Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File:                     sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier:          fplEn7df+Gc0tlEvCyKWGnitGTnCNwk92bqKTlfMBgU=
Subject key identifier:   42:6A:1C:F2:96:F9:37:75:30:82:41:32:FC:64:12:59:DB:EB:69:6E
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       01974C69985F461823817B37A03411ABA801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number:          158C
Signing time:             Sat 07 Jun 2025 22:01:17 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:17 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:17 +0000
Files and hashes:         1: AtRByS0zJPDiOgR2GmP-us653x0.roa (hash: FxQtASMxynUngBeMPqWpgsQ0Eb/Ckc7wV64mAxHzC3U=)
                          2: COiOJlNhkw7oyE7_CjG4wzI_Has.roa (hash: 8/lIfM84EcdzcDMM/2GUz4VN/PyuQhy9fYkjMmQOIDI=)
                          3: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (hash: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=)
                          4: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=)
                          5: hsH-e4sppViS3iNq4F4kEU0ep0g.roa (hash: dqKnOJjGSqIH7LzL8ZBxcWScroq9fSiiauAsWgvwoYw=)
                          6: lAQuczRYGnewQpXm-9DH2Aa2FJM.roa (hash: cpxHeGSggctdEQY5QxkgjLkTiuh9nHgtIGZfv1ijkMo=)
                          7: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: zvekekg3nsIApvYZijrKNztTQQJXuORRcEKuPNX93xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:98:5f:46:18:23:81:7b:37:a0:34:11:ab:a8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Jun  7 22:01:17 2025 GMT
            Not After : Jun  8 22:01:17 2025 GMT
        Subject: CN=426a1cf296f9377530824132fc641259dbeb696e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:c7:69:6a:cd:88:bb:da:29:20:e5:f3:2d:
                    af:50:1a:1c:7a:c4:22:b5:da:4b:ce:5d:10:6f:7e:
                    e3:70:a0:ec:6f:e6:6e:74:f5:f3:6c:40:62:e1:f5:
                    c3:26:60:d6:57:1b:bf:42:2e:09:4c:4f:5a:8c:2c:
                    c7:22:d3:e8:8f:ba:e3:f2:26:b3:6a:04:5c:14:43:
                    1e:f1:44:8b:40:3e:15:64:88:d7:88:0e:88:c9:27:
                    39:a7:40:d4:3c:c6:0f:32:ec:76:47:4b:e7:8f:a8:
                    68:76:0f:ea:aa:42:e6:22:ba:7d:33:1e:c7:3f:ee:
                    d2:b4:9d:31:91:f3:86:17:02:2d:68:05:48:7e:f1:
                    01:9b:d6:47:bf:b0:14:d1:d6:79:9d:40:98:79:b9:
                    e1:45:12:b0:e3:bb:3c:81:41:4a:84:ca:89:ed:e7:
                    32:3a:9d:ba:06:82:c5:a3:ec:98:e5:b5:4f:a2:bb:
                    98:77:88:eb:43:13:46:44:9d:67:d2:fc:fc:3d:26:
                    da:92:0c:b8:42:bc:61:50:2b:19:5f:f9:1b:1b:9c:
                    79:25:b0:01:e1:98:a5:4d:36:43:e8:b2:c3:91:0a:
                    23:7c:a3:01:a0:8f:5b:cd:ce:ae:30:c8:2c:d2:59:
                    de:91:48:40:7b:c4:dc:a6:7b:42:87:9e:91:4d:f9:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:1C:F2:96:F9:37:75:30:82:41:32:FC:64:12:59:DB:EB:69:6E
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:32:aa:49:98:02:fd:2c:3a:41:bb:ac:17:0d:66:ac:fa:ca:
         c6:ba:bf:42:03:f2:34:f0:6c:42:7f:39:af:ab:48:a8:d3:2e:
         69:de:a5:d1:f5:d3:4e:a0:ca:94:21:79:e5:c8:55:23:86:2b:
         1c:d4:4e:50:da:03:2c:ed:8f:37:37:11:ec:bd:77:94:a3:3c:
         52:da:4f:67:e5:d6:9d:07:99:e4:34:a8:66:07:84:64:31:dc:
         cc:45:48:3c:5f:be:3f:72:09:c3:52:dc:85:9b:0a:42:96:94:
         c8:52:1c:64:4a:35:31:7b:3c:84:a5:84:76:a7:26:30:f8:16:
         9c:a2:77:2a:2d:b3:5c:03:4d:3d:3a:c4:f6:77:eb:44:b8:00:
         f3:7c:ea:6e:9a:2c:f6:b1:f6:2d:81:e5:c0:b6:be:f7:1a:84:
         78:7a:2f:0f:fc:f9:cd:34:2a:b8:67:a9:3b:d8:39:7e:02:e9:
         07:7a:b6:29:d7:c6:91:90:14:d4:9b:68:a9:c7:77:26:72:1d:
         75:dd:14:38:75:a8:6c:53:5e:0a:66:22:dc:2d:48:a4:0d:0c:
         a4:bc:38:3d:37:63:a5:35:b7:4e:65:a7:1c:8b:7b:79:4d:62:
         81:6a:62:0e:cb:23:6f:77:d1:4c:d7:a0:60:b9:4f:2c:f0:c9:
         ca:22:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:23 2025 by rpki-client