Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier:          Bf/sQZ7uX9LSlrxAbtrey/2UxMT+4GUPdHCEdeLKBJo=
Subject key identifier:   5E:17:54:E3:7F:E2:90:36:B9:89:8B:94:16:04:85:0E:B6:F6:11:44
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       01976F9A7946D9292326D8EB8A81677266F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 18:01:23 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:23 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:23 +0000
Files and hashes:         1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: RBQIxPobB03qBmfFI+vh+jHp9jB/cj3XX9VRv+qykv0=)
                          2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:79:46:d9:29:23:26:d8:eb:8a:81:67:72:66:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: Jun 14 18:01:23 2025 GMT
            Not After : Jun 15 18:01:23 2025 GMT
        Subject: CN=5e1754e37fe29036b9898b941604850eb6f61144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b9:b7:84:7a:4b:18:13:03:7e:ac:d8:c9:df:
                    ed:ef:f1:e2:95:a3:6c:8c:ce:c5:1c:3f:38:d1:0f:
                    1a:b6:b0:12:44:c7:26:07:85:29:03:89:f2:52:da:
                    4a:60:3a:fb:64:b4:15:72:cf:6e:67:ff:14:35:69:
                    b7:31:3d:82:dd:18:02:01:30:b7:54:7c:bb:4e:09:
                    a5:86:fb:8c:dc:0b:11:6f:2f:25:a4:08:1f:54:2d:
                    19:6a:4c:20:ab:57:1f:3d:a2:35:70:03:b2:eb:4a:
                    5b:ba:eb:bd:8d:6f:96:8c:90:08:40:ea:1b:15:e6:
                    c0:9b:eb:9f:1c:00:51:ab:32:67:eb:82:a1:95:69:
                    89:81:a1:49:2e:ad:d9:c0:9c:10:88:af:27:52:3a:
                    69:a6:92:42:35:94:c0:f5:37:6b:3b:94:bc:0d:31:
                    16:ed:11:91:69:f1:55:42:6a:b9:60:e7:8d:65:91:
                    36:8a:0b:c3:5f:d8:bb:30:80:7a:76:94:01:85:99:
                    be:1d:24:d1:ef:76:c9:37:93:45:75:ac:04:c6:82:
                    6c:31:a1:83:86:70:cb:36:9c:fd:d1:b5:55:4d:16:
                    73:2a:97:0d:8f:c6:18:c4:19:09:7e:65:96:50:43:
                    1e:06:4b:5d:7d:70:ca:a9:b5:d5:5e:94:4c:4f:a3:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:54:E3:7F:E2:90:36:B9:89:8B:94:16:04:85:0E:B6:F6:11:44
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:68:4a:1a:77:5c:aa:86:cb:d2:53:1b:4d:f4:f0:ef:35:
         30:c6:8a:1f:36:8b:00:a4:cd:be:9d:5e:22:d7:f1:ca:2f:fb:
         f4:63:8b:ec:bd:07:bd:6a:72:9c:16:d6:c8:17:99:f9:4c:e4:
         29:c9:9d:23:55:e6:e3:a8:7b:22:59:32:c2:fc:4a:15:6d:d8:
         96:85:ab:ef:7b:d3:ad:ff:a8:6c:67:9b:98:95:d7:20:19:21:
         0e:6c:e6:18:8f:ca:f3:4a:ed:4f:40:a0:4d:b6:c1:f9:15:7b:
         18:e4:e6:5e:24:c7:dd:8a:1b:23:64:e8:d0:23:a0:28:18:a7:
         fd:f7:76:32:1e:bb:66:43:f4:d1:a7:bb:1b:b5:90:4e:87:e5:
         76:6b:bc:1f:12:15:f9:71:bb:3f:a2:bc:83:95:3d:8c:88:73:
         6e:8a:1a:ce:33:b3:9e:f1:38:f6:69:52:82:a7:5a:dc:4f:cd:
         b0:e5:6c:36:97:6d:5d:1f:80:2d:72:90:6a:4b:34:81:75:f7:
         ea:bc:1c:18:4d:2c:7b:12:65:3f:30:ad:c8:bc:3d:98:76:f3:
         e5:b5:39:94:59:05:fb:b9:ba:85:0a:2a:75:e4:29:03:a8:ba:
         e3:23:b5:b6:9c:58:12:eb:c6:71:c9:3c:31:65:15:49:b4:9c:
         56:e6:10:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmnlG2SkjJtjrioFncmb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3
Nzc3YTkwHhcNMjUwNjE0MTgwMTIzWhcNMjUwNjE1MTgwMTIzWjAzMTEwLwYDVQQD
Eyg1ZTE3NTRlMzdmZTI5MDM2Yjk4OThiOTQxNjA0ODUwZWI2ZjYxMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bm3hHpLGBMDfqzYyd/t7/HilaNs
jM7FHD840Q8atrASRMcmB4UpA4nyUtpKYDr7ZLQVcs9uZ/8UNWm3MT2C3RgCATC3
VHy7TgmlhvuM3AsRby8lpAgfVC0Zakwgq1cfPaI1cAOy60pbuuu9jW+WjJAIQOob
FebAm+ufHABRqzJn64KhlWmJgaFJLq3ZwJwQiK8nUjppppJCNZTA9TdrO5S8DTEW
7RGRafFVQmq5YOeNZZE2igvDX9i7MIB6dpQBhZm+HSTR73bJN5NFdawExoJsMaGD
hnDLNpz90bVVTRZzKpcNj8YYxBkJfmWWUEMeBktdfXDKqbXVXpRMT6NxYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4XVON/4pA2uYmLlBYEhQ629hFEMB8GA1UdIwQY
MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt
M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2
LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRhoShp3
XKqGy9JTG0308O81MMaKHzaLAKTNvp1eItfxyi/79GOL7L0HvWpynBbWyBeZ+Uzk
KcmdI1Xm46h7IlkywvxKFW3YloWr73vTrf+obGebmJXXIBkhDmzmGI/K80rtT0Cg
TbbB+RV7GOTmXiTH3YobI2To0COgKBin/fd2Mh67ZkP00ae7G7WQTofldmu8HxIV
+XG7P6K8g5U9jIhzbooazjOznvE49mlSgqda3E/NsOVsNpdtXR+ALXKQaks0gXX3
6rwcGE0sexJlPzCtyLw9mHbz5bU5lFkF+7m6hQoqdeQpA6i64yO1tpxYEuvGcck8
MWUVSbScVuYQiw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:43:19 2025 by rpki-client