Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          1nAz1pFAWaTEpan4M1SMit0o59RCbE+CEH+/6WzomY0=
Subject key identifier:   A8:1D:02:44:B8:C3:CD:34:91:51:76:DA:9A:5F:53:EA:E4:63:B8:FF
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       0197488C3FE7C5BB1B102F0A6F122EF51008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          158A
Signing time:             Sat 07 Jun 2025 04:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:40 +0000
Files and hashes:         1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=)
                          2: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=)
                          3: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=)
                          4: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=)
                          5: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=)
                          6: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=)
                          7: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=)
                          8: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=)
                          9: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=)
                          10: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=)
                          11: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=)
                          12: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=)
                          13: qfvkeVV0y4MYey-tvY_ef7wx-wY.roa (hash: vszu6nR/oFbgkiJpXSyUxF5kf03wjhbHFgMzPvnqwuM=)
                          14: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: gSoZ5/cgx4mShEKCs+4kguGqMVFrcqwd5jzYmVnAK4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:3f:e7:c5:bb:1b:10:2f:0a:6f:12:2e:f5:10:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Jun  7 04:00:40 2025 GMT
            Not After : Jun  8 04:00:40 2025 GMT
        Subject: CN=a81d0244b8c3cd34915176da9a5f53eae463b8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:06:cc:68:5a:77:c5:fd:c1:2b:2a:15:a2:
                    9e:50:4b:cd:ec:a3:d2:d5:8f:6d:31:65:79:1f:f4:
                    30:6b:7e:7a:e3:f3:b7:05:04:7a:3a:d4:d7:89:5c:
                    0a:1d:f9:b3:60:45:26:da:61:97:bf:4d:4d:99:66:
                    2c:56:45:f3:d8:5d:08:06:60:83:72:c6:22:91:01:
                    7d:7e:ac:09:e1:0b:c7:99:ea:f5:c7:b3:63:17:06:
                    6e:d8:38:ea:0d:41:ea:c2:a3:07:bd:c6:3a:27:15:
                    0e:e0:5a:ea:77:e8:87:9a:73:e7:a4:87:6e:80:5b:
                    b6:7b:eb:93:5c:67:4c:64:69:51:87:6c:7d:7c:09:
                    14:5c:dd:d4:23:69:6c:6c:89:c3:92:68:1f:a6:d9:
                    86:35:5b:24:12:5f:12:e6:d7:0c:06:aa:b4:9a:75:
                    8f:c5:9e:39:a3:29:34:bf:c3:41:81:f1:c6:ff:95:
                    52:26:46:1a:23:22:3b:76:08:e3:6e:0f:f8:3f:ac:
                    7c:b0:ba:58:65:b3:6d:8d:2e:04:8d:dd:2d:33:e1:
                    17:77:40:7e:59:73:ae:7d:e7:7c:88:c6:38:01:7b:
                    cc:b5:0d:2d:6f:aa:ce:fc:80:11:14:32:71:63:d0:
                    c9:59:d9:4c:a9:06:62:2c:9f:e3:7c:db:1a:c5:31:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:02:44:B8:C3:CD:34:91:51:76:DA:9A:5F:53:EA:E4:63:B8:FF
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:0c:a7:52:9d:99:2d:6e:c4:a2:91:9a:88:44:bf:a3:22:
         43:35:d9:35:aa:0d:74:9d:13:7b:ef:43:57:d3:c7:73:09:90:
         b7:2f:ae:4d:20:44:f8:ac:31:7f:d9:37:29:ff:59:c3:a1:49:
         62:9d:47:e8:c7:d3:29:aa:6a:c0:66:ba:a2:62:11:2a:dd:f7:
         48:0b:31:64:88:69:b7:5f:79:92:45:f2:7d:ee:12:be:11:98:
         a3:24:9b:89:f8:41:9e:a6:30:5f:09:23:3e:cf:c6:7a:3b:80:
         65:95:39:2d:e5:be:12:22:18:e2:fd:1e:20:be:22:cf:e8:3c:
         16:80:8e:5b:02:79:f9:f7:b5:4a:aa:c1:52:40:1f:d8:08:d2:
         d4:a8:6e:ec:87:86:fb:e6:3e:68:f4:04:c4:fc:cc:82:fc:89:
         02:d4:d3:8b:4f:d1:8d:0e:66:41:35:c4:ef:5d:72:fa:b1:25:
         9b:ac:89:95:1b:dd:f5:99:84:fc:e3:4f:9c:4d:1e:f0:93:1d:
         2f:d0:3c:5b:5f:ee:1b:33:27:18:ae:b3:e2:d7:29:45:0a:a0:
         58:d5:7c:3a:d9:13:de:59:4d:d7:0c:55:58:27:d1:67:f7:15:
         58:d4:8a:78:7d:03:fc:6c:5c:71:c5:b4:81:c7:05:75:53:5d:
         68:d6:53:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:22 2025 by rpki-client