Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File:                     dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier:          fu3figunzVxtY1/3pPojfGHFrVcN82xXI3eloOhHB1Y=
Subject key identifier:   BF:39:13:7F:E9:6D:ED:63:24:59:F0:AB:6C:48:3C:DA:54:4B:8B:85
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer:       /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial:       01976B865038146FCC78B7D5939BD15D2E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 23:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:53 +0000
Files and hashes:         1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
                          2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
                          3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: HKvvZhnUodsXYFnoyxEBr4/xnHFkbJZafEkCnJrHnjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:86:50:38:14:6f:cc:78:b7:d5:93:9b:d1:5d:2e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
        Validity
            Not Before: Jun 13 23:00:53 2025 GMT
            Not After : Jun 14 23:00:53 2025 GMT
        Subject: CN=bf39137fe96ded632459f0ab6c483cda544b8b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:0e:d4:eb:85:06:21:6a:26:b5:f1:84:70:
                    c6:0d:7a:2d:34:58:70:cc:b2:4e:d5:b8:97:94:39:
                    1d:f5:c1:ca:6a:9d:26:ff:32:54:20:8c:36:07:9a:
                    90:0e:c9:ef:83:e4:49:e2:e5:d7:12:9e:1b:00:85:
                    9e:5b:f4:23:14:3c:20:a2:8c:b7:e0:b4:05:5a:3e:
                    8c:fa:90:f5:4d:14:4a:53:7a:56:74:c5:c6:3c:ac:
                    b5:f1:4f:9e:9c:ad:41:a2:ce:0f:ae:8d:c2:34:0d:
                    11:ae:11:25:42:8e:c6:d1:20:0b:11:97:2f:40:c5:
                    07:fc:ba:ef:bb:a9:63:64:d1:d6:67:96:d5:51:c2:
                    6f:5f:e9:34:0d:87:a1:d0:9d:dd:c1:f2:46:49:2d:
                    08:f1:69:e0:14:33:85:f3:36:9c:83:5d:0a:46:70:
                    0d:60:3c:2b:10:78:8f:0a:04:8e:0d:93:5f:af:c2:
                    2b:80:0b:cc:e0:e3:77:47:57:5e:0a:3f:5f:93:b5:
                    5e:3d:12:30:39:d1:34:af:d5:35:fe:78:d3:83:5c:
                    fb:c7:f4:78:8e:ee:c4:d7:6f:a4:9b:2a:cc:20:f0:
                    17:64:53:fb:ce:44:2c:f8:7c:70:e5:c2:86:14:04:
                    b6:a8:fe:43:5f:60:1f:41:4c:98:61:bf:20:2b:de:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:39:13:7F:E9:6D:ED:63:24:59:F0:AB:6C:48:3C:DA:54:4B:8B:85
            X509v3 Authority Key Identifier:
                keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bb:59:d1:8a:db:fc:47:26:ef:ce:3c:1f:e7:d5:96:ae:9c:
         91:8f:90:e2:6d:87:82:a7:9b:b9:19:3e:e4:97:77:6b:a3:7a:
         3c:db:38:ed:27:6d:53:aa:16:d3:6e:64:2b:39:49:00:f0:ca:
         92:84:46:f6:91:e3:c4:86:dc:24:39:74:22:67:ad:26:fe:29:
         29:fd:44:33:c0:e0:91:84:66:34:7a:6b:6c:4d:aa:54:49:2c:
         c4:12:2f:80:e3:05:37:ab:33:31:ef:80:6b:83:8f:b8:23:d1:
         8c:1d:f6:94:84:97:d7:94:3a:40:12:91:4f:14:b0:cc:6d:40:
         5a:ec:df:7d:90:c0:d8:0d:b3:61:34:e0:32:c3:eb:03:88:24:
         20:7c:d5:96:08:7e:9d:24:ff:d4:ef:74:6c:d8:49:06:d5:ca:
         9e:70:ed:a0:79:f1:bf:ce:38:02:a8:f1:6d:1e:0f:c4:4d:f1:
         4e:48:9d:dc:ed:75:ae:bc:75:c2:c4:da:8a:bf:fa:4c:86:c6:
         27:ea:27:d1:1e:e6:57:c0:96:96:c1:a6:89:94:56:ae:b4:04:
         ed:58:83:f3:81:35:ef:81:10:af:85:21:a1:fc:a0:ee:52:9f:
         af:c4:0e:45:e6:29:f8:09:9a:e1:bc:1f:73:19:29:08:28:07:
         45:c9:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:56:06 2025 by rpki-client