Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          DNmfJeT0iWyETSp6p6CYVkOSXeRsq22T5LYBFEuAv40=
Subject key identifier:   37:BF:52:B2:C6:B1:80:83:DB:B4:C1:B8:3D:7E:CD:1B:85:D4:B0:50
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       01975800594DDD3556B4CCA06A59A9D61B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          158C
Signing time:             Tue 10 Jun 2025 04:01:47 +0000
Manifest this update:     Tue 10 Jun 2025 04:01:47 +0000
Manifest next update:     Wed 11 Jun 2025 04:01:47 +0000
Files and hashes:         1: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: MNg8+NdFLyT9P0ktFwQUwqVoRqJ3toMs0jW1XwINfYw=)
                          2: S6x2GO2EJ9KcCMRTpcGWRPoM8AY.roa (hash: 9sQE61f7Pr/mVJ2y8Avta2FMC1JI4rdqPKWLZVtugf0=)
                          3: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          4: hd67_XZte5UJxG8Z9Bjjhd5C3aY.roa (hash: m5+Tgfa03sp40l5g/5GYZoTIL8T/7QDNBIaZ6t+2ge8=)
                          5: ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa (hash: uwqj4CFvKVNkmhKMglSF22ZAXWwfKXlh6tWeNXdxYbE=)
                          6: pyvDjODiPHkAxN6-QiS3Bwjt5rU.roa (hash: jqfy9tM9gc1fFIYB2QLYTyq7G/zrF5GzYLadxFIN+0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:00:59:4d:dd:35:56:b4:cc:a0:6a:59:a9:d6:1b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Jun 10 04:01:47 2025 GMT
            Not After : Jun 11 04:01:47 2025 GMT
        Subject: CN=37bf52b2c6b18083dbb4c1b83d7ecd1b85d4b050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:4a:68:b3:d5:ed:66:74:51:73:50:d0:6e:
                    fa:ca:25:33:ab:0e:d4:bd:39:e0:06:87:7e:94:5f:
                    df:6b:19:fa:24:c1:0a:5d:75:84:f6:f5:74:af:53:
                    90:c1:ec:b5:2e:f1:82:bd:e9:78:a4:af:cf:ea:a8:
                    23:07:e4:bc:ef:71:e7:77:bc:6d:dd:45:f3:be:73:
                    86:99:e6:d1:51:33:0b:28:ff:2d:af:43:41:2e:44:
                    fd:03:fc:00:4f:fe:75:6d:47:06:36:3c:8f:b0:bc:
                    c1:93:32:32:99:56:fa:13:9b:d2:98:fb:0a:da:70:
                    91:3d:d1:c0:ac:00:dd:ea:57:60:47:80:97:69:53:
                    4e:9b:1a:db:f5:f6:a4:e6:eb:2c:3c:ac:9d:7b:1e:
                    00:56:ac:77:8a:b5:c7:6d:9f:b2:43:4d:b2:7c:8f:
                    ea:1b:8d:8b:98:8b:28:b0:09:af:b8:1f:3e:88:89:
                    fa:7c:97:94:bb:5b:22:1e:2e:35:98:fb:6d:dc:8c:
                    33:1c:80:d6:ac:62:5d:d1:89:43:25:07:48:59:a8:
                    26:22:6c:03:7b:08:b2:8a:63:d6:ff:b1:51:61:88:
                    55:3e:fd:97:0c:e6:59:a9:44:83:bb:ff:30:e4:c1:
                    63:f5:84:c2:1c:31:9a:42:fb:3d:e1:e8:40:86:5f:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BF:52:B2:C6:B1:80:83:DB:B4:C1:B8:3D:7E:CD:1B:85:D4:B0:50
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:dd:16:10:4b:35:cc:ba:fa:e9:23:fa:3f:c8:5c:c9:ac:55:
         dc:5b:0c:84:e2:d5:af:20:c2:49:fb:50:87:59:4a:22:b5:06:
         2a:89:8c:17:a1:3e:d1:20:c4:87:9e:0d:09:29:6d:6d:c7:72:
         f2:6b:95:8b:8f:b1:9c:f0:04:66:dc:c7:c2:8b:a0:36:1c:4f:
         3b:50:f5:b2:e6:d0:32:ac:b8:de:88:2a:d8:fb:c1:e4:01:48:
         11:e9:cb:44:4e:fc:cb:cf:30:72:4b:87:cc:df:d6:74:6a:3f:
         18:fe:ec:35:54:fa:c4:a0:49:94:69:76:c2:f1:5d:b1:d4:c3:
         2b:15:06:dc:84:85:91:59:87:dc:78:e7:77:db:14:1c:0d:fa:
         88:2d:ab:8e:34:c0:6c:58:b5:af:4b:04:b6:c6:1c:e6:35:e3:
         5c:92:37:98:7c:0f:1e:6f:da:f7:21:4c:52:54:aa:4b:72:38:
         80:b7:9b:d0:52:91:a2:f4:a6:b2:ba:26:ec:90:1c:c3:17:97:
         4f:c5:7a:42:10:04:40:33:97:6c:a8:40:50:22:45:40:ea:d9:
         5a:07:a0:44:82:89:dc:fc:37:3f:8c:77:b4:b8:f4:ee:2e:18:
         ef:a6:12:8e:0e:d5:d8:42:3a:69:88:58:1e:a6:e7:b7:ef:d5:
         5e:35:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:24:13 2025 by rpki-client