Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          Lc8+WCMX4+yp+molfQfLfC7r/v4tdZE5EVYDdtYFsxY=
Subject key identifier:   B2:91:0C:42:E0:80:99:86:19:46:20:3D:4B:52:60:C7:69:E9:56:92
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       01974967CBF35A53695CDDE365F25EE19694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          159A
Signing time:             Sat 07 Jun 2025 08:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:28 +0000
Files and hashes:         1: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (hash: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=)
                          2: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=)
                          3: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=)
                          4: H0yf0Oo2kc1vuXQI2C2XHgJR1UA.roa (hash: +TduWsFWrzOECmrsJ1U+XZI1HDNWMV9mx9iurejnLIs=)
                          5: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=)
                          6: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: xK1/RffXj7LU2VeB3b6dbj3haM0XSvPhqhTanRJpvqU=)
                          7: zvoNtmVyFGPqGLORGNfy_liCG3g.roa (hash: OrM2f4p6SPuoSJpjtWAlr90ha2Ax6eDIbJJgANcSLqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:cb:f3:5a:53:69:5c:dd:e3:65:f2:5e:e1:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Jun  7 08:00:28 2025 GMT
            Not After : Jun  8 08:00:28 2025 GMT
        Subject: CN=b2910c42e08099861946203d4b5260c769e95692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:f7:e9:34:71:ef:d3:d1:b7:db:47:de:e5:
                    77:27:a1:f3:08:b8:75:84:35:92:27:67:41:6c:cd:
                    a8:5e:fe:34:4f:87:8b:4f:1b:22:af:3c:55:75:2d:
                    5a:0d:10:e3:b3:8d:7a:88:cc:99:4b:30:d0:08:ca:
                    9e:01:47:b7:39:98:a9:bd:51:14:c9:2b:d2:06:e2:
                    3c:a8:f6:1b:12:fa:a4:92:d5:e6:00:51:75:dc:49:
                    ec:54:9d:a6:62:b1:f9:33:b1:ec:a9:4d:b1:70:d6:
                    59:8d:9a:a3:a2:7e:3e:88:fc:54:36:e0:b5:af:a6:
                    bf:59:6f:ba:fc:a0:8e:20:da:5d:e2:66:ec:19:d9:
                    d5:d7:bc:ae:b6:7b:bd:b7:89:4d:2e:82:c8:3c:57:
                    9b:1d:97:77:a4:95:8e:09:71:91:e0:23:49:cd:e5:
                    5a:b3:6e:5e:d6:56:76:1f:77:0e:87:15:35:6f:f8:
                    fc:4d:02:23:4b:96:ce:dc:22:d9:00:64:c5:14:c0:
                    3e:0c:f7:9d:3f:6e:17:82:a4:2c:9d:a4:cd:eb:af:
                    39:2e:fd:cf:89:9d:2a:50:5b:55:5b:94:72:7c:21:
                    35:81:27:a6:17:c9:19:d6:65:7e:c2:bb:2b:29:00:
                    6f:a7:3a:03:44:1a:6d:a0:12:29:d8:42:a7:34:b1:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:91:0C:42:E0:80:99:86:19:46:20:3D:4B:52:60:C7:69:E9:56:92
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ca:36:e6:6a:46:f1:ae:9e:54:16:f1:2a:a1:0d:96:a4:64:
         3f:30:3d:de:67:d5:80:25:e8:43:72:8b:fa:b7:65:64:2c:35:
         ef:65:a7:eb:97:9e:60:15:a4:c7:9d:dc:e6:ed:ad:d4:ed:1b:
         e0:fe:7b:40:da:20:67:66:0b:87:26:84:8c:f3:8b:c5:b5:4e:
         a0:2d:a9:f6:26:ff:47:88:c6:34:1d:d0:dc:04:93:9d:51:8a:
         b2:73:a3:7c:5f:f4:b7:23:8d:01:1c:7a:5a:ac:b8:40:55:a9:
         a1:8d:94:ce:c8:c8:b5:b5:c7:36:54:70:85:6b:75:89:74:4c:
         04:ac:2d:8e:b4:75:54:06:7f:cd:92:9d:90:ae:d6:ff:51:45:
         dc:90:81:1d:67:12:7c:a0:6f:4f:d7:f0:5e:b5:3e:29:93:a8:
         9e:9d:51:14:d2:35:9f:47:f4:2f:d0:48:10:fd:3d:45:ea:ea:
         c7:15:81:ca:b0:62:f1:c7:d5:f8:ac:f1:1a:8e:fe:bc:f3:2a:
         e5:d2:69:7a:cd:a9:a4:a9:ce:78:35:8d:97:6b:70:63:a3:6e:
         4d:fd:2f:9a:9b:00:6a:b2:eb:4d:2c:26:02:e2:3a:7f:43:24:
         2b:a6:16:f7:8a:52:c7:62:a4:01:34:c7:d4:60:06:4d:1a:d8:
         a8:3e:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:39:10 2025 by rpki-client