Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File:                     0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier:          cBKCBy+bQD2bBAQD6d6Q+kHlirzechQbSdk/cVJPnrA=
Subject key identifier:   05:3C:A6:C4:F2:01:54:60:F3:DD:53:CF:A8:CD:52:64:98:7F:20:D2
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer:       /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial:       0197662942C5312799CADCEA801417180CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number:          158B
Signing time:             Thu 12 Jun 2025 22:01:09 +0000
Manifest this update:     Thu 12 Jun 2025 22:01:09 +0000
Manifest next update:     Fri 13 Jun 2025 22:01:09 +0000
Files and hashes:         1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: VlTlktp6J5dxi1M5K8xfs+2ah+g+MTJ3moEX8jz9jsA=)
                          2: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (hash: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=)
                          3: BKyeRj9qftx8WGEdxVWFVc1273A.roa (hash: nhVWVpplcnh6PS/kPe42Tn4vpV4Cv/wcOxTwDykaiQM=)
                          4: NyrZFNY0uejKVVI5JPC7FPtdUjc.roa (hash: F1z0p2TvKAcesacsMKTiWmQh7lfOeilS7Yll9HRgTgE=)
                          5: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (hash: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:29:42:c5:31:27:99:ca:dc:ea:80:14:17:18:0c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
        Validity
            Not Before: Jun 12 22:01:09 2025 GMT
            Not After : Jun 13 22:01:09 2025 GMT
        Subject: CN=053ca6c4f2015460f3dd53cfa8cd5264987f20d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:0d:98:da:8b:af:d9:fa:dc:dc:e1:97:bd:
                    c5:6f:c8:6e:f7:f1:c1:29:85:ed:5c:4c:fa:b7:9f:
                    2d:1c:26:5f:13:77:ad:4f:70:27:13:08:22:e9:5e:
                    84:18:5d:36:8e:eb:a7:f1:6a:78:09:43:e4:79:7f:
                    c2:f3:ce:b7:33:07:d7:c6:14:aa:8f:b1:ea:b8:33:
                    c6:86:99:64:68:05:dd:f8:07:ee:1b:e9:b1:b8:9c:
                    c5:16:29:de:70:d8:37:65:c9:7f:27:a2:be:39:d7:
                    00:1e:26:af:d7:07:dd:32:12:d5:a5:21:13:8c:c0:
                    0c:67:21:28:0d:1f:82:21:e0:3d:88:b8:32:e9:5d:
                    72:90:67:8f:b9:72:fc:e6:5c:eb:7e:e4:98:6f:f6:
                    d0:0a:4b:63:1e:74:31:6c:8a:3f:e1:a9:de:e3:58:
                    c3:ae:e0:03:7a:41:6d:45:17:78:68:a8:2d:7b:fe:
                    5c:49:d8:9c:8e:cc:f4:e7:66:0c:ea:d0:1a:bb:5b:
                    d4:57:9f:ff:19:db:dc:7e:c2:d4:5b:76:af:da:ce:
                    68:18:d5:24:36:e0:dc:0a:01:cd:a1:56:4c:02:28:
                    24:ac:e4:27:78:bb:6a:63:b5:60:8b:2c:ad:4d:e0:
                    83:75:58:10:5d:4f:a0:52:8d:5f:86:23:47:2a:d8:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:A6:C4:F2:01:54:60:F3:DD:53:CF:A8:CD:52:64:98:7F:20:D2
            X509v3 Authority Key Identifier:
                keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:da:75:44:fb:ab:be:af:eb:89:31:47:b0:59:e9:a7:a9:
         ba:a3:71:8d:2e:12:a8:34:69:7c:9c:1a:2b:8a:73:78:bc:78:
         49:0f:f8:f0:87:b4:77:cb:37:e5:72:75:04:ce:b3:cf:db:18:
         6d:54:f4:aa:93:fc:e9:07:31:3b:aa:08:66:54:f6:05:5e:03:
         77:40:b4:3d:fe:72:a5:f4:7e:48:d4:14:62:fd:53:9d:e6:74:
         45:85:40:f7:51:40:e3:ef:53:4f:41:d3:dc:fd:75:30:dc:ce:
         00:52:67:89:51:63:4e:fe:d3:b8:af:ad:23:5a:75:e3:91:a2:
         30:a4:d3:c5:f2:e9:bd:78:d7:09:43:43:0d:d3:0c:4c:71:46:
         0b:b6:83:9f:33:91:82:b7:08:3b:f3:ea:d7:79:b9:74:ed:ff:
         77:66:bc:c7:9c:11:15:1c:3f:f9:c8:7e:7c:f5:d3:f8:87:a3:
         84:26:70:71:4a:f1:07:3d:db:94:05:a0:e8:59:75:f9:05:e8:
         5c:ea:cf:9c:89:00:16:c1:2b:ca:cc:37:11:80:a1:bb:c4:11:
         94:02:6c:f7:0f:3c:4a:85:6c:c9:f4:63:63:de:8f:e2:7f:52:
         2b:48:76:4f:a4:0b:ba:46:aa:6a:d4:e1:d0:46:30:ec:09:9a:
         e8:9e:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:06:07 2025 by rpki-client