Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File:                     RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier:          JKKVxkyZnV4o0DqE7xknru2YBigrGNaa6zjob2czlYc=
Subject key identifier:   1B:3C:EF:D1:29:78:30:73:7A:68:DC:EA:FC:B6:6C:0A:43:44:45:57
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer:       /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial:       019764DF693954693F7C2418E8DBD3D14B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number:          158A
Signing time:             Thu 12 Jun 2025 16:00:52 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:52 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:52 +0000
Files and hashes:         1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: uX3ovOD5ztdypW0l9Uq7LC7hQaNtePHWXsg2e24ioH0=)
                          2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:69:39:54:69:3f:7c:24:18:e8:db:d3:d1:4b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
        Validity
            Not Before: Jun 12 16:00:52 2025 GMT
            Not After : Jun 13 16:00:52 2025 GMT
        Subject: CN=1b3cefd1297830737a68dceafcb66c0a43444557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:f8:07:f2:1c:b5:20:f2:1a:a8:b2:90:03:
                    44:e2:1f:fe:49:89:99:8c:07:42:16:57:ea:43:8d:
                    1b:4b:db:5d:34:11:39:8e:aa:9c:95:62:a1:74:0e:
                    55:7f:d1:8b:bd:81:b5:ee:42:63:15:ba:fa:de:2f:
                    d6:df:b3:36:62:23:6a:22:ae:e1:6b:86:6b:e5:54:
                    48:8a:da:d5:26:4a:e7:b0:cb:3b:58:53:28:87:5c:
                    1f:f8:26:c9:0d:37:83:3d:34:9f:50:2b:15:88:41:
                    3b:e7:26:21:f1:9f:32:a3:5d:f8:e1:01:63:cb:3b:
                    b6:db:e2:11:80:6b:d0:4d:17:07:97:60:b2:2b:f4:
                    45:b8:05:28:55:12:a7:cd:4b:ba:c3:83:7c:06:06:
                    27:a1:f5:93:e3:d4:8d:12:37:28:5d:dd:35:84:ad:
                    c2:b7:88:b0:f2:f4:d5:12:ce:75:0f:db:e7:1d:97:
                    b3:4a:2b:ce:43:72:aa:ff:47:e3:94:21:3d:bb:78:
                    c1:ca:3c:f3:2c:ac:75:dc:fb:62:31:a5:b2:37:77:
                    cd:45:4d:e0:52:b9:da:a6:5f:58:f7:7b:d3:be:99:
                    a0:95:1e:0c:ff:cf:2a:1d:05:79:0c:37:73:57:4a:
                    58:25:19:05:13:ee:b5:c3:41:2c:bf:63:6e:79:28:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:EF:D1:29:78:30:73:7A:68:DC:EA:FC:B6:6C:0A:43:44:45:57
            X509v3 Authority Key Identifier:
                keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:88:31:ce:0d:91:8a:3c:02:1f:55:6a:38:2a:61:fe:fd:
         9f:67:78:99:3d:f4:a8:e3:ae:2c:c3:78:89:70:06:ab:ca:b5:
         2f:97:3f:5a:9f:8c:3e:45:c1:2c:10:f2:7b:aa:45:37:98:97:
         35:a4:b7:43:b1:97:9a:9d:4b:ba:74:34:49:76:3b:b4:2a:4c:
         9f:98:e5:01:bb:c1:c0:6f:31:86:92:27:ba:43:d9:7c:b7:d5:
         2c:ce:d3:a7:50:e2:04:85:3a:3d:28:b1:d6:f4:22:4d:21:3c:
         ea:ee:d0:f1:6b:37:40:22:f2:dc:68:36:3b:39:61:80:01:b3:
         e4:38:e0:23:6e:31:e4:53:68:da:60:8e:95:1d:02:85:96:35:
         f2:6c:5f:f6:35:d5:02:1d:5c:2c:61:46:a0:71:2c:2f:6e:78:
         42:3c:78:19:bf:66:35:87:d9:fa:8b:f9:0e:9f:8f:15:42:96:
         e3:ca:45:fe:31:af:96:b0:77:99:63:5f:f6:17:de:bc:db:4a:
         44:c7:b7:f1:3e:f7:58:7a:a1:dd:03:f1:28:25:c8:d7:51:9a:
         c4:5b:4f:97:d8:05:23:72:68:8e:11:c6:0e:83:06:03:35:11:
         02:9a:45:4c:12:ed:2e:bc:4a:87:ad:7d:97:f7:f2:17:02:28:
         72:f6:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:52:04 2025 by rpki-client