Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File:                     5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier:          5WwpIqb/WaDMyfrbhxn8+i6vKl3D2ePHM2Ak3Rgd90o=
Subject key identifier:   AD:8F:C5:0B:44:F1:89:33:13:2A:BA:D3:DD:16:A8:7A:FC:51:7D:2A
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer:       /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial:       01978847D22AEB72208C6787DB01EBAD52AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number:          159B
Signing time:             Thu 19 Jun 2025 13:01:37 +0000
Manifest this update:     Thu 19 Jun 2025 13:01:37 +0000
Manifest next update:     Fri 20 Jun 2025 13:01:37 +0000
Files and hashes:         1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: wwlHVlCxCs9iy1mUqIcWh09dR4Er6UDLErvwF8RgkOI=)
                          2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
                          3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:88:47:d2:2a:eb:72:20:8c:67:87:db:01:eb:ad:52:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
        Validity
            Not Before: Jun 19 13:01:37 2025 GMT
            Not After : Jun 20 13:01:37 2025 GMT
        Subject: CN=ad8fc50b44f18933132abad3dd16a87afc517d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:58:0b:dd:05:1a:c0:ba:28:d0:d0:8e:be:
                    4d:7e:fa:86:83:db:4e:a4:c7:75:2b:af:2a:96:07:
                    d7:d4:9f:f3:0a:ff:a8:ea:a2:63:c7:b4:4f:8b:c9:
                    be:17:c5:6a:22:a2:fe:83:cb:73:94:d9:f1:30:be:
                    8a:40:9c:cc:17:7b:99:f1:6b:95:67:93:6b:b2:1c:
                    32:f1:63:24:f3:cd:29:4b:9c:8c:e1:b1:4c:36:71:
                    8c:0e:10:6a:c6:e7:08:51:b0:c6:18:98:2a:d3:f2:
                    f4:2b:89:99:84:18:dc:49:ec:27:2a:19:c9:27:64:
                    bb:21:de:3c:04:3d:dc:6d:d4:04:eb:b4:c4:8e:aa:
                    d3:af:17:79:38:0a:ed:34:38:87:32:71:66:c0:d7:
                    27:ad:f7:85:57:4d:75:40:77:cf:86:6c:92:a5:84:
                    59:8b:01:58:80:2d:2e:91:ac:cb:6a:ce:7b:3a:b8:
                    e2:39:66:09:d1:5d:b5:2d:7e:4c:a5:21:3f:ce:47:
                    9c:f2:83:46:fb:84:88:2b:b4:5e:0a:63:ee:81:0d:
                    bb:43:a1:5f:d0:57:90:b5:82:37:eb:a6:eb:14:31:
                    5a:1d:d3:50:01:82:47:15:19:0a:7a:f2:36:75:d7:
                    5c:9f:af:11:63:bb:f6:21:ae:2e:55:97:23:54:59:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:C5:0B:44:F1:89:33:13:2A:BA:D3:DD:16:A8:7A:FC:51:7D:2A
            X509v3 Authority Key Identifier:
                keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:07:a0:b7:73:e8:34:23:23:59:82:c5:05:96:9a:1f:ec:f2:
         b4:ef:08:c6:d8:83:93:9e:1b:ee:0d:ba:6c:f6:b1:17:05:43:
         b2:be:eb:79:27:b1:e5:bd:db:77:50:cc:bf:fc:34:cb:d2:fa:
         0f:06:1b:2c:14:00:33:7d:35:5f:e1:34:7b:d1:37:c2:46:9f:
         99:14:ad:c0:be:76:0d:dd:54:67:01:14:51:18:4e:e7:3e:15:
         72:04:46:21:28:53:8d:c8:16:6b:aa:f7:34:98:7a:8c:55:b3:
         23:a6:ba:97:97:e5:fb:cb:9f:e3:3c:39:43:e5:ef:d3:20:84:
         8c:12:b8:12:71:82:cd:77:2d:9b:06:af:1f:36:f7:1c:01:a1:
         42:81:3b:c4:db:05:ba:ff:ac:9e:c9:67:3f:e3:09:4e:85:d0:
         7a:00:5e:16:93:e0:f4:42:02:af:d4:45:19:be:57:4e:94:7e:
         bf:fd:91:10:6f:6f:77:ca:59:39:e6:37:32:08:5e:92:6a:f1:
         04:bc:be:47:29:38:62:b6:68:7c:ea:89:ab:40:51:c2:79:e8:
         ab:c4:9f:4f:26:54:d7:0f:1e:d6:94:48:62:29:6a:5d:d3:c9:
         7c:a5:f9:43:55:1b:c2:4e:6f:c0:9d:b1:17:e8:de:36:39:86:
         61:c1:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:33:28 2025 by rpki-client