Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File:                     v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier:          EwtSlJkxXXZwW0Rc1470N2YH+Uqcp87dHCU8LIOxs3k=
Subject key identifier:   ED:FF:6B:D1:C0:35:39:55:23:E0:C1:F2:A0:DD:5C:8E:E1:64:3D:E0
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer:       /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial:       01976F9A2A3D050964F3EC8F119B2335E7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 18:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:03 +0000
Files and hashes:         1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
                          2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: 0iJ36K+6piiY74y8WHg0PNPpotUWl2wV/EloLjnM/rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:2a:3d:05:09:64:f3:ec:8f:11:9b:23:35:e7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
        Validity
            Not Before: Jun 14 18:01:03 2025 GMT
            Not After : Jun 15 18:01:03 2025 GMT
        Subject: CN=edff6bd1c035395523e0c1f2a0dd5c8ee1643de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:24:06:33:5a:58:0c:46:52:3b:85:73:08:
                    c3:92:ef:1c:9e:f0:c5:c6:51:dd:ca:95:fd:d1:29:
                    7b:8c:f7:12:ba:fe:5d:6d:d6:37:ac:cb:36:22:c0:
                    bf:5d:15:12:74:66:f2:3d:9c:8e:97:79:85:0f:d0:
                    81:2f:d5:a1:e4:82:f3:9d:b3:0f:36:72:45:d7:fd:
                    de:94:09:d0:9b:2e:a8:51:9b:62:f8:af:37:93:df:
                    07:6d:ec:12:00:bd:7d:87:ee:6e:de:b8:54:ff:86:
                    62:9e:86:85:ba:5f:c7:de:fa:15:f6:54:e0:48:55:
                    cc:45:91:5d:45:3b:78:29:37:dd:4a:97:cc:bf:8c:
                    db:b9:c2:56:5f:e0:49:c2:d6:79:04:4f:fa:5e:e6:
                    d2:ff:10:8f:d4:b2:cd:84:0f:98:96:3c:35:37:d8:
                    b9:4d:fb:28:b7:34:ad:e9:5a:27:c4:89:51:d5:ae:
                    d3:b9:ba:03:49:4a:29:b4:20:4e:4e:b5:5e:c2:ac:
                    58:c1:5a:98:a5:5c:f7:aa:32:00:03:7f:2b:53:87:
                    a3:88:5e:da:65:f9:84:bb:14:dd:3a:dd:5a:25:57:
                    57:4f:cb:ff:c1:ca:22:38:76:06:57:8f:2d:ef:dc:
                    31:f9:8e:67:4d:ce:cf:29:62:a1:64:70:db:4b:86:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FF:6B:D1:C0:35:39:55:23:E0:C1:F2:A0:DD:5C:8E:E1:64:3D:E0
            X509v3 Authority Key Identifier:
                keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:cb:58:4b:30:ca:00:3b:76:b9:0d:88:fb:44:32:9c:81:
         90:e8:2e:3c:24:ec:37:bf:78:ee:ac:20:b2:88:4d:49:e3:1b:
         fe:f4:77:f1:e9:68:bc:3e:f5:76:82:92:7e:99:c8:80:47:43:
         4d:18:55:68:6f:16:e1:3f:7b:81:dd:a2:24:34:cd:1d:0b:ee:
         b8:ee:84:a1:6c:46:71:c8:2e:b7:ad:b7:74:87:82:3f:7b:bf:
         01:43:4b:3d:68:e4:ce:b6:7a:30:dd:17:0a:2d:61:67:ce:f5:
         46:cb:ec:b3:33:c2:14:14:fd:1a:54:83:ac:22:52:50:21:71:
         6e:67:64:22:12:ae:6c:6c:c3:a3:74:24:34:79:ee:af:6e:ba:
         78:97:77:38:87:09:dc:16:4c:ef:94:aa:de:1e:1d:6f:5f:99:
         e2:8c:65:8b:b6:c0:4c:dd:6f:e3:6f:49:a0:48:a5:88:84:ba:
         fc:41:9d:d2:91:29:8f:d9:8a:89:e4:18:50:02:dd:1a:52:ff:
         5f:11:39:2b:bd:85:81:3a:47:08:28:04:56:f4:af:bc:33:d5:
         5b:c9:2d:61:2d:97:72:4e:18:21:d8:53:b0:dd:d7:a1:20:c7:
         6e:e7:5d:fa:d6:40:3c:ca:c3:f7:72:74:c8:a5:42:6d:62:59:
         98:5d:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:02:12 2025 by rpki-client