Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          LDr/kzg9G6VS9hnaJ9FM7At/fXlq6qkVgseHxKvT7dg=
Subject key identifier:   C4:BE:E1:C5:4D:F7:DD:14:93:14:1F:26:70:FA:93:92:72:B1:27:F2
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       01976CCFD5C7F2A66E072D8A677FF9930E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          162A
Signing time:             Sat 14 Jun 2025 05:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:49 +0000
Files and hashes:         1: 0zqU-vNXZ2phU0OLDTydQoGFH8Q.roa (hash: +gP0NPBpHn9gACyGVaIVIcNnU3nAFyTkDtrpKge+z2I=)
                          2: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: EGirr9seNIdoPxVuB4OrHykx+FhW0K+8TcSnvUMm7jM=)
                          4: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          5: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          6: fsCpcWbx8Z1eo5cYhqs4znqfBw0.roa (hash: 2EkDKLPS7K1At/yNNFD/xXPTEKBT3zJVxYZiJe5gvgs=)
                          7: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:d5:c7:f2:a6:6e:07:2d:8a:67:7f:f9:93:0e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Jun 14 05:00:49 2025 GMT
            Not After : Jun 15 05:00:49 2025 GMT
        Subject: CN=c4bee1c54df7dd1493141f2670fa939272b127f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:c7:dd:03:82:43:eb:b9:07:68:5c:27:2d:
                    85:e7:6d:cd:77:5c:d4:da:0d:e3:77:d9:30:5d:69:
                    09:b6:50:2e:ae:d6:ba:65:92:48:1b:73:3e:54:10:
                    f0:22:07:d8:a8:d6:eb:ec:5b:ee:6d:20:51:22:d7:
                    46:00:c3:a2:ec:96:10:6f:e3:51:e8:26:4f:bc:55:
                    d6:9b:b3:61:0b:a7:c9:fa:72:6f:77:da:9d:8e:8e:
                    5d:d4:ae:35:62:12:fb:a9:f0:23:23:46:13:a1:cd:
                    46:6a:f7:01:02:d8:df:6f:09:4f:05:97:85:e3:2d:
                    60:39:b1:d5:2e:e3:be:0f:85:4f:fe:f9:80:34:4c:
                    23:b0:ad:08:63:20:71:36:8d:b7:62:aa:c9:1e:70:
                    45:88:fd:5c:29:e4:6c:4c:2a:0b:cf:94:b7:b0:55:
                    ac:f5:de:a4:ed:d4:b1:5f:b0:ec:c4:7a:19:99:ec:
                    65:49:f2:da:99:f9:4a:8a:2b:c6:8c:58:3f:a7:79:
                    9e:b6:69:7c:e6:05:a9:d4:0e:f2:47:13:1e:2e:73:
                    46:93:42:68:ee:0b:71:c2:b5:03:04:c1:64:cc:69:
                    7f:81:a7:a5:dc:99:c5:42:39:aa:1c:a9:4d:c7:ab:
                    78:48:74:6a:c8:29:fb:cd:f3:81:de:6f:c5:80:c4:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BE:E1:C5:4D:F7:DD:14:93:14:1F:26:70:FA:93:92:72:B1:27:F2
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:22:a9:b6:96:b9:0c:a7:c9:b6:e7:ea:60:18:ce:b8:00:83:
         af:fc:67:b7:64:97:3f:1b:9a:9b:9e:a6:28:10:d3:5d:5b:5e:
         ca:37:d7:b6:b2:50:c9:05:5d:99:8c:cc:92:b6:ae:93:2b:44:
         2b:30:68:4b:b0:82:02:c1:54:c2:5d:bc:3a:fa:a6:d2:5e:a0:
         b6:dd:c8:12:b9:44:fb:ec:f2:4e:df:fb:73:f7:f1:4b:c2:0f:
         e6:46:53:53:a5:75:ef:52:6d:54:b6:57:3d:1f:d5:dd:60:be:
         31:e7:e8:cf:85:c7:34:f1:d3:e5:50:9a:79:33:6c:bc:3b:e1:
         7a:aa:aa:df:c6:4c:26:70:24:96:99:16:b3:7b:6e:2e:22:79:
         fb:98:1e:d4:fc:4b:2a:a9:4a:6f:ae:02:4c:14:0e:3d:f7:4d:
         16:86:e0:f9:e4:5d:30:75:05:0d:57:a3:ac:43:8d:09:24:c5:
         07:50:4f:5d:94:d6:00:45:06:80:c1:21:a6:b7:90:05:94:40:
         1a:b9:c1:81:21:e8:1b:f5:2d:3c:45:4d:70:f1:18:c3:43:83:
         d4:dd:4c:98:0e:cb:0b:fc:52:56:fc:92:60:81:52:d2:19:38:
         41:f7:d0:5a:9b:89:c1:2e:4a:e9:fb:66:9d:55:9a:1d:b5:bd:
         ee:44:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:18 2025 by rpki-client