Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File:                     KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier:          7ylUt5JhzbNhD7HUFqkUUr90nSZaAje7nfgOdiAcTxM=
Subject key identifier:   12:29:4D:A5:21:13:95:E9:78:56:56:C6:68:3B:DA:66:F0:C2:EC:57
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer:       /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial:       01976CCFBCB650E89249DECFDA104EFAD7F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 05:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:42 +0000
Files and hashes:         1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=)
                          2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=)
                          3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: ouf1Q9YZtw7Kd5GEzhNlvAd2DoS91UqY0/go5BK/8ko=)
                          4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=)
                          5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:bc:b6:50:e8:92:49:de:cf:da:10:4e:fa:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
        Validity
            Not Before: Jun 14 05:00:42 2025 GMT
            Not After : Jun 15 05:00:42 2025 GMT
        Subject: CN=12294da5211395e9785656c6683bda66f0c2ec57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:30:5f:2b:a2:6f:e3:49:e6:be:bc:46:87:
                    fa:bd:7c:48:5f:a8:ce:97:eb:33:e2:3a:dc:6b:bb:
                    c0:a4:52:ae:51:ba:af:3a:04:15:f6:08:48:d1:07:
                    91:9d:b8:0a:b0:fa:c3:19:43:9f:88:6e:6a:87:6e:
                    cc:e6:cc:3f:68:72:cd:a5:5b:ed:ea:3b:e6:57:74:
                    a8:3e:08:d1:ca:bc:70:a3:1a:f6:15:da:e3:9b:01:
                    07:b1:78:97:d1:9e:9f:63:34:4c:92:49:fd:83:41:
                    b0:91:29:09:60:72:48:7d:84:c8:41:2e:84:ab:44:
                    ba:22:8e:6b:af:44:1a:2d:88:e6:5c:b2:9a:6a:4e:
                    6c:77:6c:f6:05:39:27:73:7c:fc:aa:7d:68:95:71:
                    dd:a7:c6:74:d1:7b:42:68:f1:3e:40:db:54:a5:c6:
                    df:77:95:d8:c8:9a:7c:29:47:32:57:8e:41:ab:ad:
                    7d:1c:09:93:59:68:df:8c:b5:d7:06:9f:18:1e:e0:
                    88:b3:26:b1:29:93:1b:0b:bd:dd:b5:19:9d:fb:f0:
                    79:1d:36:17:9c:e2:57:7e:c3:15:b1:c6:1e:a5:70:
                    2e:16:fe:07:db:a7:ee:7d:87:7f:4f:3b:25:b0:fc:
                    00:0e:5b:ea:7b:7e:c8:26:3b:6b:9d:70:6d:e5:2c:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:4D:A5:21:13:95:E9:78:56:56:C6:68:3B:DA:66:F0:C2:EC:57
            X509v3 Authority Key Identifier:
                keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:3c:fe:22:bc:09:7a:4f:fa:e3:c0:78:9b:bd:3f:02:8d:
         10:4f:34:de:f0:83:c4:5a:6a:25:d0:0f:0d:17:2c:f9:ff:d7:
         f4:a9:af:1a:4b:0b:44:0b:81:b9:3e:75:1d:3a:67:b1:61:72:
         9b:d9:a4:2c:9b:97:3d:dd:8c:15:97:53:80:80:9e:f1:cc:d9:
         2b:2e:85:73:1c:e4:41:e8:b4:47:09:4a:c1:2f:d4:38:8d:89:
         e5:1c:cd:96:63:86:23:84:5b:1d:73:aa:58:b9:61:0f:bd:9b:
         81:01:7d:a3:2a:a3:45:0e:8a:52:ac:d9:73:3a:4a:a6:4b:83:
         31:99:3b:92:33:86:65:b4:3b:a3:24:18:9c:be:65:07:2b:da:
         6d:fe:0a:e6:ce:10:5d:e4:25:bb:bb:75:1c:f5:3d:79:18:ed:
         99:fc:6e:19:85:11:0b:bb:ed:1e:8b:55:c9:8a:16:a4:4f:12:
         82:5c:15:ef:34:5e:d4:34:85:3b:7f:6c:de:0b:6d:51:28:45:
         c3:80:99:9a:78:2b:8d:9b:da:e6:a9:96:ae:96:94:69:55:80:
         4b:d3:ec:20:51:3a:24:96:36:b5:5f:45:41:e2:80:f5:d9:4e:
         35:8a:db:f9:3a:8e:4a:f4:cf:b2:ad:c5:fa:bb:2d:6a:b8:f7:
         fd:1a:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:50 2025 by rpki-client