Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft
File:                     bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft (raw, json)
Hash identifier:          3/GHvzQyfnX80VETfivFmgxNXIeBYY163aJ2/LpRC/I=
Subject key identifier:   6C:E9:A1:5C:71:F2:BB:FF:74:50:FD:DF:BB:B9:70:D3:CE:50:20:EA
Authority key identifier: 6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28
Certificate issuer:       /CN=6d64a867f45c48f2027b00b83c77796fbbbe0328
Certificate serial:       0197B70F0A1A1DD412E9E39B9E3544667651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft
Manifest number:          0160
Signing time:             Sat 28 Jun 2025 15:01:45 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:45 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:45 +0000
Files and hashes:         1: ZX73IV0uGk2ob4VktyJV9wBSBac.roa (hash: Z5WvoiItJu0epzg3OUDQ1qokvJ24J2oFtkaMgOd6bHY=)
                          2: bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl (hash: uCrQJdDBIPSOrXcDa0HDaPdKWAElv5N+DkMPBy/eBMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:0a:1a:1d:d4:12:e9:e3:9b:9e:35:44:66:76:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d64a867f45c48f2027b00b83c77796fbbbe0328
        Validity
            Not Before: Jun 28 15:01:45 2025 GMT
            Not After : Jun 29 15:01:45 2025 GMT
        Subject: CN=6ce9a15c71f2bbff7450fddfbbb970d3ce5020ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:17:38:ab:39:f3:f4:d7:f7:73:79:0c:4d:
                    54:56:b6:79:7e:41:2d:2c:ac:b8:7f:c4:28:98:50:
                    ba:f8:10:be:be:6b:2b:6e:9a:37:1e:40:86:1a:81:
                    d2:d6:f2:bf:06:e8:31:0e:ae:32:e3:fa:c3:bf:ad:
                    4b:97:d4:e1:bd:92:3d:77:74:6d:2d:96:8e:7d:a1:
                    2b:3d:cd:84:ff:08:bc:47:9e:d6:b2:ab:ac:49:6f:
                    7e:a2:c8:69:8d:f3:e3:59:b1:bb:ce:68:68:f3:df:
                    6e:c2:27:39:1c:c4:9d:63:37:aa:40:f2:c7:1c:e8:
                    31:64:74:b9:b1:5e:e6:85:c5:47:b6:79:63:30:0c:
                    59:21:08:62:34:44:ac:ad:69:06:85:3d:bd:49:da:
                    c5:d7:eb:37:6d:88:89:a0:ec:c3:6b:8d:e8:cc:67:
                    7c:11:bd:ab:84:a3:ab:8f:76:95:29:99:ec:4f:b4:
                    75:5f:57:c1:5a:38:52:81:57:57:bb:89:0d:80:91:
                    ea:98:fe:bc:9f:1d:42:66:af:52:56:49:87:05:88:
                    c6:08:db:55:d0:60:79:48:54:9a:83:9d:9a:29:78:
                    07:3d:83:50:5d:95:c2:17:5d:bc:ec:b7:75:50:d3:
                    99:0c:7b:97:31:ef:72:fa:aa:dc:03:9c:6a:99:03:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:A1:5C:71:F2:BB:FF:74:50:FD:DF:BB:B9:70:D3:CE:50:20:EA
            X509v3 Authority Key Identifier:
                keyid:6D:64:A8:67:F4:5C:48:F2:02:7B:00:B8:3C:77:79:6F:BB:BE:03:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWSoZ_RcSPICewC4PHd5b7u-Ayg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0f9d37-fb57-48cf-839e-b0623ea7fb01/1/bWSoZ_RcSPICewC4PHd5b7u-Ayg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c9:c1:7e:f4:ac:ae:48:c3:48:8d:e0:64:3a:b3:d9:be:f4:
         0c:0a:24:d9:2f:16:f2:29:83:3f:7b:1f:68:1b:69:d2:b1:5a:
         f6:22:9f:5a:8f:64:e1:d8:f9:32:4f:44:f5:17:da:3e:d4:1b:
         28:67:2a:c2:d9:bb:fc:99:94:35:46:a5:29:c7:98:2a:56:bc:
         9b:f8:95:0d:33:89:fa:f7:2a:bc:c0:d9:98:d0:1c:21:29:2e:
         45:17:cb:b9:b4:96:43:cf:9e:ce:fe:82:07:26:6f:cd:26:32:
         3a:d8:1d:6b:05:5e:30:a0:94:3a:e1:ec:b4:34:96:c1:7f:18:
         90:be:9d:02:6f:59:bd:e1:35:56:8c:0d:fc:06:e0:96:b5:1c:
         9f:0a:a0:75:ef:da:e5:b4:73:8c:10:21:46:f9:ac:a5:29:8c:
         c2:4f:4f:08:93:e7:1d:8a:9d:33:c5:41:8f:f4:7a:0f:c3:b0:
         f7:d6:3f:1f:b4:64:49:82:a6:a0:bb:f4:b1:ee:54:61:19:57:
         38:be:85:c1:8c:fd:db:bc:57:70:4a:2e:4d:53:08:a4:05:a1:
         e0:64:da:9c:70:bb:69:3c:3a:29:dc:ad:02:8e:fe:a2:e9:4c:
         b9:1d:9b:37:e6:3c:25:e3:de:9a:7f:e9:bf:f0:37:84:8d:06:
         05:ad:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:56 2025 by rpki-client