Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
File:                     rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json)
Hash identifier:          sEHujKzaCLxuqi8AP6NSpCANwcn68gDZ1KSkzF4mN0o=
Subject key identifier:   1C:F9:33:43:F0:DE:F2:68:21:66:A5:26:5F:5A:30:D6:6E:DF:E2:EB
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Certificate issuer:       /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial:       01977007F2E8E2282D519F8113692C07154C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
Manifest number:          151D
Signing time:             Sat 14 Jun 2025 20:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:58 +0000
Files and hashes:         1: cZMPtHPEAZf_3rOtN3QOawqy6Fo.roa (hash: 5NwHkOnEjFTXG8rGVd8jWfp99z8LekTFbUc8ApfS/FM=)
                          2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: SrhVcxabGY0EziEhhZ4zTYZ2cund1WYqCdlxtcudZ7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:f2:e8:e2:28:2d:51:9f:81:13:69:2c:07:15:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
        Validity
            Not Before: Jun 14 20:00:58 2025 GMT
            Not After : Jun 15 20:00:58 2025 GMT
        Subject: CN=1cf93343f0def2682166a5265f5a30d66edfe2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:1f:da:91:47:8b:4f:98:f9:28:90:4d:87:
                    a0:85:e2:f0:8c:fb:42:75:1d:97:02:a8:9e:de:65:
                    4f:67:cd:12:ac:a4:ec:fc:a6:35:e9:b0:1b:e8:20:
                    85:e2:81:0e:b3:1d:09:70:d7:98:24:51:da:01:4f:
                    f7:dd:c7:77:39:f0:61:14:1d:39:6d:4c:54:da:b0:
                    e2:d6:ac:f8:e1:e7:2d:11:cb:bf:1c:1c:9a:b0:1e:
                    cb:e0:0b:63:89:0c:56:bd:4d:65:b8:ab:88:a4:83:
                    cd:29:e3:aa:dd:74:20:17:98:91:35:1e:62:84:87:
                    ca:ca:91:d0:76:70:2d:28:c8:71:ce:e8:fe:82:77:
                    78:64:47:30:16:76:88:ca:af:98:22:a7:cd:c6:63:
                    00:ad:f6:61:c3:7c:89:ca:df:0d:32:15:20:40:3d:
                    41:84:08:9d:12:f0:c0:d6:85:dc:51:5c:f7:ff:20:
                    67:1c:5b:e8:dc:45:95:6a:52:ce:09:73:4a:2d:e2:
                    16:36:d9:99:1d:41:7d:b9:b4:b8:d1:06:77:e5:c3:
                    7b:1c:ba:66:10:84:48:ad:da:18:71:f6:5c:46:17:
                    29:4c:39:99:e0:8f:c8:e2:99:90:fa:25:e5:ac:a1:
                    4f:d1:e9:97:b3:bd:36:42:10:52:c0:4a:64:f7:86:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F9:33:43:F0:DE:F2:68:21:66:A5:26:5F:5A:30:D6:6E:DF:E2:EB
            X509v3 Authority Key Identifier:
                keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:e8:29:17:51:7d:0a:b3:d2:4b:6e:41:78:a2:78:74:01:
         93:90:7a:f9:30:94:26:24:34:30:c9:fd:4b:7f:7f:62:8b:a9:
         02:3e:95:87:4b:a2:4e:5d:87:3d:4d:59:1a:40:76:63:b9:e0:
         92:00:1b:b4:d1:d7:cf:28:2f:81:ef:04:33:2f:70:0f:71:f0:
         cf:44:42:3b:03:42:04:32:31:80:80:04:60:71:05:69:ca:f6:
         8e:ec:ad:25:14:37:93:b4:3a:83:7b:a4:52:a5:d4:2c:22:7c:
         c7:b0:69:49:25:13:d8:d6:72:fc:0d:5c:ad:8e:3b:09:f6:a9:
         8b:a4:54:74:2e:b3:4a:94:0d:56:6c:5b:31:78:85:be:1d:2e:
         02:7d:be:fa:ba:52:02:28:cc:58:97:f4:ef:96:6f:6d:ca:6c:
         4f:c9:a3:ed:84:bc:32:92:7b:05:d8:62:fc:7e:e2:a4:2e:ae:
         fa:6f:81:7a:7f:07:50:ce:21:88:d5:71:bf:e4:86:69:c4:1d:
         a1:7d:56:32:27:0a:fe:a5:11:fb:32:b8:f8:e1:69:e6:dd:ac:
         4c:30:81:1e:c5:b5:96:d4:89:bd:5a:bd:b1:1f:8c:de:fe:82:
         c7:34:a2:46:91:2f:91:f8:93:5f:24:2a:ff:fb:4d:31:a9:c0:
         6c:8e:41:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB/Lo4igtUZ+BE2ksBxVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYzcwOWM3Y2QyNTQ0NWNiMTgzY2ZjZmViZDRiMmJmYzc4
NGMzMTgwHhcNMjUwNjE0MjAwMDU4WhcNMjUwNjE1MjAwMDU4WjAzMTEwLwYDVQQD
EygxY2Y5MzM0M2YwZGVmMjY4MjE2NmE1MjY1ZjVhMzBkNjZlZGZlMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Yf2pFHi0+Y+SiQTYegheLwjPtC
dR2XAqie3mVPZ80SrKTs/KY16bAb6CCF4oEOsx0JcNeYJFHaAU/33cd3OfBhFB05
bUxU2rDi1qz44ectEcu/HByasB7L4AtjiQxWvU1luKuIpIPNKeOq3XQgF5iRNR5i
hIfKypHQdnAtKMhxzuj+gnd4ZEcwFnaIyq+YIqfNxmMArfZhw3yJyt8NMhUgQD1B
hAidEvDA1oXcUVz3/yBnHFvo3EWValLOCXNKLeIWNtmZHUF9ubS40QZ35cN7HLpm
EIRIrdoYcfZcRhcpTDmZ4I/I4pmQ+iXlrKFP0emXs702QhBSwEpk94agGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz5M0Pw3vJoIWalJl9aMNZu3+LrMB8GA1UdIwQY
MBaAFK7HCcfNJURcsYPPz+vUsr/HhMMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUt
ZjdmYThlMmZmOTVmLzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUtZjdmYThlMmZmOTVm
LzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/LoKRdR
fQqz0ktuQXiieHQBk5B6+TCUJiQ0MMn9S39/YoupAj6Vh0uiTl2HPU1ZGkB2Y7ng
kgAbtNHXzygvge8EMy9wD3Hwz0RCOwNCBDIxgIAEYHEFacr2juytJRQ3k7Q6g3uk
UqXULCJ8x7BpSSUT2NZy/A1crY47Cfapi6RUdC6zSpQNVmxbMXiFvh0uAn2++rpS
AijMWJf075ZvbcpsT8mj7YS8MpJ7Bdhi/H7ipC6u+m+Ben8HUM4hiNVxv+SGacQd
oX1WMicK/qUR+zK4+OFp5t2sTDCBHsW1ltSJvVq9sR+M3v6CxzSiRpEvkfiTXyQq
//tNManAbI5B0A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:15:10 2025 by rpki-client