01976D06E7D76B5FE878AB6E480774345A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 06:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:58 +0000
Files and hashes:         1: SpkdakB2OdIuVE348-y165owlz0.roa (hash: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=)
                          2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: 0VIFN+oiobNkM7ruZMp4PLaJzlb5o/t1bvH3Gcb9RH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:e7:d7:6b:5f:e8:78:ab:6e:48:07:74:34:5a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
        Validity
            Not Before: Jun 14 06:00:58 2025 GMT
            Not After : Jun 15 06:00:58 2025 GMT
        Subject: CN=7b3e879b45726c44d3e013b376852442fb0b35ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:0d:5c:77:da:59:55:f6:3e:38:9f:2d:98:
                    b0:38:eb:ad:bc:a1:5e:a1:75:11:cd:1a:ed:a5:9c:
                    c5:c4:35:76:c0:f9:7f:ae:84:3d:fe:4a:71:85:52:
                    a7:38:73:d2:f3:bc:ec:30:72:b2:40:a9:4b:e7:5c:
                    d9:c0:82:83:5a:f7:96:f6:f7:70:8d:82:67:b0:0f:
                    2c:bb:44:74:3f:ba:a2:80:1e:9f:3e:d7:f8:c4:52:
                    78:94:b6:2b:da:6d:75:51:c0:15:c9:09:7a:0a:d8:
                    a8:cf:3a:e8:55:7c:f8:f1:ea:d7:09:af:69:40:13:
                    bb:96:d9:35:08:1b:16:cf:d0:b4:c7:33:50:3c:43:
                    b8:2d:61:ce:89:c2:1d:f6:f4:ad:e8:92:f7:49:a1:
                    63:70:77:1c:1e:9e:9f:f2:19:f6:65:f8:d6:09:a3:
                    b7:ba:b1:c8:1c:0c:5f:d6:f7:38:49:16:87:f8:6a:
                    d1:78:7a:13:96:5f:39:7a:68:94:cd:11:c5:f2:e3:
                    6d:a6:57:a1:82:9f:62:32:59:17:85:21:db:ca:9b:
                    1e:0d:37:b7:10:10:3a:84:ec:2c:02:7e:7c:4f:19:
                    34:11:19:aa:2e:78:f8:c2:56:e0:c6:f8:fd:d9:da:
                    44:cf:cf:c2:aa:eb:e2:ef:29:b5:f8:71:b6:ca:10:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3E:87:9B:45:72:6C:44:D3:E0:13:B3:76:85:24:42:FB:0B:35:EA
            X509v3 Authority Key Identifier:
                keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:db:b9:ce:4d:98:b0:e6:4e:83:95:86:90:1d:01:0c:8a:
         e0:30:8c:5c:06:3b:d9:fe:53:2e:ff:0b:cf:0f:bd:90:dd:3a:
         7a:76:ae:58:a4:f5:8c:6a:3f:c6:53:fe:ed:e3:aa:65:89:90:
         20:f9:8f:a7:8f:1f:2e:d7:49:e5:cd:8a:cf:41:57:f7:9c:4f:
         93:db:8e:e2:68:5c:dd:f1:fa:2f:1a:12:49:6e:c4:8e:0c:c8:
         36:3b:e5:3e:0d:bc:22:68:4f:aa:03:29:c7:c9:8f:73:50:91:
         04:88:df:3d:fa:16:46:74:0d:40:5e:3d:27:f1:39:44:9f:24:
         47:81:58:57:33:61:fd:5b:14:5d:89:59:a2:40:ef:cd:24:3d:
         61:b2:68:a8:f0:41:e7:f2:38:d1:24:35:5e:b1:24:53:88:9d:
         63:f5:c5:fc:8c:59:84:7c:f4:ed:52:46:69:50:bf:1b:60:08:
         7b:57:46:fd:b3:74:0e:7f:c5:2e:a1:8e:82:4f:e3:a1:d6:60:
         40:ec:c8:47:f2:96:21:fc:53:77:ec:4a:5f:2f:2a:64:e3:57:
         05:be:58:a9:61:bf:b6:35:a7:5e:f0:8f:8d:06:af:9d:ae:fc:
         ca:13:e2:c5:52:30:33:63:13:93:25:91:c9:f5:32:60:12:e9:
         ef:62:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:44 2025 by rpki-client