Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File:                     u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier:          zp6dGHGmw2muER3GhQM7kQ6y0ECfZTPBqrwPQtbEEWE=
Subject key identifier:   26:CE:78:A9:A8:6F:57:64:2D:A0:21:AC:6F:E5:D7:9F:3E:35:5A:6B
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer:       /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial:       019761DE4CF7157D377DA4215AF1F9777CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number:          158B
Signing time:             Thu 12 Jun 2025 02:00:48 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:48 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:48 +0000
Files and hashes:         1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
                          2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
                          3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: sMQRfi00M7/2Nc19A7550GoJWIFi/K1TumemLwOsqTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:de:4c:f7:15:7d:37:7d:a4:21:5a:f1:f9:77:7c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
        Validity
            Not Before: Jun 12 02:00:48 2025 GMT
            Not After : Jun 13 02:00:48 2025 GMT
        Subject: CN=26ce78a9a86f57642da021ac6fe5d79f3e355a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:4a:f7:29:b6:b5:dc:7f:b8:b2:43:e2:be:
                    ba:e8:80:90:fc:17:17:99:80:dd:b0:75:db:2a:47:
                    09:f3:ec:54:bb:6f:2a:94:de:e1:22:83:38:8c:5b:
                    9b:f1:12:f9:69:7c:c4:41:e4:c9:a2:3a:4a:96:ef:
                    1c:d9:e1:fa:96:23:b5:bf:8f:12:9c:dd:4a:5a:ad:
                    d4:67:d5:45:a5:7b:bd:4d:e1:43:ea:58:01:a8:36:
                    4c:ff:70:58:ef:62:92:f2:d9:80:aa:79:57:62:49:
                    37:42:d0:aa:23:17:02:53:73:dc:0b:83:29:85:a9:
                    3f:d7:cb:75:be:12:0e:31:e7:f0:b1:39:98:43:91:
                    a2:76:93:c7:07:31:7c:60:24:01:5f:f4:82:ca:9a:
                    4b:df:bb:b0:81:53:c0:54:8e:78:ed:c7:dc:3b:69:
                    ca:53:5c:be:c3:e2:ea:4c:4c:94:12:04:7b:2a:12:
                    30:91:0e:97:c9:f1:dc:ff:72:c0:96:8d:32:1b:85:
                    f1:14:5e:e7:fe:b9:d0:40:1d:c6:b1:90:1f:d1:5d:
                    56:d7:48:a5:77:d5:cd:e0:54:76:ef:6a:71:9a:35:
                    38:45:43:47:e3:7b:87:5f:49:53:7a:ef:18:f6:ff:
                    d6:88:5a:2a:e4:7e:1f:8b:58:f7:4a:e2:2c:4b:2e:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CE:78:A9:A8:6F:57:64:2D:A0:21:AC:6F:E5:D7:9F:3E:35:5A:6B
            X509v3 Authority Key Identifier:
                keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c9:92:4a:ac:79:fd:12:17:6e:c6:ee:0c:9e:bf:65:31:05:
         b7:f5:24:bc:08:64:52:31:39:50:1a:5c:ab:96:6f:b9:9e:ce:
         2d:d6:35:45:1c:38:8e:67:2b:d9:4a:54:11:f6:b8:fe:21:a9:
         7c:e1:6f:df:74:39:64:44:e4:5d:cd:c0:26:66:43:e2:e3:65:
         30:75:a4:e5:e3:68:72:bc:cb:27:a1:22:7c:b6:6e:32:54:b8:
         cd:26:75:37:d2:4b:ad:f6:a2:f0:5d:c4:c8:55:d7:8e:38:4f:
         df:f1:79:0c:23:8b:f0:d3:05:fe:5a:c8:e9:ed:05:d2:51:66:
         92:ec:b0:90:ff:eb:67:18:62:ab:b2:e1:be:7d:d6:c6:ac:7b:
         41:9a:2a:a1:6e:8a:ce:ce:d3:4d:33:a5:52:8d:59:39:03:09:
         79:84:2d:a0:15:14:5d:37:4f:ed:d0:f5:94:55:f4:fa:3d:0e:
         4e:c7:62:3d:eb:62:c4:3e:e9:ba:3e:88:47:94:cf:1c:ec:d8:
         29:f6:ae:16:66:a8:21:fa:aa:a0:d0:46:e3:8a:3f:a7:6c:53:
         3e:69:59:0c:5c:8c:03:c2:bc:6a:c5:fa:d1:dc:aa:86:96:fb:
         05:f2:b9:8d:5e:f5:2f:53:3e:fd:38:bb:fa:f7:9a:24:9d:a5:
         61:7d:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:28:23 2025 by rpki-client