Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
File:                     JIuM0rt0TFcgVwRl3le0yjWjcvA.mft (raw, json)
Hash identifier:          GeqIJIbF5Tqkc9VNSPARW2c7VBbZXVhkHV7Va+KOEPc=
Subject key identifier:   8D:5C:A1:20:DD:1E:A2:D1:76:84:61:E1:8F:38:A9:22:24:73:D7:DB
Authority key identifier: 24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0
Certificate issuer:       /CN=248b8cd2bb744c5720570465de57b4ca35a372f0
Certificate serial:       01976884C0F51693AEF39AF73778D012763B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 09:00:19 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:19 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:19 +0000
Files and hashes:         1: JIuM0rt0TFcgVwRl3le0yjWjcvA.crl (hash: 1pwWTC7jJJm8PKrCFaytux7P8JIq3FCs9Qpa4ecbZXQ=)
                          2: yQqcMeWPVR3gPJhw22lJYkcoC6w.roa (hash: gPSCyPa7byqT2dADD2nEHydwwchUGHgO0WIjWbFS9eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:c0:f5:16:93:ae:f3:9a:f7:37:78:d0:12:76:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248b8cd2bb744c5720570465de57b4ca35a372f0
        Validity
            Not Before: Jun 13 09:00:19 2025 GMT
            Not After : Jun 14 09:00:19 2025 GMT
        Subject: CN=8d5ca120dd1ea2d1768461e18f38a9222473d7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:ad:35:a6:d4:bc:f1:eb:30:b5:85:80:23:
                    cd:70:bb:6f:53:b3:ba:5e:ab:6f:10:96:a2:f1:f5:
                    e1:1d:55:97:3a:80:a3:db:7d:36:18:5d:6d:0b:72:
                    ad:79:9f:8f:9b:e5:b5:ca:44:9e:d8:9b:ee:21:a3:
                    b7:40:be:4d:64:ba:9d:3d:4e:da:99:04:f8:a7:42:
                    b6:8c:1f:93:c7:fd:98:fe:85:98:d6:92:3b:48:cd:
                    d6:80:b5:92:e4:da:26:e4:63:5a:58:df:9a:ad:5e:
                    5d:f9:09:c2:e4:16:89:e2:78:e4:30:c9:56:9c:8a:
                    f5:8b:5a:f0:47:fd:52:e1:61:ee:a9:31:39:99:70:
                    35:02:73:06:d6:66:ad:bf:48:75:00:72:80:0e:53:
                    0b:35:4d:00:c3:91:35:39:a3:19:37:a1:23:ce:80:
                    91:d0:c0:0b:22:fd:87:72:56:27:b2:95:26:77:c3:
                    52:83:ca:05:d9:0a:9b:84:da:96:df:0e:20:79:5c:
                    b3:da:8d:98:dd:b7:a7:97:f8:5e:da:98:2d:8a:c4:
                    e2:d9:57:62:d9:85:15:e2:31:d3:d2:e8:e6:89:d7:
                    7e:7d:81:9f:ad:4a:fd:52:36:fa:bd:57:a0:23:ae:
                    f0:3d:60:a6:4b:2b:48:88:66:2f:9a:31:28:9b:ae:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5C:A1:20:DD:1E:A2:D1:76:84:61:E1:8F:38:A9:22:24:73:D7:DB
            X509v3 Authority Key Identifier:
