Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
File:                     KseP1RenX3fz9P0imsXmcyVgxuE.mft (raw, json)
Hash identifier:          0VvXWkpWtHJXICq+xz8TDPsMe++T28WtxkueeDVwN4A=
Subject key identifier:   5F:67:B9:84:41:0B:7A:AC:57:05:CB:68:90:08:B6:0D:1D:3D:9D:EF
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Certificate issuer:       /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial:       01976BF4750881C139C6767160FA38BF63E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 01:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:12 +0000
Files and hashes:         1: IgyiZQsGF35ZpqMjFvvmpe-Uiy0.roa (hash: pAyIL1yLWM74WtAtlIRzPUKtL/NRSv2opfBvsE4P7Hg=)
                          2: KseP1RenX3fz9P0imsXmcyVgxuE.crl (hash: uBzXVf4zymOj+0nHM8DF6dClIi4CW3mCR+Rn3LRC/cI=)
                          3: LQeosQtAPfSnVgSVDz2OO819_2c.roa (hash: Tkr19vAUAWlnJvYoR9UT3slqIpIAZEXQA2P0LTiz6vk=)
                          4: RCGJFAFAV6aiMpIUxmySWlcVGcg.roa (hash: QvC8yM0b6tNvgcZ8K0setdROoeG+A+pCENVWYJBxdUY=)
                          5: TG0C9piKaVRjDBAoOKXP984iuIo.roa (hash: EaPKdJGvcjOx3gx7VBDHr9Ib+3e6fswqULU49tGRtHE=)
                          6: W8cH_RfNNK2PVtZ4dkQnNuqrxnc.roa (hash: 7tsNb5ZcCAlwiASwz40Hk6RbBRk52zjaoiAuvE/+RQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:75:08:81:c1:39:c6:76:71:60:fa:38:bf:63:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
        Validity
            Not Before: Jun 14 01:01:12 2025 GMT
            Not After : Jun 15 01:01:12 2025 GMT
        Subject: CN=5f67b984410b7aac5705cb689008b60d1d3d9def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:27:75:6e:64:8a:23:65:4c:6c:58:cb:91:
                    3b:87:8a:2f:27:ee:88:5b:de:a1:95:43:6e:f9:42:
                    8a:25:15:6d:ce:6e:e0:5e:ce:3d:a6:14:36:e0:85:
                    21:bd:93:dc:f9:f4:04:76:fd:ef:53:5a:8b:fc:a1:
                    55:8e:40:85:c6:fb:bc:22:69:8a:ce:ff:53:de:a1:
                    78:60:8f:60:13:3e:60:05:83:e8:ae:03:c7:03:87:
                    7d:a3:a1:3d:dd:aa:75:aa:9f:f5:29:5e:f4:f2:10:
                    fb:a7:4d:00:55:d2:09:dd:d3:99:b8:c7:1a:59:db:
                    11:c2:93:f5:08:a0:13:95:2b:73:5c:bf:55:d6:c5:
                    a8:8d:4c:32:92:02:95:12:74:82:98:50:14:9b:e1:
                    67:cb:16:bc:16:b8:ad:f3:2b:fa:5e:5c:29:dd:ca:
                    fb:21:17:e9:80:8b:ab:d8:45:e2:4b:81:91:cf:b7:
                    c3:44:56:b3:dd:1b:c9:d8:2f:57:5e:1a:d6:fe:bb:
                    9d:b2:95:58:55:5e:48:ad:a8:02:74:c1:3d:05:76:
                    e3:fb:bb:d5:75:58:e5:57:a7:9b:88:e5:88:31:77:
                    f6:11:8d:d0:30:72:33:1b:0d:df:24:7a:76:84:2a:
                    92:c9:5e:7f:07:45:12:77:ef:be:24:49:ab:b8:8b:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:67:B9:84:41:0B:7A:AC:57:05:CB:68:90:08:B6:0D:1D:3D:9D:EF
            X509v3 Authority Key Identifier:
                keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:95:19:5e:d4:0e:84:92:95:2d:cc:f7:89:8f:54:54:f5:76:
         5e:bb:1a:6f:a8:e3:6e:59:c9:5a:b4:96:a4:54:27:52:da:ac:
         97:e6:a8:c4:5c:3c:70:83:5a:fc:8a:19:6d:a9:a9:ce:a9:20:
         80:a7:53:d4:5b:f2:f0:7d:bb:c2:f3:8f:d6:94:e5:2b:a1:2e:
         a8:1a:66:ba:47:96:6c:76:8a:ec:c2:89:7f:86:48:6b:98:94:
         60:4b:f7:65:25:ed:0f:d4:26:92:56:75:3f:8c:4e:26:99:51:
         38:de:b7:1b:0d:60:97:86:57:de:a6:6c:d8:9d:90:a1:5e:d2:
         8a:ed:42:24:a9:a2:d3:39:a0:fd:12:b9:be:f1:3c:cc:13:99:
         19:ba:8a:ef:02:41:13:ec:66:ca:f0:bb:47:83:f4:06:a2:e2:
         0c:15:58:aa:4c:cb:82:f4:a0:9b:43:40:5c:71:12:be:c1:9c:
         1f:fa:83:35:b2:a0:af:7b:18:b5:79:ff:c4:3c:8b:b8:39:9e:
         51:f3:34:72:a7:d1:0c:46:c2:65:65:d8:99:5d:8f:57:35:d1:
         38:4f:c7:e5:6a:1c:85:14:e4:6d:96:b0:e5:7c:5a:d7:66:b8:
         9e:c4:2e:3f:a7:b8:33:7c:12:71:15:5c:84:60:69:b7:93:2f:
         c1:07:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:26 2025 by rpki-client