Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          8X5rT4YdUAllAL1VZKZbVFGnYmdEBg1SFBYyxzUMaZE=
Subject key identifier:   AD:C2:25:02:10:7C:57:B2:8B:67:3F:5E:9C:D0:AF:63:83:2F:56:84
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       0197684E5253B76E6BC88B3FE3094912EE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          158B
Signing time:             Fri 13 Jun 2025 08:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:52 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: jg5iKa9ugaKl2TxHF404tLGJ8F05lNAfkcYjwwJhrKY=)
                          2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:52:53:b7:6e:6b:c8:8b:3f:e3:09:49:12:ee:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: Jun 13 08:00:52 2025 GMT
            Not After : Jun 14 08:00:52 2025 GMT
        Subject: CN=adc22502107c57b28b673f5e9cd0af63832f5684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:27:34:f8:92:1b:7d:a2:01:a2:30:66:e1:
                    a3:00:47:a0:91:26:17:a6:00:00:bb:c7:9a:11:a7:
                    87:a5:a4:82:d8:45:44:8e:3c:9a:a7:38:c6:4c:e2:
                    8e:ae:68:df:6a:da:9e:41:32:c6:5c:b7:8c:51:be:
                    fe:7a:c7:04:25:c6:5c:cb:1c:c1:94:d0:87:64:4c:
                    3e:1b:e5:2d:e7:c3:c3:70:aa:1c:8b:26:c8:36:61:
                    1e:f8:15:db:b2:50:51:43:57:71:9d:95:52:54:a6:
                    a2:78:10:41:dd:25:90:cc:b7:07:4f:f1:71:26:87:
                    82:7b:9f:7e:df:d2:1b:a7:e7:0d:8c:f8:6d:c7:83:
                    62:76:b5:9a:34:02:28:68:35:25:53:f6:29:0e:d3:
                    41:83:ec:02:9f:8e:90:de:d5:1e:52:ea:4d:27:2e:
                    ab:6b:a8:80:8b:1c:c1:01:a7:e7:86:87:0b:7f:6f:
                    5a:81:92:15:e1:37:90:56:0a:cb:d2:c0:91:2b:e8:
                    d1:c5:8f:1f:62:cb:6d:cd:6a:77:6e:b8:bb:ec:05:
                    d0:52:69:25:de:5d:46:8e:bf:38:40:53:af:e1:60:
                    8a:a2:28:b7:ef:e3:de:64:b3:f1:d9:4b:9e:25:ed:
                    21:86:68:da:7b:cd:03:01:ff:13:ba:84:e6:c2:f9:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:25:02:10:7C:57:B2:8B:67:3F:5E:9C:D0:AF:63:83:2F:56:84
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:14:57:99:33:b3:45:6e:d1:6e:70:8f:ce:ab:d8:a1:cc:
         5b:34:66:12:c8:1f:1c:80:03:a6:ac:ca:2f:ed:b3:93:f1:d0:
         8e:85:a0:62:b4:45:11:ee:05:a7:76:42:8a:86:f8:9b:22:6c:
         d9:76:10:57:81:cb:5a:03:a5:58:88:d9:e2:85:3d:87:a1:f5:
         89:88:7e:bf:72:29:06:e1:7e:b5:ed:f9:f8:a5:1f:e0:0a:8d:
         8a:cc:e6:da:e7:c0:c8:f3:d2:b4:98:01:b4:44:0a:cf:36:40:
         fa:4f:40:e7:66:4d:3d:97:39:ab:43:11:0d:23:8f:d8:e6:c2:
         73:ce:cd:4e:04:8c:8b:d2:86:3f:bf:54:bb:55:d8:4a:bf:ad:
         4a:14:d5:96:05:f9:40:56:37:1b:4f:2d:eb:71:1a:08:bc:d2:
         15:a6:7d:ab:33:6f:fe:70:5e:66:f4:ff:a1:06:8e:56:17:eb:
         99:a9:2c:e0:9c:87:a9:cb:ad:ee:1e:72:fd:a5:45:fa:eb:cc:
         95:9d:d1:cd:ba:ba:72:a4:fc:7a:5c:c9:ff:84:d3:c6:75:88:
         94:fa:d7:f6:02:9a:23:10:db:95:df:78:99:15:3f:1a:c6:b7:
         66:20:4e:cb:96:54:45:7a:0b:35:3f:b2:65:bb:e9:cb:e7:d0:
         7e:22:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:14 2025 by rpki-client