Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File:                     TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier:          uUrJx9N5U3UuVQrFsG0Big2xNAxljNmLcUsvL4w7ZVE=
Subject key identifier:   84:03:C5:11:64:CE:A4:E2:F4:B4:D1:CB:3C:F6:31:0A:EF:9D:20:E4
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer:       /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial:       01974A7B994536FBB745214ACC4D136DE0E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number:          158C
Signing time:             Sat 07 Jun 2025 13:01:43 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:43 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:43 +0000
Files and hashes:         1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=)
                          2: GkzUiQjxAwqkp5Z39cxt3GUWIng.roa (hash: vLNapJVPwIEWIsnPkWMH8DeeJJAdXd67gcOUXS+rDWA=)
                          3: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=)
                          4: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=)
                          5: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=)
                          6: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=)
                          7: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: 3kwHbBS2Ck0rxEXgN+SvxyQqKEn2H02XIlYMFK2RSHE=)
                          8: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=)
                          9: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=)
                          10: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:99:45:36:fb:b7:45:21:4a:cc:4d:13:6d:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
        Validity
            Not Before: Jun  7 13:01:43 2025 GMT
            Not After : Jun  8 13:01:43 2025 GMT
        Subject: CN=8403c51164cea4e2f4b4d1cb3cf6310aef9d20e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:a3:6b:ed:57:55:06:eb:cb:f6:5a:d9:6b:
                    e3:b9:87:8d:4c:ee:7f:b5:f7:a0:ec:74:eb:cc:4a:
                    57:8d:d2:cc:44:59:8b:7b:70:52:67:df:ce:d3:bc:
                    b6:a0:ff:2c:03:d3:9b:4e:bb:59:95:b3:5e:d4:f9:
                    7c:a2:7b:9a:5a:08:0f:53:51:02:69:61:ca:1d:63:
                    21:7a:b2:8d:90:03:cc:44:68:32:f9:8e:6e:3e:12:
                    50:65:8e:f0:13:1e:d0:01:79:d3:6e:8f:93:a9:f9:
                    2d:23:e4:c6:02:6c:f3:99:79:8c:7c:8a:24:76:b2:
                    ec:a2:74:4c:5e:52:19:26:67:a2:41:43:67:a8:3c:
                    8d:e6:e6:4e:96:6a:25:ba:aa:71:8b:77:83:05:5f:
                    03:b1:60:42:40:a5:43:a5:52:32:42:3c:38:07:72:
                    44:19:9d:74:a8:c3:a5:63:a7:5e:07:2c:e1:1c:b1:
                    79:43:2c:8a:9f:67:33:77:d3:25:1c:5b:37:5f:a2:
                    23:08:f0:4b:81:9f:c7:f5:b0:7a:85:b3:cb:87:74:
                    a4:dc:18:57:a9:a7:08:80:66:a4:57:16:1c:ee:19:
                    7d:ed:e6:ad:c9:65:33:27:cd:76:85:8b:24:9b:58:
                    2c:cd:3c:43:c7:81:dc:4c:8b:9a:c8:f1:f5:b0:fe:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:03:C5:11:64:CE:A4:E2:F4:B4:D1:CB:3C:F6:31:0A:EF:9D:20:E4
            X509v3 Authority Key Identifier:
                keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:64:f6:17:49:c5:1d:3f:7a:11:59:b5:46:98:b0:fd:87:50:
         2f:02:5d:56:f8:1a:dc:9e:c7:d5:43:7d:fb:66:7a:70:97:db:
         ee:60:4b:26:f6:13:c1:c4:ca:8f:61:64:33:2f:b3:65:af:e9:
         ce:5d:d3:d9:cd:31:a4:72:19:87:3b:37:fe:34:18:73:ed:27:
         66:c3:70:a1:7d:f6:3a:10:c7:f8:6d:26:3b:ca:87:a8:83:b8:
         f6:cb:d0:ff:dd:ad:80:ba:08:1e:37:9d:64:f7:e5:6c:5f:d3:
         8f:98:44:e3:6d:0e:c9:6e:88:de:2a:a6:02:cd:fa:f5:8e:95:
         89:2f:53:f4:af:71:bf:a6:b0:e8:f0:e9:40:de:d2:4f:44:98:
         0f:a6:d4:57:59:b1:8e:f9:2b:e0:1c:35:57:00:54:da:79:7b:
         4a:d5:b4:3e:8d:aa:bb:19:5d:02:1b:3b:18:53:28:7b:3c:c0:
         2f:ec:55:eb:24:92:21:63:6a:f5:b7:82:0a:c9:47:51:cd:7d:
         6c:33:0d:a2:ec:79:b9:cb:c8:f4:d7:ac:38:f1:da:24:32:8a:
         f1:63:03:0a:a1:8d:59:cf:0b:d7:54:3c:16:1f:55:62:bc:64:
         c6:82:60:fa:9b:db:f2:8d:de:11:10:95:d5:63:75:72:f2:ee:
         d8:f7:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:56 2025 by rpki-client