Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File:                     O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier:          vkd/5nWu7fSNlnhj7VwxnrgnQqJQlwk/HbdzgxsSMrg=
Subject key identifier:   41:C8:8B:CD:F6:67:6C:7B:CD:CE:3C:E9:3E:25:32:79:A6:6D:4C:D6
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer:       /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial:       01976A73B66A52943B6B0F963BF964557608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 18:00:57 +0000
Manifest this update:     Fri 13 Jun 2025 18:00:57 +0000
Manifest next update:     Sat 14 Jun 2025 18:00:57 +0000
Files and hashes:         1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: Hv2ZdxhfHCJZK8CSSEh0XPvxBP1vTOUO4Yfsl9krsoA=)
                          2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:73:b6:6a:52:94:3b:6b:0f:96:3b:f9:64:55:76:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
        Validity
            Not Before: Jun 13 18:00:57 2025 GMT
            Not After : Jun 14 18:00:57 2025 GMT
        Subject: CN=41c88bcdf6676c7bcdce3ce93e253279a66d4cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:04:15:be:14:53:48:4c:21:bd:0f:da:ab:
                    8c:93:e2:2d:9e:ae:6f:22:3b:b7:53:e0:8a:5e:8f:
                    01:d6:a8:e9:88:71:a1:9a:aa:fc:2f:95:c7:08:3b:
                    fb:e4:ba:1d:a0:37:19:34:3b:90:18:4c:4f:9d:b6:
                    1f:f3:2f:fb:5c:5f:dc:28:fe:a9:fa:e7:a2:d2:43:
                    d8:73:ee:22:3f:dc:c5:82:5c:3f:dd:c4:33:af:f0:
                    ad:61:e7:2e:96:e2:e4:92:e2:1f:8c:24:50:67:c2:
                    38:44:96:05:e9:e7:10:e6:8f:7b:da:fd:e1:44:cc:
                    8d:3e:ca:8c:bb:c0:88:bb:83:1a:37:76:68:58:6e:
                    ac:27:5b:12:d9:fe:eb:78:9c:a8:b3:28:ab:ae:49:
                    c7:b8:16:93:ea:4e:29:aa:86:31:8b:77:02:1b:27:
                    53:73:05:d5:03:7f:bc:3c:45:a4:f6:13:4f:6d:5f:
                    7a:8c:1c:c7:27:25:23:66:08:75:43:cb:e5:0a:4d:
                    81:48:ee:15:7a:69:4d:1d:4c:ec:1f:3b:f7:8d:fc:
                    93:b4:b1:21:d2:ac:1a:90:78:ce:de:65:fd:f6:7b:
                    6a:55:8a:5f:97:8c:3f:0d:5c:92:33:f2:a5:a8:66:
                    4e:fa:b8:9f:d4:5b:87:42:19:09:d3:a9:9f:b8:c5:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C8:8B:CD:F6:67:6C:7B:CD:CE:3C:E9:3E:25:32:79:A6:6D:4C:D6
            X509v3 Authority Key Identifier:
                keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:12:5c:02:4d:3a:8c:68:7f:2e:4a:57:73:9c:0b:f0:0a:
         4f:8d:4c:14:d3:1d:60:89:0f:b9:c2:0f:a4:5f:c1:90:1e:f2:
         a3:c0:a6:5d:71:a5:a3:f9:54:85:bd:27:04:85:2b:0b:1c:45:
         8a:78:f4:57:71:20:89:19:a1:18:3f:b2:69:0a:7a:1c:28:a6:
         0e:57:63:e3:fb:ee:aa:58:92:c1:78:59:bd:c0:30:ee:3d:4b:
         8d:79:8e:0a:de:11:16:ea:c2:9b:46:c2:be:1a:44:8a:9d:6d:
         0d:1f:1d:f2:15:7c:b8:95:3b:bd:e5:3c:eb:e8:c5:94:ef:15:
         b8:2c:2e:4a:b4:75:1b:72:b3:07:80:c0:d5:4d:ad:93:62:66:
         41:31:ce:d8:3d:e4:03:6f:48:b0:6f:ba:f5:20:da:a6:57:d7:
         da:6b:1b:16:8c:c3:85:41:7a:26:e8:56:05:76:eb:24:62:3e:
         db:2b:6e:3b:6e:6f:d8:9a:84:8f:5d:7c:a2:25:07:1d:9d:35:
         56:4d:ce:4c:8a:3a:6c:5b:ff:ca:ac:40:0b:a2:a4:41:67:61:
         fe:8c:10:c1:11:1f:70:49:8f:95:80:5a:56:0e:2c:12:0d:fb:
         b8:b2:0e:df:17:87:07:42:f4:7e:9f:2c:5c:b1:d8:ce:0a:43:
         d9:3d:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:19 2025 by rpki-client