                keyid:24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:f7:91:ab:86:6d:b8:ba:fb:5b:c1:68:0b:52:90:4e:f8:
         7d:23:fa:f8:fd:14:34:11:b6:1a:1e:83:32:81:12:ae:57:e0:
         ef:09:0e:f6:d9:01:3c:07:22:f7:a7:df:17:b0:e4:38:aa:60:
         98:eb:6c:5f:f8:f6:d5:01:86:b5:5c:90:c8:fb:4b:a5:ce:c6:
         99:02:77:86:b8:f1:54:c8:ce:7c:19:52:61:ce:08:b0:77:db:
         93:18:b0:2c:da:f6:44:c8:14:79:7c:39:b8:2c:cf:0b:c9:db:
         31:87:8d:76:4f:f2:8c:b0:58:ff:2d:64:f5:9a:90:d4:10:2a:
         5c:f9:60:02:9d:c7:6d:60:ae:c6:12:ee:33:f2:60:70:ab:70:
         ac:12:fe:5c:c5:0e:63:38:61:a9:01:12:41:e7:97:6a:bf:72:
         48:78:4f:3a:b8:a2:99:55:e2:77:93:cd:db:fd:84:2a:31:03:
         90:69:3f:6d:2b:89:16:d8:31:e1:a9:45:93:06:86:39:30:8e:
         5b:09:7b:69:dd:69:75:d4:21:90:d2:93:78:86:89:d6:d3:64:
         7c:a4:34:9f:8f:4d:b8:2a:d5:18:1e:af:6f:04:c5:f5:9b:42:
         60:4e:2e:0e:62:1e:9b:c6:69:b7:77:52:c4:a4:31:8c:67:57:
         f5:cb:d7:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohMD1FpOu85r3N3jQEnY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0OGI4Y2QyYmI3NDRjNTcyMDU3MDQ2NWRlNTdiNGNhMzVh
MzcyZjAwHhcNMjUwNjEzMDkwMDE5WhcNMjUwNjE0MDkwMDE5WjAzMTEwLwYDVQQD
Eyg4ZDVjYTEyMGRkMWVhMmQxNzY4NDYxZTE4ZjM4YTkyMjI0NzNkN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwutNabUvPHrMLWFgCPNcLtvU7O6
XqtvEJai8fXhHVWXOoCj2302GF1tC3KteZ+Pm+W1ykSe2JvuIaO3QL5NZLqdPU7a
mQT4p0K2jB+Tx/2Y/oWY1pI7SM3WgLWS5Nom5GNaWN+arV5d+QnC5BaJ4njkMMlW
nIr1i1rwR/1S4WHuqTE5mXA1AnMG1matv0h1AHKADlMLNU0Aw5E1OaMZN6EjzoCR
0MALIv2HclYnspUmd8NSg8oF2QqbhNqW3w4geVyz2o2Y3benl/he2pgtisTi2Vdi
2YUV4jHT0ujmidd+fYGfrUr9Ujb6vVegI67wPWCmSytIiGYvmjEom666EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1coSDdHqLRdoRh4Y84qSIkc9fbMB8GA1UdIwQY
MBaAFCSLjNK7dExXIFcEZd5XtMo1o3LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkl1TTBydDBURmNnVndSbDNsZTB5aldqY3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xM2EyY2YtMGYwZC00ZTQ0LWFhOTIt
ODUxOGNhNGE1ZmNhLzEvSkl1TTBydDBURmNnVndSbDNsZTB5aldqY3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8xM2EyY2YtMGYwZC00ZTQ0LWFhOTItODUxOGNhNGE1ZmNh
LzEvSkl1TTBydDBURmNnVndSbDNsZTB5aldqY3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9b3kauG
bbi6+1vBaAtSkE74fSP6+P0UNBG2Gh6DMoESrlfg7wkO9tkBPAci96ffF7DkOKpg
mOtsX/j21QGGtVyQyPtLpc7GmQJ3hrjxVMjOfBlSYc4IsHfbkxiwLNr2RMgUeXw5
uCzPC8nbMYeNdk/yjLBY/y1k9ZqQ1BAqXPlgAp3HbWCuxhLuM/JgcKtwrBL+XMUO
YzhhqQESQeeXar9ySHhPOriimVXid5PN2/2EKjEDkGk/bSuJFtgx4alFkwaGOTCO
Wwl7ad1pddQhkNKTeIaJ1tNkfKQ0n49NuCrVGB6vbwTF9ZtCYE4uDmIem8Zpt3dS
xKQxjGdX9cvXnA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:28 2025 by rpki-client