Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          EPVs+9Vs0p64Vykli+okyF+A1sAR6HFPAogg2entuPo=
Subject key identifier:   03:E0:A2:80:75:E1:93:03:11:2F:BD:B9:46:BA:8F:6F:92:FC:2B:44
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       01976961119398D863D5736B7F9CE9401860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          158A
Signing time:             Fri 13 Jun 2025 13:00:58 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:58 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:58 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: ZME0U68Rh19ZxUKNRhG6WYdSqn78izSNmYuXB3b73ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:11:93:98:d8:63:d5:73:6b:7f:9c:e9:40:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Jun 13 13:00:58 2025 GMT
            Not After : Jun 14 13:00:58 2025 GMT
        Subject: CN=03e0a28075e19303112fbdb946ba8f6f92fc2b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:5a:6d:10:a3:50:b4:9f:4a:a4:fe:c1:94:
                    21:6a:a1:26:e9:1a:ac:76:8d:31:bf:5f:ff:d3:a7:
                    80:50:f3:c5:43:8b:88:d5:42:89:6f:10:f0:a0:e4:
                    57:4b:59:ec:0a:96:b4:f6:02:6e:1d:80:dc:d7:9d:
                    49:7a:f2:6b:a1:93:43:72:48:ec:7d:a5:f3:ce:97:
                    d0:f5:48:80:39:b0:53:8e:9a:53:72:ac:c1:dd:d7:
                    ab:22:25:ee:91:25:3a:e3:d1:c5:50:16:dc:19:4e:
                    55:bf:b5:94:55:13:99:c6:97:31:3a:24:87:a3:4b:
                    50:a5:17:d7:f9:54:0d:b2:01:f7:e2:cd:ac:db:ab:
                    29:52:29:43:fc:81:86:7f:41:72:5f:49:4e:41:6d:
                    c4:a2:2a:99:42:33:69:0a:69:40:0c:45:67:b3:2f:
                    4e:53:6c:e5:03:3b:38:f2:06:2e:81:3d:a9:7e:b5:
                    ed:c9:af:94:64:3c:17:32:5f:c9:32:4e:e5:cb:72:
                    0f:c9:1c:c9:f2:51:61:08:22:26:71:f7:cc:cb:5e:
                    46:0a:12:1c:43:97:5f:47:a9:ba:8d:fd:42:fc:e3:
                    26:80:fe:4c:7a:79:ab:c0:41:ed:ba:f7:a8:86:b6:
                    c0:98:17:4d:95:b7:cd:29:03:cd:35:69:db:b2:1a:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:A2:80:75:E1:93:03:11:2F:BD:B9:46:BA:8F:6F:92:FC:2B:44
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:48:50:b0:55:3e:2d:2e:40:0e:ae:cf:ad:ff:67:2b:56:fa:
         c8:fc:3c:03:8d:24:10:c6:ca:c5:fe:11:fa:a1:ab:69:d0:26:
         d1:37:1d:aa:dd:f1:83:a8:2f:d8:e3:ed:13:11:45:61:57:0c:
         f9:c9:a8:34:7f:be:38:82:c4:69:80:00:a7:af:88:0d:f6:31:
         11:c3:66:37:78:9b:81:ae:73:82:1d:df:60:c3:c3:26:4f:83:
         7d:0f:d8:11:12:1b:16:2d:34:d2:9a:ef:3c:76:50:5e:53:f4:
         85:4d:1e:51:c1:df:ba:1a:79:5c:ca:ad:fc:92:0d:00:bd:98:
         af:9c:39:dd:ef:fc:49:35:f8:de:67:57:a4:98:81:bb:ab:d2:
         c2:4c:27:f9:99:ab:84:5a:17:04:6a:3f:c4:dd:72:f2:f5:af:
         4f:94:53:43:0c:fe:4f:0d:70:4c:1a:19:d7:66:76:db:1c:6e:
         ca:79:35:d0:31:9e:bf:7e:df:5a:84:39:4e:38:0f:bc:29:52:
         33:d7:eb:99:b5:68:1a:4d:57:98:0e:59:e2:63:0a:0e:f9:23:
         15:e8:df:59:70:9f:2e:79:30:f7:f3:1b:e8:87:84:dd:48:05:
         41:02:45:d5:26:45:e3:2f:cf:96:bc:1b:88:26:24:2e:4c:6e:
         80:c5:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:24 2025 by rpki-client