Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File:                     N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier:          G3dgI4eO6K7u9kQxYjGfcC7UmnqitCeN5A58iCZCS/E=
Subject key identifier:   7D:E8:D3:C3:2B:6F:94:7B:CC:18:85:59:EB:F3:D4:45:77:B9:63:CE
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer:       /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial:       01976E19A1EA565804E17BBD7D57A9C3DC9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 11:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 11:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 11:01:02 +0000
Files and hashes:         1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: 5VD1QP9Ig+YTBW10Pj51fut3OLMmYTDlOyB4wWu+9b8=)
                          2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:a1:ea:56:58:04:e1:7b:bd:7d:57:a9:c3:dc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
        Validity
            Not Before: Jun 14 11:01:02 2025 GMT
            Not After : Jun 15 11:01:02 2025 GMT
        Subject: CN=7de8d3c32b6f947bcc188559ebf3d44577b963ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:d9:bf:d8:37:26:0f:b7:15:9c:93:32:c6:
                    e4:f8:ca:d1:9f:e6:13:24:f9:3f:6e:58:0f:e4:7e:
                    d9:9a:14:38:ca:ef:15:bd:ef:af:a7:1b:27:e3:15:
                    60:99:13:6b:1a:9b:90:08:57:ff:ae:ab:37:db:c4:
                    83:30:06:f9:45:05:b4:ee:7d:93:a7:29:64:bd:7b:
                    e5:6f:5e:f9:f2:80:77:19:9a:37:31:97:5e:d6:f9:
                    94:8f:a1:f3:87:d0:e3:13:6e:58:04:14:bf:90:ed:
                    7f:ea:77:4f:60:ad:d6:04:ac:f5:94:52:ab:fa:e0:
                    fc:68:d5:f0:ee:7e:22:18:ee:59:50:59:b1:a8:be:
                    1c:58:29:ef:93:69:49:00:dd:68:b7:5b:83:2f:42:
                    42:e8:a6:62:f1:73:b3:17:4e:87:9d:9d:f2:3f:e6:
                    24:4f:1f:59:d1:4c:58:10:fc:68:eb:2c:ac:b3:71:
                    83:1d:a2:a0:2c:b1:8d:24:64:00:27:93:28:38:6c:
                    46:7d:41:4c:8c:8e:4c:23:17:c4:b8:c6:2c:10:ac:
                    03:4b:9d:fc:67:e8:60:21:86:8e:3f:1b:36:9a:0e:
                    78:37:31:71:23:ad:f0:31:04:94:c5:42:a2:7f:34:
                    c9:77:6e:0f:ff:ec:24:ad:53:54:7e:46:8f:41:94:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E8:D3:C3:2B:6F:94:7B:CC:18:85:59:EB:F3:D4:45:77:B9:63:CE
            X509v3 Authority Key Identifier:
                keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:03:47:24:22:77:67:3a:89:22:ae:37:b8:78:d8:cc:d7:3d:
         45:ea:ac:e7:d2:49:03:69:41:4f:dc:33:76:b2:dd:a7:bc:79:
         37:af:78:27:a5:33:ea:62:45:dc:8b:df:e7:7c:c3:df:dd:aa:
         25:1c:03:24:ce:0d:ad:9e:0a:47:70:08:82:56:ae:42:cc:43:
         a4:46:38:55:4b:a4:22:1a:42:c4:19:8d:33:b4:48:21:44:db:
         35:a2:4a:8d:c6:1a:aa:e1:b4:ba:39:e4:ed:00:6d:6f:55:bb:
         6f:92:d4:b5:ad:e0:90:00:af:b7:f3:24:f2:13:c7:2b:cc:11:
         d1:57:d6:92:20:c2:66:36:5b:4b:6e:da:52:fd:30:fb:5a:93:
         7b:9c:ac:49:01:e3:4a:99:44:e1:83:a7:6e:1e:35:8b:06:54:
         30:c4:a5:63:88:cb:fb:95:17:e2:07:f4:de:e2:37:31:54:72:
         48:3e:cc:bc:e7:f6:7c:3c:cd:e5:2f:81:07:6f:57:8c:db:f6:
         d3:44:44:5b:86:29:4c:c9:6d:84:bd:0a:35:34:45:7a:7b:f0:
         15:89:c1:f1:63:62:af:d1:57:43:df:15:9f:7b:e9:05:36:3e:
         5e:85:b3:3a:18:04:df:ef:2f:72:85:dc:1d:12:95:58:77:c1:
         93:4d:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:23 2025 by rpki-client