Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File:                     MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier:          usHr142puRlnqzwolQTvwutuwq0yqJtxENVEPdsXnhA=
Subject key identifier:   1D:0E:79:2F:4E:16:1A:7F:96:05:C7:F1:36:3F:D5:25:02:E6:70:43
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer:       /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial:       01976C9875C22DEB013B83F989BFA1D88841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number:          159B
Signing time:             Sat 14 Jun 2025 04:00:20 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:20 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:20 +0000
Files and hashes:         1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=)
                          2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: v6rB4D1pOY5TOyAczoBCmYqH8c8F63SfnNRPJAlZwts=)
                          3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=)
                          4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=)
                          5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=)
                          6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=)
                          7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=)
                          8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=)
                          9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=)
                          10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:75:c2:2d:eb:01:3b:83:f9:89:bf:a1:d8:88:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
        Validity
            Not Before: Jun 14 04:00:20 2025 GMT
            Not After : Jun 15 04:00:20 2025 GMT
        Subject: CN=1d0e792f4e161a7f9605c7f1363fd52502e67043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:a2:98:6f:96:86:21:1e:9a:7a:58:7b:7e:
                    4a:1a:50:1b:ea:18:52:ab:5f:f4:44:f3:a9:49:36:
                    08:ee:37:9b:b2:8e:55:d0:0e:ce:ea:3f:84:4c:8b:
                    12:da:b5:39:34:ac:58:2f:56:ce:9d:c4:f8:36:0e:
                    12:3f:09:96:1b:dd:41:62:f7:29:00:8a:63:69:4d:
                    53:51:74:45:46:e7:3a:7d:25:91:48:2c:76:44:c2:
                    4f:95:d4:f7:6c:46:4a:30:9d:96:d3:c9:f5:26:07:
                    38:67:cd:70:2d:a9:c6:7f:63:02:0b:ee:9c:a4:fb:
                    fb:8f:64:c9:48:d2:30:76:32:b3:27:9f:95:bf:d7:
                    aa:55:fb:95:c0:4d:06:0c:91:8b:8e:39:f9:4d:79:
                    9a:c4:95:38:cf:82:e5:21:ee:6c:e7:16:b7:3c:0a:
                    28:64:e2:fd:35:89:38:c7:dc:48:8b:e0:20:49:31:
                    e4:ff:5e:25:c0:04:ea:1c:a3:8a:ca:16:a1:f3:51:
                    e7:45:63:42:5c:22:95:2b:40:66:55:eb:24:d6:9a:
                    5e:e8:00:de:b9:90:e9:0a:64:73:15:02:0b:59:54:
                    66:9c:a7:57:5e:2d:8d:e1:48:18:4d:5d:01:b4:e7:
                    11:c6:07:f9:09:28:ac:0e:76:0a:ea:c7:16:5f:1e:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0E:79:2F:4E:16:1A:7F:96:05:C7:F1:36:3F:D5:25:02:E6:70:43
            X509v3 Authority Key Identifier:
                keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:89:31:6e:d8:38:3a:1d:3c:6f:b1:f9:cf:f7:3a:2b:db:
         ef:ba:5f:37:f6:71:70:26:23:e1:db:2d:00:33:ca:b4:25:b7:
         be:63:72:91:69:c7:5e:8a:33:52:5d:a5:bd:73:5e:cf:7f:2a:
         ac:1e:f7:ed:79:43:04:44:1f:71:cd:bc:4f:35:47:ab:3a:1f:
         f4:0f:a9:3d:57:9f:56:8f:ea:ea:0f:45:46:cf:87:f5:68:60:
         63:fc:bb:fc:ff:fd:a4:e7:03:a2:f9:9c:15:0e:67:4a:d9:71:
         ab:ba:4c:b2:65:69:da:96:56:1f:a3:2e:b9:07:a9:69:61:93:
         67:9b:2d:cb:05:4d:79:da:4d:c1:b1:3c:f3:ef:d7:7b:33:f7:
         a7:a2:be:5d:91:04:63:14:ef:97:33:9a:76:1f:fc:b0:49:21:
         6f:03:c8:13:c6:2e:76:c4:6c:e7:d7:b3:1a:6c:ee:4f:02:9c:
         4e:48:c4:30:3e:58:37:ab:b0:ec:75:95:1d:6b:0c:ee:b6:e2:
         a2:29:b6:b9:8b:dc:b6:a1:f5:77:32:f7:1e:61:7e:2a:10:ce:
         9e:eb:48:cb:d5:21:5b:0b:31:70:95:a4:52:3a:f5:68:51:eb:
         70:96:d8:6f:d9:37:86:ec:e3:86:2d:f4:44:92:21:06:ca:99:
         9d:55:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:01:40 2025 by rpki-client