Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File:                     uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier:          1hFraXzrhCazJQ5ZywqmKdq92ZBQfVJePAW1Vc1ZHD8=
Subject key identifier:   11:3A:10:F4:B5:AD:EF:9E:4E:2A:08:D3:3F:00:A3:D2:02:D7:18:FE
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer:       /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial:       019767E055F35957F11BB82E58A0D073244E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 06:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 06:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 06:00:44 +0000
Files and hashes:         1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=)
                          2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: jVtnfLrLFz3g4lAa12yA9CfjN3o/t5sSKZll5iqJeII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:e0:55:f3:59:57:f1:1b:b8:2e:58:a0:d0:73:24:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
        Validity
            Not Before: Jun 13 06:00:44 2025 GMT
            Not After : Jun 14 06:00:44 2025 GMT
        Subject: CN=113a10f4b5adef9e4e2a08d33f00a3d202d718fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:c3:f5:c2:41:08:24:d3:50:45:0c:18:a3:
                    dd:4f:45:a3:b3:f1:94:fb:dd:f3:71:4e:10:17:53:
                    61:81:ce:a8:da:dd:3d:b6:23:8b:68:68:e4:8f:b6:
                    47:87:fc:b3:d2:be:72:45:6d:e4:27:c7:73:b8:82:
                    70:58:14:7b:d8:98:12:24:5f:27:4c:7c:2e:02:3f:
                    a7:86:f0:e3:60:2c:6c:ad:db:fb:5f:a4:f5:6f:bb:
                    73:cf:7a:16:64:6f:a5:43:2e:ae:f9:80:43:70:26:
                    c1:4f:50:ec:3f:8d:1b:60:24:9c:6f:6a:7e:08:12:
                    a5:70:04:47:4e:a2:f6:a8:95:31:d5:f1:48:cd:ad:
                    53:97:25:a7:c4:30:34:80:4a:5d:69:eb:73:75:b9:
                    b5:5d:32:7d:c4:3f:35:11:11:3d:23:cb:51:fb:9f:
                    52:26:8d:d6:ee:a3:be:63:ac:49:5c:76:bc:3b:a5:
                    b8:c4:fc:fd:11:c7:63:5e:59:19:02:d6:3a:16:11:
                    93:e7:68:77:cc:92:ef:25:36:9b:b3:67:c6:d7:3d:
                    f9:d6:dd:4b:f4:d8:7a:81:90:20:9a:b4:30:c1:ae:
                    7a:e4:00:9e:8d:8d:c0:47:6c:2a:19:e7:e2:f9:46:
                    ee:2d:f7:a1:e4:91:ec:e3:75:1c:4e:42:2f:96:db:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3A:10:F4:B5:AD:EF:9E:4E:2A:08:D3:3F:00:A3:D2:02:D7:18:FE
            X509v3 Authority Key Identifier:
                keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:90:cc:3f:95:bb:a6:4f:1f:8d:d2:86:8f:e1:89:b7:d6:5c:
         c1:44:6b:8e:db:e3:57:d4:74:72:9d:61:d4:47:c9:fb:e2:ce:
         6c:74:24:88:5a:3b:14:e6:a1:b7:0e:91:11:73:36:73:b4:55:
         7f:7a:80:d2:20:38:3d:d1:23:2a:c4:b8:5f:35:3e:ef:ae:63:
         e8:74:ea:c2:b6:b1:c0:7d:5d:9b:f2:30:8c:4a:89:d8:a2:67:
         9e:7d:6a:63:6c:4d:d5:1f:e1:be:98:4a:b0:50:ab:84:b1:6e:
         d6:22:b2:13:98:62:a0:b9:b6:c7:65:c8:49:bd:13:d3:50:cb:
         f0:86:41:8b:3a:51:6c:2b:da:d6:be:7d:65:15:42:8d:82:ac:
         18:f8:9e:5c:3a:18:5e:63:b6:91:63:ff:59:b5:d9:dc:8e:d6:
         91:7d:5d:bf:a8:b3:d1:14:52:a1:1e:bc:e5:68:c3:ff:67:3d:
         c7:4c:9f:3c:67:19:1b:69:a8:ba:84:20:bd:a1:c5:e7:31:7e:
         94:b6:2a:a5:6f:12:32:11:fb:0e:d0:9c:ae:26:14:ae:d3:e4:
         3d:ad:ba:70:2b:d8:00:7f:0a:41:83:84:83:fb:9d:9a:46:09:
         0a:72:da:74:22:05:80:32:78:aa:f8:cc:d1:a4:c3:ad:6c:7b:
         8c:a3:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:18:54 2025 by rpki-client