Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File:                     DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier:          4XE1rAQV9ll3eKtUoydS73+ZK1++f7Qm7lst2ril7I0=
Subject key identifier:   5E:52:78:8B:8A:0A:14:6F:D4:14:00:7C:B0:17:80:50:3A:B8:72:D1
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer:       /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial:       01976D064E9697F5182070AB97D516A3BCF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 06:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:19 +0000
Files and hashes:         1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
                          2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: 7N3Vkjk5dGTtXlmg3smuv+VtxtpOhPCJkvzTiFbQvxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:4e:96:97:f5:18:20:70:ab:97:d5:16:a3:bc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
        Validity
            Not Before: Jun 14 06:00:19 2025 GMT
            Not After : Jun 15 06:00:19 2025 GMT
        Subject: CN=5e52788b8a0a146fd414007cb01780503ab872d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:00:38:a2:46:64:7f:3b:68:f5:06:98:64:
                    8d:51:2a:cf:36:cb:bb:0e:29:12:b6:a3:55:d3:9b:
                    b2:6d:bd:87:f1:2e:dd:44:e9:2e:50:ac:fa:1c:62:
                    52:57:62:34:93:58:c1:b3:34:c6:d5:ce:b0:ff:74:
                    63:d4:d9:2a:de:a7:e0:5e:ce:70:46:5b:70:c3:1b:
                    d6:36:b3:3b:11:bf:1a:72:9b:f4:07:bf:2c:9d:7d:
                    74:10:95:f3:82:d6:38:5f:aa:58:eb:3a:8b:9d:f9:
                    1b:d8:75:ae:da:a6:e3:68:a3:68:2d:c9:86:15:6a:
                    32:34:ef:8f:0f:ed:0f:7b:71:72:df:f2:1e:7b:24:
                    f4:c4:fd:dd:99:b3:2c:77:06:2a:51:e7:ba:90:03:
                    ea:5d:e6:79:99:8b:ab:ae:c0:98:67:a8:45:fd:80:
                    40:84:0e:bc:38:95:e6:17:18:dc:38:88:30:a7:70:
                    85:69:5e:4d:95:28:66:48:25:fa:ca:8f:37:c7:19:
                    2e:10:1c:60:7b:d9:78:93:e0:ea:f5:ba:bf:a9:9b:
                    cb:5f:6b:68:61:3d:06:9c:30:51:3f:c4:d9:96:51:
                    c3:e1:d2:04:43:d3:1f:e0:18:0a:36:8d:d9:fa:42:
                    10:dd:3b:20:6a:ba:a6:2e:64:13:5d:42:32:d7:18:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:52:78:8B:8A:0A:14:6F:D4:14:00:7C:B0:17:80:50:3A:B8:72:D1
            X509v3 Authority Key Identifier:
                keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:37:0a:c8:f4:b6:4c:03:8e:ac:5a:db:79:35:a8:36:9b:39:
         72:04:96:de:d0:fe:3f:33:88:77:40:16:92:03:b4:b9:2d:0d:
         69:4f:5f:eb:0d:6c:bd:7c:d4:1d:9d:a1:89:9b:50:34:98:5c:
         2a:62:02:ee:03:8e:7f:e6:54:c1:79:0b:a8:fd:2a:d7:72:15:
         7a:e7:ca:9c:70:e0:31:60:54:09:3a:3a:c5:3b:eb:17:55:09:
         33:f7:bb:bf:11:3b:38:db:ab:cb:d8:b8:74:b3:6f:2b:22:29:
         78:6e:d6:f7:95:69:8e:88:58:c5:30:23:f3:34:33:3c:d2:26:
         d7:8b:b1:1f:d6:3c:d9:44:0c:a4:00:1d:cb:d6:fe:b1:89:39:
         6d:12:fc:f7:08:0e:09:15:5e:a9:60:d5:70:43:0a:d3:c1:56:
         88:50:10:0c:83:c0:4e:dc:46:4a:4d:cd:2e:02:23:40:80:1b:
         f4:78:55:9d:87:06:28:22:30:ca:80:b5:90:5d:dd:af:57:85:
         c6:7d:66:5f:af:e7:b3:bd:d4:27:42:62:8e:0c:47:04:10:a3:
         32:97:0c:cb:d6:cc:dd:10:92:2c:09:38:59:a5:b1:53:df:8b:
         94:c6:d9:03:1e:c5:bc:7e:b1:4f:1c:8f:81:40:3c:f6:8b:e1:
         84:a1:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:53:15 2025 by rpki-client