Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          M0coigrX/spdwB2h51UbiCXP8wHXMidRgZ54L1xI83Y=
Subject key identifier:   18:45:3D:99:12:4F:FF:5D:4B:97:F3:A3:F7:F2:F8:C8:E8:F8:FC:E7
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       01974B565264BAE8DC1F55A0F3AAAF78A2B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          158F
Signing time:             Sat 07 Jun 2025 17:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:37 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: IzgjxzBo66qX9zU3ihPU6SYZEpNx3fg6/JZWm9Z8wuQ=)
                          2: C_WwagoxlETCmC3xgCtnJTSTiFU.roa (hash: DG+d+a6FZH6p2em3ravozO37hhn38lEfqxBjBjLqEHk=)
                          3: egQwRHU5AE-klzoLV3_Sw_tkXYo.roa (hash: Nr/ciMVzEFBT/2eRIx3/XPFBkeS8bONzVMg9DvriCrs=)
                          4: p0iloktOu4HrQp8Fbazd0VMW18A.roa (hash: WuG4K1BU3enI1jODi4UBhPWn6TyCLQBuQYRFhQ0mg6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:52:64:ba:e8:dc:1f:55:a0:f3:aa:af:78:a2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Jun  7 17:00:37 2025 GMT
            Not After : Jun  8 17:00:37 2025 GMT
        Subject: CN=18453d99124fff5d4b97f3a3f7f2f8c8e8f8fce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:82:ab:f3:5e:92:f2:8a:9e:64:f7:ea:ec:
                    3a:23:93:ba:2c:51:65:3e:e4:c3:df:a8:1f:a4:81:
                    c8:bc:9c:12:d0:a7:60:4e:eb:f9:35:8f:d7:6b:b7:
                    3c:5d:13:c3:1e:90:87:13:3a:c3:c8:a0:49:d1:49:
                    9f:92:d3:98:47:7c:84:ec:84:80:01:c2:81:6c:9d:
                    0e:4d:62:27:5c:10:4d:14:ab:d1:45:85:44:e2:a4:
                    ad:25:1a:93:6e:04:a0:92:62:ca:86:e1:30:2e:1a:
                    b0:c4:51:96:e4:70:d5:1d:6a:93:f9:ed:6e:58:f0:
                    0e:43:6c:f3:45:a1:0d:8e:50:99:a5:4f:a4:22:55:
                    2f:9f:c4:97:7a:04:a3:95:b2:11:74:fd:85:e3:82:
                    3c:6a:95:b7:0e:1d:b6:83:4b:8b:39:7b:cf:5c:7d:
                    f7:c1:cf:aa:67:af:f5:46:94:b0:ab:ed:6e:f9:2a:
                    a7:1e:05:fa:f0:db:92:00:1e:a0:1e:b8:a0:62:98:
                    62:0b:5f:74:ea:66:59:b9:57:3b:04:c0:d1:51:29:
                    b8:d7:01:02:2c:f7:e8:b0:0d:12:05:38:9d:6c:44:
                    ca:f5:20:10:cd:fd:ae:56:a1:bd:30:1f:64:47:bd:
                    a2:00:59:22:6f:fc:fa:a6:76:db:ed:29:54:8c:08:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:45:3D:99:12:4F:FF:5D:4B:97:F3:A3:F7:F2:F8:C8:E8:F8:FC:E7
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:b4:e2:e0:52:91:5e:98:93:5d:df:94:8e:31:2f:3e:e1:
         cd:78:6f:b8:e6:0b:39:b3:f4:ea:e4:48:5e:0a:4f:ae:bd:56:
         d1:54:6f:f3:1e:1e:6c:40:a4:6f:22:4d:75:93:eb:1a:d7:9f:
         9e:97:4b:30:63:65:46:92:4c:23:7a:be:53:60:b4:5f:de:59:
         bb:8d:59:fb:f3:3c:5a:44:fd:6d:69:2f:37:ad:73:a8:ca:83:
         11:fb:e7:38:01:79:71:8d:37:4f:b6:e0:15:0d:ff:60:7c:c4:
         23:e1:b8:e8:d2:82:ab:36:04:ea:28:df:c7:4b:b9:69:01:2f:
         4d:35:4a:c3:b1:11:bd:2b:c1:d8:f4:34:53:b9:38:e6:1d:99:
         03:78:6d:ca:ff:41:57:60:b5:89:58:75:ce:13:b6:b1:fe:46:
         f6:3c:05:67:29:d8:4e:a8:75:56:d1:19:23:44:42:d1:92:c6:
         84:28:62:4e:e6:5f:91:5e:b5:d3:71:9e:76:a1:c9:06:51:5f:
         1f:f9:e4:d4:1f:50:a7:1a:68:e6:e5:b9:04:ca:42:d0:3f:66:
         1a:3e:ec:c8:2d:a1:05:bc:b6:33:3b:8f:36:af:17:83:97:c3:
         c9:ea:f2:74:02:9c:43:4e:87:c9:8f:1a:05:c7:ee:ce:fd:6f:
         af:40:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:47:45 2025 by rpki-client