Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File:                     cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier:          5bHZ7LtyWaBGZzKLSt9BIbwoUoIZ1IPzsnVP1MslavI=
Subject key identifier:   9B:17:12:A1:B4:9C:E6:4A:82:E5:25:C9:67:FF:CB:22:0E:D1:15:16
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer:       /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial:       01976C2AE38D23A4C204CD466C76EA1C0B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 02:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:39 +0000
Files and hashes:         1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
                          2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: gdJU8K20LP/0aDLWgwM86Mrml7qLy847G5VcNvzGgCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:e3:8d:23:a4:c2:04:cd:46:6c:76:ea:1c:0b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
        Validity
            Not Before: Jun 14 02:00:39 2025 GMT
            Not After : Jun 15 02:00:39 2025 GMT
        Subject: CN=9b1712a1b49ce64a82e525c967ffcb220ed11516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:9e:ae:4c:9b:0d:9e:6a:c0:dc:33:a0:4d:
                    e0:dd:fb:c9:8b:43:9a:df:6f:7b:1e:49:fd:da:b3:
                    65:32:9e:cc:87:e1:6f:b6:31:1e:04:55:d7:5b:0b:
                    4c:4f:86:8d:9d:f4:08:17:3f:77:f9:23:af:c0:b1:
                    3c:4d:86:32:51:42:1a:55:b5:46:05:e4:86:e0:c3:
                    14:15:32:c7:05:1a:b7:3c:7a:88:48:6d:42:34:e6:
                    50:46:5a:0d:e7:b3:04:2a:77:a7:71:c3:aa:95:79:
                    96:71:f5:ac:6c:37:8b:b0:12:ea:15:d5:7a:b4:9b:
                    a3:2c:f0:ad:04:8f:03:47:fc:aa:e9:ec:ec:94:29:
                    2b:de:11:21:ba:df:9f:17:39:a0:f8:bf:a7:70:4e:
                    17:db:00:58:67:94:97:18:81:d6:35:25:c8:1a:42:
                    25:f6:71:97:32:a8:0d:83:0d:5f:59:4a:7b:eb:f5:
                    29:2a:1b:e2:67:b2:6c:f0:0b:1a:29:3e:a8:91:ef:
                    fd:5e:05:86:ef:bb:13:ff:80:14:45:29:cf:26:8e:
                    b6:d3:b9:e9:67:99:94:5c:fc:fa:18:db:c0:88:50:
                    84:4d:f1:10:73:eb:5d:f9:0b:5c:78:aa:59:f2:1b:
                    9e:32:dc:e4:b7:95:f9:70:c2:fa:31:63:c6:ad:95:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:17:12:A1:B4:9C:E6:4A:82:E5:25:C9:67:FF:CB:22:0E:D1:15:16
            X509v3 Authority Key Identifier:
                keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:d5:4c:33:8d:19:ba:ad:e4:df:60:0c:86:69:f3:5e:4e:
         47:e3:88:d4:9c:69:9a:5f:64:79:9c:0f:e9:2c:d6:f6:27:7d:
         80:32:52:f4:b3:da:ca:1a:48:9e:aa:74:3f:93:82:6b:a7:d7:
         22:c4:4d:3a:e6:83:3c:ff:7e:30:b4:26:a1:ff:ec:e0:72:a5:
         51:23:91:99:b8:04:17:30:a2:32:31:66:1b:8f:7a:b3:98:29:
         a5:f6:c3:db:b6:61:ce:9e:31:f1:8b:6e:19:aa:76:ad:30:41:
         4d:38:0f:7f:aa:36:a0:38:d6:3b:da:58:d1:cd:7b:6c:d1:93:
         e7:0d:c4:09:69:d5:54:8b:56:5e:54:44:cb:52:d1:87:84:99:
         6f:41:16:e9:2f:88:c9:72:26:19:7b:51:cd:2b:0d:29:3d:34:
         5c:d4:fb:d5:fa:76:7a:b4:18:c0:62:34:08:7c:c8:68:32:20:
         19:4b:3a:da:08:84:89:14:da:fe:55:9e:45:b6:c3:79:81:2c:
         1f:b9:0f:ce:0a:a2:3d:dd:c1:c4:d0:cb:7e:fc:c8:87:40:f4:
         e8:26:c0:2c:e5:d9:e6:d3:df:29:d1:4a:70:80:d6:39:7f:63:
         a0:5a:e1:ed:65:e7:09:1e:6d:4a:1c:fb:07:ae:50:fa:f0:89:
         70:90:46:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:27 2025 by rpki-client