Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          uvv14hjdVwTKLdVOcUD1aYWLjRIOHErxp9yGDttSnxA=
Subject key identifier:   F3:71:6F:18:C0:68:2C:3B:DC:6F:8B:E4:25:93:C4:A5:96:04:B2:D3
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01976A737779F0346ACBFD889E11EF061594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          0163
Signing time:             Fri 13 Jun 2025 18:00:41 +0000
Manifest this update:     Fri 13 Jun 2025 18:00:41 +0000
Manifest next update:     Sat 14 Jun 2025 18:00:41 +0000
Files and hashes:         1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=)
                          2: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
                          3: W_QbYX9ZTefRSwKnL72ps23YkbU.roa (hash: O+yO4y0kWUxUwS+WjWuH503NMuQYxW5RzvY5stzKpfg=)
                          4: _fQHDe_QsKzj39wSIbj-uT5L7fw.roa (hash: z8zH4/OhWjUk6gre54FhJk9W2UZF11eYo2fYY4nmoyM=)
                          5: hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa (hash: 5jXJ2NBBgkVftUv2ESVvBBtb97mqw/HikDlyo874QWk=)
                          6: ikaCSqXI6xfl5qVDi3yr58aTFuA.roa (hash: N8S/41ybeOjv/UdOqBCbTzj0r4lou4Hpt/IYlvQhpik=)
                          7: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: M1Xi3dJjTic/UKQaxmTr12mukeKkh5WFcxgbt/x8fVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:73:77:79:f0:34:6a:cb:fd:88:9e:11:ef:06:15:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Jun 13 18:00:41 2025 GMT
            Not After : Jun 14 18:00:41 2025 GMT
        Subject: CN=f3716f18c0682c3bdc6f8be42593c4a59604b2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:a5:e3:d4:68:1e:a1:c6:40:a5:19:3b:5d:
                    f3:8e:98:04:6e:e7:20:e2:60:ed:3d:b1:48:b7:b1:
                    6d:2a:96:ff:ec:0c:e6:86:69:d9:76:5e:e4:9b:e4:
                    d7:fe:7c:29:11:22:58:b0:65:a1:e8:15:ef:ab:91:
                    3d:4d:98:40:a6:3a:b6:7f:c4:d4:07:c4:43:52:5d:
                    03:45:a1:c3:ff:6c:ac:22:54:c0:c7:b3:4f:df:3a:
                    61:06:82:2f:34:84:9b:e4:ce:f6:e7:96:d4:46:d2:
                    f7:a7:0e:f1:b9:4f:33:01:48:b1:1c:3e:37:61:54:
                    82:93:e0:e5:b6:f0:3a:eb:58:fe:0e:ca:e6:ec:cb:
                    65:4d:4c:a6:aa:c6:5c:6b:2e:4a:4d:17:8e:8e:aa:
                    54:80:4d:3b:6b:24:2f:5c:00:00:9b:cb:9e:18:12:
                    35:36:f7:c7:31:6c:01:ac:2a:d9:5d:fd:5c:35:aa:
                    08:2c:d0:25:2e:d0:3b:97:39:0a:85:40:4c:f3:66:
                    d8:b3:3f:b1:1c:cc:5f:ea:c0:78:18:76:c2:25:5f:
                    64:e4:02:f5:31:d6:2a:0c:24:fe:12:c1:10:a5:24:
                    79:a6:80:ef:52:5a:35:aa:f9:f8:46:58:7c:a0:3d:
                    72:31:e2:8f:dc:92:a6:b7:da:24:f9:54:70:77:c1:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:71:6F:18:C0:68:2C:3B:DC:6F:8B:E4:25:93:C4:A5:96:04:B2:D3
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:05:0e:4f:cc:72:7f:b1:91:54:a1:3b:1a:b5:e6:0b:1c:02:
         7e:0d:23:ea:7b:d8:91:62:47:56:98:e6:71:66:4b:6a:46:59:
         43:ce:0f:a2:34:ee:14:1f:1c:45:a5:23:1e:55:9a:e4:ba:f5:
         11:a2:6f:d5:7a:90:55:06:6f:57:88:d1:6b:b8:2d:34:fc:34:
         70:94:ff:d8:40:d0:3d:ff:0d:97:4b:77:20:9d:0b:5a:36:ae:
         01:e6:d7:e3:6d:e1:7b:c7:c7:dd:5b:71:fa:20:5a:36:7e:93:
         8b:62:42:60:fd:ef:92:97:2d:9a:3b:47:d5:57:3f:03:7a:3d:
         38:24:3e:dd:86:90:3c:e3:97:66:c3:fe:5f:fb:71:8b:23:e6:
         12:99:5e:eb:1e:63:46:d7:cf:22:b6:11:9e:f6:1b:c9:bd:44:
         10:9d:74:ae:4e:e6:0e:a2:f3:aa:ad:37:7b:90:92:3c:0b:20:
         f3:b7:f6:b1:e8:e2:ea:2e:05:ce:49:37:46:7d:6a:9a:f6:a1:
         e0:49:92:dd:83:d5:b5:fb:4a:03:11:81:2f:be:99:51:2d:7d:
         78:70:a5:41:48:fa:4a:f0:19:de:39:4f:f0:e5:ea:21:15:30:
         8e:76:a1:38:b5:ff:21:d9:8a:72:02:5f:b1:79:86:5a:92:b8:
         88:87:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:14:36 2025 by rpki-client