Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File:                     MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier:          IiuSyFFLUwT+UoHhxJ0KA8aifNdtvm/V/sfYLysluFA=
Subject key identifier:   FF:B3:06:CE:0C:26:04:4A:BC:B1:39:02:43:33:A2:12:E3:3A:BE:6F
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer:       /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial:       0197684E2E958217F6309330A4A08E620BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 08:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:43 +0000
Files and hashes:         1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: +DX45O4/gDR5yBqACKuCqRw1mwkO7iZdwxXivuSyS2I=)
                          2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:2e:95:82:17:f6:30:93:30:a4:a0:8e:62:0b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
        Validity
            Not Before: Jun 13 08:00:43 2025 GMT
            Not After : Jun 14 08:00:43 2025 GMT
        Subject: CN=ffb306ce0c26044abcb139024333a212e33abe6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:4e:33:12:0c:81:5b:03:c6:7a:e9:34:46:
                    d4:0e:8e:79:19:13:1b:8b:aa:18:74:19:fa:12:45:
                    aa:52:43:06:7f:4a:de:37:ef:8a:0d:d2:53:a7:03:
                    7c:67:d8:a7:8f:70:19:ee:b3:a4:1f:09:59:be:2c:
                    c7:3f:96:dd:b6:ad:af:93:83:30:51:40:19:8e:0d:
                    36:fd:81:20:62:31:e8:43:f0:60:54:0c:dd:9b:e2:
                    b0:d4:e9:0b:75:9f:ec:84:2f:02:81:05:f1:44:b7:
                    1a:05:73:2d:66:6b:ca:26:57:06:6f:80:a1:a6:76:
                    bb:d9:b5:a0:1c:93:51:30:f8:91:d0:d4:23:d5:c7:
                    b9:81:55:19:5a:46:8d:f6:1d:8a:f5:5c:2c:06:e9:
                    54:64:aa:07:e6:13:5f:a1:ec:df:2f:99:58:b7:43:
                    0d:70:de:90:17:a0:b1:45:88:ae:2a:7a:4c:b9:7f:
                    36:f5:46:2e:c0:fb:5a:e2:21:64:60:8c:36:e8:f7:
                    31:18:1c:4b:9e:c3:9d:a9:e4:fb:16:b1:be:1b:28:
                    22:d8:a6:14:d5:45:e1:8b:0c:16:bd:e7:e3:c9:04:
                    4f:cb:79:91:3c:6e:fb:7c:d8:dc:a7:19:7d:43:19:
                    4f:d8:e8:5f:76:d4:50:1e:94:88:e3:db:c0:05:8d:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:06:CE:0C:26:04:4A:BC:B1:39:02:43:33:A2:12:E3:3A:BE:6F
            X509v3 Authority Key Identifier:
                keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:43:45:40:92:bc:ac:9f:d4:e4:e7:f3:9e:66:34:d0:94:67:
         38:70:7c:50:e5:a4:66:f7:40:79:49:1f:23:d3:c2:09:7b:5e:
         dc:58:70:97:ce:c8:b5:3b:bc:24:3f:02:b2:4d:02:e1:89:2c:
         85:ae:d9:3b:46:1d:19:57:45:4d:41:f7:6d:3d:ed:3d:2c:93:
         1c:67:e1:9a:26:d6:0d:a5:aa:ba:95:8a:7f:66:3a:3b:c4:d2:
         bd:df:b8:cd:8b:f8:f3:3f:6f:35:28:e8:4c:26:e9:14:92:c9:
         53:0c:c0:32:4a:88:cc:29:9b:d3:40:97:4a:c6:44:5d:c0:10:
         74:00:f6:a0:f6:0e:82:ea:cd:51:60:b0:9d:96:cb:92:d5:2b:
         b8:fa:b8:37:fd:81:d0:d0:91:6d:2f:cd:d0:eb:e9:90:7a:e6:
         cf:10:12:55:ba:d6:ed:53:78:59:f7:eb:64:a4:c5:0e:90:0c:
         f3:b8:ab:f8:3a:48:91:5c:1e:30:ef:02:6c:99:2d:67:19:77:
         cc:d8:0b:59:fe:cb:f8:ae:e5:e7:46:73:e4:cb:78:68:4d:d5:
         90:cd:e5:25:5d:8c:1c:76:e6:47:50:18:67:75:bb:75:30:82:
         8e:5f:62:9b:c0:bd:9a:e0:0e:55:0a:ac:e6:17:0c:8c:97:4b:
         cb:6d:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:24 2025 by rpki-client