Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          +Pl96WrjsuBGk0LvnDqOebJDEnQXw/R9NbAcgj8slOo=
Subject key identifier:   AC:66:5D:CA:09:5E:94:67:98:EC:5F:39:44:E6:90:DC:BB:FA:0E:9D
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       019750EAA898D2AD109E126742689290A96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          159E
Signing time:             Sun 08 Jun 2025 19:00:45 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:45 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:45 +0000
Files and hashes:         1: 3UEtPfriipiMbZa6fhwdY3QYuQU.roa (hash: zafMtM+qwE9a62Lg/QOalLMv3c0V/Ie0I/pDVfmKXPw=)
                          2: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (hash: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=)
                          3: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (hash: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=)
                          4: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: BKpWfZdWs6HLaRVIFBuZDt7uOegDDA1P612Z6Lkrtik=)
                          5: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (hash: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=)
                          6: iu7nkMMloLMO4qPNzRbpLkYcyro.roa (hash: 4ANkfNKLh7Z2wCwDamCSoeryHoHgG5FlZVn0i1JfMb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:a8:98:d2:ad:10:9e:12:67:42:68:92:90:a9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jun  8 19:00:45 2025 GMT
            Not After : Jun  9 19:00:45 2025 GMT
        Subject: CN=ac665dca095e946798ec5f3944e690dcbbfa0e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:82:ca:cb:b5:47:f8:54:d4:59:89:c8:1f:
                    67:12:d1:33:95:e8:76:d8:a9:ce:f7:7f:c7:b0:84:
                    b0:a0:2e:74:37:e6:6c:27:ce:e0:78:79:48:e4:24:
                    56:75:68:aa:3f:92:b6:49:44:f9:18:47:ea:f6:35:
                    67:55:74:14:b0:63:d9:b6:b8:76:68:f0:0d:97:31:
                    d3:29:e9:85:3d:04:bc:f2:3b:1a:db:f7:d9:0e:5d:
                    9e:b7:1d:3a:60:a7:ab:c5:74:0c:b0:62:42:89:e9:
                    e6:ba:aa:6b:86:c2:e7:ce:ec:50:0e:cb:f1:1d:e0:
                    32:9a:17:46:ff:41:cf:44:68:b5:dc:e3:93:0f:e9:
                    b5:aa:98:aa:67:02:79:51:c2:63:95:27:c7:5b:bf:
                    b9:4c:65:f7:2c:95:03:4c:3f:08:6b:4a:56:3c:99:
                    00:c9:77:7e:36:fc:e1:a3:b2:ab:de:68:ad:32:36:
                    a8:6c:84:56:cb:2e:29:5a:c5:41:2f:0b:41:ef:d8:
                    5a:18:4e:71:c1:d1:ad:5f:11:f0:82:99:f9:ec:d6:
                    13:be:98:20:24:9b:98:79:8f:57:1e:6b:08:93:ef:
                    a3:c6:75:7d:ef:72:f7:85:88:17:52:72:5e:9c:f8:
                    ef:5d:f6:f5:6d:76:d5:74:60:36:7b:47:5f:d0:13:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:66:5D:CA:09:5E:94:67:98:EC:5F:39:44:E6:90:DC:BB:FA:0E:9D
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:94:0a:36:8c:a5:b0:6e:2d:4c:59:cb:28:09:4d:93:55:2e:
         56:c0:d3:92:32:8d:0a:ab:a8:b6:c4:3c:a6:c2:63:26:48:fe:
         8e:1d:9f:38:ef:80:dd:3c:6f:88:29:82:f1:c0:2e:7f:8c:d6:
         f1:95:c3:17:ce:0b:3a:d4:be:81:a7:0c:c0:58:d2:41:e7:c2:
         b0:d0:23:66:15:de:ff:fa:45:16:36:5c:09:ff:a5:ab:60:37:
         ba:01:b9:e1:d8:76:72:52:83:9b:72:9e:ca:73:ce:b2:89:b0:
         da:11:51:74:96:ce:e2:f5:82:3d:d4:92:2d:ee:44:ec:25:ca:
         67:05:3e:e9:99:40:74:0d:95:71:e4:0f:79:10:4d:f7:92:a4:
         ef:c2:a2:b1:72:15:ef:22:43:0b:ea:cc:fb:b0:38:28:6c:a8:
         36:2c:1e:31:42:22:1f:f0:9a:ed:94:92:98:de:f3:50:78:ae:
         f1:a5:20:a6:31:02:72:8b:68:53:97:6e:72:17:c2:4e:ce:60:
         e0:24:16:c2:0e:b2:b8:a3:58:d2:e8:c1:aa:5d:f6:8d:cb:ad:
         96:4e:94:0f:2e:d0:b9:06:db:4f:bc:58:7a:2d:11:54:bb:93:
         e6:d5:ed:39:43:22:b1:5d:2f:da:cb:b9:c6:03:ea:c9:94:42:
         f5:bd:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:57:47 2025 by rpki-client