Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          trshu1bxx/WCjqxqcWgETK362NTFaIha7nnOijxqD+g=
Subject key identifier:   E1:F9:18:A5:B3:CF:1C:49:59:9C:1A:FC:76:CA:73:2E:11:FE:6C:61
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       01977A1D3D72989450ECCA529F72C2677C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          159A
Signing time:             Mon 16 Jun 2025 19:00:25 +0000
Manifest this update:     Mon 16 Jun 2025 19:00:25 +0000
Manifest next update:     Tue 17 Jun 2025 19:00:25 +0000
Files and hashes:         1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=)
                          2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=)
                          3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=)
                          4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: Zpc4IVVudsMqAgUyz4pZqHyEnYiSeXAzExjcGQOsykQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 19:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:1d:3d:72:98:94:50:ec:ca:52:9f:72:c2:67:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Jun 16 19:00:25 2025 GMT
            Not After : Jun 17 19:00:25 2025 GMT
        Subject: CN=e1f918a5b3cf1c49599c1afc76ca732e11fe6c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:e3:aa:4a:b1:d1:3b:8f:7c:ad:ba:c1:db:
                    22:1e:42:ab:ec:20:b5:40:98:3b:3a:42:db:b6:b4:
                    8b:5e:9a:77:26:5f:a2:0f:83:0d:58:09:31:22:26:
                    35:f4:51:f9:ba:6d:2d:d2:95:71:d7:38:84:55:7f:
                    20:77:96:2c:0e:c4:b8:0e:87:09:71:c7:af:ab:98:
                    8b:10:0d:0e:1f:ba:20:00:cb:e7:cc:73:25:e5:72:
                    40:d0:b3:16:1f:1c:98:16:5f:dc:a0:e8:8d:4b:55:
                    fe:22:ce:cc:df:e9:b0:78:b7:c4:6b:a8:b2:bf:54:
                    fd:d9:00:de:cb:d5:87:bd:c0:e8:b5:03:6d:f9:ad:
                    13:9f:99:c7:c1:43:68:da:91:81:7d:ff:60:3d:08:
                    98:6c:27:4e:5c:e9:43:3b:52:15:fd:25:64:6c:53:
                    6a:60:f7:1e:e3:16:57:ad:84:c2:56:b9:33:cd:ab:
                    b6:86:9f:22:04:20:ee:3c:d7:5a:ef:69:73:f7:95:
                    8d:5d:3c:8f:cf:9b:78:30:08:45:9f:83:bc:7b:78:
                    88:10:5e:04:39:a2:00:5c:ff:c4:a5:be:fa:fd:ca:
                    5b:ab:61:97:fc:6b:9f:7d:c0:f6:e4:8e:49:e4:d7:
                    46:f1:15:31:64:a4:cd:a9:35:2f:ed:1b:5e:85:86:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F9:18:A5:B3:CF:1C:49:59:9C:1A:FC:76:CA:73:2E:11:FE:6C:61
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:51:60:c3:e3:30:52:72:c7:87:84:6b:78:95:83:3f:04:
         8d:67:89:4d:c4:54:1c:81:21:9e:01:9c:1a:5e:6f:bf:6f:d2:
         3b:b1:44:00:29:2f:c4:0c:95:db:d4:a7:ec:38:bc:e1:41:4c:
         c7:e0:55:9a:20:e4:67:61:7e:23:2a:af:f7:b0:e0:3c:e3:6b:
         5d:89:9d:30:24:a2:c7:21:47:8b:c7:7b:7e:42:9c:82:cf:36:
         77:17:e5:55:bf:3c:46:ba:53:75:9f:4c:68:30:49:f1:67:d0:
         fd:e8:39:98:d2:95:a5:e2:d9:31:11:58:38:17:4b:f3:4d:c8:
         8d:fe:b6:2c:05:86:20:12:ac:96:d5:86:b7:aa:56:dc:0e:4a:
         91:19:fb:b0:3c:7e:cf:ed:2f:f0:c9:c7:c1:f5:c0:03:83:ed:
         bb:3e:6d:6c:1f:5c:9b:f7:68:3c:b2:b3:66:8e:4f:1f:f0:e2:
         9f:01:a3:8b:15:5b:93:88:7e:a3:3f:a5:de:60:4b:2a:d3:f4:
         56:23:fe:c8:29:08:a4:67:62:9d:6d:22:eb:21:39:4c:c7:0a:
         9a:3d:b3:bb:a1:40:84:a0:fc:81:07:08:d9:36:d1:56:c4:3c:
         08:39:c0:40:e8:87:22:cb:0b:1c:59:e6:98:ac:71:da:30:03:
         81:cc:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:35:25 2025 by rpki-client