Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File:                     1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier:          YvZe4EKxOGpZyx5FHqTxElMioyuXhiHgK1vE5DvKpmk=
Subject key identifier:   68:FD:12:41:74:6D:C4:9B:BF:A0:C1:72:93:35:80:F3:AA:43:91:41
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer:       /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial:       01976CCF803F96EF81DBE52AB980585EF524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 05:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:27 +0000
Files and hashes:         1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: gHAbVTtKwdusyf4XcPtdVP2/DrZUATLr1H4LNlajvug=)
                          2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:80:3f:96:ef:81:db:e5:2a:b9:80:58:5e:f5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
        Validity
            Not Before: Jun 14 05:00:27 2025 GMT
            Not After : Jun 15 05:00:27 2025 GMT
        Subject: CN=68fd1241746dc49bbfa0c172933580f3aa439141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0b:9c:03:19:07:f7:c7:98:2a:65:57:eb:d0:
                    96:9c:63:aa:32:40:6e:65:f4:80:3a:0d:a6:74:6c:
                    50:8e:3d:7b:f1:b6:ee:e4:4a:3d:44:b5:7b:f4:b6:
                    a3:f1:4a:21:2f:90:c6:3d:f3:be:0c:a3:6c:07:94:
                    d3:34:a9:89:8d:1c:af:8f:7a:27:76:cb:20:03:ea:
                    24:ef:8c:70:ee:1d:56:ee:f2:4e:70:62:b8:13:c0:
                    36:34:16:7d:04:48:fd:a0:d0:d1:26:8c:79:6d:13:
                    d3:46:70:f3:97:63:5a:fc:16:f9:ee:64:62:6e:cf:
                    6b:02:14:0d:57:4a:71:d4:9a:e0:1a:66:61:36:a9:
                    c0:3a:1a:21:21:d2:d8:22:61:cf:20:fe:2e:26:aa:
                    3c:15:6b:93:52:91:39:61:30:93:08:02:95:e8:76:
                    d8:8e:9b:81:70:68:62:6e:fb:18:c2:54:a1:23:71:
                    14:21:00:99:fc:04:35:2c:91:26:61:53:b2:aa:b3:
                    84:eb:cf:b1:96:d0:3d:48:ee:9d:62:df:b2:44:81:
                    c7:73:92:e8:58:e3:fc:02:c7:2f:d3:1b:cb:75:bc:
                    97:c6:2e:09:3e:c2:6e:e8:8f:a1:77:6b:80:57:0d:
                    d8:d4:9a:e6:44:f8:1b:56:bf:83:91:6a:6e:d8:7b:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FD:12:41:74:6D:C4:9B:BF:A0:C1:72:93:35:80:F3:AA:43:91:41
            X509v3 Authority Key Identifier:
                keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d8:5e:82:57:57:08:c1:53:e5:07:cb:e0:fa:b4:18:b5:68:
         aa:f9:59:86:fe:83:01:8e:cb:a9:1b:a2:6d:0b:82:df:75:b5:
         22:3e:fe:c3:c8:a4:37:ed:7e:f9:1f:2d:63:e5:52:9a:7b:48:
         2a:6f:98:34:20:39:e0:a3:03:a8:76:ff:c9:94:a1:8a:36:05:
         fa:3b:f7:83:e7:35:75:60:d9:bd:e9:49:e3:df:7f:c7:a2:f9:
         05:73:fb:6b:4d:31:95:9b:60:01:18:98:a0:89:d4:df:83:d9:
         9e:0b:d3:31:a5:04:a1:6a:3a:d7:0e:68:ad:dd:39:cd:96:42:
         3c:dd:4b:aa:84:b2:f2:c2:6e:49:2a:61:ea:a3:7c:e2:9a:2a:
         8f:b7:1f:74:2f:c8:cf:fe:53:12:68:57:47:7d:e4:34:a0:63:
         34:71:1e:a5:80:d5:88:df:08:cb:58:91:35:c1:c4:d9:45:60:
         1c:f9:19:ee:43:58:50:c2:9f:37:0f:f5:db:de:fc:f0:33:a9:
         dd:34:1f:b5:e6:25:2f:22:67:a2:0d:85:3d:68:8f:27:a9:ce:
         e6:52:c2:77:38:ae:1d:88:e7:d8:6f:50:80:ba:40:ac:2d:04:
         1d:80:23:ed:e3:c1:c9:46:98:81:af:0d:ef:e0:27:72:b5:6f:
         1e:50:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:22 2025 by rpki-client