Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          mB3uAfXt5TsDBGEgQ45xZiPMhwU0RUlyHOPLNwH5fMk=
Subject key identifier:   33:56:C9:D5:58:95:8C:06:10:B6:89:A0:31:C8:43:49:18:3A:2A:D1
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       01976C9922685B5EECE30B4251CC8F920B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 04:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 04:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 04:01:04 +0000
Files and hashes:         1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: NwXZI6M4dhCf4/0vTgn0LJo+q5AaS9rRIuctoyT3M1o=)
                          2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:22:68:5b:5e:ec:e3:0b:42:51:cc:8f:92:0b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Jun 14 04:01:04 2025 GMT
            Not After : Jun 15 04:01:04 2025 GMT
        Subject: CN=3356c9d558958c0610b689a031c84349183a2ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:83:b6:06:37:f6:57:85:2b:87:4a:44:35:
                    6c:cd:ca:e7:2b:e4:03:82:db:14:43:1e:35:75:82:
                    4d:98:f0:08:9a:48:6a:09:ef:83:8f:b8:e4:df:b0:
                    0e:e6:04:16:54:21:9b:3d:26:37:10:51:5f:e4:08:
                    0c:b6:e1:9c:d1:17:1e:d7:7b:97:58:9e:f8:31:93:
                    19:57:5d:00:c4:9f:a5:26:8a:d0:44:f4:fc:25:21:
                    53:a7:9c:75:03:ec:e3:31:a9:e8:22:ca:15:7c:00:
                    09:cb:a4:fc:47:05:08:c3:35:88:8d:a5:2a:e3:96:
                    96:11:c4:e2:55:08:9e:90:ff:28:84:86:a6:a5:f1:
                    25:cb:37:02:c2:20:7f:29:fd:ea:11:72:ac:ee:3a:
                    1d:37:5e:bf:0a:1f:b7:f4:32:4c:95:67:61:3c:b6:
                    0f:75:96:fa:52:55:6a:00:1b:be:8c:95:c2:c9:c7:
                    71:ef:73:08:fd:3f:e9:f0:5e:85:a8:b3:9a:2d:46:
                    fb:f3:64:22:80:84:99:9d:a2:af:3e:15:41:b3:8c:
                    48:38:8a:48:fb:d6:76:a2:dc:e7:30:d2:32:52:50:
                    51:9d:5c:2a:1a:d7:c4:f6:43:14:2b:70:30:a5:ac:
                    6d:10:d7:bb:8c:60:fb:4a:bb:92:17:a1:29:e0:52:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:C9:D5:58:95:8C:06:10:B6:89:A0:31:C8:43:49:18:3A:2A:D1
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:0a:01:b3:76:22:66:a5:40:f2:e0:c2:65:d4:09:35:8e:
         c3:41:27:70:bd:00:7b:a0:f8:a0:a9:52:b7:56:7c:0a:4f:86:
         0c:23:8c:f0:91:21:0e:b2:4b:76:ca:ae:9e:45:59:58:03:34:
         d3:ca:fd:61:e1:d8:85:fd:98:20:a5:37:66:02:ec:92:fb:f7:
         80:eb:92:57:84:88:9d:6d:9e:06:08:20:13:7b:d7:33:16:8f:
         40:4d:78:1a:83:64:f5:23:d0:c5:fd:a8:84:bf:c4:f7:74:d4:
         55:a2:c8:86:b3:5b:c0:7e:69:ae:f0:6f:74:de:ea:6e:b0:b5:
         9a:5d:1a:7b:94:ac:83:65:62:81:c8:4d:d8:f1:92:71:1f:9a:
         e3:9f:fd:a3:47:47:ec:d2:74:cd:11:84:0a:12:2c:fa:65:7f:
         e7:84:32:d8:f6:a6:d4:c5:cb:e7:92:5e:27:a8:a7:26:91:06:
         a5:75:7e:3e:e3:f2:25:ac:fb:4b:01:a3:89:5d:90:8e:c4:ce:
         dc:e6:a0:95:60:77:2f:3e:7d:7b:46:43:75:da:b0:af:42:0b:
         56:81:48:35:0e:c6:fb:1a:92:71:38:68:38:23:41:c9:18:4b:
         54:64:33:96:b8:ee:b9:5e:28:60:4b:8f:e0:cb:90:f9:93:d9:
         2b:fa:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:30:44 2025 by rpki-client