Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File:                     I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier:          dvZvGVoVhW7s+uu2zcjPeGFcsDDTFRZ0RTDc8WkHAm4=
Subject key identifier:   AA:5A:93:B6:45:1C:C1:F4:A3:73:EB:AA:ED:3D:0A:5F:C2:F4:F8:6E
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer:       /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial:       01976396230682A42BFEF5F1F80B8ED0BB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number:          159D
Signing time:             Thu 12 Jun 2025 10:01:12 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:12 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:12 +0000
Files and hashes:         1: GdDoydsiseWesyFp8nfXLAwY-Ss.roa (hash: ZX3EqP0ya1H5H5fx2BO7+jv6fp5rUfEUzpZL5ygfDiA=)
                          2: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: g9YnjJATOEItLm7cMwpIsaaxJOtUUKn/QpD95fNThxo=)
                          3: VNOgNSigRRAb70bKyLVuHiqWqcg.roa (hash: 0V+O6nfILt11f/kT8RnWqxjr5DCANmAANaaUT4hQ8EI=)
                          4: yujM9boXq2owCDALS6fBRuV-QS4.roa (hash: uBWZxd0MuVhnf/a/H4XCYeoko2cyqYwJN4ZzBnbQh88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:96:23:06:82:a4:2b:fe:f5:f1:f8:0b:8e:d0:bb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
        Validity
            Not Before: Jun 12 10:01:12 2025 GMT
            Not After : Jun 13 10:01:12 2025 GMT
        Subject: CN=aa5a93b6451cc1f4a373ebaaed3d0a5fc2f4f86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:aa:6a:7d:a6:91:20:4a:6d:ea:48:09:82:
                    66:f1:a6:82:e7:2c:a4:43:08:b6:3b:67:3f:da:4c:
                    01:2d:78:ba:87:32:f4:f9:83:42:03:ea:dd:2c:9c:
                    31:18:86:8c:07:83:82:db:34:d7:d2:aa:f9:45:8b:
                    21:b4:31:34:c5:58:57:1d:e0:f2:68:0b:76:e6:be:
                    a6:29:c7:3f:8f:c1:c5:e6:2e:d2:fc:c5:09:cb:3d:
                    ce:0a:aa:89:7b:ad:b5:89:35:86:df:03:5d:3b:e7:
                    58:0f:ef:39:0a:91:35:81:54:87:bf:f1:14:c5:23:
                    2d:b8:48:78:50:2e:66:8e:37:f6:e1:8e:eb:cc:a4:
                    9a:a4:b9:1c:78:af:4d:99:e8:bf:a5:7f:e5:5d:31:
                    2c:7a:31:c9:a2:11:f1:2b:09:aa:24:13:2a:5f:a0:
                    bb:b3:bc:9e:39:07:9b:ed:0c:52:e0:6c:34:51:ba:
                    cf:f5:5d:2f:42:b0:06:ea:1b:85:37:3c:ea:53:0f:
                    01:9b:7b:4c:fc:90:59:41:42:9f:ca:50:4e:f5:07:
                    1d:ef:4e:df:50:ed:bd:b3:f4:ab:33:84:28:bd:48:
                    ea:9b:ad:bd:09:ac:be:18:15:ee:08:64:a3:f5:e5:
                    d9:36:c0:1d:cf:c3:9c:20:85:6d:51:03:98:42:fd:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5A:93:B6:45:1C:C1:F4:A3:73:EB:AA:ED:3D:0A:5F:C2:F4:F8:6E
            X509v3 Authority Key Identifier:
                keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:46:8c:95:a9:88:19:1f:95:b7:fd:88:67:11:29:9e:19:
         43:56:28:ae:aa:7e:50:69:21:5e:f9:ee:85:8f:dc:93:36:a7:
         ba:30:df:79:1c:d0:2b:d0:dc:fe:8f:15:3b:52:52:b9:8c:b0:
         8c:e4:df:13:2d:ea:b5:fe:65:6f:67:43:65:6f:eb:0e:5e:04:
         3d:11:b5:7d:2c:ca:d9:9f:26:87:a9:f1:55:df:e2:1e:37:c8:
         04:5c:4c:54:c4:57:db:5e:e2:9b:0b:33:f9:a0:51:27:2d:c9:
         f5:1f:ee:d7:ca:fa:61:a9:55:18:80:bb:f8:18:f5:27:15:63:
         41:b9:16:66:c9:77:a3:ea:23:20:aa:09:82:ac:67:81:e5:81:
         fc:99:3e:d3:48:a1:82:90:e9:f7:56:7a:29:51:1f:7f:8e:f5:
         cf:d3:a7:d8:83:9d:d4:02:32:ed:43:04:9b:18:17:e1:25:32:
         fe:45:4f:a4:ee:c8:04:55:99:6e:99:16:ed:d8:d7:bc:88:99:
         26:fa:66:5d:23:88:e7:a7:f4:2a:6d:cf:8e:d5:29:5b:0a:76:
         0b:f1:9b:33:37:61:a8:01:b0:e9:d9:09:59:8c:a9:77:79:73:
         63:91:9d:5f:11:33:93:e7:11:08:69:c0:f2:53:4f:cd:e9:2c:
         7f:6e:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:12:51 2025 by rpki-client