Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File:                     mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier:          MXg6baB4+PVKah+E3oYLN/ngjoDA+lxU3E5EXJ6kcoU=
Subject key identifier:   55:89:37:8F:08:44:D9:27:FA:D5:5B:AC:04:52:F1:DC:3A:54:ED:FE
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer:       /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial:       019765F1E7A581FB56E47157EB25ABC0A2AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number:          158F
Signing time:             Thu 12 Jun 2025 21:00:41 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:41 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:41 +0000
Files and hashes:         1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
                          2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
                          3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
                          4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
                          5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
                          6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
                          7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
                          8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: +ENKecH/eeVak120t2TeABvPJ7YIBzBuamPSHMrio4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f1:e7:a5:81:fb:56:e4:71:57:eb:25:ab:c0:a2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
        Validity
            Not Before: Jun 12 21:00:41 2025 GMT
            Not After : Jun 13 21:00:41 2025 GMT
        Subject: CN=5589378f0844d927fad55bac0452f1dc3a54edfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:31:48:e0:bb:4a:60:ec:7e:9d:17:88:64:
                    b4:c4:29:3e:e1:3c:62:14:74:cc:1d:19:43:b4:1f:
                    88:58:41:1e:3b:75:cf:f6:5b:f3:21:ec:d9:13:c0:
                    2e:ae:c4:82:93:48:27:46:99:6b:fb:f6:78:fd:a4:
                    16:e2:74:f4:e2:ad:32:6f:1f:ba:85:e0:84:26:96:
                    c4:5a:f6:58:3a:0a:90:58:67:60:ab:ac:8d:86:08:
                    7b:80:b7:c0:b5:a1:84:40:30:ca:21:72:5c:95:63:
                    e6:99:27:0a:2c:46:08:bb:df:cb:10:9d:fd:e9:dc:
                    ef:d6:77:7f:42:3e:56:ed:5f:67:89:cf:49:eb:de:
                    5f:db:bd:2f:ad:8a:86:18:ad:49:15:ce:95:2f:a4:
                    be:c7:0b:45:38:82:44:cd:99:ef:81:50:14:dc:d2:
                    35:2f:18:7c:8b:e5:12:af:e6:c3:25:4f:87:26:8e:
                    22:8b:14:9f:10:f9:21:e2:35:a9:f2:43:41:eb:ec:
                    1c:96:8c:94:49:72:07:8f:72:43:a8:81:35:2e:eb:
                    7a:a4:21:e6:f6:c3:88:be:19:26:1a:0d:e8:6d:9e:
                    85:d5:9c:2a:72:37:e3:73:c8:95:d8:58:a1:ae:6c:
                    1a:e1:5d:5f:96:6e:61:41:09:a3:75:41:8a:f4:66:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:37:8F:08:44:D9:27:FA:D5:5B:AC:04:52:F1:DC:3A:54:ED:FE
            X509v3 Authority Key Identifier:
                keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:98:38:ea:2f:0c:fc:cf:59:27:3a:38:02:01:96:d4:38:21:
         f3:46:7f:45:bf:d3:f6:aa:68:fe:9d:f0:f5:3a:ed:b4:68:d9:
         44:ae:40:f0:1e:ce:77:5e:57:ef:89:d7:0e:b1:ef:23:05:45:
         65:9a:fb:8f:31:04:6a:84:41:97:53:a8:08:57:03:57:ab:47:
         93:59:3e:a1:8a:92:c3:66:4f:e7:a2:df:f8:7f:c1:e1:2e:99:
         1f:d2:37:ec:af:f3:59:8b:64:f3:a1:5d:60:cd:98:b6:51:5d:
         a3:13:84:30:d4:f0:da:8f:1b:f2:3f:7a:8f:af:d2:1b:8f:41:
         f8:5e:cf:62:8e:7c:55:9b:0f:31:a2:ee:3e:f4:a3:39:1e:a7:
         5b:55:4f:09:2e:5e:fe:2d:d9:3e:e8:4f:56:04:6d:b0:d6:40:
         5a:e0:e5:2d:13:29:60:2c:f7:11:2f:af:23:1e:43:a9:f9:75:
         be:e7:45:b2:85:58:c7:71:93:d9:13:04:82:54:6f:4e:46:4e:
         11:0d:78:05:85:91:13:7d:32:e3:bc:5c:ee:65:95:82:46:46:
         3c:33:ee:2f:d8:e4:d2:cb:55:23:ef:ec:95:67:ee:9d:b4:ba:
         0e:a3:df:29:cf:95:53:c0:b4:e0:fe:a9:93:6a:a3:f5:ca:77:
         9d:a7:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:08:49 2025 by rpki-client