Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File:                     KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier:          V/IDdwm+MiLs+z5hx43jA+nhE0xveoUZbEZo3HjXU3s=
Subject key identifier:   92:A2:58:3D:6B:1D:00:39:77:70:2D:E6:EC:53:19:DE:D4:B3:42:F5
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer:       /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial:       01976BBCCAC3E721EA3BCCBA2BACBDAD0543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 00:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:24 +0000
Files and hashes:         1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
                          2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: t2Vm8ueyDAZbwV/kqbi9/kKXrUtPvJiOODJSqVxYj4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:ca:c3:e7:21:ea:3b:cc:ba:2b:ac:bd:ad:05:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
        Validity
            Not Before: Jun 14 00:00:24 2025 GMT
            Not After : Jun 15 00:00:24 2025 GMT
        Subject: CN=92a2583d6b1d003977702de6ec5319ded4b342f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:78:05:7e:91:e5:76:66:26:8c:10:f4:59:
                    76:3f:55:89:cd:9d:e7:92:5a:83:19:b1:12:ab:93:
                    83:5e:92:51:2e:ef:cb:51:49:68:94:23:f9:c2:03:
                    6b:e5:9d:4f:d6:68:11:23:d3:d4:6b:8f:f5:6c:db:
                    37:2a:3d:51:7c:9a:a7:99:7d:58:91:6b:f2:98:a4:
                    7d:e9:64:8c:85:bb:f3:9e:8f:30:2f:74:96:34:ee:
                    3e:67:f0:92:11:12:a1:6d:95:c2:85:30:50:c9:17:
                    cd:59:bc:80:0b:8c:aa:db:d0:3a:d8:bd:62:cd:d8:
                    d4:74:2c:98:cf:a8:f4:62:96:40:5d:a0:47:b7:fb:
                    d5:20:63:10:2f:56:3a:ef:7e:03:70:01:8f:fd:3e:
                    ab:46:48:29:ce:1d:a0:e2:f5:55:d2:63:51:93:8f:
                    93:a1:bb:80:ad:18:c6:b6:13:ee:f5:72:38:00:37:
                    c4:3d:f1:b8:d0:25:1d:8c:22:d0:82:1a:5c:51:53:
                    37:c2:29:82:09:79:62:fe:24:ea:e9:15:ae:66:28:
                    a5:e9:7a:46:39:dd:42:cb:88:e3:03:03:95:56:08:
                    8f:03:f0:0d:7f:fe:b1:73:de:01:c2:37:36:5f:83:
                    61:af:bd:1c:6b:a8:a3:0a:8f:c9:13:ce:fe:8f:72:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A2:58:3D:6B:1D:00:39:77:70:2D:E6:EC:53:19:DE:D4:B3:42:F5
            X509v3 Authority Key Identifier:
                keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:bc:f4:f7:67:e4:f8:00:a4:e3:a7:d8:bf:bf:ed:8a:9d:
         dc:65:8e:ed:98:65:e7:89:f3:ce:16:12:5e:2f:2f:b2:4f:8f:
         30:78:05:bc:ab:af:9c:71:bb:6c:cd:58:eb:0c:ab:7f:2e:89:
         9d:7d:d8:11:ad:26:c8:be:2b:eb:ae:54:14:ff:ea:a7:59:cb:
         f2:c8:85:1d:62:bc:4f:6c:c8:89:33:c9:3e:7d:64:70:24:64:
         87:0e:5f:54:a0:95:74:90:44:37:32:9d:08:3c:8d:9c:44:e3:
         df:cd:55:ad:a4:8c:ff:d7:6e:48:f1:1b:57:6b:1f:72:d6:b3:
         e4:5d:ae:ec:d2:ab:f9:67:99:eb:dd:ad:3b:58:a7:96:d9:37:
         7b:fe:b1:c5:6e:d6:71:d9:2d:19:3d:9e:e4:2e:3e:1c:c9:0f:
         af:aa:c8:42:6d:f6:8e:43:71:94:76:21:fb:5c:3f:8a:e8:25:
         f6:c2:1c:db:1e:0a:27:df:a0:03:21:e1:14:9d:94:4b:9d:7c:
         d7:03:3b:98:c8:de:1c:7c:ad:1e:cc:35:2c:3e:dc:40:85:a7:
         73:97:2e:c1:0e:89:e4:e9:4e:6f:0b:4b:3f:ae:25:88:00:e0:
         9f:d6:05:f6:85:3c:20:8a:d4:c2:6e:3c:f6:9e:b8:76:ba:8f:
         12:01:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:52 2025 by rpki-client