Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File:                     G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier:          Vq2Dtwo3trEegRi/3e1xlPJQxGr46ZDrk0TS/ZJzhuU=
Subject key identifier:   4C:D1:B2:19:D2:FC:ED:5E:9D:6C:99:F9:05:DF:01:4C:A9:94:52:88
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer:       /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial:       01976CCF671ED03C6216F86B5C334AF293B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 05:00:20 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:20 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:20 +0000
Files and hashes:         1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: VaqcIPHm+Ukk0D27p+I/r8waOzXSjN6OHuj8WmSRT68=)
                          2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:67:1e:d0:3c:62:16:f8:6b:5c:33:4a:f2:93:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
        Validity
            Not Before: Jun 14 05:00:20 2025 GMT
            Not After : Jun 15 05:00:20 2025 GMT
        Subject: CN=4cd1b219d2fced5e9d6c99f905df014ca9945288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:fa:5d:93:c3:37:1e:36:3b:5b:71:40:0d:
                    71:29:a0:4b:f1:9c:1d:ae:57:6d:6f:89:69:e4:10:
                    8c:fe:f7:ec:f0:bf:6c:87:f4:b8:61:70:1c:ac:34:
                    f0:70:21:91:e7:6d:4b:ee:2f:ba:a2:7d:1d:a8:b7:
                    a7:00:4f:2e:0f:60:dd:c8:e5:c4:2d:e8:46:6b:23:
                    fb:9e:69:72:3f:d0:09:61:f4:c4:75:6b:df:69:86:
                    c6:a8:37:a7:79:7e:0a:04:77:7d:29:2c:de:1f:8d:
                    46:fc:93:3f:ff:a0:83:74:a8:ba:43:cd:2a:a1:81:
                    a6:2d:8d:44:d2:04:2d:e7:51:36:51:ec:4f:64:6a:
                    fc:54:5e:75:92:2f:81:a2:77:5d:32:73:17:6a:84:
                    31:00:da:bb:b1:4c:40:9f:56:ce:9c:fe:21:e1:69:
                    d6:ed:5f:cd:93:44:35:58:d2:40:22:44:0e:9b:b4:
                    f4:3e:fd:38:2c:84:db:24:90:df:1d:3c:1a:21:e7:
                    6a:a3:b3:f4:ca:02:32:e4:ef:d2:88:bb:fd:08:e1:
                    80:e8:5c:0d:5b:60:6a:73:fd:58:ea:30:09:8e:41:
                    71:c3:81:c9:0d:d0:41:02:6b:f4:c5:66:a5:26:83:
                    75:94:2f:ed:d7:53:df:ec:9f:13:bf:93:b5:01:0f:
                    10:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D1:B2:19:D2:FC:ED:5E:9D:6C:99:F9:05:DF:01:4C:A9:94:52:88
            X509v3 Authority Key Identifier:
                keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:0d:f0:63:6f:d5:3a:ed:40:e5:38:06:5d:6d:7a:cc:59:
         0e:1e:64:4d:69:f8:91:17:01:56:5b:ce:01:f5:fe:ab:cb:bc:
         be:0f:0e:33:d5:71:e5:9c:c2:bb:e5:13:aa:68:4a:3d:73:29:
         8c:a7:2f:20:ed:5c:41:87:cf:9f:52:19:14:59:87:d0:f8:f9:
         59:71:4d:74:ac:3b:5e:a0:67:c4:a5:12:11:05:b3:e2:bf:f3:
         55:dd:23:8a:d4:4a:5d:6f:a8:e7:ac:c6:27:3f:8d:f6:24:ed:
         00:af:78:68:71:47:23:cc:f6:c5:df:e9:4f:75:e5:2c:c2:96:
         d5:be:2f:20:20:31:b6:6e:00:08:27:8d:95:76:0a:e8:2b:c0:
         09:a7:36:26:fe:53:d7:e3:7c:43:c0:50:c8:83:ea:6e:2f:30:
         77:b2:89:2b:fc:9f:f3:43:b2:9b:26:bf:c1:61:f4:05:d6:e9:
         a1:16:cb:43:1d:6c:88:87:f1:ab:c7:4b:da:d0:7d:e7:ed:25:
         4e:cd:fc:57:cd:a6:76:48:8f:1c:d8:4e:ef:26:35:8b:ab:e1:
         b4:05:8d:1e:dd:aa:6f:5a:24:cf:38:a2:af:e0:e5:4c:b4:90:
         ae:e1:68:43:17:b7:2b:90:db:d4:26:dc:29:7e:be:52:80:f2:
         b8:0b:21:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:23 2025 by rpki-client