Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          tIoIf7eXuVrW+v9bU+SwMJQzFAYE7r27/o98uK2unqs=
Subject key identifier:   CE:BD:C6:E8:50:B0:43:CD:D0:F1:B7:8B:96:99:D6:23:52:6D:8A:B4
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       01976C98AC491A8CC63AA609DA1E34A3C010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 04:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:34 +0000
Files and hashes:         1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: iC/6Z/nnlSDLkL/xM6eF/kzu5og/wWDLlwDl9RpDUcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:ac:49:1a:8c:c6:3a:a6:09:da:1e:34:a3:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Jun 14 04:00:34 2025 GMT
            Not After : Jun 15 04:00:34 2025 GMT
        Subject: CN=cebdc6e850b043cdd0f1b78b9699d623526d8ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:75:ee:bd:13:49:e8:c6:f7:88:5c:1f:99:
                    bb:00:2e:c9:2a:51:e5:16:3f:20:cf:57:09:35:28:
                    ae:a5:98:58:87:ba:1a:6a:0b:f4:91:5d:0d:f4:42:
                    2f:a6:3e:ff:6b:d1:ea:0e:02:a5:db:30:7f:30:83:
                    b3:3c:a1:32:3d:28:a2:1b:46:0a:66:80:bf:6b:b1:
                    e8:cc:e9:56:b3:18:ca:ab:9a:f0:4d:6a:17:fc:15:
                    de:04:56:6e:b1:0a:86:5b:98:c1:7f:60:0f:f4:29:
                    20:51:e0:0d:e1:b8:70:45:81:e1:a5:32:13:ab:f1:
                    80:35:78:6c:8e:80:45:45:aa:ac:35:a0:67:da:d8:
                    cb:3d:8f:f0:da:71:f5:ce:9c:a0:ba:8c:51:9d:a9:
                    b5:a3:95:00:64:e5:9c:9f:18:4b:a9:f6:4f:dc:62:
                    3f:44:ec:bd:7d:3a:4d:ae:79:27:31:15:e2:a8:c6:
                    be:a9:47:49:29:9a:5a:72:87:79:c3:fd:93:b7:de:
                    44:1e:59:3f:42:57:54:11:4d:21:77:8d:07:dd:d9:
                    1b:d3:87:c5:63:ed:c0:84:81:8d:60:90:1e:a4:d7:
                    68:af:8e:e4:6c:10:81:dc:eb:3b:10:c1:df:66:19:
                    6a:69:62:7c:e3:76:35:9e:63:c0:0e:d5:db:67:53:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BD:C6:E8:50:B0:43:CD:D0:F1:B7:8B:96:99:D6:23:52:6D:8A:B4
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8f:d9:0b:13:5a:14:d0:07:c5:0b:46:04:e7:5a:40:e4:aa:
         25:16:a0:d9:61:e5:11:9a:d2:50:ab:a3:3b:b6:04:d1:ce:b1:
         c7:b8:40:97:83:b7:49:6b:1e:a7:c5:6c:70:b8:5c:5e:0e:47:
         41:2a:a8:b0:a1:42:44:99:20:8c:fb:99:47:18:33:ef:f4:33:
         df:d4:61:b1:fe:44:dc:a7:1f:45:d7:e9:41:f1:1e:e3:c0:32:
         08:90:37:d2:cd:ee:e6:1f:57:89:3c:13:b7:82:aa:9e:fa:9f:
         4e:e2:fd:d5:35:63:f2:24:79:bd:f1:b6:ee:76:fb:17:96:a7:
         f3:bc:48:df:59:92:0b:ad:e0:6a:0d:20:3f:13:46:17:10:60:
         2d:88:a3:a5:7a:5c:13:fc:47:60:f9:2e:13:27:02:09:6b:f0:
         4e:73:41:0e:54:be:67:dc:98:3e:de:1f:9e:84:0e:21:38:7f:
         89:8d:31:bd:8d:18:43:8f:ec:25:b2:43:88:3f:fc:5d:d2:26:
         98:ec:bc:4d:04:0b:ca:03:0d:e9:55:29:b3:3e:11:55:de:33:
         2b:39:e5:b0:c3:98:21:34:af:68:a5:2e:87:56:8a:1a:5c:56:
         5a:38:43:57:6b:2f:c7:1f:91:aa:96:0b:82:46:b9:bd:2d:95:
         8d:f8:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:29:58 2025 by rpki-client