Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          Gj7Tk/KuNNIYK1zgb4Y9530iiugzN3knyiLfjA8+xOA=
Subject key identifier:   7F:8A:FD:85:B0:3B:C2:FF:59:C2:2A:11:16:1E:4B:62:A8:67:A5:4F
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       0197820E0197946AABBA401CA2B994B0F831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          159B
Signing time:             Wed 18 Jun 2025 08:00:45 +0000
Manifest this update:     Wed 18 Jun 2025 08:00:45 +0000
Manifest next update:     Thu 19 Jun 2025 08:00:45 +0000
Files and hashes:         1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: KYlVlFRVZyIE6zbcxas0cjrxhnlSR6V8QltA0HXMRyw=)
                          2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
                          3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
                          4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:0e:01:97:94:6a:ab:ba:40:1c:a2:b9:94:b0:f8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Jun 18 08:00:45 2025 GMT
            Not After : Jun 19 08:00:45 2025 GMT
        Subject: CN=7f8afd85b03bc2ff59c22a11161e4b62a867a54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:f2:9e:45:c4:ec:f4:91:b8:bd:8a:ba:c4:
                    69:55:d2:45:d1:79:7c:2f:87:7c:a2:c9:9f:23:10:
                    21:c3:34:48:46:9e:c1:c8:40:80:52:0b:ba:3d:d6:
                    64:b6:34:bf:13:03:e2:ce:02:89:9a:5c:82:84:15:
                    9f:e1:23:6d:14:57:79:07:6b:a2:15:ed:bc:8c:aa:
                    ac:9c:95:8f:11:6c:ba:e9:53:d4:a1:5a:e1:3b:3a:
                    02:c3:64:d7:1c:d1:8e:3c:24:b3:6e:ba:bd:27:82:
                    71:7e:fd:c7:fb:47:ee:e2:ee:2c:21:dc:25:bf:5a:
                    7d:db:75:fb:5e:05:a0:a1:20:ca:28:76:ae:99:e1:
                    8e:94:2e:c5:fc:55:96:78:c5:9e:51:c5:3e:af:1f:
                    b6:8a:4f:f2:53:3f:96:40:0a:e8:97:1f:34:e2:e6:
                    a0:12:ad:69:e4:b8:9f:83:bf:5e:f6:45:0e:57:02:
                    19:1a:9f:09:e8:62:34:35:f6:0e:80:e4:57:49:9d:
                    21:05:3c:39:fd:ab:e3:ff:20:a1:dc:c1:ca:35:6b:
                    7a:a7:b2:2f:24:e4:e1:cb:be:e8:2a:2d:34:24:1f:
                    b4:93:8e:a2:74:19:ad:0e:37:f1:f3:d4:ad:1e:71:
                    04:73:da:35:33:82:f1:97:f7:f7:72:5b:48:21:0f:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:FD:85:B0:3B:C2:FF:59:C2:2A:11:16:1E:4B:62:A8:67:A5:4F
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:41:89:68:01:8c:4f:ad:d2:14:1a:a4:ce:53:11:43:9a:22:
         e5:b8:e5:01:94:1a:44:12:56:d3:d0:00:1c:48:90:d5:6e:ec:
         9a:f8:58:29:36:82:9d:fa:20:c4:75:2d:d5:4a:ce:70:44:85:
         5e:c5:d1:ff:06:bf:fe:f8:3f:c6:ee:bb:1a:24:9c:80:b9:f2:
         a6:db:b4:99:1b:51:d4:0e:4b:53:86:69:e7:a6:51:dc:00:6d:
         1a:9d:6c:2e:c2:56:07:c4:b8:49:62:78:41:6d:19:0d:0f:04:
         76:38:07:75:de:e7:58:d5:b2:d3:ac:95:47:2d:3f:4b:5c:39:
         7a:07:37:db:04:eb:fc:cb:f2:62:f4:57:b8:8a:cf:3d:02:71:
         41:59:6c:5a:4f:8a:5e:ae:0f:6b:db:f5:4a:3f:12:71:de:c5:
         40:ad:3a:fa:f9:89:8b:ca:bf:33:eb:ea:a1:75:8e:1a:b1:f5:
         f0:4c:7f:91:e4:c6:04:c5:be:fc:07:eb:d3:c0:a2:5a:e4:4d:
         cf:09:30:8f:cd:9e:87:6d:0e:eb:dc:be:67:dd:23:09:9a:85:
         4a:54:8b:66:85:35:7e:4a:3c:e2:5a:a3:44:ae:8c:cf:1f:e4:
         2a:4e:88:a1:fa:d8:17:91:13:f0:29:91:0c:6f:c7:b6:11:5b:
         f8:30:d5:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeCDgGXlGqrukAcormUsPgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj
ZDJhOTcwHhcNMjUwNjE4MDgwMDQ1WhcNMjUwNjE5MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZjhhZmQ4NWIwM2JjMmZmNTljMjJhMTExNjFlNGI2MmE4NjdhNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cbynkXE7PSRuL2KusRpVdJF0Xl8
L4d8osmfIxAhwzRIRp7ByECAUgu6PdZktjS/EwPizgKJmlyChBWf4SNtFFd5B2ui
Fe28jKqsnJWPEWy66VPUoVrhOzoCw2TXHNGOPCSzbrq9J4Jxfv3H+0fu4u4sIdwl
v1p923X7XgWgoSDKKHaumeGOlC7F/FWWeMWeUcU+rx+2ik/yUz+WQArolx804uag
Eq1p5Lifg79e9kUOVwIZGp8J6GI0NfYOgORXSZ0hBTw5/avj/yCh3MHKNWt6p7Iv
JOThy77oKi00JB+0k46idBmtDjfx89StHnEEc9o1M4Lxl/f3cltIIQ9S3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+K/YWwO8L/WcIqERYeS2KoZ6VPMB8GA1UdIwQY
MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct
NTVjM2QxMjllYzI4LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4
LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkGJaAGM
T63SFBqkzlMRQ5oi5bjlAZQaRBJW09AAHEiQ1W7smvhYKTaCnfogxHUt1UrOcESF
XsXR/wa//vg/xu67GiScgLnyptu0mRtR1A5LU4Zp56ZR3ABtGp1sLsJWB8S4SWJ4
QW0ZDQ8EdjgHdd7nWNWy06yVRy0/S1w5egc32wTr/MvyYvRXuIrPPQJxQVlsWk+K
Xq4Pa9v1Sj8Scd7FQK06+vmJi8q/M+vqoXWOGrH18Ex/keTGBMW+/Afr08CiWuRN
zwkwj82eh20O69y+Z90jCZqFSlSLZoU1fko84lqjRK6Mzx/kKk6IofrYF5ET8CmR
DG/HthFb+DDVHg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:32:11 2025 by rpki-client