Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File:                     oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier:          eU6qSgzt8PlYEkEjFnKj5OG+xjfJpxpCRyM9Gfrg/GU=
Subject key identifier:   6C:57:4A:CB:F3:66:AD:37:48:46:28:1F:FD:1E:AD:69:87:C0:4A:D7
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer:       /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial:       01976D3E610A278DDBDBC510B7AC72D626A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 07:01:33 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:33 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:33 +0000
Files and hashes:         1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
                          2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: u8iHJpYAVUb5k/TTUYB8vmwCjepefyzgXjk+kv95w7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:61:0a:27:8d:db:db:c5:10:b7:ac:72:d6:26:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
        Validity
            Not Before: Jun 14 07:01:33 2025 GMT
            Not After : Jun 15 07:01:33 2025 GMT
        Subject: CN=6c574acbf366ad374846281ffd1ead6987c04ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:45:e1:be:91:2f:94:0a:fa:46:5b:87:a7:
                    be:10:5d:fd:d8:8b:03:c0:47:83:ca:87:04:e3:93:
                    e3:53:36:2a:3b:ea:92:6d:1d:66:ec:8b:8f:fe:5f:
                    1c:8a:de:b8:e3:26:ea:b9:27:08:80:0f:de:0d:5c:
                    34:42:16:a4:ef:38:7a:03:99:8c:ae:93:51:e5:ed:
                    4b:6d:c7:b4:95:4d:d7:34:dc:a6:e8:cc:9d:dc:8e:
                    71:d4:7a:12:a3:b4:8c:2b:e1:e7:a1:b0:73:f1:97:
                    9f:34:36:25:21:aa:36:21:96:2f:42:97:b8:0a:d1:
                    20:1c:c9:ae:29:ac:25:cd:4e:9a:9c:96:d3:af:c2:
                    08:45:a9:10:5f:0c:ec:9e:04:24:5a:65:b8:bf:16:
                    e7:94:6f:0e:bb:d3:2f:e2:b0:76:78:70:9c:d5:e6:
                    08:fe:f5:4c:31:83:2d:1b:9f:99:02:45:13:99:b4:
                    7e:39:42:16:c4:fe:47:b8:40:61:81:b6:e5:87:62:
                    15:8d:36:86:af:37:8b:5d:5c:33:fb:6d:d8:8b:6c:
                    1d:c4:85:bc:53:cf:82:be:f5:ef:1e:fa:75:ee:f2:
                    b4:c9:a6:49:29:5d:1d:fb:18:70:ce:22:46:3c:c7:
                    6c:d4:ed:9f:2c:3c:4e:02:f6:88:c7:f6:86:04:be:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:57:4A:CB:F3:66:AD:37:48:46:28:1F:FD:1E:AD:69:87:C0:4A:D7
            X509v3 Authority Key Identifier:
                keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:32:e4:63:39:e4:13:66:a0:ff:f9:d7:55:b4:96:8b:bd:5a:
         fa:7c:4b:24:a6:b1:f4:5a:7f:55:74:b0:ce:af:18:4e:b8:b0:
         2f:10:20:24:72:85:e6:40:3c:5e:8a:77:df:2c:b9:ba:4b:b2:
         db:73:6e:cb:df:c1:46:ec:f5:d0:56:a9:bd:95:21:92:bd:26:
         ce:cc:58:44:0b:9f:f1:79:3c:7f:44:5f:a9:65:bf:e2:2a:46:
         2b:fc:52:1b:35:ef:b7:f5:d9:02:d0:c7:71:d9:ab:00:b4:bc:
         f5:eb:f5:b4:be:cb:e5:55:1a:40:12:f0:f2:11:8b:b5:92:bd:
         e1:b1:bb:56:b2:59:e1:c4:51:39:bf:bd:ec:a1:77:ac:28:82:
         71:93:29:19:8a:44:70:7f:c4:b1:d4:c6:9b:27:8f:d8:fe:0a:
         0c:53:d7:e6:0f:e1:be:43:2d:d2:79:bc:f4:39:9c:8a:50:4a:
         4c:2b:27:61:1c:29:d7:2b:e3:c4:78:f5:be:a3:de:53:87:08:
         e1:89:84:f6:19:95:0f:6c:6c:91:90:b3:c0:65:4f:dd:87:f9:
         94:a6:49:ad:3d:91:09:df:d9:05:b7:e5:f9:17:6e:50:83:5f:
         40:e1:f9:ae:08:27:79:4f:31:3f:25:13:cf:f1:3e:bd:45:64:
         9e:fd:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:34 2025 by rpki-client