Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File:                     tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier:          oaPH2L3FTtOy6JKDqVabuJz6IjfSmr76hHDe2sKIZsY=
Subject key identifier:   49:C0:DA:CD:30:54:F3:65:2D:C8:B1:FB:3C:37:7D:B8:16:BC:C2:88
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer:       /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial:       01976772687E7D2CFFEBCE5A87049D9498DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 04:00:40 +0000
Manifest this update:     Fri 13 Jun 2025 04:00:40 +0000
Manifest next update:     Sat 14 Jun 2025 04:00:40 +0000
Files and hashes:         1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
                          2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
                          3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: iM2zTZUOY1abylUgzVt37+gPvuBABcZSu5uLOwvRm14=)
                          4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:72:68:7e:7d:2c:ff:eb:ce:5a:87:04:9d:94:98:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
        Validity
            Not Before: Jun 13 04:00:40 2025 GMT
            Not After : Jun 14 04:00:40 2025 GMT
        Subject: CN=49c0dacd3054f3652dc8b1fb3c377db816bcc288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:08:c0:50:ec:9b:81:6a:e8:ef:14:4b:3c:
                    be:99:0f:74:f4:bb:b4:a0:c1:7a:8b:25:06:45:9c:
                    e6:ee:1a:31:ff:a8:a7:47:de:62:77:76:79:e6:04:
                    b2:40:eb:50:17:35:ab:9f:0f:9c:38:88:b4:7e:4e:
                    aa:11:d1:9b:5b:43:45:b8:c7:a8:fd:87:12:b3:5a:
                    6e:52:92:9f:1b:b9:f4:3d:60:51:58:da:6c:2e:bb:
                    87:9f:87:22:dd:77:98:35:5a:cd:9d:5a:5a:45:4e:
                    8a:3c:ba:1d:c4:98:f7:6f:e7:39:5d:16:cb:6f:30:
                    af:ea:93:83:ed:67:9e:38:1f:d6:8e:9a:69:dc:75:
                    37:1e:5e:9e:19:c7:a0:79:35:53:e4:12:76:d4:3f:
                    4d:93:2e:91:7b:6d:ae:bb:bd:f4:aa:62:e7:61:73:
                    88:d8:6a:2c:b1:28:ed:35:af:7b:16:2f:b5:c2:93:
                    ee:f4:d4:87:82:30:52:38:d1:8c:f2:e6:05:f6:29:
                    3a:3a:68:0b:4f:6e:62:da:8b:de:39:3f:2b:72:5f:
                    ab:b4:a8:0c:d7:7a:4d:c5:77:7b:df:49:ba:cc:40:
                    49:55:cd:bd:e4:b3:08:a4:78:f8:47:99:58:10:d6:
                    db:5b:99:39:a1:34:01:6a:99:aa:d8:b4:db:9f:97:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:DA:CD:30:54:F3:65:2D:C8:B1:FB:3C:37:7D:B8:16:BC:C2:88
            X509v3 Authority Key Identifier:
                keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:13:47:ca:0c:9a:5a:4c:65:aa:30:f7:8d:6c:d3:b6:77:
         fb:5c:45:c2:08:c7:2d:7b:bc:1c:36:57:4e:20:47:f8:a4:b0:
         52:eb:cb:91:08:03:7a:f7:43:44:90:fd:22:01:ac:c8:36:19:
         27:d8:68:66:0b:0a:62:00:98:88:0e:6f:77:11:a2:2e:10:09:
         af:e4:20:f6:31:d1:64:1b:8b:1d:ac:98:53:78:84:6a:25:3f:
         4d:e2:b3:60:36:ff:4c:26:8a:ea:62:cb:cf:13:bb:d3:94:66:
         09:1a:a0:bc:f5:48:b5:3e:d0:c0:73:b7:67:c0:a3:be:d4:62:
         b0:5e:cc:4e:a1:6e:78:2c:da:6c:c1:c5:6f:f7:26:90:4d:80:
         9e:b7:aa:11:ca:9b:6e:4b:8d:24:d5:08:3f:72:a3:94:8f:61:
         24:4e:8e:8d:85:a1:06:cb:8d:79:de:a6:6d:5d:19:72:b4:d3:
         54:1a:bb:81:f6:52:6b:23:a1:8b:04:f0:37:04:9e:63:0b:27:
         a5:62:3d:0b:7a:0f:bf:c3:9f:3a:33:03:4d:ca:8d:a0:d8:19:
         2b:c4:65:39:e9:a8:3b:d4:0e:be:1b:47:05:10:f4:4e:a7:d5:
         83:48:ca:8b:d5:e5:e5:28:12:62:c4:3e:d6:2e:b2:0e:5a:11:
         0d:68:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:05:09 2025 by rpki-client