Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File:                     JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier:          +1EE4D8doVhjz8c8Sv8D70BczotusExk9sunA0b4ux8=
Subject key identifier:   EC:5C:D5:48:A0:47:F1:F6:B3:80:5E:5C:AC:C4:7F:78:49:F7:99:B5
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer:       /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial:       0197647163BC0B2CAD61D73103DAC4C46E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number:          158E
Signing time:             Thu 12 Jun 2025 14:00:41 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:41 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:41 +0000
Files and hashes:         1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
                          2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: 661kIyoukREO2qQQzxtpmiIoXnUvi5eyONk3LTwY6iU=)
                          3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:63:bc:0b:2c:ad:61:d7:31:03:da:c4:c4:6e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
        Validity
            Not Before: Jun 12 14:00:41 2025 GMT
            Not After : Jun 13 14:00:41 2025 GMT
        Subject: CN=ec5cd548a047f1f6b3805e5cacc47f7849f799b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0b:27:c1:00:7c:c1:c8:2d:3a:55:bd:a8:aa:
                    bf:87:83:44:22:01:5b:d7:a5:a7:75:e4:8a:fe:aa:
                    c3:ec:b6:3c:9b:70:6e:ae:77:6c:9f:c7:3e:31:05:
                    a8:69:ca:6b:3c:c0:4d:f7:e7:8a:2e:61:58:ed:94:
                    45:09:b1:05:83:c7:55:bb:13:33:fd:79:60:13:db:
                    19:03:f4:8c:ba:cc:79:c1:a4:2c:51:bc:e6:19:ba:
                    2a:2d:fb:7d:64:1b:1e:2e:be:38:e1:28:3c:0e:72:
                    5b:0d:38:aa:39:04:78:0a:00:99:5e:16:61:d5:a1:
                    0d:67:02:4d:83:df:a7:06:3f:40:b4:a1:00:78:ed:
                    45:3f:e3:5e:b8:db:f2:66:b4:79:c4:20:6c:1a:df:
                    64:a6:32:ef:65:51:32:79:af:cd:63:48:01:45:24:
                    e2:c0:53:64:a5:c2:7f:5f:87:4f:af:fd:cb:67:19:
                    65:01:34:ab:2f:78:5a:ee:4d:b3:a1:4e:8d:ab:cb:
                    7a:d1:64:7b:15:e0:a1:b4:a3:1e:2d:62:fa:bb:e9:
                    df:ee:d9:4b:01:96:80:b2:bd:cb:1f:07:c0:ce:08:
                    1e:c3:4c:59:81:65:36:ee:6d:14:b5:4e:8f:90:21:
                    4a:9a:43:1d:bb:10:8f:e9:e9:b8:75:f1:77:f1:24:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:D5:48:A0:47:F1:F6:B3:80:5E:5C:AC:C4:7F:78:49:F7:99:B5
            X509v3 Authority Key Identifier:
                keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:37:c2:43:4d:f4:58:9c:c3:c2:90:4d:96:d8:42:50:4c:
         5f:e1:04:d2:aa:3f:8e:b3:ef:2e:94:47:72:49:f9:7b:ad:31:
         8e:c6:74:47:89:48:0e:8b:c0:ea:21:18:9e:fe:62:0d:85:f0:
         ef:4a:36:6b:f9:27:60:46:b2:a0:e9:4d:fe:ec:f6:c4:4b:be:
         1c:92:5c:4d:2b:23:86:3c:92:33:79:d7:29:9c:02:37:ce:93:
         34:79:8c:44:a8:82:05:c9:09:38:19:d1:96:fd:90:c7:ef:cf:
         0c:18:64:8d:6d:78:8d:2f:8f:55:f8:58:28:c5:cd:fb:c2:cf:
         89:4e:a4:64:0f:0f:fb:28:2b:4a:d8:24:41:1e:21:a3:e3:da:
         2a:7e:37:42:8e:a3:df:73:ab:e1:1b:e2:2c:60:31:35:c2:ca:
         61:33:b9:95:40:4c:f3:02:04:36:1b:c6:44:b4:79:d4:0c:80:
         9f:a7:89:bc:4e:5b:6d:e2:82:19:80:b2:77:87:8b:25:7f:d6:
         2d:58:68:35:40:68:82:53:02:a4:61:43:47:c6:6c:84:77:8c:
         30:fe:01:2a:99:35:98:30:44:9d:ea:ed:9a:e8:2e:39:85:68:
         49:4e:ab:32:57:33:be:be:ce:d8:d8:5a:4a:f9:7c:20:ea:54:
         7a:bc:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:33:06 2025 by rpki-client