Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          nKWeaTUT8VLElIlehTJSRxpiFx6ivYonedEVzEYTU1g=
Subject key identifier:   F9:BC:08:A7:6E:0F:0F:52:43:C3:98:C9:BF:47:CC:1C:AD:CE:68:F0
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       019769CEDBC7ED642E473494B57F99ABA59E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 15:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:53 +0000
Files and hashes:         1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
                          2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
                          3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
                          4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: pO4yoQGypzxmRaL/7KoHqRTBrOJ2v/cCHjYD234ux9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:db:c7:ed:64:2e:47:34:94:b5:7f:99:ab:a5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: Jun 13 15:00:53 2025 GMT
            Not After : Jun 14 15:00:53 2025 GMT
        Subject: CN=f9bc08a76e0f0f5243c398c9bf47cc1cadce68f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:b8:5f:6f:11:a0:61:5a:d5:15:89:0b:fa:
                    15:dd:04:ed:17:9e:28:17:17:83:23:43:ec:a1:de:
                    82:3d:30:2e:d0:4b:e3:6c:a8:e9:42:c1:9b:c5:4c:
                    99:dd:bb:68:f6:3a:f7:b1:ed:21:56:74:2a:c6:c3:
                    ae:6f:48:1d:33:b4:20:59:02:c7:59:2d:e8:70:2c:
                    d4:af:f0:1a:f6:e5:6e:11:f1:c2:32:30:73:ab:87:
                    d1:7a:73:e3:77:47:c9:4d:5c:b8:f6:8c:e5:57:63:
                    c5:f5:26:f1:fd:6e:f8:0e:75:72:3a:9b:c3:85:45:
                    90:2c:26:93:93:6f:77:3b:36:cc:18:46:7b:0e:47:
                    1f:d4:28:91:c4:8d:f7:45:3f:f9:1d:da:dc:3b:4d:
                    0b:b7:be:f9:09:07:ec:97:d0:2e:0f:bf:39:d0:d7:
                    69:12:c5:26:a7:f2:64:74:bd:99:ce:ef:f9:ec:89:
                    34:93:ce:65:64:ff:9f:b2:71:23:df:25:d1:4b:bb:
                    e5:d5:98:b3:c3:c0:de:13:d0:89:79:d5:72:2c:21:
                    19:ca:b6:f2:2a:2a:ba:2a:89:d2:3a:88:4a:86:c3:
                    fd:b9:2b:67:2d:fb:11:15:ca:39:13:60:b0:c9:e2:
                    ae:01:0c:ff:5a:4a:cb:4e:0a:68:2f:fb:57:78:40:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BC:08:A7:6E:0F:0F:52:43:C3:98:C9:BF:47:CC:1C:AD:CE:68:F0
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:c1:a5:93:fe:3c:d2:3a:db:5c:cb:61:f8:5a:bb:cb:54:
         ef:0e:79:a9:91:90:a8:be:74:c5:c0:01:6e:a8:12:27:2b:09:
         72:a6:67:63:98:8b:1a:6f:aa:ae:c3:3d:39:ac:fc:38:85:5b:
         7e:1a:4b:09:39:e8:3c:4c:ec:f0:85:91:b4:27:67:71:63:c4:
         33:7d:b4:03:e7:d6:ad:5b:7b:a1:bb:d8:9d:47:4c:17:3e:35:
         81:f6:df:36:ac:ec:f4:65:1c:3c:f4:b7:89:55:c6:e2:17:5b:
         8a:93:f9:45:bb:5d:93:12:fb:3f:c8:49:90:95:3d:12:f7:61:
         76:05:fa:f3:d6:10:b3:91:6c:db:70:32:73:8c:df:7f:70:f2:
         85:ed:f0:b1:c4:b6:f3:3a:42:47:24:c9:2d:82:ff:95:00:fa:
         40:f1:5c:f9:34:fe:3c:3b:b3:ae:ca:a4:42:cc:03:5f:3b:8c:
         d5:01:6c:81:ea:da:c8:45:ca:53:c8:93:f3:80:a3:92:ff:f3:
         2c:da:bf:55:6c:07:b7:20:3a:32:3f:86:3c:f0:bc:45:80:e7:
         e2:4f:76:ec:f8:36:ca:80:a5:fc:50:a6:5d:e0:7f:73:91:72:
         52:4f:f6:30:f8:48:01:ee:96:4c:75:fe:67:11:25:b6:3e:c9:
         8b:74:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:06:03 2025 by rpki-client