Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File:                     RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier:          6FzJpdGysECFMra67rVL++BsN5xcumSjH7EJXFKBl+o=
Subject key identifier:   AE:9A:3B:AB:2F:90:20:DF:31:40:F9:08:E3:43:CE:29:DB:64:8E:4D
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer:       /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial:       01976DABA12CF1B8C5BF4263AF81E48EEBC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 09:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:53 +0000
Files and hashes:         1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: edHec8NCn7uDPx6IuQsljakH7DmN4f4dC+fRGTOp8z0=)
                          2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:a1:2c:f1:b8:c5:bf:42:63:af:81:e4:8e:eb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
        Validity
            Not Before: Jun 14 09:00:53 2025 GMT
            Not After : Jun 15 09:00:53 2025 GMT
        Subject: CN=ae9a3bab2f9020df3140f908e343ce29db648e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:df:e4:ec:8e:26:7b:74:5a:ba:f4:fd:d0:
                    a0:7c:11:ba:3d:0a:72:7d:fb:24:60:1e:3e:60:3d:
                    85:b9:88:50:5b:ab:a4:4a:e7:8f:20:96:27:93:09:
                    b2:45:9b:0b:10:a7:ef:f6:bf:c0:03:5f:09:90:46:
                    d5:ae:08:04:5d:91:a9:37:d0:dc:3a:d2:58:88:96:
                    a4:8e:6c:cb:e7:e1:5f:1b:77:86:ad:5f:50:d4:7c:
                    d2:f6:8c:a3:b0:fc:64:d2:f5:55:d7:64:e5:0e:d7:
                    cd:9a:4e:0f:7e:72:c1:98:e7:8e:51:21:79:5c:39:
                    66:99:82:33:99:6f:e8:94:3c:74:ee:5c:2c:41:79:
                    0a:51:73:27:a5:e8:9d:55:c7:bb:fa:be:25:51:34:
                    59:09:22:9b:03:65:57:ae:00:ff:09:dd:c0:eb:04:
                    d5:1f:65:4f:78:ea:68:41:15:51:c0:bf:c0:12:ae:
                    5e:85:aa:51:38:79:00:55:8e:45:53:d6:27:1a:27:
                    49:c4:f4:07:1a:18:c8:8a:32:0f:61:da:a0:69:8b:
                    77:dd:e3:f4:bc:22:23:15:a9:02:84:d7:e8:3c:05:
                    d9:40:c9:63:a5:ea:0c:9f:13:84:6f:43:1b:23:58:
                    d5:cf:40:2f:79:6c:f9:a5:9e:17:8d:96:c5:d5:b0:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:3B:AB:2F:90:20:DF:31:40:F9:08:E3:43:CE:29:DB:64:8E:4D
            X509v3 Authority Key Identifier:
                keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:60:f9:3e:f5:9d:2b:82:96:b6:b5:91:83:94:38:c3:b8:73:
         a6:ab:b9:ff:91:da:22:a2:ae:47:82:3f:ae:12:12:37:3d:d7:
         ee:03:b9:c0:92:1f:1e:33:a1:0f:3f:37:04:8f:9d:b1:64:7e:
         1d:0a:ab:2a:e0:f7:74:b4:56:49:8a:42:b5:26:82:13:e0:01:
         69:b3:66:0c:67:81:fb:68:d2:9c:bc:39:d7:1a:27:3e:e9:89:
         5a:82:52:8f:bb:11:cb:02:c7:79:7c:96:3c:1c:f1:5f:da:11:
         6e:f0:66:83:76:ad:94:7f:3d:1a:f6:70:12:04:f7:49:9c:86:
         86:17:dd:34:6d:04:83:58:2f:00:75:20:ba:1a:16:4e:2b:4b:
         9a:15:5f:c2:28:ae:98:5c:31:62:35:aa:26:50:62:eb:5b:46:
         25:8c:0f:a5:77:6e:a4:6a:98:b4:ad:18:57:9f:ea:bb:77:81:
         7a:ab:bd:4c:b5:43:d2:cc:1e:f3:c5:e0:00:7c:93:3b:bd:07:
         d0:3c:c2:c0:99:1d:ec:90:6d:df:f1:ed:bf:fe:bd:23:83:a9:
         db:3c:b4:28:0f:28:99:f4:f7:7e:75:40:80:cf:53:fa:15:8f:
         4e:17:d7:6d:cd:0f:9e:16:5e:ba:1d:4b:5d:39:7c:11:ea:22:
         6e:41:53:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:38 2025 by rpki-client