Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          3/F/6Jx9As5WyIy3BWT4nDStzbgZwg+ojwwYnS4dZPY=
Subject key identifier:   77:AA:87:97:F2:4E:31:59:70:E9:ED:93:E8:2D:DF:23:BB:5E:B6:B3
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       0197469E804438DE81F1D004B4F706176074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          158D
Signing time:             Fri 06 Jun 2025 19:01:22 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:22 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:22 +0000
Files and hashes:         1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
                          2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=)
                          3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
                          4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
                          5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: MpZe44JxOUI3EjvqNtzWVy4kNy+od4fkEkKQzC8MfXw=)
                          7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:80:44:38:de:81:f1:d0:04:b4:f7:06:17:60:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Jun  6 19:01:22 2025 GMT
            Not After : Jun  7 19:01:22 2025 GMT
        Subject: CN=77aa8797f24e315970e9ed93e82ddf23bb5eb6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:f0:94:b7:a8:2f:f7:a9:84:0f:06:b4:d7:
                    f5:08:f0:54:a6:65:90:3f:9b:7f:5a:91:70:d2:a6:
                    e3:cc:8b:3c:d0:b0:59:97:00:0a:44:0e:0b:a5:71:
                    f0:3e:c3:d3:58:b8:20:ea:71:93:2b:12:59:9d:28:
                    f8:e4:6b:96:89:18:8e:1e:f0:c7:e4:90:76:58:34:
                    2d:a5:da:4e:3c:4a:cd:a9:9b:9d:94:bc:9c:3b:f7:
                    ea:f3:16:66:63:e2:35:84:f7:40:e9:14:80:ac:2c:
                    fa:91:52:3c:35:eb:f8:d1:b7:0b:ee:d6:95:ee:d7:
                    4b:dc:6d:ab:07:f5:33:ef:2b:0a:5e:69:21:27:8b:
                    0d:b2:e2:4c:73:06:11:cb:12:c2:91:96:9c:23:83:
                    7e:a8:2b:1e:b6:80:6f:21:26:3c:a1:58:99:23:ef:
                    d6:dd:25:5c:92:71:e6:0d:32:a2:b8:0e:3f:b1:01:
                    a6:db:62:2a:a2:f3:a5:60:09:59:15:51:db:2a:76:
                    9c:58:6e:4e:86:f9:6e:fe:10:cc:ed:73:5f:dc:f1:
                    3b:dc:41:02:dc:cf:26:0e:6a:19:3d:18:30:54:ec:
                    21:74:19:43:5f:f2:36:6a:63:19:d5:43:47:66:22:
                    5b:0e:34:09:b7:7a:74:6c:db:ba:18:b0:88:bf:d9:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:87:97:F2:4E:31:59:70:E9:ED:93:E8:2D:DF:23:BB:5E:B6:B3
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0b:af:7d:c2:4b:00:1d:f4:02:32:47:e7:21:c2:75:6b:26:
         32:5c:65:1a:2e:e4:31:71:a3:1e:1a:4e:ca:51:6b:e0:5b:90:
         3e:21:e1:f1:42:7c:a5:b3:80:db:5e:a9:d4:50:c9:c8:65:1c:
         68:6f:79:91:1b:af:c2:bc:fa:41:14:84:e8:dc:c9:45:de:22:
         82:cc:c9:1c:ed:2c:27:61:e8:4b:41:c5:a4:7a:da:d8:27:0b:
         ba:02:1e:af:c2:b2:31:02:58:0e:c8:f4:2e:58:a9:27:20:ea:
         ab:09:53:da:81:eb:53:bb:90:42:73:ec:08:30:6f:c4:3e:89:
         92:b6:8d:da:35:56:00:ad:93:9f:8c:e0:a7:f9:05:df:b7:92:
         53:e0:93:6a:dd:0c:d2:aa:28:11:3e:ce:14:42:1b:39:3f:9a:
         b4:f5:f0:4f:7b:c0:c6:ac:4c:47:5f:d4:29:39:78:ec:ec:92:
         b5:bd:4a:23:e4:6e:e8:2e:85:69:91:14:e0:da:ca:1c:e0:84:
         89:36:8b:b0:2c:01:6e:80:49:64:06:d7:14:5e:e4:44:8a:57:
         f0:85:42:c5:26:99:01:e6:03:19:f7:1c:88:d5:44:86:50:2c:
         0e:58:60:27:57:34:11:0e:4d:97:a6:43:04:04:b2:2f:16:82:
         7a:bc:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:20:29 2025 by rpki-client