Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          IQmlvSauBPPWMT0wIxHhQpAvDvVxBJVRn7vT2lxZDV0=
Subject key identifier:   47:BE:06:D5:BB:BB:89:8F:AB:D8:CE:37:14:07:C3:BB:AC:C7:6D:50
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       01976929E2D8D924BF7267C8A1D5C971B19B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          159A
Signing time:             Fri 13 Jun 2025 12:00:42 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:42 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:42 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: BKzk8PEv4C-K-dAjelZ2PQmBLbk.roa (hash: 0eLcFnn58Q6bI77SyMiyrXborE81MoDtpAJ0qlI9pZA=)
                          4: XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa (hash: fWbd0EX3ziv/6uF5wR8i+XeMR7zd9h8m0bOvPg7RJi0=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: +/YA2LgFH8Zw5WyXt4n5w5BHGoUaVS3mN4KjBREh+iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:e2:d8:d9:24:bf:72:67:c8:a1:d5:c9:71:b1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Jun 13 12:00:42 2025 GMT
            Not After : Jun 14 12:00:42 2025 GMT
        Subject: CN=47be06d5bbbb898fabd8ce371407c3bbacc76d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:84:e4:06:31:f4:ff:9d:de:1c:2b:4f:91:
                    1c:18:bb:75:11:32:0d:72:d4:1c:58:7b:7e:ce:9e:
                    5a:97:d3:07:e6:d3:00:04:03:f1:5f:96:c9:01:0a:
                    fa:04:c2:03:30:ff:17:de:30:8d:8c:06:b3:a7:4c:
                    76:d0:4e:cc:6e:7b:cb:34:62:3f:88:47:f2:7d:af:
                    3a:ba:ad:a6:17:13:ba:78:aa:bf:74:d1:c6:50:9a:
                    eb:32:ee:3e:7f:f7:2c:73:f7:a9:8a:09:1a:c2:87:
                    3c:81:a3:22:69:4a:bf:5b:db:21:e1:77:c7:95:f2:
                    55:e8:b4:50:1e:fc:28:68:e9:d1:67:b7:d5:d6:ff:
                    77:99:8a:6d:69:42:7d:78:66:80:08:09:17:65:d1:
                    ae:e1:b7:9c:a2:d7:80:33:1b:e7:a8:aa:e3:fc:01:
                    11:bd:66:5e:59:9a:25:16:f4:4c:ed:50:5c:64:07:
                    f3:98:76:aa:4f:70:f7:71:01:8b:24:f8:10:8d:af:
                    a4:37:d0:da:c8:ef:f6:b9:5b:1c:83:33:4b:5b:75:
                    a4:ea:f8:bb:eb:56:5d:9a:b3:69:dc:aa:5b:7d:8b:
                    df:33:e1:d5:a6:7c:61:41:3d:84:0a:58:56:38:43:
                    0c:f3:aa:a1:a5:3e:60:4a:ba:38:da:3c:6f:fb:58:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BE:06:D5:BB:BB:89:8F:AB:D8:CE:37:14:07:C3:BB:AC:C7:6D:50
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c2:8d:36:18:06:6e:1f:41:e5:f5:c4:44:d2:c2:14:5e:8d:
         29:d7:7d:6a:6f:7c:96:e9:33:2f:3a:1f:e4:6c:f3:ad:9a:a2:
         2a:66:1a:b3:fd:8b:bb:62:38:96:72:d8:01:24:d7:a3:99:35:
         d6:ec:df:0b:ed:ab:6d:9c:de:3f:f4:a6:cd:5a:40:3e:73:57:
         60:38:71:61:23:bb:9f:5a:de:c2:d8:ed:a7:70:72:21:c7:e0:
         b1:f0:93:6a:9f:d5:4e:de:1a:97:68:0f:2d:e7:b7:04:3a:6b:
         38:0a:df:e1:c9:17:94:67:81:93:04:26:03:2e:f0:bf:28:fd:
         2f:ef:8b:25:6f:9e:98:a6:de:59:98:3a:99:63:c1:16:1f:86:
         52:11:2b:3e:d9:e8:b3:0a:0d:17:d6:8d:3d:ef:49:05:ea:78:
         f0:19:cc:7a:67:20:57:13:b3:16:a0:dc:5f:e4:c2:b0:7b:70:
         cb:77:9e:1a:26:61:e8:3f:31:45:ed:2e:f5:05:10:de:dc:db:
         1f:2d:87:8c:a8:51:98:f3:f5:5d:7d:46:ca:ef:33:35:2f:17:
         1c:d2:3c:50:e1:cd:69:fe:2e:eb:50:e7:77:67:bb:52:c7:a4:
         56:2c:b0:2d:ce:4c:35:2d:92:8a:f6:5c:ce:11:bd:55:d7:8f:
         01:8a:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:15 2025 by rpki-client