Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File:                     OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier:          BzKakIZIdG6pYfVKdvlINf1Dnuy5pNmY4aVjbLVCtxk=
Subject key identifier:   9E:80:C4:32:2A:5C:6E:D8:AE:24:14:7B:0F:83:1B:17:0D:28:0B:BE
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer:       /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial:       01976C98833A87DF764B72F527F467B8A196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 04:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:23 +0000
Files and hashes:         1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
                          2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: 7tOKvpkjzgZSSa0HwfURjaVxXVbEYhoa+jNCvClZWMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:83:3a:87:df:76:4b:72:f5:27:f4:67:b8:a1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
        Validity
            Not Before: Jun 14 04:00:23 2025 GMT
            Not After : Jun 15 04:00:23 2025 GMT
        Subject: CN=9e80c4322a5c6ed8ae24147b0f831b170d280bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:19:02:30:0e:ff:87:f9:ad:64:95:f2:ca:
                    ad:8e:5b:b7:50:b0:af:b2:30:eb:07:2b:61:98:42:
                    d7:7a:25:22:58:41:de:c5:e8:9b:65:3e:12:d8:e1:
                    8b:d6:59:9a:e0:0e:11:88:63:d9:ad:34:21:24:b6:
                    be:81:36:ee:88:88:2f:4e:32:43:a6:35:93:61:73:
                    d6:dd:c3:90:37:81:00:69:a5:84:5b:ca:3b:4d:80:
                    97:5e:ae:62:8e:c8:68:90:5e:a2:e3:aa:98:bd:cd:
                    dd:f0:2e:0c:fc:ee:47:03:a6:dc:e4:8b:86:4e:a0:
                    95:52:46:cb:41:e0:5e:3c:87:a2:93:9b:1d:b2:ce:
                    f8:d7:f6:1c:e5:76:d0:32:d8:14:fc:45:9d:a7:7f:
                    07:55:82:e9:3b:68:e1:39:90:d8:ed:0b:2b:15:2f:
                    c2:0f:4f:a3:86:d5:fb:cc:5c:f6:87:62:d3:3b:1d:
                    62:ed:d7:56:8a:61:85:52:cd:e8:f3:fd:6b:39:1f:
                    17:72:9d:57:be:0e:d5:6f:f3:99:ea:67:c0:e6:7d:
                    0d:39:01:0d:08:22:d5:3a:4c:1d:40:95:03:55:06:
                    77:a6:e9:78:e6:71:d4:3d:e0:cb:b3:da:e0:06:38:
                    88:7a:d4:c8:fb:84:00:18:0f:95:7b:c8:cd:96:62:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:C4:32:2A:5C:6E:D8:AE:24:14:7B:0F:83:1B:17:0D:28:0B:BE
            X509v3 Authority Key Identifier:
                keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:5c:27:54:fb:01:01:5a:05:80:55:c0:63:2f:0c:3d:9a:
         d3:7e:69:c3:50:a0:94:64:12:e9:32:f5:86:72:20:f7:1e:ec:
         0e:3f:88:03:0b:3f:06:ea:49:60:9f:e2:bf:ce:61:2a:30:53:
         ae:dc:3b:72:6b:77:91:fb:52:7c:7b:ad:30:98:c7:2b:81:7d:
         55:b7:24:11:ed:6a:ba:f2:2e:c8:34:ca:48:5c:3e:a7:9e:e0:
         e3:c2:98:29:a9:62:b0:9d:30:b8:9d:64:2a:8a:a9:53:48:71:
         7b:77:7e:ea:b3:ce:7a:60:06:c9:c1:53:e4:56:f5:04:4b:6e:
         64:a0:cf:c7:d0:3f:3e:8e:1e:16:e8:cc:ec:03:7d:4c:dd:36:
         a6:72:c3:4d:25:5e:07:fe:98:2c:94:36:95:e5:94:e1:66:4a:
         be:2d:3b:b7:36:59:66:b1:1b:09:d2:d0:37:e8:0d:f9:cf:ef:
         8c:7b:aa:b8:6c:88:9a:a9:28:99:eb:b9:98:f7:e2:59:3c:f7:
         62:9e:73:a1:3f:fe:58:79:c1:77:d8:f7:b7:2d:35:d4:98:55:
         5c:53:5e:aa:de:b6:7a:56:52:8b:3c:c2:3e:19:98:c8:d8:02:
         0c:9b:f8:73:24:b1:c6:65:16:fd:dd:e8:2f:a4:c3:4e:be:00:
         83:f3:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:15 2025 by rpki-client