Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          hHX9rXkTYjE+E5Yyb5gLohZiZWhUQWE78Frg7mppMSc=
Subject key identifier:   B5:78:3F:16:02:DC:1E:6A:67:89:23:A2:F5:B7:07:7E:7D:E1:38:A0
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       01976CCF7BD4C3DEEB1EFCFE23705934F9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 05:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:26 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: sqee9tfYdpH0qDc5ThnMzKmrsJ39mPyGG0pvRs4e1T8=)
                          2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:7b:d4:c3:de:eb:1e:fc:fe:23:70:59:34:f9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Jun 14 05:00:26 2025 GMT
            Not After : Jun 15 05:00:26 2025 GMT
        Subject: CN=b5783f1602dc1e6a678923a2f5b7077e7de138a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:57:f4:45:d9:45:d1:18:09:55:c3:07:6e:
                    97:ad:17:67:14:81:80:35:49:74:aa:a1:c7:f5:f3:
                    cb:78:fe:da:8e:c0:36:81:03:e5:26:d2:c7:24:a7:
                    ed:95:04:3f:ee:04:69:87:1c:5f:b7:fb:93:f3:26:
                    b3:25:99:58:ab:41:66:b5:d4:97:bf:52:66:48:f7:
                    b5:2f:4a:0e:84:9b:47:2b:04:29:ab:82:e1:4a:97:
                    d2:0c:fe:95:74:7f:0b:29:05:e9:70:3a:1b:d3:13:
                    0c:8a:df:ce:ae:03:98:5e:51:11:45:05:9a:94:ef:
                    b1:86:43:26:2a:88:7a:e4:85:84:64:19:fa:2a:92:
                    b1:cd:5a:b5:02:81:99:c5:ec:ba:ad:66:ac:5e:c5:
                    7f:a7:7d:a9:d5:cd:38:18:e4:02:55:d4:42:7d:39:
                    0d:19:02:06:51:97:6a:a6:bf:79:19:02:8e:4a:e4:
                    63:5d:21:9b:5f:58:ed:d2:fe:5f:a4:ab:2c:6b:18:
                    56:7e:5d:b3:ac:36:38:71:7c:dc:0c:47:8b:55:32:
                    70:eb:7d:9b:1b:c1:b4:02:3c:df:e6:6d:93:bb:ab:
                    3c:fb:67:31:d5:f5:d9:7a:e0:10:0f:ec:1f:4d:4d:
                    e0:f8:53:76:c9:b6:c4:81:83:0d:19:e0:70:53:1a:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:3F:16:02:DC:1E:6A:67:89:23:A2:F5:B7:07:7E:7D:E1:38:A0
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:3f:0e:1b:3c:da:91:24:e7:d9:cf:0c:ae:db:14:03:03:
         53:a7:bb:d8:b9:2f:92:49:3f:eb:d3:43:52:07:ef:f0:11:4b:
         99:58:20:ce:f3:9a:e0:c0:a0:8c:28:6d:00:3e:0e:df:4d:f6:
         c0:b8:11:c5:00:cc:51:b5:b6:ab:e5:01:7e:73:e8:c5:45:31:
         88:fa:86:6c:14:e6:ba:b7:ab:c3:a5:92:86:8f:05:2d:7f:81:
         79:51:fb:c9:62:35:55:7c:d3:5e:20:b9:66:0e:6b:f5:22:ec:
         a8:b7:80:5a:60:7e:5e:35:a2:40:6a:6b:1f:01:98:5a:0b:63:
         69:ac:8b:57:08:51:6a:be:9f:3c:47:76:ac:e1:06:c6:98:8b:
         e4:3b:d5:24:df:70:75:6d:f1:7e:2d:f1:1a:ec:e0:3c:eb:28:
         d3:e2:8a:27:e4:75:9b:06:c4:dc:96:3d:c1:9c:3a:20:c8:38:
         59:c3:9b:2b:a2:96:83:df:d7:ac:63:7e:54:06:18:82:b3:56:
         56:3a:df:6f:cf:35:56:38:5b:fd:af:e2:3c:db:ce:a9:3c:66:
         ce:f0:79:b4:c5:e9:5a:5c:da:7d:cc:92:bf:d8:78:5b:8d:a4:
         39:6b:ce:be:9d:28:fb:7d:08:35:76:28:0d:28:5c:20:12:6b:
         f9:4b:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:11 2025 by rpki-client