Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File:                     MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier:          RZFM29OY0G0Vo7pqa0BWyV97XRrLx7GiKgid2zzF3no=
Subject key identifier:   B4:ED:CF:95:1C:0F:0E:07:86:F9:85:F7:AE:D5:4A:52:EE:FA:E9:7F
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer:       /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial:       0197470B6BDA26BE27959863EB011A6A2FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number:          158A
Signing time:             Fri 06 Jun 2025 21:00:20 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:20 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:20 +0000
Files and hashes:         1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
                          2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: 0TrnsPokNtHJw5nzZ+7wi5swezVJ05TKuz8dEsnyLbY=)
                          3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
                          4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
                          5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:6b:da:26:be:27:95:98:63:eb:01:1a:6a:2f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
        Validity
            Not Before: Jun  6 21:00:20 2025 GMT
            Not After : Jun  7 21:00:20 2025 GMT
        Subject: CN=b4edcf951c0f0e0786f985f7aed54a52eefae97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:0d:d8:74:ab:49:42:78:7c:68:48:d5:4c:
                    da:6c:e8:e0:dc:aa:d5:a9:b8:82:4e:1f:72:4b:fa:
                    92:9c:52:f0:73:f3:fb:15:4d:e2:ae:6c:d5:4e:4b:
                    cd:12:6e:57:11:60:50:59:e3:be:ae:7e:68:0b:34:
                    6e:c6:98:cb:33:60:54:ee:6a:22:dd:29:f0:e9:d8:
                    5e:d4:7f:91:7c:b6:6e:7c:ba:eb:94:1c:80:11:b3:
                    62:ae:f4:08:17:03:da:e2:32:e9:49:c4:2c:71:20:
                    5f:a9:32:a5:81:d4:1d:6e:ea:75:64:00:6f:bf:2e:
                    05:75:a9:58:c9:0d:72:f8:f7:45:29:9f:e1:19:25:
                    16:60:0c:9d:bf:7b:a1:a3:65:13:c2:ca:e3:fc:50:
                    b0:64:ef:80:21:50:7b:dd:49:b9:df:8f:51:44:49:
                    ac:b5:f1:fc:37:47:d9:eb:1d:0b:cc:ac:61:a9:19:
                    e8:72:fd:4c:dd:54:b9:89:12:9a:f9:7e:92:24:ad:
                    02:63:53:0a:59:31:23:1f:ed:ab:97:08:d9:84:2a:
                    a6:95:71:d8:55:b3:02:b2:01:90:68:c8:41:3f:63:
                    0e:53:ba:0f:95:39:11:6a:31:24:d4:02:d2:3d:92:
                    e6:0b:a6:89:12:c7:58:4b:bf:b4:bc:75:95:7d:30:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:ED:CF:95:1C:0F:0E:07:86:F9:85:F7:AE:D5:4A:52:EE:FA:E9:7F
            X509v3 Authority Key Identifier:
                keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f6:52:9b:d6:bf:d9:ef:03:9e:29:23:6d:8f:29:90:bd:45:
         9e:a9:3f:41:3d:07:35:fa:e2:5c:ea:67:cb:ec:48:ec:f5:75:
         c7:b1:3c:e1:2d:27:9e:02:6c:82:7d:bf:82:2a:db:73:a8:43:
         cf:96:24:35:e5:ab:b8:c1:26:cf:0a:4c:71:64:51:85:34:4f:
         03:cf:f4:74:a3:ae:d8:48:49:68:ce:b7:38:77:d5:ab:46:de:
         c2:15:7c:60:ed:f7:de:eb:5a:9e:26:31:fa:bd:6f:9b:e8:eb:
         70:b8:cd:ac:e5:80:6c:c3:e7:f3:92:04:8b:18:1b:b5:f1:c8:
         46:91:9e:97:92:f6:58:9d:0f:38:ad:9b:2f:7b:5c:0d:94:a9:
         59:2d:7e:e5:c6:84:b0:37:8b:36:34:0e:62:d8:57:fe:15:3f:
         57:7d:ec:0a:6b:04:07:a4:16:e9:8c:1f:63:de:b8:42:0f:d9:
         ed:5f:e9:64:d4:e5:ee:75:bc:c0:52:ef:a0:86:9b:58:5b:b3:
         75:68:6f:33:3a:96:df:0a:a0:c2:b1:e7:00:e0:3c:e0:11:fb:
         c4:db:fa:03:a2:91:45:4d:c6:59:7b:ec:31:ab:a3:a2:32:5e:
         31:16:d8:f7:f0:7d:37:3a:fa:ba:63:b1:5d:6e:c8:18:42:d6:
         18:d7:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:18:25 2025 by rpki-client