Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier:          HApY5dvYoEUBGAKxv5vrfYHBK6b0rYCGJGYJy6QeqIc=
Subject key identifier:   D7:D0:32:56:9A:A7:46:DC:C4:38:86:06:54:85:34:5C:97:0A:FB:18
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       0197499F68C594FAC71AB6059F18998DD9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number:          158C
Signing time:             Sat 07 Jun 2025 09:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:13 +0000
Files and hashes:         1: 1-OU8ynWh7hqVFrdBOkMtgcV_cyM.roa (hash: 2Z6R77gXPR8CMiL2pJA+cy/i8yv0OcauEoqVSugVcdA=)
                          2: 1-kqzU8qAhhNZY7H0Ndru0AUv97E.roa (hash: MOz4DkQjI1MR3SyTcLV8IHQbmNNubdVqTfJ9r1l5kGA=)
                          3: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: JpXtl40L4u9IdJhPuNfXs1HaUfwD8Hv30Ei9WlYlAzw=)
                          4: 1ec8k_WMs_2LdLKJif0fp_GIvwQ.roa (hash: jxxIlpO+0WHC3wFwCkHj3JuHjD6nZEUilknF8lXMaCM=)
                          5: Ae-QslNU3gy3W0egozYRZj4M0_I.roa (hash: Fot9yL7In+gwq2RwKasepUOmQgQxJF7U8tdZaL0Gl3I=)
                          6: CJVe4Q9dvFn43GMuu9ouncpPy44.roa (hash: fVjdLHUWi0mI5w+c0YY8mq7OHdrDZDIYLR8WdsperC8=)
                          7: DzlQmA_VBIGa0S2Ib3ru0uYU6B8.roa (hash: ELhH2bzUprEO/3eAQ/a8F4+xXbw+c46ynlrkjWiuJwA=)
                          8: G35q9Z2lY9lOlfDoaB-f7dy-t1k.roa (hash: rvuWbhI2XPWBqSashyuxPe1zWTfRREMGtr7cToSjfCg=)
                          9: GyISCTVnPZ05yiIGPaqs_BIQe3A.roa (hash: HXZebLN++PLAND9Fse+1Vz/sTH36ccZhc302O6BcMlM=)
                          10: LF6dF_VT3QtcYPznHVqeLHnLYbY.roa (hash: bxEhbvWwJ1lPZWvcpTDbbFtyf4z4sIVRNx+TGcckJYA=)
                          11: U_jjbw9lzHq0xKAwAxsBzjbGfuo.roa (hash: KknKYtyfRpoZbln9jyULBZjAmlNQNXuziktabTnaV5c=)
                          12: VYoQKf5s-KqqrBacz9y-o4_GDiY.roa (hash: UH0yetw/jt23rWa1xemX8fv6/k46KisKMpR12GlubxQ=)
                          13: Xplom3nYOHGxQQTuZEZCEr66_Rk.roa (hash: NwgZUVMlsLrLr2h+U/8kat3nDsEvXOmfPISS6ilc3LE=)
                          14: _B-JnyUPZQzEiIpewQUHY23Dk8A.roa (hash: NxgiPM6W1BurD6b6luiHd21TWQRNu1avToG9bjOQC9U=)
                          15: c9mjRKIiIhveB8hpl4lJgX61pz0.roa (hash: ePmlGQCFU1GYCtfOlxI9naN4sv+47lFMcBkkM1EOqVc=)
                          16: jRfP4yhxZ6gmXikGgT5hanUmtTI.roa (hash: szuMEcU8of5ZSWw/BlllGKgEXTfJgvQ45tZ2Ke7a4ME=)
                          17: les_6wsnsgt3N6J3jrSt8FGLh2o.roa (hash: w/OoB0CohLCCVJmsCqR/wlJuBKJFnQYzzH1QL/J31rg=)
                          18: nAEeOljdfjmUrTtKHCmdse5HIUQ.roa (hash: 6lNLUdGCLsYYW+Uu2Ct57V4Z84VTvW+oIx8ctf9Jouk=)
                          19: pc4ANj7Qidc5B-S95LpC0Ics6vQ.roa (hash: cjIj4ScC/DHh2+FMzl+VW8zNJX+8oo0yjvETje/w7yg=)
                          20: pcqqevXAthwv3P-WoufnBPWJaRE.roa (hash: 7nvC+/+3VO3mfOuCXbDt2+XqJ32zrEYBfDXqNhmkNMA=)
                          21: rPNof6DogEeZBOoLRZwMk-ApPt4.roa (hash: CTp7V/ExiJcmMtx5knVlKl/ZFReGeFmiKwsyPdlpDgU=)
