Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          ch6rw6mFMsH0TMFkXbPYHtKI4d8le6BgA9FLIWiw95E=
Subject key identifier:   69:16:DA:6F:7A:5A:A1:13:FB:30:C7:BA:18:35:98:8F:CE:8B:10:11
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       01974666FC30614571B72D623D6434AE48F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          159C
Signing time:             Fri 06 Jun 2025 18:00:43 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:43 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:43 +0000
Files and hashes:         1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=)
                          2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=)
                          3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=)
                          4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=)
                          5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=)
                          6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=)
                          7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=)
                          8: OllQNmMawdArtrTwZHIJNF4T5jM.roa (hash: +uevr5/ThP6vpFGT/Sd5hxkcaCeLUtP4ogWvmijr4m8=)
                          9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: XT4GpkTf2c849n/UZ50GltE3MsnR1mL4S5eLz0dX71g=)
                          10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=)
                          11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=)
                          12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:fc:30:61:45:71:b7:2d:62:3d:64:34:ae:48:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jun  6 18:00:43 2025 GMT
            Not After : Jun  7 18:00:43 2025 GMT
        Subject: CN=6916da6f7a5aa113fb30c7ba1835988fce8b1011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:1d:a8:52:eb:c1:02:c7:31:6b:e1:a7:52:
                    67:9e:2f:a9:b7:f0:05:8e:83:25:9f:64:c3:be:75:
                    c2:4a:84:f8:c3:a3:aa:20:eb:0f:8b:57:50:2c:be:
                    5d:67:cb:ee:61:45:52:27:8f:ea:a7:e0:a6:a0:b0:
                    9b:eb:dd:94:71:3f:61:85:10:00:4c:36:06:84:24:
                    80:80:cc:d7:74:9f:07:2c:78:b0:ee:23:c0:4e:2f:
                    65:df:ff:16:cd:d4:4c:6e:ba:4d:d5:6e:76:79:85:
                    c0:66:63:53:56:e1:d1:14:8d:70:f1:b1:9f:28:3f:
                    93:d0:34:bc:ec:65:c0:41:9a:6c:df:2b:0f:87:a6:
                    eb:b2:c2:ac:4c:dd:22:e2:de:d0:fc:ee:91:3d:d0:
                    08:f5:93:b3:5d:79:41:91:75:d1:76:e8:32:8b:71:
                    19:07:38:63:ab:b6:70:df:0f:ac:9e:c2:44:66:f6:
                    89:56:92:e4:39:c1:11:a9:e3:0c:4b:2c:42:9e:85:
                    23:9b:87:d0:64:d3:31:f9:33:9b:b3:9e:97:24:36:
                    e0:9c:c7:e1:fb:19:07:83:42:24:87:ec:78:97:00:
                    86:03:6e:63:eb:60:9c:83:5e:33:6b:5e:08:b5:2e:
                    ae:d7:1d:1e:37:e4:c3:be:8e:b3:19:e2:16:b4:60:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:DA:6F:7A:5A:A1:13:FB:30:C7:BA:18:35:98:8F:CE:8B:10:11
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3e:b2:8b:ce:36:aa:24:65:a2:75:85:3d:42:f1:79:66:d3:
         d9:9e:d5:c6:63:8a:f5:f8:be:06:25:2c:fc:8d:b0:1c:0a:fd:
         48:89:27:c6:33:f0:3e:6a:f7:35:92:bb:16:28:9f:7f:c8:96:
         86:cd:68:0b:98:64:73:17:23:9e:88:1c:b6:db:3f:9f:f6:9f:
         23:62:5d:ec:0b:3b:2e:33:af:46:2c:90:73:34:fb:43:8f:c6:
         91:d4:5c:13:e3:ca:42:44:08:82:3a:31:fd:38:07:01:bc:7e:
         4c:77:c5:1d:06:a5:fa:6e:36:73:69:81:dd:94:8b:bc:89:3d:
         c5:a2:20:cc:2d:51:aa:d8:36:c4:fb:df:1a:11:41:ce:85:d7:
         47:b9:a4:ee:54:e1:e4:db:a9:0a:13:94:91:a1:fe:1d:1e:76:
         eb:94:a7:e8:13:04:00:84:40:c0:57:ac:c7:39:b1:f0:2f:6b:
         05:bd:73:91:7f:3f:87:71:e1:23:b3:d1:71:6b:8b:61:0d:e5:
         0e:43:1b:e4:18:4e:61:c1:64:28:84:4a:26:1d:04:77:1f:0b:
         e4:cb:96:24:74:b1:5c:36:2a:c6:32:43:81:5a:fc:49:d8:14:
         5e:82:9d:68:0b:3a:44:9f:f1:64:ca:c2:ba:50:92:50:da:6f:
         74:16:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:50:34 2025 by rpki-client