Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          1DVgQ6qI/mMzJWLRgE9htT1uNxMVFcczL7TWxjHOumM=
Subject key identifier:   71:DE:5C:9B:F9:DD:30:F6:1E:3C:EE:33:65:FC:85:A4:DE:CB:C3:BC
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       019769979276375DEFB5B2EF7D9C00F3B6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 14:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:30 +0000
Files and hashes:         1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=)
                          2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: p181DcHhlEWQDAZ4SaLRTHlZOFGFxYr5mFg8ALQKc30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:92:76:37:5d:ef:b5:b2:ef:7d:9c:00:f3:b6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: Jun 13 14:00:30 2025 GMT
            Not After : Jun 14 14:00:30 2025 GMT
        Subject: CN=71de5c9bf9dd30f61e3cee3365fc85a4decbc3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:f9:bf:4c:de:c9:8c:fb:19:6e:f4:9d:90:
                    b7:25:95:a9:1d:08:10:48:71:32:0f:68:81:1d:2f:
                    30:67:72:83:61:47:48:8b:a4:b2:1a:02:b4:7d:25:
                    47:9a:66:f6:20:8e:c4:9c:ef:59:82:bc:e6:48:77:
                    79:8b:78:fe:b1:05:0f:80:2a:fa:49:f1:9c:1a:22:
                    4e:a3:64:d2:d7:eb:64:49:d4:58:86:f6:85:36:80:
                    07:6a:11:75:89:0c:9b:c4:08:85:16:9a:85:ed:86:
                    0e:96:a0:56:56:87:ab:0c:ff:e5:a8:a0:87:86:27:
                    3a:9c:86:16:c5:2d:c4:ca:a2:68:07:96:d3:16:5b:
                    0d:5b:96:cd:e4:b7:a0:12:16:7b:58:83:79:48:e4:
                    8c:3e:4e:60:fe:28:07:74:ce:aa:05:5a:5b:48:3f:
                    f5:f3:7b:f0:72:20:a1:6c:25:bb:c3:46:cf:38:9c:
                    39:1a:08:ff:cc:37:19:4c:89:14:22:b4:25:84:3c:
                    92:6c:c2:c3:f4:7f:c7:e9:e5:8e:ec:f5:14:08:ce:
                    c1:b3:a8:0d:08:a0:92:02:13:16:f1:cd:6c:77:7d:
                    42:90:19:f1:e3:f9:4e:1b:52:a6:cd:3a:24:b7:6b:
                    ee:6d:7a:45:ea:d4:b4:e9:bf:93:57:a4:bc:9b:62:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:5C:9B:F9:DD:30:F6:1E:3C:EE:33:65:FC:85:A4:DE:CB:C3:BC
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a5:4d:82:b3:bd:e1:9b:37:2c:a5:ba:9e:2e:02:e6:3d:44:
         72:89:cb:c6:d8:8b:7e:63:e8:38:94:d0:14:02:cb:32:4b:53:
         5e:e4:e6:3a:8b:4d:8d:ba:eb:85:8a:0b:83:ab:34:1b:65:30:
         fc:09:f2:e6:db:3f:17:0f:66:9d:8d:85:77:20:26:a3:11:8c:
         21:bc:04:3d:77:60:8a:df:bb:1c:b4:f6:8c:69:d9:0f:4a:8e:
         94:59:ac:33:3b:43:7f:a9:f1:f3:9e:5b:46:bd:79:45:df:47:
         10:09:5b:0d:f4:3f:cf:1f:5a:cc:82:28:fb:d0:2d:ce:9e:6c:
         4e:73:38:8e:70:0d:31:45:54:a2:55:3b:b4:41:d3:fc:12:32:
         37:5e:1f:85:b2:e2:58:e2:14:a6:c2:2b:1c:89:9d:fa:2e:ba:
         4c:81:6d:73:ed:f5:1d:34:79:8c:ed:6d:0a:0a:c6:fa:d0:63:
         5b:e1:c8:ef:42:05:d0:0c:45:60:63:d5:33:9d:41:58:04:65:
         71:cc:70:d9:eb:3e:5c:2a:3f:09:f7:e6:d8:87:bd:79:84:a6:
         92:e0:23:c1:52:89:9b:2d:1b:9e:85:6e:da:6a:0d:70:60:1e:
         50:5a:36:fc:30:2f:d6:3d:b6:6a:66:19:38:1d:aa:dc:f4:f8:
         64:71:68:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:57 2025 by rpki-client