                          22: vaa9ieh0_g2-KFsweXS2ah7MH-0.roa (hash: WpWtS70OFLoq/cDJkKS6rBsNcjAtsJlmw3l1M8ZvGIs=)
                          23: xkBewuEMiuEaRl6tlZgkZIiJIpo.roa (hash: dz2/11ogK5tMzMH1ftdVfoVFsbvw27yY273l023m5PI=)
                          24: zeHkodOSM4PpNF-T8cKNsYd36jA.roa (hash: rKk25l72K9AU6v1SG1iHJTk7NBGypKCBGqKX+tmg7So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:68:c5:94:fa:c7:1a:b6:05:9f:18:99:8d:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jun  7 09:01:13 2025 GMT
            Not After : Jun  8 09:01:13 2025 GMT
        Subject: CN=d7d032569aa746dcc43886065485345c970afb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:21:b3:cd:b4:fe:11:4f:d7:aa:d1:04:2c:
                    67:58:6b:14:d2:ef:bb:a0:df:6e:68:6c:0e:a7:e4:
                    a4:47:30:ff:0c:f8:27:0d:d8:7c:02:90:9b:cc:13:
                    9f:f1:52:31:b0:b4:96:75:02:3a:bc:b1:42:8b:f1:
                    4d:f3:0c:85:bf:eb:13:01:22:7d:b4:f4:66:51:d7:
                    73:03:53:f0:9c:4c:95:1b:5d:74:3c:ac:0b:78:d1:
                    87:c2:70:17:1f:e6:13:fa:c5:dc:57:99:34:cf:ea:
                    60:2e:fa:ec:8f:a6:0c:24:d2:64:32:9f:64:e9:fd:
                    5d:6c:82:cc:f3:7b:aa:b4:b8:1b:61:2e:4c:e7:ea:
                    d7:1d:78:05:6d:e9:54:70:0d:0f:69:e3:98:ac:9d:
                    60:01:b0:21:de:94:5c:80:e9:45:67:a2:e9:4d:91:
                    4d:db:2a:45:b2:a4:5f:a1:47:11:00:14:1c:bb:52:
                    23:36:52:80:57:89:12:f5:e7:4a:b8:9d:d6:42:46:
                    76:bc:65:3d:60:f9:2b:83:6f:22:ed:bb:dd:d1:d7:
                    4d:b9:a4:ad:1a:bb:9b:2f:28:b7:72:19:fb:02:dd:
                    0a:a0:a0:b3:59:45:86:9a:6c:41:da:37:fd:d1:32:
                    84:29:a7:ef:09:72:a6:9a:64:61:31:81:f2:ec:07:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D0:32:56:9A:A7:46:DC:C4:38:86:06:54:85:34:5C:97:0A:FB:18
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:74:bb:61:f7:38:c5:ba:3e:82:d0:33:56:34:bd:d3:fd:bb:
         dc:1b:19:e4:51:ca:69:36:02:5f:5a:10:54:ad:2a:9b:20:ab:
         54:a3:65:92:f1:e9:cc:0a:7e:c5:7f:6a:a5:b4:1f:62:35:e0:
         bd:fa:7b:fe:08:49:b8:3b:e1:be:93:0f:39:be:ad:4e:18:60:
         4f:86:2b:2e:12:05:ef:de:e0:73:b6:2f:d6:08:26:2c:cc:77:
         a6:45:7d:5a:15:fd:d8:d5:c4:5a:49:8f:86:7d:ea:68:43:c3:
         05:fc:d2:fa:a3:21:d6:2c:fb:5a:09:e2:de:ff:3e:75:ed:70:
         4b:3f:ce:e5:ac:5d:23:c9:a9:09:d6:55:bf:96:2f:9d:f6:fd:
         f9:52:e6:20:e5:3e:0a:91:2b:d0:a3:37:5a:f1:39:dc:55:f8:
         1f:b8:dc:43:de:aa:92:07:e1:bc:72:b4:12:33:11:71:c9:82:
         ed:f2:a2:d4:59:c6:dc:b7:1d:68:73:38:7d:0f:68:5e:bc:52:
         17:1e:a9:65:c0:29:30:45:6d:de:7c:38:ae:9c:b2:41:78:2b:
         71:c4:dd:02:1a:ae:a7:98:cf:f8:44:0b:0f:37:b4:c3:3d:d3:
         4b:b5:55:7f:3f:94:94:99:b2:41:74:dc:4e:86:e9:06:9e:a9:
         95:79:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:12 2025 by rpki-client