Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          BMFwQ2KmEouZf6AajLJVDTIA51iywOL8dnuTCEGGyR8=
Subject key identifier:   FA:B3:BB:27:65:B8:32:0A:E3:21:C9:D1:C9:C5:67:62:F7:A2:A7:80
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       01976BBCECF8BD1DDDC0EC25528AFE7B9FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 00:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:32 +0000
Files and hashes:         1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: VeSuQ84rzrUyzT3wVQc+WphipISe5qtuIrNaUF/pTtU=)
                          2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
                          3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
                          4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
                          5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:ec:f8:bd:1d:dd:c0:ec:25:52:8a:fe:7b:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: Jun 14 00:00:32 2025 GMT
            Not After : Jun 15 00:00:32 2025 GMT
        Subject: CN=fab3bb2765b8320ae321c9d1c9c56762f7a2a780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:4c:71:c5:ae:b6:6f:59:7a:4b:ac:b6:2e:
                    88:8e:03:cb:73:f6:07:46:0f:82:cc:5e:81:66:1a:
                    d6:a3:99:af:45:be:e1:43:df:4c:23:dc:d7:f3:15:
                    6d:8e:ea:0e:5f:96:7d:9c:00:37:15:b0:06:91:8d:
                    82:a4:8e:95:1b:95:5b:35:7f:52:c1:82:92:fa:2e:
                    d1:d0:9a:12:32:8f:76:1a:be:ca:40:a4:2c:66:37:
                    58:ce:24:71:d7:71:5f:c5:4d:5b:67:6d:51:07:2e:
                    d3:d8:f3:57:91:f1:49:18:03:58:df:47:8e:83:e7:
                    29:62:ba:ea:84:f7:3c:d1:36:e6:61:2f:be:d7:50:
                    fd:8e:52:92:c9:9a:9a:d2:f2:ce:46:4f:e6:96:2b:
                    de:85:78:16:20:de:a0:bb:7e:8b:29:40:7b:1c:09:
                    46:0d:4f:e4:14:03:16:0f:cd:dc:0b:17:00:f0:3d:
                    dc:53:c0:fc:49:27:b0:72:85:37:68:12:19:00:7d:
                    b8:15:9c:bb:c6:6d:b9:cf:77:7c:85:9c:a0:87:d6:
                    02:8d:60:84:72:44:63:fd:9b:7a:89:b0:42:54:64:
                    2b:76:97:39:b0:f9:73:56:5c:30:e9:cd:94:c2:1b:
                    41:49:d9:d1:80:77:55:4f:a4:97:4e:d4:22:2f:19:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:BB:27:65:B8:32:0A:E3:21:C9:D1:C9:C5:67:62:F7:A2:A7:80
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:79:12:00:c7:e5:aa:1a:c7:93:64:16:b6:7a:ac:79:fa:
         ee:70:49:f6:c7:fb:67:02:e1:b0:49:76:8b:59:89:01:56:c1:
         c0:6d:d0:3a:58:eb:bf:b0:04:c2:cf:53:e4:e8:c4:cb:25:39:
         75:db:6f:e3:d0:c1:9f:b7:e7:e8:6e:59:52:47:ed:c4:0f:ed:
         a0:b3:3f:63:a6:f8:ee:13:fd:c8:d4:ef:fc:e4:61:74:41:9c:
         75:66:e9:5e:d6:49:3e:bd:61:a3:ae:09:48:20:ef:a7:5a:73:
         b9:20:cb:42:44:95:48:f1:4c:13:3c:a5:66:91:2e:22:bd:59:
         4b:27:d2:a8:7b:eb:0e:06:f0:c1:1a:2a:61:d1:d6:69:aa:11:
         1e:bc:31:27:96:b4:1f:c1:38:2b:3d:42:a3:62:e9:f3:cf:ec:
         12:df:eb:9b:e8:98:e1:e7:4d:c2:34:6c:18:aa:16:9e:ef:10:
         da:7f:95:ca:31:41:21:b4:00:89:c5:d1:ba:b8:a4:cf:e9:5e:
         fe:f6:3e:d9:f4:2b:73:5d:15:8a:20:b2:4b:46:0a:1e:fa:be:
         c3:c4:c2:97:8a:c8:1e:dc:79:3b:d3:04:b7:4a:bc:a0:2b:32:
         88:50:71:9e:3b:71:5d:05:79:43:ed:4c:21:20:67:e3:c2:78:
         2f:0d:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:31 2025 by rpki-client