Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File:                     mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier:          RUpQn1E9Czw3cHzdhRrkYPJrmA8Vud8f+gVIEgG1wSE=
Subject key identifier:   3C:5C:F9:25:D2:A4:FA:3E:78:26:46:E2:80:F4:16:C5:56:61:88:C5
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer:       /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial:       01976A3CE7453B3F958EB8F315DFCF7D62FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 17:01:05 +0000
Manifest this update:     Fri 13 Jun 2025 17:01:05 +0000
Manifest next update:     Sat 14 Jun 2025 17:01:05 +0000
Files and hashes:         1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
                          2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
                          3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: UroKlLtXxS3mmnZ8uLJ6DKZrqHkLBlWYHHpJ24VUucg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 17:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:e7:45:3b:3f:95:8e:b8:f3:15:df:cf:7d:62:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
        Validity
            Not Before: Jun 13 17:01:05 2025 GMT
            Not After : Jun 14 17:01:05 2025 GMT
        Subject: CN=3c5cf925d2a4fa3e782646e280f416c5566188c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:98:00:70:34:25:db:fe:95:be:2d:9f:65:
                    71:77:7e:0a:ed:91:0f:4b:09:63:96:52:32:d8:e7:
                    af:94:5b:61:11:91:6f:48:0c:aa:f4:fa:bb:c0:34:
                    60:4f:89:82:14:aa:87:d4:5a:80:e0:77:9f:dc:8c:
                    9c:9f:08:61:fb:a5:39:33:59:d0:51:c2:60:9c:de:
                    41:2c:8b:56:55:67:e2:70:b3:93:f3:a1:cf:2f:82:
                    36:2c:9f:ba:c5:29:d4:51:1a:bf:8e:4a:87:ad:cf:
                    ee:8a:f2:b9:ee:a9:b9:c0:ae:2a:2a:c6:66:d5:81:
                    69:17:f6:52:d5:ad:1a:ea:85:47:be:97:0e:19:ce:
                    b0:f3:e8:ab:45:bd:41:33:0c:44:87:de:c7:94:49:
                    36:56:96:94:b1:53:17:54:18:84:ab:c4:fd:93:41:
                    e5:35:e5:91:d7:cc:06:f2:ca:90:97:84:28:80:2f:
                    15:62:41:7f:95:e1:64:f4:91:20:f4:b3:11:34:83:
                    e5:94:f3:fc:ac:9d:39:b6:ca:98:db:e7:2f:8f:7e:
                    bb:40:4a:6e:e5:55:f2:80:ed:25:5f:6a:20:63:d7:
                    2e:07:d5:e7:e5:5e:e5:bb:d3:ba:cd:39:ee:36:3d:
                    1e:19:95:13:b2:60:5a:19:77:15:7d:ef:32:bd:f5:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:F9:25:D2:A4:FA:3E:78:26:46:E2:80:F4:16:C5:56:61:88:C5
            X509v3 Authority Key Identifier:
                keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:0d:b6:70:1b:d2:33:fa:a1:b2:43:4b:a1:88:30:fb:d4:
         f4:09:ff:cc:eb:bb:84:99:06:6b:59:0b:4a:a6:46:77:d3:90:
         a9:93:d2:ea:67:7f:9e:05:d6:d6:31:b9:a0:0e:db:85:1e:d9:
         4b:fb:6b:33:ae:72:08:ff:b4:54:c1:b4:42:c6:21:13:ff:51:
         3f:8d:16:69:a6:ac:35:52:38:22:8c:ee:53:2b:42:ee:fb:a3:
         cd:a8:84:c9:fc:72:2d:56:b0:85:49:70:65:b9:2a:94:1a:64:
         95:39:cc:6f:b9:87:cd:ae:ba:71:80:21:e8:b6:a5:db:8a:22:
         85:2e:3c:78:bf:1d:38:0c:a3:1e:e9:f5:b5:8e:7c:99:27:5d:
         74:5e:ed:94:d3:64:94:80:7f:47:8f:c9:21:4e:50:14:ba:a7:
         21:85:5a:77:d0:2f:06:ca:a7:01:86:09:03:7a:f5:ef:58:9a:
         18:f8:18:6e:a6:df:bf:81:53:15:ce:a5:2f:ac:f5:45:c9:58:
         39:0a:a9:0b:f7:da:19:9d:52:be:a0:7d:0b:f6:c1:b6:7c:aa:
         1c:f0:b0:01:31:ca:d6:79:12:83:fb:65:cd:d7:1a:0d:fc:f0:
         e7:f0:7d:50:52:e7:3b:be:b2:35:f8:77:cc:83:98:23:40:cb:
         46:79:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:52:08 2025 by rpki-client