Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          jozLf4XWJxpAOaHb+B54w+JE34jNar/K36XqkiRMhOM=
Subject key identifier:   20:39:8C:5A:EE:7F:2F:47:AB:50:FC:46:C3:82:DC:EB:B8:86:B3:F7
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01974B5624BD6FB8EF65CB27C3F3F1549156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          159F
Signing time:             Sat 07 Jun 2025 17:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:25 +0000
Files and hashes:         1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
                          2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 54u6ABILLR6VGGFgZfJsj7NP9DNmRR67nx5vWAc2bYE=)
                          3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
                          4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:24:bd:6f:b8:ef:65:cb:27:c3:f3:f1:54:91:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jun  7 17:00:25 2025 GMT
            Not After : Jun  8 17:00:25 2025 GMT
        Subject: CN=20398c5aee7f2f47ab50fc46c382dcebb886b3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:7b:59:f6:bd:9c:cc:e4:48:7a:c6:8f:52:
                    b2:6c:01:a9:80:67:fd:2c:0f:fe:59:25:11:4c:7b:
                    7a:0a:22:28:39:6b:06:52:cb:c6:20:6a:48:0c:b5:
                    17:23:0b:59:a7:78:ec:34:6e:21:8e:75:b3:75:6d:
                    89:8e:9d:6a:dc:85:a0:d8:91:0c:95:33:09:6c:42:
                    c1:9a:dc:01:44:f9:cc:21:fb:76:4a:d0:78:8f:ce:
                    30:37:97:fc:1d:63:15:62:cb:c1:b1:b4:b0:fe:1e:
                    6d:d5:85:b0:01:0a:84:ea:c8:2e:97:e3:db:b1:b6:
                    0a:3f:10:71:c8:3c:e3:6d:fe:0d:24:fe:ba:49:04:
                    eb:30:02:77:df:e8:b2:9b:68:2d:a8:4e:4d:26:fc:
                    9d:16:91:2e:06:99:ca:5e:1a:da:ef:58:f5:72:c3:
                    c8:75:b4:4e:6e:90:c2:ea:53:4e:d3:cb:1c:93:71:
                    10:8f:4d:e5:cd:68:3a:11:40:2f:65:f0:fd:5d:bd:
                    8d:3f:85:88:84:63:bd:c5:65:e9:93:5b:f6:cc:5b:
                    c4:2f:42:10:d4:a1:42:7f:74:9e:48:84:41:6a:2d:
                    e5:9c:31:bd:a2:14:c1:70:9a:2e:46:9f:02:0f:54:
                    d8:2f:f3:20:54:f9:69:43:66:3b:81:c5:4e:fd:63:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:39:8C:5A:EE:7F:2F:47:AB:50:FC:46:C3:82:DC:EB:B8:86:B3:F7
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a6:ef:ee:46:65:02:22:e8:5a:58:02:6b:6c:7b:fb:2c:f6:
         fb:3f:99:2d:43:85:6c:7c:07:9b:0c:c3:52:a5:fe:ff:80:d6:
         0e:4e:9b:90:13:d9:94:49:5a:f2:33:a1:10:2f:0c:8c:1e:cc:
         61:9f:90:a0:64:80:f3:06:7d:8c:2c:20:a8:49:f1:01:43:83:
         18:84:63:5a:fe:a9:4c:40:6e:d9:f6:71:90:eb:37:2e:a6:07:
         92:86:d2:e7:26:11:d1:5c:5d:d9:d8:f8:56:fc:06:3c:2b:05:
         e3:17:f7:60:ec:62:9c:80:4c:96:61:6c:98:ab:91:73:dc:8b:
         a6:5a:c4:e0:a0:95:a1:96:92:33:d4:55:c6:a4:fd:ab:89:2a:
         18:86:44:01:77:c7:73:5b:cb:f0:2d:a6:37:13:29:f3:7a:93:
         6c:c1:e6:11:c7:cf:6b:0f:7c:e7:2d:6d:89:65:fd:ac:b1:88:
         e2:a4:d6:4f:f7:56:e3:bd:5f:92:fe:94:66:65:3e:6c:4d:94:
         2d:01:45:e3:47:1b:4b:bd:30:e8:a5:9d:cf:f5:b5:f7:12:0e:
         95:bd:d3:c8:e3:74:df:8c:1e:92:52:99:85:01:f1:84:6e:20:
         50:cf:da:16:9f:19:39:09:a0:f4:fd:fb:f6:61:f4:c6:92:c2:
         a4:1a:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:34:25 2025 by rpki-client