Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
File:                     b5jR-Z44M-9AHUY0juyLdSCIxV0.mft (raw, json)
Hash identifier:          6UfPKrawZmaTJn/KhasNI3Rk4QKy/yVnhAfyxSfBaGY=
Subject key identifier:   C6:54:A5:40:14:A8:67:28:18:FF:8D:DF:3B:76:CB:6B:FD:47:30:8D
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Certificate issuer:       /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial:       019765849E23A61AF963289E262D2549DB98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
Manifest number:          158D
Signing time:             Thu 12 Jun 2025 19:01:19 +0000
Manifest this update:     Thu 12 Jun 2025 19:01:19 +0000
Manifest next update:     Fri 13 Jun 2025 19:01:19 +0000
Files and hashes:         1: AK8oH-hdcdWqkx1j19Sg4WRGU6k.roa (hash: UL0wVMMPQ6seHx9+E4jjcivFpYmeRRoPs0aDR4HKrBk=)
                          2: WtT0iRRNWOEnnJNbpojOaIceMDQ.roa (hash: GuNBmImvmC1qMkMAYPrdjYcM0SGHFORb2IyKWp/uvJM=)
                          3: b5jR-Z44M-9AHUY0juyLdSCIxV0.crl (hash: nFmfYjXV7cnxfwPR9U5hG2WKEYPB0Sem+FXCBFtFyGs=)
                          4: j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa (hash: k9js+BE4RFtwEtbQ/V0azAY+xGWrWmclJFMU8tYRWW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:9e:23:a6:1a:f9:63:28:9e:26:2d:25:49:db:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
        Validity
            Not Before: Jun 12 19:01:19 2025 GMT
            Not After : Jun 13 19:01:19 2025 GMT
        Subject: CN=c654a54014a8672818ff8ddf3b76cb6bfd47308d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:87:50:c1:97:a6:08:f4:a0:b3:70:74:ec:
                    03:e9:24:54:75:8d:d6:4e:c6:e0:d7:2a:4e:0e:3e:
                    d8:35:59:3b:7f:06:cb:53:65:bc:63:35:f4:b5:3e:
                    54:68:00:87:f8:a5:27:36:36:0d:d8:bd:6b:81:3a:
                    c7:24:df:9b:56:b4:4a:7a:d8:73:5a:22:f2:ab:f0:
                    a6:c8:c5:2f:52:22:86:a5:a3:55:30:8b:fe:8c:62:
                    2b:c6:f7:bb:29:64:0c:23:60:3c:1d:02:9a:f5:8c:
                    f8:49:a9:94:c8:a2:b4:de:68:f8:9d:8b:49:7c:d3:
                    92:f3:f1:ca:6c:1d:82:90:39:ac:c8:ab:22:b7:e3:
                    21:28:e5:78:a0:94:bc:f5:bc:f9:1f:46:d9:14:4a:
                    33:71:75:53:a7:3a:c0:2f:27:46:fc:c2:63:a9:53:
                    4d:84:36:7a:0f:b2:e7:95:76:74:29:91:46:4d:d4:
                    94:b3:6e:7d:12:53:61:94:16:ba:10:d1:02:f3:bb:
                    c0:61:31:61:35:11:48:e0:17:60:11:e7:f2:20:57:
                    22:18:d4:43:33:ee:12:dc:ce:1d:d8:d9:d0:29:b2:
                    e1:ac:cb:32:03:f0:16:82:fe:46:31:c1:59:d8:c3:
                    c3:6d:db:64:40:f2:cc:d9:f0:a6:34:27:9a:2d:97:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:A5:40:14:A8:67:28:18:FF:8D:DF:3B:76:CB:6B:FD:47:30:8D
            X509v3 Authority Key Identifier:
                keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:db:07:c0:a0:a6:6c:72:fd:43:9a:65:fc:e0:b4:92:ee:
         af:6b:2c:ac:c8:dd:1a:7f:86:26:5b:f6:ca:05:d6:1e:13:72:
         9d:7f:89:3f:83:77:b6:4c:42:27:5f:ad:7c:b6:4c:d7:30:fb:
         0e:ce:e0:35:44:bf:22:75:15:cf:84:3c:9a:72:63:e4:45:9a:
         de:49:29:97:4d:07:85:ea:9d:c0:f5:79:53:4d:8f:db:36:f8:
         86:88:1e:c2:15:5a:b7:f3:56:d5:e8:ea:7d:9b:2f:b4:49:5a:
         89:02:b9:cc:2b:7f:4c:59:48:b3:0e:3d:02:b0:8f:94:b7:99:
         95:65:59:b1:aa:92:79:35:4a:f0:d2:cf:67:bb:4a:a2:e6:6a:
         1d:f2:34:15:f7:ad:3a:5d:ba:b3:4d:75:7b:3a:a0:df:49:64:
         dd:47:e5:b7:50:e8:d3:fc:e6:24:f8:7d:67:9d:78:89:3b:1e:
         d1:40:0c:40:7e:0a:55:9a:e8:2e:f0:2a:ea:fe:ce:d8:44:12:
         0a:ad:53:10:54:c2:f3:15:3a:3a:c3:6e:12:d3:33:45:6e:55:
         4a:d3:99:6d:49:a2:12:3f:96:19:1f:30:fe:ce:2c:dc:3d:c3:
         a3:e6:3e:e2:10:e6:66:fe:76:66:7f:4f:47:bf:63:8a:b3:ed:
         6a:a1:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:47:28 2025 by rpki-client