Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File:                     U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier:          PHPZBZZeJ3gPZTipdbr7Pmh3E6TUFWKtnRF1dJXe3ok=
Subject key identifier:   77:27:80:20:CB:E6:B1:49:92:F8:17:FD:D5:31:02:14:14:1A:A3:B9
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer:       /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial:       019769976EFC02EDAC8C7A3C92CC29CCFA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 14:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:21 +0000
Files and hashes:         1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: bR9L34PclCrk9kNYFHpX1z4cyd8Dqcz5g9pcYmVu0k8=)
                          2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:6e:fc:02:ed:ac:8c:7a:3c:92:cc:29:cc:fa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
        Validity
            Not Before: Jun 13 14:00:21 2025 GMT
            Not After : Jun 14 14:00:21 2025 GMT
        Subject: CN=77278020cbe6b14992f817fdd5310214141aa3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f4:bb:10:ae:57:44:07:db:54:0c:8f:3f:b8:
                    cc:d1:a1:fe:21:69:c5:e7:12:12:5e:3a:77:2c:96:
                    d0:8d:c7:f2:8f:89:8c:56:3c:9e:89:d8:7d:22:c4:
                    46:ae:79:35:54:97:82:67:34:55:b8:7b:55:bf:6d:
                    d7:e4:8f:45:a3:f5:99:10:e7:1c:b4:e9:fb:c1:4b:
                    dc:2b:db:bc:35:dd:02:98:9b:d8:e3:2d:14:44:44:
                    26:ba:cc:06:a5:8c:41:11:11:76:3f:dc:11:62:0e:
                    dc:ff:85:80:91:7a:f5:8f:11:c6:2c:a0:49:ea:ae:
                    ff:71:7f:c5:f9:c7:f5:19:13:20:34:d1:68:44:f3:
                    e2:ce:1d:cb:17:90:66:38:ef:09:84:c9:ac:0c:0c:
                    87:cd:95:a8:76:09:53:57:ce:ef:25:04:9e:06:b7:
                    98:7c:55:d7:4c:79:0b:9b:e2:aa:0c:98:ab:b3:d3:
                    ab:5a:c1:8c:c4:21:2d:2f:37:20:57:3e:01:f4:3b:
                    22:c2:20:07:da:8a:bc:93:71:36:8a:19:82:f3:54:
                    83:95:c7:75:4b:b9:be:6a:97:61:14:bc:ec:5a:7f:
                    08:ec:58:83:03:03:c2:59:c4:d5:69:29:b7:7b:6a:
                    70:c4:26:f4:54:72:4a:19:32:ca:a1:12:12:c4:3f:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:27:80:20:CB:E6:B1:49:92:F8:17:FD:D5:31:02:14:14:1A:A3:B9
            X509v3 Authority Key Identifier:
                keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c4:21:b4:35:00:54:13:b5:f2:3b:14:5a:38:34:bc:1b:cd:
         c1:3d:9c:95:d7:54:37:cd:3f:13:19:fa:19:49:f2:c2:e3:6b:
         ee:a5:9b:28:a2:99:67:6d:e5:24:c6:4c:25:59:bf:b2:93:9b:
         41:90:8e:a9:97:16:11:1a:dc:d6:a6:0c:c9:05:69:8a:ca:13:
         cc:05:51:6f:df:51:c1:d8:0c:36:01:c6:8f:e5:c9:14:fe:7b:
         28:44:a7:d5:cb:b0:93:8b:34:58:84:b7:90:9d:71:ab:d1:00:
         19:85:33:6c:a3:22:c8:8c:cc:2d:2b:1b:98:cf:42:2d:e6:4a:
         ec:91:28:bb:20:69:aa:4f:3f:cd:a2:95:f8:1b:be:de:88:b0:
         37:bc:68:2c:60:cb:fd:b1:30:28:7f:c2:89:1a:87:1c:80:b9:
         af:95:21:99:a1:6c:30:c9:57:41:96:87:b5:e8:24:96:67:ba:
         b0:a1:2e:00:63:9f:a4:78:a7:86:c9:fe:da:84:eb:3e:b8:77:
         f1:e1:a6:43:06:cc:5d:b4:e1:4f:b3:63:41:4c:4c:b7:21:bb:
         e9:ad:28:05:f8:c8:50:35:53:ed:f1:04:c0:e0:30:71:f3:f0:
         f8:7c:06:a3:2a:d8:44:9b:1e:e9:2b:89:c7:08:32:df:9c:d1:
         17:56:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:47:35 2025 by rpki-client