Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File:                     nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier:          XtPn8iCyBcOdO8s1fGYP11VMDJ+QeYYW/CkZONEADO0=
Subject key identifier:   D3:59:E8:A0:8B:FC:70:4A:53:5B:B5:8D:8E:4A:0A:1D:16:5E:BE:8E
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer:       /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial:       01976DAC1111743B5972751EBB20206B32B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 09:01:22 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:22 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:22 +0000
Files and hashes:         1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
                          2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: 5sKTZYgHNiGkXK3Xw72EMZgBm+KGDNxgEE+7hrrFCZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ac:11:11:74:3b:59:72:75:1e:bb:20:20:6b:32:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
        Validity
            Not Before: Jun 14 09:01:22 2025 GMT
            Not After : Jun 15 09:01:22 2025 GMT
        Subject: CN=d359e8a08bfc704a535bb58d8e4a0a1d165ebe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:7b:33:20:0e:70:37:e1:9e:ce:59:1d:e8:
                    55:42:0e:ae:03:4a:0f:1f:15:04:3c:c5:ff:80:f7:
                    54:0e:53:16:f4:97:c1:3b:0a:25:e7:12:70:0e:d9:
                    c7:a8:fa:83:a0:c7:ed:43:cc:ee:26:54:8a:fd:7c:
                    c7:f7:1b:8c:cf:73:97:26:be:e5:50:ed:d5:da:c0:
                    9c:a2:91:d9:59:15:5d:ed:e9:99:ba:0a:ac:19:4e:
                    fa:b8:0b:25:9e:3f:2c:c9:14:51:a3:14:9b:98:4e:
                    33:a5:79:98:47:f5:26:d8:b3:8f:52:e0:13:31:1a:
                    f9:9a:06:f7:a6:5a:23:51:09:1b:87:97:55:d8:1f:
                    46:0a:5e:a8:c9:6e:33:c7:67:4f:1b:c5:c7:a8:1d:
                    5d:17:a2:08:b7:a7:73:06:6b:c8:90:f4:4d:d9:28:
                    d9:3d:d0:7d:2b:fb:93:49:63:f2:c6:9b:66:22:6a:
                    65:76:c6:04:c5:ac:96:bf:6c:69:b2:64:7c:e6:f3:
                    11:53:8f:75:55:82:e0:e8:ce:1c:1c:b0:e3:75:ba:
                    81:b3:15:95:54:22:7a:92:88:e9:f0:62:73:65:b7:
                    9a:42:bf:f3:d8:24:2a:fb:fc:ff:dc:fa:ea:74:c2:
                    ca:cf:7b:84:df:5e:c4:d3:08:e5:9a:84:b1:89:0e:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:59:E8:A0:8B:FC:70:4A:53:5B:B5:8D:8E:4A:0A:1D:16:5E:BE:8E
            X509v3 Authority Key Identifier:
                keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:44:69:fd:8c:bf:c8:6e:2e:70:67:a3:05:08:64:84:ef:
         74:7e:55:8a:b6:ca:c6:cb:dd:ac:19:45:67:cb:8c:9e:01:fb:
         7a:41:9a:32:c3:7d:36:36:87:64:33:2c:e5:ae:a4:21:5d:f5:
         02:ea:39:ea:c8:00:e5:01:da:03:bc:75:b9:44:f6:22:de:ce:
         99:49:bf:77:ae:0f:64:3d:0f:b4:26:55:75:4d:87:18:8a:4f:
         11:f9:a0:07:04:96:fb:cc:04:b9:60:d1:d8:3f:2c:f8:9a:a8:
         33:73:bf:bf:60:38:bd:e6:e5:a5:99:4b:0a:fc:c0:6c:1d:39:
         59:c4:e8:26:96:e5:5e:f2:58:31:ea:ef:00:19:85:ae:66:bb:
         bc:25:82:8a:af:bb:4c:82:01:3f:39:4b:2b:64:0a:2c:c8:c5:
         f5:75:24:70:0d:ba:e6:e0:0c:0d:64:2b:06:e6:6f:e1:f3:16:
         e1:6e:3e:b0:ec:ac:b8:b5:d6:8e:60:bd:44:be:31:ec:7f:a5:
         21:2b:84:4e:1e:e8:b8:53:dd:ed:47:c9:a4:60:7b:94:6f:56:
         1a:d2:d7:95:1d:5e:da:19:ef:a0:a1:98:1a:ae:9c:8f:87:1e:
         37:e7:23:2e:ec:b1:f7:39:22:10:3c:98:7c:ef:96:6e:76:e0:
         00:1b:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:15 2025 by rpki-client