Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File:                     dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier:          gLAga+Iq5gGb9Ia0zY14b7SzYraryiFQ0JXglx5pXSs=
Subject key identifier:   26:CA:EA:3B:69:55:E4:AC:6A:12:ED:EC:F2:DD:3F:44:7E:F9:7B:27
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer:       /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial:       019768BC429EE2FE3FA476ED968F8EBACEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 10:00:57 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:57 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:57 +0000
Files and hashes:         1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=)
                          2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: lTIeGqYpKqj5GKnfKfeaMWhc4AX78ApLUaDjncGsz/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:42:9e:e2:fe:3f:a4:76:ed:96:8f:8e:ba:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
        Validity
            Not Before: Jun 13 10:00:57 2025 GMT
            Not After : Jun 14 10:00:57 2025 GMT
        Subject: CN=26caea3b6955e4ac6a12edecf2dd3f447ef97b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:fe:91:5f:b1:8a:6c:61:9f:c7:be:f0:2e:
                    a6:3d:93:cd:87:f9:9c:1d:0a:69:3e:74:d4:fe:41:
                    2b:1f:7d:35:74:59:d1:cb:80:43:02:1c:2a:1e:92:
                    71:52:6b:1a:1a:a3:04:28:b1:54:c2:c6:2e:61:3d:
                    5a:31:33:03:bf:ae:53:ca:5a:62:ef:4f:86:9e:f8:
                    da:f0:9f:15:f1:39:13:cf:05:f9:51:33:e5:73:8d:
                    31:fc:c9:d4:99:57:65:2e:52:48:42:7a:2d:02:28:
                    74:59:a4:96:93:05:66:01:6e:5f:0f:8e:4d:23:10:
                    67:57:c1:1d:0f:b7:ea:18:16:b6:b4:fe:d5:e2:7f:
                    37:a2:ba:d0:05:91:1d:36:a7:c5:30:47:b9:56:d6:
                    ed:1f:c3:ad:22:e5:bb:14:d8:ee:b7:cd:db:ae:b9:
                    e0:98:c5:8b:49:9f:b3:97:99:01:63:68:09:7c:9a:
                    25:65:e5:b6:47:92:c9:a6:b5:10:c2:b1:40:5c:04:
                    fd:fe:dd:c0:90:ae:68:8a:f0:b5:fc:89:ad:81:49:
                    23:16:47:94:18:5d:74:ac:06:3c:af:22:b2:06:1c:
                    30:f0:94:8a:89:6e:47:37:3b:ce:05:dd:a8:bf:2e:
                    b1:74:f4:bd:f2:43:7f:59:4e:94:9f:dc:e8:1b:5b:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:EA:3B:69:55:E4:AC:6A:12:ED:EC:F2:DD:3F:44:7E:F9:7B:27
            X509v3 Authority Key Identifier:
                keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:ca:3e:f5:93:f6:29:4c:db:71:3a:e8:af:33:3d:b9:74:
         18:26:17:f4:38:b7:00:7c:50:9a:2e:d7:39:c0:29:8d:48:7e:
         36:6b:ed:67:41:83:5f:62:89:29:c3:1b:5c:88:2b:73:f1:4b:
         9e:8f:f5:43:a0:5a:b1:ad:6c:9d:09:fd:a2:26:d9:44:80:4c:
         93:df:d3:7f:ca:46:77:60:12:54:74:dd:1a:0f:ac:71:4e:3e:
         29:ac:9b:1a:c4:5f:e5:92:02:ed:25:a5:1a:f7:de:9c:8f:64:
         d2:f3:31:fd:bf:1f:63:8c:71:f5:92:f1:c1:59:a9:5d:d5:34:
         8f:bf:b0:4a:1e:7a:81:6d:9e:81:69:87:e3:a2:ec:d2:73:5b:
         6f:60:63:52:b1:b7:54:73:d5:af:f3:c3:09:49:0c:07:b7:90:
         5c:80:b1:50:d5:b8:4a:78:0d:24:8d:cd:7f:a4:dd:0a:d6:12:
         5e:20:7a:78:ef:71:4b:d8:c5:d9:b0:b7:6b:70:7c:5d:b9:30:
         a6:9b:a2:e2:5c:f9:54:ee:d8:ca:9a:4c:93:3f:74:a8:5e:30:
         6b:af:09:3e:1b:fd:0f:5e:53:6a:66:e4:65:99:09:ab:1a:87:
         dc:61:83:e7:9f:b1:07:0f:6d:29:24:6a:fa:d3:e7:79:22:52:
         cd:59:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:32 2025 by rpki-client