Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
File:                     mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json)
Hash identifier:          LIPSFmTsGeXp1kMM47iKrQloo91IeAOGCD0wBBSD+Us=
Subject key identifier:   5D:34:AD:8C:7B:91:0D:3B:9A:1A:B1:A4:0F:08:E8:B9:F4:A6:9B:48
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Certificate issuer:       /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial:       01976FD0D5B88CD416CFEA18BA00F40B1665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 19:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:46 +0000
Files and hashes:         1: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (hash: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=)
                          2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: PtQgMpmIeiqUuu0RsFHLqKQmat7/LkiWHI8aEIKQyBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:d5:b8:8c:d4:16:cf:ea:18:ba:00:f4:0b:16:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
        Validity
            Not Before: Jun 14 19:00:46 2025 GMT
            Not After : Jun 15 19:00:46 2025 GMT
        Subject: CN=5d34ad8c7b910d3b9a1ab1a40f08e8b9f4a69b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:9d:a2:da:d0:c2:f9:c1:5d:31:29:e2:bb:
                    a8:c5:15:ea:1f:a9:f2:39:30:eb:b2:62:c9:70:12:
                    32:35:cf:99:e5:15:0c:de:c0:ce:cd:72:a2:4f:90:
                    b7:6d:8b:19:2b:92:7d:63:c2:56:bb:fa:f6:05:34:
                    99:ba:83:38:00:b2:21:ab:63:d9:6e:31:17:95:9e:
                    63:41:84:2c:c9:f6:09:65:41:af:e1:a0:49:4d:36:
                    4a:38:47:8a:54:31:6d:8d:80:0b:bf:70:ba:74:ff:
                    bc:b1:12:35:fd:b0:88:3e:1b:0d:17:9c:b9:8e:15:
                    2c:b0:e1:ab:dd:ee:fe:5f:9f:43:cd:00:51:74:c9:
                    26:cf:8a:92:95:51:f8:39:73:c7:92:33:09:64:0a:
                    61:10:88:1e:a7:bb:73:88:9b:a3:61:b7:f1:5d:ab:
                    12:09:03:59:39:96:c4:3c:aa:b8:9d:e3:a8:25:f9:
                    d4:3a:f3:24:3a:fd:d0:d2:15:2a:7e:01:bf:78:bf:
                    27:6c:bf:2d:3b:b1:72:f9:e1:18:57:40:37:27:b9:
                    cd:bc:60:37:b1:72:b7:07:f7:93:6e:b9:6b:13:c8:
                    d1:e2:c9:1c:f4:00:f1:c9:48:8a:b8:69:fc:f8:51:
                    19:bb:82:b3:1b:96:9d:37:24:db:64:f7:14:9a:01:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:34:AD:8C:7B:91:0D:3B:9A:1A:B1:A4:0F:08:E8:B9:F4:A6:9B:48
            X509v3 Authority Key Identifier:
                keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:9f:67:1d:33:73:f0:65:24:06:dc:8b:3f:2e:ed:07:b4:
         56:89:35:66:fb:73:52:ef:ac:74:8e:74:9c:8e:7b:ca:29:85:
         43:24:34:6f:89:9b:17:05:62:f9:c7:fe:25:81:87:ef:22:b2:
         7b:3f:92:38:62:28:31:fe:87:93:41:f1:7a:5b:0a:da:d1:44:
         b9:50:bf:7b:a0:56:a0:f6:5f:aa:48:f9:36:04:9b:94:7d:53:
         64:62:4f:c3:c5:b4:c4:1e:ba:12:34:ca:18:e8:36:2b:dd:57:
         a9:0a:6b:ea:ad:b5:50:e4:b7:ad:b4:c0:62:b9:c2:86:41:75:
         5c:fb:9b:5a:3a:06:c5:97:69:a5:bc:e3:17:13:3e:69:a2:26:
         00:f4:76:51:5a:33:92:b5:d5:71:0c:9c:02:51:47:be:3e:83:
         a6:76:8b:75:30:f7:75:25:0b:10:00:b5:70:c0:b0:fd:3a:31:
         32:10:2f:6b:6c:89:3f:ee:17:29:58:0e:88:ee:ba:0e:17:41:
         e6:15:f1:8a:58:e8:cf:70:82:56:47:ad:d5:13:73:e5:16:6e:
         74:9e:3e:71:d8:dc:1d:5e:4e:ab:1c:09:6b:e4:1f:ab:b3:a2:
         ec:ec:83:a1:4f:b4:71:13:2f:ba:34:9a:09:a3:a9:fc:e3:e4:
         4e:63:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:07:50 2025 by rpki-client