Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          S/U1jYt5TIcD/zTC1+FD2RLZqUA/tWXg6viPMiRc5KI=
Subject key identifier:   9D:7B:80:D0:4B:CA:95:E1:EA:A3:CE:D8:65:A5:38:79:17:E2:C8:95
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       0197688553CBC8CBC612EDD7FE966C963A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 09:00:57 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:57 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:57 +0000
Files and hashes:         1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: XeGE2eu2kolqK3hsEIt0Fp5IR+bkXE5i5fzVBzfDqMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:53:cb:c8:cb:c6:12:ed:d7:fe:96:6c:96:3a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Jun 13 09:00:57 2025 GMT
            Not After : Jun 14 09:00:57 2025 GMT
        Subject: CN=9d7b80d04bca95e1eaa3ced865a5387917e2c895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:8d:e4:87:09:7f:18:c2:93:3d:1c:33:ed:
                    0e:c7:db:b6:58:27:18:3a:21:dd:42:c9:06:c4:32:
                    42:f7:09:a8:73:cd:4b:71:db:f8:26:67:56:29:5d:
                    6b:03:8d:21:59:4a:01:af:59:c9:8a:72:a0:b3:eb:
                    90:c0:ed:3a:fe:c5:98:c2:18:6d:31:85:39:d7:72:
                    74:0e:fa:8e:b2:6b:c7:53:1f:4d:40:8d:7b:f8:47:
                    24:96:86:e3:89:50:4c:51:ee:ec:a7:4a:3b:a6:f8:
                    ad:df:0d:4f:30:7a:26:92:c1:35:ef:9e:a6:2f:a7:
                    70:4a:c4:0a:93:6e:7c:08:ed:6c:8d:04:97:bf:9e:
                    1c:e0:19:3f:d4:0f:5a:a6:b0:b3:2d:3c:d0:be:9a:
                    d1:e4:15:a9:48:06:d1:47:ba:60:10:d5:66:1f:7b:
                    38:5f:d9:70:ce:2e:83:d2:f2:ad:12:da:bc:d5:46:
                    5d:5c:76:4b:fb:70:e1:37:67:33:37:9e:e5:60:fc:
                    ca:b9:2c:de:15:6f:12:da:85:a4:a2:a2:27:e7:f2:
                    c4:2d:1b:bf:f1:48:75:d1:8d:85:fd:32:71:f3:e9:
                    9f:97:cf:56:57:41:7d:39:79:f7:ab:11:d5:6c:47:
                    bb:96:10:28:fb:f4:66:2d:dd:c7:13:a5:b9:99:4f:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7B:80:D0:4B:CA:95:E1:EA:A3:CE:D8:65:A5:38:79:17:E2:C8:95
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:cc:91:8c:36:dd:e0:d1:96:37:10:92:b0:b7:52:0e:61:
         ab:b8:ed:47:7e:c8:84:21:95:0a:69:dd:1c:8e:2b:9f:84:c6:
         09:e5:43:be:ec:5b:7b:52:62:cd:56:82:89:7e:77:88:0c:a6:
         59:cf:14:c0:75:ca:ee:5c:62:8f:51:91:72:16:4c:2c:9a:5d:
         84:1c:11:bc:99:cf:7f:c1:8e:f5:0e:96:d6:ec:17:6f:7d:77:
         f3:e5:50:6c:6e:08:3b:ef:cd:c8:47:aa:dd:da:eb:f7:89:8f:
         b9:be:5d:83:32:d1:18:52:1b:8a:5b:04:56:87:5f:65:d7:d2:
         9f:1d:10:04:7c:84:03:e2:f2:cc:7f:26:2b:90:a6:0e:02:af:
         d1:c4:ec:8a:af:17:fc:79:95:0b:f6:f7:49:5d:ff:8e:b0:d6:
         cd:d8:a0:64:e8:9f:26:04:c7:6b:41:5d:99:51:28:33:ef:4c:
         f7:43:77:d6:81:0a:8b:ab:87:1b:5c:47:fc:d8:21:a0:42:dc:
         d7:80:3e:86:52:5e:3a:5a:7f:81:7b:69:d2:ff:44:a5:1a:51:
         36:cf:f8:89:b5:43:64:9a:97:62:f5:ce:46:54:d8:1f:c5:04:
         b2:bf:7d:52:ff:2c:5b:6f:6a:92:d8:27:0c:35:bf:05:11:56:
         5e:5b:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:47:25 2025 by rpki-client