Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File:                     3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier:          Ld5bO9jJ9KnIFuOqVHI5yg/cdM845Bvi5+ky5dBxG4U=
Subject key identifier:   E8:34:9E:63:EF:0B:D1:A8:90:39:39:83:E3:FE:7C:7D:78:B3:31:68
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer:       /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial:       0197684E4DC6329F333AB5D7573691AF4084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 08:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:51 +0000
Files and hashes:         1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: a0H7Z3KE3ryRyQ+aH6Xqj4Qz7QB74NYRS+B4T6zPxvo=)
                          2: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (hash: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=)
                          3: EpMLaYChUvPW43eW66M41o2KSpc.roa (hash: PU2MBAWGAP6VAtPvAGor5W80iPyTDbgTBn9WAJahQLs=)
                          4: w0PKwUFljbRq5uVzYVthjHLkXQY.roa (hash: 6g4grLiYtJiUu1m03msVb0si+AZ8cTE6ZMD8wFTtcLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:4d:c6:32:9f:33:3a:b5:d7:57:36:91:af:40:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
        Validity
            Not Before: Jun 13 08:00:51 2025 GMT
            Not After : Jun 14 08:00:51 2025 GMT
        Subject: CN=e8349e63ef0bd1a890393983e3fe7c7d78b33168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:69:e2:5c:05:4e:bf:d4:02:87:aa:a4:f3:
                    9d:27:79:cb:2b:65:d0:9a:c3:d4:4f:ca:54:b0:d1:
                    f8:49:cb:7d:69:b4:6d:f9:5d:ae:ee:a7:5c:58:c8:
                    e2:5c:79:ee:7e:c3:f5:d8:30:be:33:71:74:35:2a:
                    97:6e:e4:f6:7f:65:80:f1:79:19:db:ef:11:bf:d9:
                    0c:ce:f6:de:9b:db:07:84:0d:44:26:92:42:59:37:
                    17:c7:cb:92:ed:10:a1:e3:b1:22:b6:8b:01:ef:11:
                    85:9e:f5:8e:81:48:b6:f6:72:73:88:23:e8:80:75:
                    bb:12:e2:76:0b:94:1c:ab:f4:2c:2e:85:36:ff:19:
                    78:3f:61:48:d9:ef:53:96:28:ff:06:b9:f6:8f:5c:
                    e1:02:04:6a:ea:60:09:fa:bb:f7:38:de:31:71:f0:
                    76:da:de:21:0e:3e:34:04:72:e8:af:01:b3:6a:af:
                    8e:30:d1:34:3e:52:53:06:54:0f:3c:c8:0c:2a:fc:
                    7d:72:85:a1:71:c3:8a:3b:f2:92:59:74:6d:c9:d6:
                    66:df:26:79:cc:79:16:19:9f:19:16:23:63:56:9b:
                    f3:21:dd:ad:32:a6:9e:2e:bb:9b:e4:f3:6e:ff:ee:
                    f0:77:d0:c8:5c:3e:4c:96:13:99:c8:71:66:ae:86:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:34:9E:63:EF:0B:D1:A8:90:39:39:83:E3:FE:7C:7D:78:B3:31:68
            X509v3 Authority Key Identifier:
                keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d6:9e:a5:07:4b:53:8c:c9:e6:42:21:93:57:dd:33:16:7a:
         a6:f2:1a:27:28:d2:b7:4e:17:14:1e:c9:bf:c8:f8:9c:42:d7:
         0d:52:23:01:be:05:29:46:1d:4a:07:f5:af:23:0d:6e:7f:3a:
         2a:30:43:0b:58:db:6a:24:ef:35:23:6e:bf:11:56:d1:72:03:
         d3:2a:e5:20:46:b6:49:b1:c6:3c:dd:10:ff:ad:7a:72:9d:4a:
         45:8b:ac:62:f8:09:f1:73:3e:11:25:45:2b:f6:86:42:c7:0e:
         0c:a1:c4:08:22:49:d4:ef:6e:b9:9e:29:b4:c9:5e:04:3e:85:
         57:eb:26:bb:df:c0:f4:b3:91:51:d9:06:f7:5d:40:f0:26:8e:
         12:74:4b:87:94:e0:2e:a3:5a:c4:0b:85:67:ab:e7:bc:3f:1c:
         12:86:7a:af:c5:e4:1c:be:bb:b6:45:4f:e8:98:fa:cc:61:c0:
         a4:62:02:3e:7e:46:37:6a:16:ee:80:78:12:1f:d5:02:34:1d:
         da:c2:78:bf:b5:75:b5:5f:3d:91:90:66:5c:5d:3a:be:be:f0:
         19:48:63:a7:48:b2:8f:b6:d2:f6:39:16:90:78:34:a7:bf:df:
         eb:e2:a6:c1:34:5a:72:6d:76:2b:72:b5:51:d3:65:ac:28:5a:
         c4:d7:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:51:41 2025 by rpki-client