Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File:                     2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier:          Jov/T/lRaO/iWvACqnxR8dxHatwS730HqsUDZsZXGXg=
Subject key identifier:   6A:B7:D4:9C:C8:31:79:92:1F:38:7B:6E:BC:F3:02:D0:68:23:62:90
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer:       /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial:       019770ACB143B7E4CD40CDBDA9A6A758B4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 23:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:55 +0000
Files and hashes:         1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: 8Pv9csBJCgJh3TAIIIqxFRuDrrXU0knsQFTZYH03E+8=)
                          2: aVrm11uPiyldKPviAWZVNw7mX_s.roa (hash: +aUpO78+V+9JLiQkkmCO8C80eoccRFxUM2jJ9r7mFkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:b1:43:b7:e4:cd:40:cd:bd:a9:a6:a7:58:b4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
        Validity
            Not Before: Jun 14 23:00:55 2025 GMT
            Not After : Jun 15 23:00:55 2025 GMT
        Subject: CN=6ab7d49cc83179921f387b6ebcf302d068236290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:fa:8d:d9:d5:79:2a:05:af:a7:64:9d:c0:a5:
                    77:0c:52:70:e5:ef:d2:b3:08:45:21:2c:ee:25:e9:
                    fd:e0:6d:96:d7:4d:d5:91:ee:1f:a8:ae:71:69:cc:
                    19:9b:ee:8a:11:d9:d3:00:c7:43:e0:f1:02:9a:bf:
                    3d:56:2e:ff:4b:71:88:7c:44:49:1d:c4:ac:2c:f1:
                    17:ba:7d:ee:b9:a4:65:14:67:82:9e:37:ef:c5:36:
                    69:76:13:0f:cd:9e:75:60:5e:9f:12:b7:af:f0:30:
                    86:ad:8b:f5:0c:26:84:98:f5:89:56:64:f3:70:b6:
                    02:af:53:a9:13:bd:9f:ee:ee:44:c1:31:3c:05:c8:
                    99:fb:a1:30:3b:c3:33:3a:7d:76:9f:db:65:d5:2e:
                    93:8d:dc:ed:1d:38:c1:92:5f:5e:d4:19:e6:22:40:
                    30:6d:e8:9e:a5:14:06:0d:f2:0a:e0:6f:86:eb:a3:
                    95:ef:24:1c:74:cb:ff:67:37:0a:07:2e:85:ce:3d:
                    8b:ce:f7:5d:68:9c:3f:92:a0:f4:61:c8:1c:3c:5c:
                    be:c4:1d:be:dd:95:09:1c:b3:76:ee:71:d5:8e:9c:
                    77:bc:c1:15:d9:33:75:3f:16:62:7d:4d:d5:e1:8b:
                    56:16:38:cc:9d:4b:af:28:68:99:55:27:b0:93:73:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B7:D4:9C:C8:31:79:92:1F:38:7B:6E:BC:F3:02:D0:68:23:62:90
            X509v3 Authority Key Identifier:
                keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:52:8f:f9:c5:b8:67:fe:24:33:c7:e8:2a:53:65:56:a4:66:
         3d:dd:7c:78:c9:c5:15:de:d6:b1:be:c4:a3:76:b9:da:70:5b:
         93:63:b9:45:19:c0:a8:53:1c:1d:15:b2:7a:a5:9f:c5:dc:9b:
         b0:ea:e3:d7:45:8a:2e:0a:5b:e6:86:55:f2:fe:cf:ae:a2:5f:
         68:3d:03:a5:8f:4c:16:9c:b0:9f:3f:4c:14:7b:22:5e:ce:9b:
         31:b2:10:ce:64:0f:67:eb:1a:ce:d9:e2:a1:db:9b:97:e7:a9:
         03:8f:35:fa:95:59:ae:81:d9:50:c3:51:d0:19:83:0f:37:7d:
         18:ba:ba:49:d2:20:ae:f6:69:37:72:41:37:58:e4:0c:f4:5e:
         e8:11:b8:b0:b7:b5:73:34:7c:f4:2a:b7:a1:10:18:51:df:76:
         d2:31:5b:a4:36:1f:86:3b:75:19:8e:87:8a:3c:81:61:90:7a:
         70:21:d5:28:06:ad:a4:93:89:7c:9f:ee:5e:c9:49:53:a5:bd:
         d5:96:00:58:52:26:59:02:97:63:da:f5:ea:c9:e9:4f:cb:97:
         13:50:50:0b:0a:5f:bf:63:57:09:d3:cc:16:c2:4f:18:d1:f2:
         10:66:1f:ad:90:c0:52:c2:69:c4:12:11:47:c9:3f:73:84:85:
         29:24:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:04:56 2025 by rpki-client