Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File:                     Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier:          1pDVVbo/SwaskaUWIeXPtE4VVGIMsQYC1YWeV9pWBxk=
Subject key identifier:   D1:81:CD:52:A5:6B:57:BB:93:3F:B1:FE:07:9A:E1:D7:FF:51:35:5F
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer:       /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial:       0197692A0E56553859EB48AEAB0E4D47AA1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 12:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:53 +0000
Files and hashes:         1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 1sZcmue+jVSGppzJV60nQBJ6eSoXIujHmEBL2XA0eyc=)
                          2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:2a:0e:56:55:38:59:eb:48:ae:ab:0e:4d:47:aa:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
        Validity
            Not Before: Jun 13 12:00:53 2025 GMT
            Not After : Jun 14 12:00:53 2025 GMT
        Subject: CN=d181cd52a56b57bb933fb1fe079ae1d7ff51355f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:e8:1f:b4:8a:9d:71:06:9d:cd:5b:5d:04:
                    5d:d9:1f:7d:04:c5:14:f5:c8:78:c7:50:a2:c1:70:
                    15:f3:ab:29:c6:12:c0:24:24:33:31:bc:67:89:f9:
                    4f:01:11:31:85:7c:96:01:46:04:3e:91:b5:cf:a5:
                    04:4c:bc:7a:64:2b:0d:4a:56:a1:e2:bc:97:96:2e:
                    dd:15:d5:e2:2f:79:f3:3a:99:4d:24:9b:5f:ac:e8:
                    d3:cf:3e:bf:ca:f1:5c:c1:65:fb:fb:83:3e:9e:67:
                    28:3e:c4:74:50:f4:9a:e2:25:f3:55:bb:89:84:17:
                    88:e2:50:94:5c:8c:61:0e:d7:05:8b:6b:5f:85:71:
                    ae:b9:80:3f:bc:54:80:5b:4f:24:22:ab:03:ff:88:
                    be:71:57:d7:a0:eb:ee:27:4c:fa:f2:7d:85:a1:fc:
                    d7:c0:73:45:66:11:9c:0a:1a:cb:8d:d3:71:c2:9d:
                    e1:aa:45:04:02:af:4f:17:68:12:ef:82:7b:6e:73:
                    58:31:6d:7f:3f:67:15:39:88:cd:01:61:79:d9:fc:
                    fb:3a:9c:0d:23:39:f4:4c:17:89:81:75:84:ae:f3:
                    88:9d:9f:00:49:6e:fa:59:d6:32:86:e1:f7:fe:61:
                    fa:94:43:4c:94:68:6a:2e:da:41:0d:49:78:f4:53:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:CD:52:A5:6B:57:BB:93:3F:B1:FE:07:9A:E1:D7:FF:51:35:5F
            X509v3 Authority Key Identifier:
                keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:0c:f4:11:72:c2:f1:7d:3b:c2:46:d6:54:6b:d0:05:03:
         32:62:de:fd:3c:66:89:05:28:5e:5f:fd:86:01:a5:42:a0:7a:
         fc:13:b3:e9:f6:f3:2c:bc:8d:ee:fe:24:b8:3a:4c:6c:2f:3b:
         3d:8a:14:e4:f3:8b:7e:5f:81:48:32:31:4d:52:07:31:4d:b2:
         8d:a3:88:f0:70:1f:fa:b4:1c:a1:a7:a5:47:6d:b3:70:aa:2b:
         8d:fd:ac:b4:95:54:f9:5d:7f:bd:bc:43:92:f0:4b:aa:37:b9:
         86:56:65:b5:58:b8:0e:ec:6f:ee:2f:17:88:7d:ae:aa:14:1d:
         87:a8:48:6c:94:9d:31:37:31:2a:90:20:5a:0e:38:de:f0:ad:
         af:f4:6a:d1:6e:7f:08:cd:cc:b2:e1:d7:ed:0b:9a:29:f7:2c:
         ee:5b:4c:36:bb:31:d5:16:7a:89:64:d5:9a:a7:fd:08:85:20:
         d9:ec:ad:f7:48:c5:bc:41:c3:30:6c:0c:ec:73:e9:3d:41:8a:
         80:f3:a7:d4:fc:8b:b3:29:14:00:ea:da:cf:40:45:3a:37:23:
         38:61:ff:c5:a9:34:0f:a7:98:2c:f5:e7:9a:a5:c6:16:90:b5:
         1c:45:64:57:ce:50:44:bb:69:1d:f7:b7:6d:ca:7b:d6:dc:4e:
         d0:3d:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:19:57 2025 by rpki-client