Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File:                     zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier:          oOMj+sdyOJrJIcCtvwtlZ6u2Y5VHYQpc/8eE928cilI=
Subject key identifier:   61:8E:37:92:5F:2E:86:A2:F6:04:62:2E:0C:F1:F8:D6:1B:50:CF:E8
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer:       /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial:       019765F1EE66BDD17874166A97A627FEAF4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number:          158B
Signing time:             Thu 12 Jun 2025 21:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:43 +0000
Files and hashes:         1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=)
                          2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: sI0b6FJaYerZXb93064RBEDcfQz39bd7rM4von8khkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f1:ee:66:bd:d1:78:74:16:6a:97:a6:27:fe:af:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
        Validity
            Not Before: Jun 12 21:00:43 2025 GMT
            Not After : Jun 13 21:00:43 2025 GMT
        Subject: CN=618e37925f2e86a2f604622e0cf1f8d61b50cfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:65:0a:c9:f0:48:0b:d8:15:54:73:bf:d3:
                    9b:bd:9a:62:fb:1e:33:51:ec:b2:e0:32:86:34:19:
                    bf:d8:6d:34:bf:63:57:d3:f2:72:2c:24:b1:0c:95:
                    db:46:07:cb:5a:35:c3:5c:b7:f3:fd:0b:53:37:51:
                    f5:22:50:b8:b8:37:7a:a3:d9:9c:a8:82:1e:e2:19:
                    8f:b7:f6:6c:95:d0:13:b8:f5:a1:18:31:7a:ed:d9:
                    37:68:72:d5:51:bc:c8:d6:f8:39:51:e4:2b:e7:36:
                    40:6c:87:75:3f:d7:e7:a7:3c:38:3e:8c:a9:99:03:
                    6c:a0:75:38:1b:30:09:85:57:2d:5a:1b:58:bf:bd:
                    5d:0e:31:38:ac:58:09:c4:e7:6c:4f:ad:d0:2b:63:
                    e9:7f:73:c9:a6:17:5d:05:52:e3:17:54:08:17:9f:
                    44:de:53:7b:65:fb:98:8c:ad:e8:5c:63:6b:15:75:
                    93:b7:d9:69:50:81:cc:4b:30:cf:26:74:64:bf:42:
                    4b:97:ef:c4:65:03:e5:6a:1a:f8:36:d2:e8:6b:54:
                    08:49:b8:59:83:fd:35:e6:3c:0b:52:08:8c:88:3a:
                    40:9f:46:1a:50:c8:37:3a:01:06:f1:5e:9c:c1:20:
                    0e:3d:dd:bc:4d:98:33:60:33:bc:40:85:82:f5:d4:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8E:37:92:5F:2E:86:A2:F6:04:62:2E:0C:F1:F8:D6:1B:50:CF:E8
            X509v3 Authority Key Identifier:
                keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:63:cc:1c:ef:14:5d:db:25:af:b9:02:06:99:12:a4:fa:4f:
         c0:68:39:ce:35:7c:99:08:1b:cb:14:49:3e:a0:c7:f9:b9:16:
         6f:a8:5d:d5:37:4c:d4:e8:28:5c:22:39:c1:56:b6:6a:b8:cb:
         ba:79:b4:d0:57:ab:fb:dd:9a:d7:5a:5c:fd:f0:a5:af:a3:0d:
         69:63:ca:53:83:30:51:5c:f1:13:0b:d3:2b:6f:cb:81:79:dd:
         5a:a3:d0:29:7c:eb:11:54:2e:e2:16:10:e9:b2:4e:29:e1:f3:
         fa:90:ab:92:af:b3:49:89:7e:eb:03:9d:46:36:66:6b:5e:05:
         4c:c8:aa:f8:62:c5:74:a3:2b:44:f8:ca:af:04:55:95:68:69:
         36:19:c1:50:84:ad:cb:53:6d:05:92:23:20:d4:6e:c2:90:3e:
         5a:9a:ed:c9:d2:8e:6e:f0:35:23:32:c6:76:3d:59:64:e3:75:
         80:84:cb:d1:15:27:1b:37:68:92:7b:92:44:64:02:cc:4f:05:
         98:0d:3d:48:ff:45:1e:50:7a:e3:7b:d3:f4:e8:4a:d2:65:57:
         15:09:e7:61:fd:c2:74:29:52:f2:ba:45:58:a0:21:cf:58:46:
         05:58:97:68:b2:d4:3b:2c:fd:f2:8f:a4:8c:96:be:c7:6f:4c:
         09:4e:e4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:50:54 2025 by rpki-client