Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File:                     hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier:          LxMVPqtBHcf5oNcoUJWaMxv5/wH11cgLEXKszoqfO+k=
Subject key identifier:   00:9A:3A:A6:DF:DE:21:DB:6C:88:51:15:F9:23:8C:C8:80:3F:BE:9C
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer:       /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial:       0197639598DEE1F7E1688B6E247D319F055E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number:          158B
Signing time:             Thu 12 Jun 2025 10:00:37 +0000
Manifest this update:     Thu 12 Jun 2025 10:00:37 +0000
Manifest next update:     Fri 13 Jun 2025 10:00:37 +0000
Files and hashes:         1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=)
                          2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: 66g7EWhJo/mCp7yaE/gY4CcmXiMuB6XivpatZ5VVheE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:95:98:de:e1:f7:e1:68:8b:6e:24:7d:31:9f:05:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
        Validity
            Not Before: Jun 12 10:00:37 2025 GMT
            Not After : Jun 13 10:00:37 2025 GMT
        Subject: CN=009a3aa6dfde21db6c885115f9238cc8803fbe9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:51:1f:03:b9:40:62:69:ce:63:7d:7a:f0:
                    ed:f7:b1:ad:fe:65:d2:c8:d1:6a:00:19:f3:4f:98:
                    39:73:bc:4f:18:1d:68:dc:02:28:6c:8b:8f:57:d0:
                    80:fd:d2:14:63:b1:4a:0e:cf:f2:70:74:2c:f8:e2:
                    c2:7e:91:7d:ab:25:51:b6:71:4d:b6:f6:78:65:ca:
                    10:ac:9b:82:57:01:01:a9:1a:aa:2b:4e:7d:df:52:
                    97:31:7d:18:43:f2:96:c8:95:e0:51:42:ba:cc:4e:
                    39:cd:f5:27:bd:65:71:5f:36:e6:53:86:bc:8b:27:
                    e3:aa:55:b3:49:ff:ff:12:af:ac:40:a8:d4:f5:53:
                    1d:0a:f7:29:1d:48:f8:fd:19:e5:08:1c:08:83:d9:
                    7e:25:ab:6d:71:ca:b8:fd:fe:7b:10:a1:db:b0:11:
                    6b:8d:13:c7:09:e9:09:55:c8:cc:6a:6b:47:4f:e8:
                    31:1c:70:32:30:ae:04:08:d2:73:f0:af:4c:d5:1f:
                    c3:93:55:49:c8:57:e8:d3:4c:3f:85:d8:88:77:68:
                    06:76:81:7d:71:49:a7:4d:56:b5:81:95:b4:87:10:
                    17:cd:c2:2a:4c:24:d9:9c:59:ee:89:6a:e5:5b:8b:
                    9a:ac:97:1d:d3:3d:c3:43:b5:0c:98:91:0f:e8:8b:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:3A:A6:DF:DE:21:DB:6C:88:51:15:F9:23:8C:C8:80:3F:BE:9C
            X509v3 Authority Key Identifier:
                keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3d:fd:29:e7:53:5c:04:75:b6:5b:7b:4e:6a:a4:fb:54:42:
         f3:04:92:1a:85:0b:71:c0:00:b6:63:d2:96:2d:83:1b:7a:df:
         41:a2:f9:a0:99:ff:eb:8a:9b:65:35:66:d9:01:5c:24:4f:4a:
         8e:13:3d:0f:d1:01:35:72:af:78:9b:72:eb:f5:4e:52:c8:c3:
         90:71:5a:16:16:6b:85:09:2b:f8:fa:eb:11:fd:94:5a:ec:c8:
         3c:4c:52:ea:0e:3f:1e:3b:b5:71:4d:42:78:35:82:41:49:42:
         bb:af:3c:ff:33:c2:4b:95:29:d1:a7:a1:e9:0b:a4:ce:1e:8a:
         0d:bd:10:3b:a3:f5:f2:26:e2:55:d9:c0:23:36:1e:29:68:c0:
         d9:48:fe:7f:b4:a4:01:d5:75:ef:e9:39:92:e7:b2:8b:ec:7c:
         03:ec:b0:8b:59:b6:69:67:05:6b:22:05:7d:88:9e:c8:c0:36:
         f8:7c:3a:c6:d5:12:6f:d1:20:9e:6e:d4:6f:7c:37:f6:07:7e:
         80:b6:81:b1:59:45:fe:5a:e8:ff:67:ed:52:20:af:08:7f:38:
         8d:3d:75:3f:a6:9a:af:11:a3:6d:57:36:69:5d:c1:84:2b:81:
         13:7b:65:e3:df:e1:ad:3b:2b:5f:ea:c3:24:89:b5:2b:89:9e:
         d8:3c:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:03:19 2025 by rpki-client