Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
File:                     iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json)
Hash identifier:          XtLo72dAiLl8zsJQd9xnMaLBcutZ6lAhpQd0r0NSF6Q=
Subject key identifier:   50:06:71:67:94:90:E3:B7:DF:5F:47:F0:38:0E:0B:17:AA:1D:B2:ED
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       0197654D4AF4B15C786A68612F84B6E78A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
Manifest number:          158F
Signing time:             Thu 12 Jun 2025 18:00:53 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:53 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:53 +0000
Files and hashes:         1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=)
                          2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=)
                          3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=)
                          4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=)
                          5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=)
                          6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=)
                          7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=)
                          8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=)
                          9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: ewo4XDUNsbZTeW/uS9JOW1bJyvqMjz7TJy712oxRetk=)
                          10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=)
                          11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4d:4a:f4:b1:5c:78:6a:68:61:2f:84:b6:e7:8a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Jun 12 18:00:53 2025 GMT
            Not After : Jun 13 18:00:53 2025 GMT
        Subject: CN=500671679490e3b7df5f47f0380e0b17aa1db2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:45:43:8f:cc:c7:43:1d:8e:ab:4e:8a:5d:
                    d3:22:8b:ff:cd:79:2c:c5:9a:b6:25:44:b4:74:93:
                    07:62:c6:64:1b:ab:c9:9b:50:0e:aa:d4:9d:66:fa:
                    a1:c1:53:b5:9a:fb:72:b0:9b:0e:83:26:91:42:21:
                    20:85:b9:0f:f9:8f:28:79:2f:53:c8:44:6f:1f:dd:
                    8d:83:fb:5c:f2:5b:ed:eb:fb:4e:a0:4a:11:50:b3:
                    31:cd:02:f6:37:2f:5a:40:9e:d0:58:ef:35:db:a8:
                    d7:7f:27:70:4c:d3:e9:fa:c2:e2:6f:d9:f9:8b:86:
                    ab:fd:6a:3e:6a:98:0f:40:d3:a6:d4:68:5d:5d:62:
                    f0:f2:e5:3f:ec:02:e2:60:b3:cc:07:a2:ee:4b:96:
                    54:b9:27:d8:0f:56:85:be:62:1b:df:0a:1c:51:c2:
                    35:09:48:c0:94:c8:d6:73:85:18:2c:c2:5e:d0:03:
                    db:fb:25:ad:d5:a5:17:36:fd:5d:59:9b:9a:8f:02:
                    5a:df:56:33:43:fb:88:fd:aa:49:45:be:e5:b4:6c:
                    ae:44:0f:06:e2:ee:30:f4:84:2c:11:ac:03:8c:7d:
                    3e:80:f2:78:ae:d8:e4:01:79:5d:ce:79:09:0f:17:
                    c4:ea:ab:f0:3a:10:c8:26:dd:00:f0:68:50:2e:d5:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:71:67:94:90:E3:B7:DF:5F:47:F0:38:0E:0B:17:AA:1D:B2:ED
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:13:3d:d2:f6:fd:c6:1b:e8:da:32:71:60:2c:d9:4c:80:b5:
         4b:9f:a5:1a:9f:62:6b:c8:63:6d:b5:da:27:51:84:0f:7d:42:
         c0:51:49:4c:88:a1:dc:b3:ef:31:e7:fc:54:4c:58:b0:16:a4:
         4e:cc:04:3e:12:9a:3e:45:95:b0:ed:5f:09:03:39:e4:80:b0:
         cf:72:f4:db:40:f9:12:1b:3e:1b:a7:90:ea:8d:95:21:7a:a6:
         1d:d0:f6:0d:3e:98:cb:23:50:54:fa:0e:72:0b:e4:6a:5c:b0:
         20:97:52:d8:ec:6a:8e:f1:a1:28:7f:4b:85:19:f3:a4:2b:4b:
         db:83:61:fd:fc:9c:4d:78:bf:fa:c7:a6:59:42:80:b0:17:50:
         cb:dd:57:5b:97:b8:ce:7e:c8:b0:d2:d6:83:39:29:f1:27:5b:
         63:e0:30:b7:d4:95:d6:5b:2d:c8:58:d7:e1:f6:ba:45:a7:6b:
         52:dc:fc:21:63:70:33:74:cd:57:78:4f:85:e3:17:b2:55:b3:
         4a:7b:f5:f6:b7:62:cf:88:11:f5:6d:33:f7:70:f7:19:50:54:
         a2:d0:0f:e1:ec:38:f2:6e:c2:b5:c0:ab:b8:de:7b:15:e8:92:
         01:7a:8e:cb:de:94:e4:6d:12:89:2c:b0:df:fb:e0:e5:fa:b4:
         e7:16:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:42:38 2025 by rpki-client