Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File:                     aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier:          oKYIY2ugA9ywfQzYAXztd/AsQR67nrQw+N4lcCqzKOU=
Subject key identifier:   BE:A5:6F:2A:F8:DB:86:F9:BE:28:4F:23:BB:EB:69:89:11:87:DF:86
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer:       /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial:       01974AE84FCD04BE49B629E9716D7E3BBB92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number:          158A
Signing time:             Sat 07 Jun 2025 15:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:28 +0000
Files and hashes:         1: NUwDMl0uceCiZ1NG2N5fFGq-BY0.roa (hash: W5ChUYN7fI8J46aNSrBpqKGe97TpyG1Z0u4eXPpkx48=)
                          2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: pEakC3QoXiEmNGZd/UgNVqk+cQm8G4EFs/5GedVQs2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:4f:cd:04:be:49:b6:29:e9:71:6d:7e:3b:bb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
        Validity
            Not Before: Jun  7 15:00:28 2025 GMT
            Not After : Jun  8 15:00:28 2025 GMT
        Subject: CN=bea56f2af8db86f9be284f23bbeb69891187df86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:49:ca:36:c6:68:a5:73:a6:ce:72:7e:c3:
                    dc:15:2b:43:28:48:00:79:2d:e4:94:92:2e:f5:0a:
                    6c:1b:38:2f:73:c7:d8:cc:41:76:74:3c:f7:cc:47:
                    d6:da:a2:e7:01:7a:a6:da:80:9e:bd:7b:6c:c0:e9:
                    26:86:9c:08:85:3a:85:05:73:17:7a:77:95:0e:22:
                    dc:53:c8:e3:b3:5c:25:d3:36:d3:73:8d:29:5f:06:
                    f5:0c:85:fe:3f:c4:b6:11:90:b9:f1:21:25:53:73:
                    5d:68:bb:17:3f:bc:03:55:8a:bd:98:6a:a0:a3:0b:
                    51:20:a1:65:fa:f8:c9:dd:fa:42:9a:a5:22:41:a7:
                    a1:80:44:af:a8:3e:c9:e9:d3:43:6e:6e:d3:c4:8e:
                    53:70:7a:0c:22:d3:a3:6a:b8:68:8f:ec:35:c9:05:
                    33:b5:7f:ef:d9:74:53:56:7c:c3:d7:0a:25:fe:55:
                    40:59:33:f2:c7:f4:7d:ae:88:f3:de:6c:e2:19:19:
                    de:ab:e4:7e:0c:28:38:64:72:ad:3d:6a:a7:c1:71:
                    a2:99:d7:e4:cb:4a:1e:03:bd:9a:0c:cc:94:55:55:
                    45:ed:2a:53:56:20:be:0e:23:89:11:62:0f:eb:74:
                    43:49:91:3f:36:bd:cf:a4:ef:d3:74:db:76:44:46:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A5:6F:2A:F8:DB:86:F9:BE:28:4F:23:BB:EB:69:89:11:87:DF:86
            X509v3 Authority Key Identifier:
                keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:94:b7:75:a8:57:ed:c8:7e:43:9e:86:ff:c4:d6:fa:9f:b1:
         23:89:67:86:76:52:e9:8d:16:2a:eb:97:0a:11:aa:d2:4c:e1:
         bb:18:5e:2e:98:d8:90:d7:7d:33:1f:3d:97:8d:ce:d2:c6:e9:
         4a:2d:14:79:9b:da:ad:f1:4f:c8:ec:08:2c:23:07:84:6a:04:
         77:8e:be:81:0e:24:ab:36:40:89:cc:33:e8:a5:7b:4c:8d:47:
         cf:f5:75:2e:43:c7:7c:5c:44:4b:de:dd:ab:4c:52:5c:d3:88:
         74:92:46:52:08:0d:01:f1:90:af:8b:a5:eb:a7:39:7f:0d:82:
         75:84:b3:14:30:1b:8d:ef:98:7f:84:39:3f:54:a5:73:97:ce:
         60:b3:63:70:00:86:42:33:fd:88:64:49:b6:51:77:c6:99:db:
         77:ef:fe:72:e9:02:37:77:09:63:ae:4a:30:b7:bd:ab:fd:d3:
         b1:e3:b9:6a:91:6d:ef:e2:59:49:c5:40:d9:e4:8b:42:5a:3e:
         4a:2b:d8:34:a9:00:a9:be:b7:94:ae:3a:4d:7e:c2:93:fc:b8:
         2b:33:b8:e3:36:88:41:5c:1f:9c:ef:76:11:ef:18:66:f8:92:
         bb:d4:1a:21:19:e4:e7:73:50:58:69:26:82:e0:5d:0b:ff:32:
         85:94:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:02:39 2025 by rpki-client