Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File:                     pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier:          uEedUknQO3yZrAd0MxID5waPJyqHI+semKUfuHG8O1Y=
Subject key identifier:   0A:2A:9A:8E:65:01:C3:84:CC:F9:69:CC:13:A8:55:D0:82:A9:9B:52
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer:       /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial:       01977FB198668E5D024B670318987E635DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number:          159B
Signing time:             Tue 17 Jun 2025 21:00:34 +0000
Manifest this update:     Tue 17 Jun 2025 21:00:34 +0000
Manifest next update:     Wed 18 Jun 2025 21:00:34 +0000
Files and hashes:         1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
                          2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: p+7qAr30VZdukzGzTA91evFXy+LpVux89Mbfr3To0+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:b1:98:66:8e:5d:02:4b:67:03:18:98:7e:63:5d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
        Validity
            Not Before: Jun 17 21:00:34 2025 GMT
            Not After : Jun 18 21:00:34 2025 GMT
        Subject: CN=0a2a9a8e6501c384ccf969cc13a855d082a99b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:7b:91:c7:49:6b:da:1c:08:47:a9:d3:93:
                    e5:db:27:66:5f:e2:44:67:f9:0a:0a:65:4e:22:1c:
                    7b:72:fa:a4:1e:20:65:58:4c:e5:66:4f:43:40:d4:
                    10:15:98:8b:a4:0b:d5:1f:9b:94:c4:f9:85:46:f3:
                    fd:49:31:1c:58:c1:50:0a:14:30:56:3b:71:77:3e:
                    78:95:30:0d:60:a6:c3:1c:df:ef:d4:c9:f5:69:2a:
                    0a:85:54:13:22:1f:10:58:c9:15:3f:e6:59:a9:90:
                    f8:41:2f:d0:7d:86:f1:9f:f0:47:3a:11:41:2b:7b:
                    45:6e:e1:e9:5d:cd:f4:55:12:48:09:0a:96:c7:04:
                    d0:91:e5:55:0f:a1:0e:5a:da:ea:20:40:28:fd:25:
                    87:60:7b:f4:9f:a4:f0:17:a6:e0:a1:9f:bd:29:fb:
                    05:a4:a9:fc:5e:a9:44:b6:8b:52:2d:7d:c0:d3:85:
                    e0:74:83:40:7d:20:3a:50:6a:e9:8c:14:db:68:eb:
                    4e:a2:25:dc:c8:b7:64:fe:19:92:4d:ee:b2:55:e1:
                    b2:88:ab:e4:be:95:4b:09:35:0b:52:46:b3:63:6b:
                    70:16:e0:90:46:a6:c1:e9:2e:e8:ab:59:ae:9a:ed:
                    9f:08:95:f5:50:34:60:7f:76:e5:34:5c:c1:ea:e9:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:9A:8E:65:01:C3:84:CC:F9:69:CC:13:A8:55:D0:82:A9:9B:52
            X509v3 Authority Key Identifier:
                keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:51:02:ac:ac:b4:22:0b:97:87:12:9e:d8:25:44:78:11:f9:
         23:13:e2:e3:d7:b9:cd:58:37:be:97:20:19:3b:36:2a:82:6b:
         56:2f:5b:b6:1b:ad:ce:66:72:09:5c:53:3c:ed:6b:98:05:94:
         37:10:10:27:fc:b7:0e:47:fd:23:c1:2c:10:90:e1:31:c0:3a:
         7c:9a:9c:05:15:c4:19:6e:ee:56:5a:77:f3:cd:fa:47:61:b2:
         3f:bc:79:8e:83:85:b2:2a:ce:9a:50:2f:cb:74:26:c5:a1:03:
         f8:ef:5e:b9:e6:94:53:30:81:9f:82:02:c4:1d:f3:48:95:e2:
         b4:b1:e7:67:cb:5c:26:f4:73:81:9e:2c:e0:5a:ec:cc:74:f3:
         4e:06:9e:fc:13:6c:5b:a0:9e:9e:a0:df:4e:04:e1:33:f6:e9:
         ed:86:b5:93:4f:60:53:86:24:82:3d:b5:24:d3:bb:9f:de:db:
         2b:df:86:15:5a:4f:4e:8d:12:6d:ac:05:13:08:34:70:5b:30:
         d1:31:de:c0:f1:fd:93:ad:31:a6:d0:72:8f:e9:cb:07:ea:2e:
         8d:31:94:79:67:47:1b:90:f0:8c:97:74:ae:5a:c7:b1:ae:f8:
         ba:fd:d0:39:a1:3f:7a:d6:70:e7:8b:46:7e:91:6c:2d:45:25:
         29:99:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:08:56 2025 by rpki-client