Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File:                     RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier:          6t7D+XZbVHDcpNgdm8NhQy3nx2QOjL/RN7ppN2ObwYM=
Subject key identifier:   0B:B6:1F:8B:D5:E6:AA:1B:9D:05:2E:63:16:42:54:43:80:37:EC:CF
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer:       /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial:       0197B6A15EF7BDBD5C1307EACA8793413BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number:          158B
Signing time:             Sat 28 Jun 2025 13:01:58 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:58 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:58 +0000
Files and hashes:         1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
                          2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: Tt28nD6txyyKMFaAfwRIOQqox5Rsml9UHHpNzf03uhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:5e:f7:bd:bd:5c:13:07:ea:ca:87:93:41:3b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
        Validity
            Not Before: Jun 28 13:01:58 2025 GMT
            Not After : Jun 29 13:01:58 2025 GMT
        Subject: CN=0bb61f8bd5e6aa1b9d052e63164254438037eccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:ba:34:6d:e0:50:a6:9a:34:86:c5:be:92:
                    be:15:90:f8:65:4d:c1:0d:52:75:b1:8d:c5:36:52:
                    f2:6c:04:1a:eb:1c:1a:fb:07:2d:eb:f5:82:8b:6c:
                    3a:aa:4a:de:fa:db:49:3c:e9:2f:06:a3:21:95:59:
                    df:6e:0d:99:57:9c:39:0a:9b:66:e0:77:e4:22:89:
                    c6:e0:c6:a4:f3:bf:66:4a:4a:78:01:78:12:be:7d:
                    5c:33:fc:52:bf:07:31:37:59:a6:da:17:e6:4e:23:
                    b1:f3:f6:fd:7c:e2:5f:11:14:91:08:79:a7:2b:8b:
                    f5:8e:56:0a:00:f9:e4:67:c5:3c:15:f0:61:2d:85:
                    8e:6e:1e:d3:43:bb:74:ff:93:6f:13:47:03:33:16:
                    fc:9d:15:f7:03:b7:6c:6c:fc:f5:b8:52:4e:8d:af:
                    36:75:4d:2c:42:b4:7b:26:26:c4:88:0c:d1:20:03:
                    76:8c:f1:18:aa:6b:1f:b4:50:ff:61:32:fb:5e:61:
                    26:86:bc:4a:19:68:14:29:21:74:90:b1:42:98:b6:
                    5f:67:f4:62:b6:16:a0:2f:18:d1:c9:a4:10:fe:2b:
                    e3:c9:80:20:f5:37:b7:0a:1f:19:bd:30:3e:f1:27:
                    59:c9:f1:1c:d3:a0:48:b3:f1:1e:56:90:1a:0e:7e:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B6:1F:8B:D5:E6:AA:1B:9D:05:2E:63:16:42:54:43:80:37:EC:CF
            X509v3 Authority Key Identifier:
                keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:e9:ea:0c:b5:58:b1:e1:a9:45:6b:3d:98:d8:fc:62:46:
         79:d7:2a:f0:29:de:a0:e7:2d:dd:a3:11:df:a1:3b:f7:99:68:
         6d:fb:a5:db:0e:3b:e5:96:fb:66:05:c8:fd:2f:4f:dd:37:4e:
         59:bc:30:d1:10:90:9a:3d:57:cc:77:78:fd:e8:cb:9b:68:42:
         01:00:71:86:07:ec:ca:3f:f9:45:bd:86:a3:73:62:2f:3e:42:
         ac:8a:fe:59:1d:32:cc:41:6c:38:54:4a:dc:8d:ac:ca:c7:78:
         89:b1:25:60:ac:d1:fb:6a:df:97:d6:ee:c4:15:0a:98:10:14:
         bc:34:f7:0c:e4:47:fe:4f:28:15:09:59:6a:0b:43:6c:90:db:
         9b:a7:07:a8:7b:88:6a:9b:db:f0:6d:72:ec:dc:70:ee:3a:04:
         ba:e9:e1:57:2e:8c:ab:ae:6d:fb:c3:d0:1c:94:80:4d:13:0b:
         8a:e9:6a:3d:58:5b:23:83:89:ca:3a:c2:f3:b6:6c:54:be:ff:
         1d:60:95:7b:09:d4:3b:d8:42:2b:8f:ae:a7:59:1a:b5:af:ba:
         4f:36:9d:1d:7a:39:0e:f6:f2:df:c9:d8:5b:96:cc:5c:7a:99:
         35:32:a2:de:0d:9c:9e:8e:36:e0:13:b0:d2:d5:a7:49:77:57:
         82:46:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:16 2025 by rpki-client