Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          +omJ55D8KPGkUcTq67ik+gMGlkED33rpLJ78UrrH5gE=
Subject key identifier:   46:86:AD:2A:4F:A1:33:32:C4:0D:68:1B:E4:BC:07:D0:1A:95:AB:25
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       01976F62CA4C3FE54C88000A3B464DDC9C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 17:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:34 +0000
Files and hashes:         1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: o4dvPFidqwZ+vAY2piqYnNgL5X7Nf4xM50XQPVmXQ5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:ca:4c:3f:e5:4c:88:00:0a:3b:46:4d:dc:9c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: Jun 14 17:00:34 2025 GMT
            Not After : Jun 15 17:00:34 2025 GMT
        Subject: CN=4686ad2a4fa13332c40d681be4bc07d01a95ab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:13:ff:33:34:58:e5:4e:cf:36:16:3a:6f:
                    07:24:df:64:17:90:c0:97:e9:3a:10:70:64:3d:a6:
                    51:3c:f4:05:55:78:d8:8e:32:92:a2:7f:d1:6b:dd:
                    d3:aa:6a:c7:d8:3f:37:ca:19:b4:4c:2d:bd:e8:d9:
                    70:8f:ad:e3:c9:7a:04:ae:e3:58:b8:51:44:8d:61:
                    28:38:0f:1b:3d:cc:24:c9:49:d0:98:2d:41:b3:16:
                    72:61:af:ba:e9:65:be:d3:26:5d:6d:12:0c:ea:5a:
                    98:60:73:6f:de:56:0c:ec:61:5a:de:e3:9d:ff:22:
                    23:db:98:4b:4a:5a:bc:5e:06:b0:da:39:41:c2:78:
                    c0:f2:e7:29:d3:cc:eb:1a:f2:8c:bc:65:57:16:8a:
                    32:89:df:8f:cc:15:e6:00:d8:ba:80:d7:ae:e5:b2:
                    fa:92:48:da:40:72:5c:6c:b1:fd:97:83:92:9d:a9:
                    90:07:82:3e:8f:64:21:61:52:50:2d:35:25:86:4a:
                    65:b9:2d:12:88:d3:ea:e7:5f:d6:a0:7e:bc:51:4e:
                    74:df:0b:80:84:ed:05:d2:cb:1a:bb:80:18:6f:21:
                    d2:86:6a:78:80:48:80:dd:67:de:bc:f9:14:65:62:
                    e4:e1:59:63:c1:d5:9c:6d:d6:78:b7:7a:44:e3:5f:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:86:AD:2A:4F:A1:33:32:C4:0D:68:1B:E4:BC:07:D0:1A:95:AB:25
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0a:01:fc:5c:54:99:5c:35:f1:ac:82:ae:49:bc:b4:20:f4:
         69:8d:2c:ad:ad:04:9b:a0:de:fe:27:e5:54:e5:fd:de:63:5d:
         80:c1:05:7f:4b:ad:97:98:67:b6:ec:15:4c:43:3f:c5:4b:ee:
         69:d9:07:d9:3a:ac:97:34:2b:3a:b9:06:ea:62:2b:e9:76:5d:
         ee:53:f8:49:a5:09:cd:0b:df:eb:05:ee:bb:57:12:fe:6a:71:
         21:dc:d6:16:1a:c9:f9:41:8a:7c:69:06:72:f9:a7:84:f2:63:
         1b:f6:6d:aa:d6:81:20:03:9c:83:21:95:eb:de:62:9d:f8:02:
         48:5a:df:4d:25:3f:fc:53:fc:bd:08:11:ee:41:c7:b8:d4:78:
         1c:c2:e0:44:2c:c8:d8:8d:08:6b:58:3c:e6:e9:db:b5:06:4a:
         50:f4:b3:8a:62:f6:8e:4a:f6:d0:e6:c0:2e:01:bb:da:32:70:
         99:c6:9b:2c:3f:cc:eb:e3:b2:95:ca:b0:f8:17:77:f1:a0:d8:
         94:47:76:1f:2e:a7:5e:89:f8:f2:80:39:df:f8:bc:3f:bc:84:
         42:e2:1b:f1:8b:15:f0:06:fa:f3:71:0a:4b:a4:36:d6:a3:a6:
         6d:51:ae:c1:98:50:03:65:8b:0c:97:36:89:08:ce:27:a8:38:
         0c:b7:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:40:54 2025 by rpki-client