Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File:                     5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier:          z0otNbSLEEfEWJ/FA/hKm2u61EBRzax3VHd7aV8w8JQ=
Subject key identifier:   75:4B:46:92:65:37:08:2F:4B:D9:AD:AC:09:E8:FD:83:46:54:EC:E6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       01976F2C541FC18CCA08DBD87AAD81AA2B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number:          154C
Signing time:             Sat 14 Jun 2025 16:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:05 +0000
Files and hashes:         1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=)
                          2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: 2lZuQHue7YUhUE5gFELsVpvAofdwYMxv/tHyxsSDlyw=)
                          3: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=)
                          4: F3zlltFpu4Bnj8uBujKBSmcA9bg.roa (hash: rcK+1JhYceC79YdxlUwtYTFKypviIfVkM/kBWNB7QNo=)
                          5: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (hash: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=)
                          6: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=)
                          7: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=)
                          8: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=)
                          9: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=)
                          10: hpwDn8YGTUmpFxnE0VT2lU7HVA0.roa (hash: tWHBC5BsH2Dh86+jd4z/xUkpeNlarvJmfP1oQFYSFgg=)
                          11: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=)
                          12: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:54:1f:c1:8c:ca:08:db:d8:7a:ad:81:aa:2b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: Jun 14 16:01:05 2025 GMT
            Not After : Jun 15 16:01:05 2025 GMT
        Subject: CN=754b46926537082f4bd9adac09e8fd834654ece6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:8a:7a:1b:c7:52:78:04:a9:8e:f3:50:ba:
                    3d:8f:ac:20:43:ab:f8:17:28:cb:65:93:30:f9:3f:
                    9a:c1:a8:ce:32:db:e8:8a:44:0d:df:fd:49:f2:23:
                    af:2a:2e:27:98:93:b4:b9:ca:31:7d:f6:c3:62:1d:
                    19:fc:38:c2:42:e1:15:e2:c2:7b:d3:8b:80:b5:a9:
                    d8:c2:c0:42:c5:e9:40:c1:a0:68:23:3f:a1:ae:3f:
                    45:49:2e:0f:87:68:64:78:45:8e:a7:33:7b:06:91:
                    30:96:99:bf:c8:67:2e:b6:81:ea:03:79:18:85:e6:
                    6e:31:04:7f:83:5c:5f:f7:b1:a7:55:7c:b8:7d:7a:
                    02:96:a7:32:2e:ed:ae:13:28:db:85:8f:f0:03:d8:
                    af:97:28:6a:38:e0:36:51:be:62:8d:8c:36:43:2e:
                    2f:a0:ee:3a:39:3b:06:18:f2:48:61:56:8f:1e:bf:
                    03:67:55:bc:2b:34:c3:3c:29:bd:d1:97:2d:c3:1e:
                    91:e4:43:eb:fb:9a:39:32:75:98:46:67:2c:4f:2b:
                    82:dc:a3:7e:57:cc:3a:2c:e8:7d:ac:8a:c2:9b:06:
                    66:92:05:38:62:79:cc:ee:63:e6:b6:e1:83:ff:69:
                    44:42:96:d1:47:c0:d2:7f:9d:42:7b:3a:b6:6d:11:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4B:46:92:65:37:08:2F:4B:D9:AD:AC:09:E8:FD:83:46:54:EC:E6
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:f5:46:f6:9f:23:99:9d:5e:e4:e9:3a:69:7f:33:6d:be:
         f3:11:f1:b9:df:a3:ec:63:06:a3:0a:47:30:a0:56:1f:5f:c7:
         da:9e:b0:4e:42:66:7d:6b:21:93:e4:eb:8a:ff:a5:94:34:25:
         42:56:d4:8c:13:75:22:2f:9b:39:f1:48:ef:66:15:11:46:30:
         32:b3:f0:91:c8:56:2f:d8:cc:d1:5a:a6:1a:ff:16:7a:9a:89:
         fa:39:83:96:8c:5c:ba:34:65:0a:e8:eb:da:58:f5:77:ac:75:
         32:c3:33:5f:ee:a2:47:b9:32:f3:13:ef:b0:6b:f1:6e:e0:28:
         e8:03:f3:b6:dc:b4:80:b0:54:32:f1:43:dd:f4:5e:38:76:b2:
         5e:bf:f8:db:a7:dc:5f:04:bf:b0:c0:58:c3:03:78:c3:23:f9:
         05:07:99:55:16:62:39:89:61:4d:25:dd:8a:59:2a:da:1c:68:
         7b:ef:0c:3a:32:ee:1b:81:e8:3b:54:a7:42:3a:0b:b1:d6:af:
         0c:98:9b:40:b3:1c:c2:ca:78:1e:a8:ac:28:b1:ef:2e:79:04:
         5b:5d:90:16:f6:b0:d9:07:54:79:50:8f:18:92:1c:d1:85:7d:
         2d:fa:ec:bc:1f:1b:f0:03:a8:62:9b:b7:b4:cb:a6:6a:d7:54:
         16:ca:4f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLFQfwYzKCNvYeq2BqisVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUwNjE0MTYwMTA1WhcNMjUwNjE1MTYwMTA1WjAzMTEwLwYDVQQD
Eyg3NTRiNDY5MjY1MzcwODJmNGJkOWFkYWMwOWU4ZmQ4MzQ2NTRlY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHWKehvHUngEqY7zULo9j6wgQ6v4
FyjLZZMw+T+awajOMtvoikQN3/1J8iOvKi4nmJO0ucoxffbDYh0Z/DjCQuEV4sJ7
04uAtanYwsBCxelAwaBoIz+hrj9FSS4Ph2hkeEWOpzN7BpEwlpm/yGcutoHqA3kY
heZuMQR/g1xf97GnVXy4fXoClqcyLu2uEyjbhY/wA9ivlyhqOOA2Ub5ijYw2Qy4v
oO46OTsGGPJIYVaPHr8DZ1W8KzTDPCm90Zctwx6R5EPr+5o5MnWYRmcsTyuC3KN+
V8w6LOh9rIrCmwZmkgU4YnnM7mPmtuGD/2lEQpbRR8DSf51Cezq2bRF+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVLRpJlNwgvS9mtrAno/YNGVOzmMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc131Rvaf
I5mdXuTpOml/M22+8xHxud+j7GMGowpHMKBWH1/H2p6wTkJmfWshk+Triv+llDQl
QlbUjBN1Ii+bOfFI72YVEUYwMrPwkchWL9jM0VqmGv8WepqJ+jmDloxcujRlCujr
2lj1d6x1MsMzX+6iR7ky8xPvsGvxbuAo6APztty0gLBUMvFD3fReOHayXr/426fc
XwS/sMBYwwN4wyP5BQeZVRZiOYlhTSXdilkq2hxoe+8MOjLuG4HoO1SnQjoLsdav
DJibQLMcwsp4HqisKLHvLnkEW12QFvaw2QdUeVCPGJIc0YV9LfrsvB8b8AOoYpu3
tMumatdUFspPmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 02:49:36 2025 by rpki-client