Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File:                     xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier:          EPNxYH1Gf8gI8UZWW+7FmBx/VPRVN7alHpLjiT73eno=
Subject key identifier:   D0:79:C5:2D:48:5F:84:D1:85:C0:B7:57:1D:D8:2B:62:0D:47:7F:0F
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer:       /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial:       01976584B2DB380489FCCC83098AFB2771B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number:          158A
Signing time:             Thu 12 Jun 2025 19:01:24 +0000
Manifest this update:     Thu 12 Jun 2025 19:01:24 +0000
Manifest next update:     Fri 13 Jun 2025 19:01:24 +0000
Files and hashes:         1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
                          2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: FLN+j0KJYXI/OhZg/tg9ZXMEBr6tI6uuGYrFwTfPngI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:b2:db:38:04:89:fc:cc:83:09:8a:fb:27:71:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
        Validity
            Not Before: Jun 12 19:01:24 2025 GMT
            Not After : Jun 13 19:01:24 2025 GMT
        Subject: CN=d079c52d485f84d185c0b7571dd82b620d477f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:28:6a:1a:88:df:b3:23:c6:e2:46:bd:2d:
                    32:4f:fc:16:24:19:67:12:09:b9:93:45:ef:aa:f3:
                    9d:ef:23:5f:e7:dd:78:04:b5:bf:1d:56:6d:9b:07:
                    4f:7e:4d:66:1a:8a:f6:f5:30:21:87:71:43:19:2d:
                    d2:58:f2:a5:ae:b9:0c:5f:46:4c:e9:81:f1:7e:79:
                    97:b5:ce:38:d9:52:cd:fa:f8:a3:db:8c:82:2e:4c:
                    e7:2c:34:98:f1:81:6b:36:c2:de:f7:b6:d5:f3:e2:
                    fa:bf:29:02:a2:c0:28:07:82:82:cc:d7:37:0c:93:
                    1b:86:0a:29:e1:8b:96:ad:f8:da:53:30:07:34:26:
                    7f:44:9e:e9:8f:d8:70:8c:19:49:36:d7:3c:27:62:
                    c0:9d:c8:27:76:fa:48:1a:e4:f1:0a:65:8f:9a:7c:
                    b6:85:8f:0c:40:99:3a:50:a6:01:55:d8:84:ba:6b:
                    33:a4:03:8f:0b:3c:da:11:cb:0a:6f:89:cc:93:72:
                    4e:08:b8:f8:fe:00:01:ec:6a:b9:b3:0a:e0:ea:68:
                    1a:b6:08:74:74:fe:a2:53:5b:e1:39:16:56:06:fe:
                    1a:2f:7d:09:cb:fa:0e:e0:9d:ad:33:f1:e8:33:83:
                    a0:9d:80:af:e0:fd:fc:2d:77:33:6b:a9:43:2c:a7:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:79:C5:2D:48:5F:84:D1:85:C0:B7:57:1D:D8:2B:62:0D:47:7F:0F
            X509v3 Authority Key Identifier:
                keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e3:85:b6:92:3e:6b:b8:f6:d9:e3:bd:b8:3c:14:f1:88:75:
         51:d0:dc:1e:7e:6a:90:25:22:d6:1f:00:bd:55:31:dd:8e:06:
         d2:a6:23:c0:77:ff:fa:d4:33:25:72:fd:87:3b:46:1f:7f:9f:
         54:cb:72:c5:42:df:a0:03:9d:fd:55:aa:5a:05:59:fb:03:3e:
         8a:eb:c5:18:b4:da:4c:53:25:aa:8e:b1:42:f2:69:2f:e1:dc:
         90:71:3d:b2:5a:97:66:7d:95:11:e8:6e:6f:25:a8:d7:14:ba:
         f6:74:9d:98:92:07:29:a2:0c:87:1b:95:10:de:26:af:84:09:
         37:6c:76:59:1c:c6:82:cb:fc:cc:38:e7:a8:e3:84:2d:10:0d:
         5d:61:62:f2:e4:c5:8e:bb:ef:dd:0c:81:c6:2f:72:70:06:38:
         d7:0a:b2:40:4d:6d:31:25:2d:cc:b2:18:48:f9:4b:98:a2:f5:
         66:81:b0:6f:4c:2e:ac:08:dc:7b:5f:79:14:56:03:7c:64:6a:
         ab:b4:ac:e9:02:0e:66:fd:7d:0d:4a:75:64:7f:9c:00:da:6a:
         55:20:f6:c6:e4:f5:75:08:21:ef:d1:66:cf:f3:f5:64:0e:ab:
         89:67:58:0d:fa:4f:86:03:fd:be:84:0a:5e:4a:85:50:0a:62:
         83:12:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:03:44 2025 by rpki-client