Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
File:                     XEzh8ZMxT2k5vxw_nawjafYpWFo.mft (raw, json)
Hash identifier:          hpcFtph2j+AhJrUPrOeq5vSdySqfL8QDwUNEoN4rsIU=
Subject key identifier:   C3:26:7D:D2:A5:CF:52:E6:31:21:41:72:0F:7F:10:CE:8B:21:E1:DC
Authority key identifier: 5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
Certificate issuer:       /CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Certificate serial:       01976CCFBA2722C0F1081E27E8D93B612925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 05:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:42 +0000
Files and hashes:         1: NeVlE-PzPHn5ppNlSgj87PhylgM.roa (hash: +i1WA9cuFFrQg1WFh0BGIYlKWMIvdmOqwrDe9C8B0aM=)
                          2: XEzh8ZMxT2k5vxw_nawjafYpWFo.crl (hash: MufcTrBi1bSR2anE6HvOM4HUF3tlq5tNlSFxFow3eBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:ba:27:22:c0:f1:08:1e:27:e8:d9:3b:61:29:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
        Validity
            Not Before: Jun 14 05:00:42 2025 GMT
            Not After : Jun 15 05:00:42 2025 GMT
        Subject: CN=c3267dd2a5cf52e6312141720f7f10ce8b21e1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:57:c6:d7:51:6a:ce:fa:f3:82:da:a4:76:
                    2a:8c:55:a2:0e:52:12:bd:0b:01:5b:02:6f:18:0e:
                    22:15:61:04:99:33:02:af:12:40:97:6f:15:29:f1:
                    f1:26:33:87:dd:6f:2e:7d:9f:1b:d1:a6:31:57:7a:
                    7b:77:da:4c:9b:41:14:e5:4f:07:fe:e0:e6:14:55:
                    be:07:77:94:08:3d:60:c3:bd:4b:bf:ed:7b:0a:86:
                    17:65:37:35:81:31:49:60:47:01:02:99:d2:ab:2e:
                    b3:44:2f:13:08:03:94:1a:77:93:c2:8d:81:a7:09:
                    fa:7e:2f:41:2a:7e:66:be:6a:91:7e:1e:1d:c1:87:
                    ad:ed:77:92:99:4c:be:c2:d5:d0:38:d1:f0:93:34:
                    48:a0:ad:47:2f:89:6d:29:2b:b6:a5:77:1e:67:72:
                    74:1c:e9:2e:3a:4b:29:74:f0:5e:50:bd:af:17:ac:
                    b1:ae:e6:1f:27:c7:cb:65:9b:60:46:f6:34:84:e8:
                    3b:9e:94:66:51:f6:1f:54:9b:8c:8b:84:95:38:d4:
                    51:66:3a:9d:c3:54:b4:a5:74:53:5c:13:ae:d1:90:
                    d3:eb:6d:f7:6e:f0:30:cc:5c:f7:f1:5f:9e:b9:d3:
                    a0:61:70:79:21:a0:29:51:a8:5d:f0:2a:5f:34:7a:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:26:7D:D2:A5:CF:52:E6:31:21:41:72:0F:7F:10:CE:8B:21:E1:DC
            X509v3 Authority Key Identifier:
                keyid:5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:53:73:eb:40:a3:75:60:7b:86:45:d1:85:50:e9:d8:4b:
         37:aa:54:cd:98:6b:8f:94:0f:14:21:d9:4e:be:98:cb:14:9f:
         10:1d:4e:4c:98:12:24:5c:93:a2:73:e6:bd:ba:d6:98:c7:e3:
         05:17:dd:b0:b1:dc:37:4d:df:7f:14:56:c1:e7:e4:ad:56:dc:
         7b:41:b2:ae:b1:8f:89:a9:78:70:4d:cf:ed:3b:3c:9c:44:e9:
         a2:f3:31:5c:12:d5:df:a4:3f:c4:78:d6:fc:4e:3b:12:47:27:
         4c:5a:ce:7f:1e:b0:6d:5a:2c:dd:32:ee:7a:16:eb:46:87:78:
         06:b6:4b:e4:96:8c:2e:75:a9:64:67:f5:fc:36:98:2a:69:f2:
         5d:5a:53:7c:27:5f:c1:e4:a3:00:a7:c4:d6:73:6a:2a:98:37:
         0b:7f:78:2a:5d:dd:b5:25:56:5e:e0:20:7e:7f:2d:47:75:5b:
         8c:c4:c4:78:3f:e2:a7:49:2d:ba:8d:16:e5:33:73:1a:56:5e:
         d7:bc:84:50:e4:39:ba:41:09:bf:fe:cd:02:f8:fb:79:99:47:
         78:c8:ff:ed:b6:57:c6:a7:4b:06:2e:3a:35:d3:a3:59:cb:9b:
         6b:42:8c:cd:4a:14:4d:b6:c0:f9:50:a2:14:90:61:33:eb:92:
         e4:b7:0a:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz7onIsDxCB4n6Nk7YSklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGNlMWYxOTMzMTRmNjkzOWJmMWMzZjlkYWMyMzY5ZjYy
OTU4NWEwHhcNMjUwNjE0MDUwMDQyWhcNMjUwNjE1MDUwMDQyWjAzMTEwLwYDVQQD
EyhjMzI2N2RkMmE1Y2Y1MmU2MzEyMTQxNzIwZjdmMTBjZThiMjFlMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPJXxtdRas7684LapHYqjFWiDlIS
vQsBWwJvGA4iFWEEmTMCrxJAl28VKfHxJjOH3W8ufZ8b0aYxV3p7d9pMm0EU5U8H
/uDmFFW+B3eUCD1gw71Lv+17CoYXZTc1gTFJYEcBApnSqy6zRC8TCAOUGneTwo2B
pwn6fi9BKn5mvmqRfh4dwYet7XeSmUy+wtXQONHwkzRIoK1HL4ltKSu2pXceZ3J0
HOkuOkspdPBeUL2vF6yxruYfJ8fLZZtgRvY0hOg7npRmUfYfVJuMi4SVONRRZjqd
w1S0pXRTXBOu0ZDT6233bvAwzFz38V+eudOgYXB5IaApUahd8CpfNHot/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMmfdKlz1LmMSFBcg9/EM6LIeHcMB8GA1UdIwQY
MBaAFFxM4fGTMU9pOb8cP52sI2n2KVhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQt
ZTA2NmQwMjJlOTI3LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQtZTA2NmQwMjJlOTI3
LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1RTc+tA
o3Vge4ZF0YVQ6dhLN6pUzZhrj5QPFCHZTr6YyxSfEB1OTJgSJFyTonPmvbrWmMfj
BRfdsLHcN03ffxRWwefkrVbce0GyrrGPial4cE3P7Ts8nETpovMxXBLV36Q/xHjW
/E47EkcnTFrOfx6wbVos3TLuehbrRod4BrZL5JaMLnWpZGf1/DaYKmnyXVpTfCdf
weSjAKfE1nNqKpg3C394Kl3dtSVWXuAgfn8tR3VbjMTEeD/ip0ktuo0W5TNzGlZe
17yEUOQ5ukEJv/7NAvj7eZlHeMj/7bZXxqdLBi46NdOjWcuba0KMzUoUTbbA+VCi
FJBhM+uS5LcK6w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:45 2025 by rpki-client