Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File:                     k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier:          YoLrfKyjo5meB9Go86Zx0InQ8m8u0ppzXjQWX/2OeuM=
Subject key identifier:   F3:4C:4A:6D:38:F4:27:07:F0:1B:66:D6:06:A0:41:A8:AB:44:94:57
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer:       /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial:       01976EF4CBC4EEA6659CB4078F964ECF2B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 15:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:25 +0000
Files and hashes:         1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: ugWmUZQDdasvjVDRrvWmPvwonVxufFd70Odh5SW0oBg=)
                          2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:cb:c4:ee:a6:65:9c:b4:07:8f:96:4e:cf:2b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
        Validity
            Not Before: Jun 14 15:00:25 2025 GMT
            Not After : Jun 15 15:00:25 2025 GMT
        Subject: CN=f34c4a6d38f42707f01b66d606a041a8ab449457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:e4:75:5f:f7:2f:c4:04:96:3c:f1:81:ec:
                    b6:19:9e:51:c2:2c:2a:ee:ca:e0:cb:10:5d:ea:95:
                    7a:d1:b8:bd:6c:66:72:c8:d2:ca:d6:8d:c4:2c:8b:
                    4c:80:d4:22:cd:b9:62:ef:b6:19:02:b3:04:af:37:
                    d6:da:ae:8f:aa:33:a6:bc:e1:bc:4e:2c:06:c5:bc:
                    58:41:84:3c:bb:6e:53:59:bb:90:2f:fb:1c:a3:8b:
                    44:ad:5e:fb:0d:4b:b2:3c:e8:cc:18:62:6a:f2:02:
                    d9:1c:34:1a:06:5f:62:7a:28:5a:67:e3:5b:41:9b:
                    39:bf:fc:f3:c8:2e:af:e6:f8:f4:88:66:08:59:1e:
                    53:3c:24:67:d3:56:15:a1:c3:3b:99:53:de:73:ad:
                    75:7f:25:c4:50:81:ed:c7:fb:31:9d:6c:93:3e:fc:
                    c1:c4:1d:c3:27:dd:ae:76:ac:53:ae:63:3c:d0:5a:
                    56:d5:d7:8b:95:55:31:6c:ef:8a:8b:28:fc:a7:5d:
                    9a:26:2f:81:3f:12:38:d4:1a:eb:80:17:77:b1:d3:
                    07:3d:ea:eb:98:be:d0:de:1e:f1:50:b6:b6:00:ca:
                    c4:c0:2e:b6:bc:3d:5e:9f:12:a9:e6:10:bd:35:0e:
                    6c:2a:70:c2:07:a5:65:25:04:b7:1d:1c:c1:2f:29:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4C:4A:6D:38:F4:27:07:F0:1B:66:D6:06:A0:41:A8:AB:44:94:57
            X509v3 Authority Key Identifier:
                keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:50:18:2c:25:e6:91:57:0c:15:dc:df:0e:d2:8e:04:a7:
         e7:a9:2e:c1:f3:55:55:cd:b3:7a:f3:30:47:33:ae:aa:07:39:
         7f:f9:72:4b:14:3d:7b:ca:27:99:a6:b3:45:5c:1b:51:da:bf:
         7e:2f:30:ab:81:c3:2f:ba:ab:77:cb:b7:72:a4:b4:f5:54:35:
         86:da:8f:4c:d7:3d:4d:cf:35:46:38:25:b5:19:0a:99:bc:b1:
         d6:34:8d:fd:4e:37:0b:d7:bf:6a:14:bd:b8:57:6c:ec:d3:6f:
         70:6e:92:f2:4d:0f:65:d2:06:78:85:96:da:ac:10:70:86:c8:
         25:6b:25:d0:26:a5:c4:be:66:44:02:e6:a2:bb:cc:a3:85:b8:
         63:a0:40:d8:02:bc:4f:9a:8a:6a:b9:6d:b5:c7:93:25:6f:74:
         e4:51:8a:39:cd:41:44:5a:ef:c4:1b:a9:34:1b:f2:92:7c:8e:
         98:61:77:43:43:1f:6a:6f:01:f5:ec:9d:e4:03:fe:77:7f:a8:
         79:42:22:27:40:47:87:d3:fe:19:ab:4e:18:7e:18:5b:c6:13:
         17:03:d9:6f:08:ac:9d:84:c1:1a:b1:8e:23:32:06:19:ca:8c:
         17:cc:15:91:f7:24:aa:39:ea:aa:0e:7b:02:b5:91:b8:88:ea:
         e4:c4:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:28:05 2025 by rpki-client