Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          pUza3lpL9vsSnxL2B3+J6hf+VjdrsbODqptxSfMzUBw=
Subject key identifier:   54:33:B6:6B:07:02:70:C7:45:5C:36:87:72:59:85:04:18:D5:F2:FE
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       019778661D247EB5837149D3DD0557DE2B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          159D
Signing time:             Mon 16 Jun 2025 11:00:47 +0000
Manifest this update:     Mon 16 Jun 2025 11:00:47 +0000
Manifest next update:     Tue 17 Jun 2025 11:00:47 +0000
Files and hashes:         1: 72fMUbgrTDPPo7cUu15VnQvLNWQ.roa (hash: RvxteBLUmDvyXH+S4lsSzz7zQ7LVEwbzwy16GpnGfc8=)
                          2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
                          3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=)
                          4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
                          5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: AVOHTCOp7BAnYaJ/dlO6/7HLC36FUZc1/9FeNKwGjdU=)
                          6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
                          7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:66:1d:24:7e:b5:83:71:49:d3:dd:05:57:de:2b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jun 16 11:00:47 2025 GMT
            Not After : Jun 17 11:00:47 2025 GMT
        Subject: CN=5433b66b070270c7455c36877259850418d5f2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:a0:54:e8:aa:02:12:ba:5d:ce:62:f0:53:
                    7d:98:8c:e7:2c:12:8a:54:86:37:95:67:65:4e:82:
                    4b:4e:53:27:5e:bc:e7:58:1a:be:29:eb:74:a8:cf:
                    df:33:c3:d1:3f:65:6e:11:7e:da:cc:96:16:72:b6:
                    f5:99:77:b9:96:d1:2b:30:79:01:b6:70:06:26:0b:
                    e1:d8:95:d4:24:1c:ac:6d:62:68:ba:d9:9d:d9:dc:
                    87:18:cb:53:cd:ec:84:38:05:0b:c5:9c:76:82:a7:
                    c7:25:61:f4:5d:64:6f:01:c8:55:4c:98:94:56:9e:
                    be:04:0a:9c:24:33:a8:9b:ec:d2:9a:8c:52:c3:92:
                    4e:d8:4e:f6:23:bd:aa:b4:c4:f1:94:94:2c:80:61:
                    5e:7d:e5:ba:79:e1:9b:37:f9:30:27:da:0c:58:87:
                    74:9e:4b:8c:34:77:51:0d:db:67:9a:19:af:6d:63:
                    bf:5b:ac:c7:f8:99:52:5a:f9:84:4a:5a:3c:e7:3e:
                    f6:1b:0e:3c:33:64:c9:14:8c:41:ca:3c:ed:a3:52:
                    1d:87:69:f0:07:27:e5:85:7f:6c:99:9a:1c:7e:c4:
                    27:62:56:b1:56:b6:0f:98:f7:04:87:68:61:1e:6d:
                    bf:5b:0e:4a:49:d8:20:f0:06:44:2e:0a:cb:38:ea:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:B6:6B:07:02:70:C7:45:5C:36:87:72:59:85:04:18:D5:F2:FE
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:8a:2a:f0:77:d8:c0:34:c6:b4:1f:b4:be:51:ec:4e:3a:
         74:fc:c2:8a:94:d1:d0:7b:23:23:b8:9a:b5:e3:ac:1a:71:3f:
         3f:98:3c:c9:67:d5:64:9c:c0:85:ef:14:b0:51:ec:f1:7d:47:
         c4:1b:94:05:de:6a:e5:5b:f1:ba:0a:de:65:4f:44:46:9b:73:
         3d:1f:67:13:93:ac:56:de:41:cc:5a:ed:61:c7:02:45:12:1c:
         74:af:84:d1:d4:8d:83:f3:35:a7:ed:4f:a4:45:e9:0b:76:4c:
         57:10:98:de:a5:08:6d:31:76:45:46:52:84:ce:85:f6:90:92:
         07:b8:87:74:75:16:e7:5b:e2:83:68:73:ec:58:f9:24:3e:5d:
         b9:a4:98:ae:2a:c8:76:0c:4d:c2:62:7e:e3:a0:c5:fb:63:37:
         4b:2a:3f:0e:9d:43:29:1f:0d:28:8f:33:8f:33:3b:ce:2e:a7:
         32:85:78:0a:77:ef:98:94:20:7d:01:de:4c:e2:25:b7:65:14:
         e8:bb:27:f0:97:fc:73:57:fc:e0:65:be:ac:c2:a2:1b:75:6f:
         0f:87:fd:6c:bd:84:aa:99:30:17:30:07:fa:41:95:25:ed:a9:
         37:9c:fb:fd:ad:aa:e5:5c:d8:ef:05:73:df:ed:25:92:d9:be:
         be:dc:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:45:25 2025 by rpki-client