Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File:                     t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier:          FitpvXziZKwRxnSIAwa3wwMtB6T1jdihb5yb9ueyciw=
Subject key identifier:   83:33:AA:DB:B8:64:98:33:F8:92:77:1E:7E:5F:2D:94:1B:5D:AD:6C
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer:       /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial:       01978A3512BAC48C8B38445203482EC019D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number:          156F
Signing time:             Thu 19 Jun 2025 22:00:23 +0000
Manifest this update:     Thu 19 Jun 2025 22:00:23 +0000
Manifest next update:     Fri 20 Jun 2025 22:00:23 +0000
Files and hashes:         1: dQipKZolIhGkhWFJoygF3CDiTvg.roa (hash: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=)
                          2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: sfVT0Uu7rxGPl6hkA/H6ts6piXhKaq8dIkOpJMCBk8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8a:35:12:ba:c4:8c:8b:38:44:52:03:48:2e:c0:19:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
        Validity
            Not Before: Jun 19 22:00:23 2025 GMT
            Not After : Jun 20 22:00:23 2025 GMT
        Subject: CN=8333aadbb8649833f892771e7e5f2d941b5dad6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:b6:ca:c4:74:ee:00:4d:31:0d:ad:75:47:
                    91:c5:c5:61:46:23:66:de:91:12:cc:cf:05:41:31:
                    6c:bd:1c:4d:5a:9b:fd:6a:2c:be:e6:9c:0c:18:1f:
                    a5:98:66:fb:a6:78:7e:8a:2d:c1:61:91:b5:a0:8b:
                    47:8e:e4:43:6a:61:2a:f6:74:8d:af:2c:ad:d4:15:
                    87:c8:6d:0f:ee:92:af:33:e2:6f:a4:6e:89:55:5b:
                    58:63:cf:bd:b1:55:91:b4:d9:6e:74:32:b5:3f:64:
                    58:7b:7a:c9:0c:11:1f:a3:72:d9:8b:7a:5a:e8:a9:
                    10:cb:63:1f:c8:e5:b3:f8:ee:bb:4a:72:ee:e4:8c:
                    f0:62:9e:e4:11:ee:c6:31:86:c4:17:02:0a:ec:4a:
                    46:a4:78:f2:f6:d9:14:83:a4:ee:ff:c2:5b:bc:7d:
                    1d:b2:ab:8d:99:6f:8d:e8:a2:cf:a4:da:0f:06:56:
                    3e:37:5b:af:ed:ac:a8:37:06:4e:8b:62:84:5c:ce:
                    05:53:0e:6b:2d:78:c0:cb:c7:0c:1b:cf:a3:eb:21:
                    83:70:23:c7:d8:8d:a5:55:0c:b5:72:42:0f:06:d3:
                    ca:13:15:63:41:1f:97:27:da:0d:a0:2d:6d:3a:f6:
                    a8:ab:ff:ec:0b:e1:b5:f5:b3:bc:fe:3b:1d:50:b8:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:33:AA:DB:B8:64:98:33:F8:92:77:1E:7E:5F:2D:94:1B:5D:AD:6C
            X509v3 Authority Key Identifier:
                keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:ef:f3:ce:31:d8:e8:c8:a6:5d:1d:a2:85:59:5b:7d:f8:
         05:a1:cf:47:c6:e9:4b:b3:bb:5e:f8:40:27:b0:56:f0:d4:b8:
         da:d1:ef:e7:16:dd:cf:39:d8:67:4c:a9:93:c5:55:df:f0:7a:
         d5:64:74:fc:43:8c:6f:cb:2b:f4:cf:12:b6:24:2f:4c:74:75:
         22:4e:40:11:2d:dd:fd:34:25:bd:e3:d3:fe:80:16:35:71:30:
         d3:53:92:f4:df:a7:2d:36:f5:c8:e2:72:c9:ec:eb:5d:60:a9:
         ff:30:41:df:3b:aa:dc:dd:a0:c6:af:1b:75:3f:51:09:03:75:
         dc:a0:e2:11:17:45:df:46:b8:25:a7:81:57:8b:9f:ba:c9:63:
         da:05:27:b5:83:95:9d:87:c0:ef:15:cc:80:4e:fb:4a:64:12:
         92:46:1b:42:ae:cc:70:8a:f1:e4:64:e0:0e:b2:20:6a:d5:b1:
         85:fc:57:59:ee:52:e9:7a:f8:fe:02:da:c3:ff:34:05:54:24:
         38:9c:ac:f4:9b:5e:f9:a8:17:9b:17:7e:85:40:bc:c9:47:e3:
         66:79:d5:75:2e:5d:7d:c6:f9:c7:cf:26:ff:c2:fb:4e:bd:9b:
         e5:9d:9c:e8:ae:06:79:d0:67:93:98:2f:32:b7:7e:58:ed:3d:
         f3:75:7e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:15:07 2025 by rpki-client