Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          77Wcrq4cTh9ByQ75LjXcO6VS7DKE1WR2GwMTj2XKtZE=
Subject key identifier:   8C:1B:33:DE:CF:B6:F9:FA:D2:48:5E:30:89:75:04:7B:FE:DE:58:A6
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       01976D7433EF82A3BB19EC7E6CAABB9B5F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 08:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:21 +0000
Files and hashes:         1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
                          2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: K42nAxkpdrHC6WAUYvcDeYjPdq0cd6o/uPSFmAp1I8A=)
                          3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
                          4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
                          5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:33:ef:82:a3:bb:19:ec:7e:6c:aa:bb:9b:5f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Jun 14 08:00:21 2025 GMT
            Not After : Jun 15 08:00:21 2025 GMT
        Subject: CN=8c1b33decfb6f9fad2485e308975047bfede58a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:73:25:cc:cb:61:23:af:17:a7:77:d2:d3:
                    66:92:14:d8:29:40:b6:51:d7:ee:28:9b:47:98:23:
                    d9:db:52:7d:69:33:b8:c6:73:37:dc:29:89:d4:3f:
                    82:70:91:03:7c:46:36:1d:24:68:48:71:60:89:31:
                    90:76:e4:33:23:ab:e8:f2:65:e7:b3:23:45:7a:10:
                    f0:0c:4a:29:81:46:e8:2e:51:27:24:fe:91:e9:99:
                    84:e2:3d:0b:89:95:e3:2d:08:d7:3c:7d:a8:44:71:
                    c6:e3:24:bb:54:87:32:cb:f6:c3:ec:c7:d7:ec:90:
                    b6:3c:7b:e2:64:33:5d:eb:4b:27:75:c0:0d:ed:6e:
                    d5:3e:09:e1:df:18:81:2c:90:c5:93:43:97:d4:10:
                    ca:cb:42:7c:92:bd:f2:fc:62:d3:4f:66:9d:b6:9a:
                    52:a7:79:5c:6e:c0:fc:de:2c:ec:33:6e:ff:a9:02:
                    5d:c5:f8:06:10:0b:bf:8f:73:b5:cc:6e:33:d2:f2:
                    f1:18:94:43:4b:33:4a:72:7d:28:2c:74:e2:33:81:
                    a4:dc:9b:45:8f:fc:5d:e7:af:78:3c:49:7d:4c:2f:
                    1b:d3:81:bc:5b:f7:5b:d8:e7:b2:24:4f:47:cc:f7:
                    07:11:94:db:6e:0f:0f:db:90:f2:98:ed:81:7e:a1:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1B:33:DE:CF:B6:F9:FA:D2:48:5E:30:89:75:04:7B:FE:DE:58:A6
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c9:8e:72:dd:01:da:ce:04:06:2b:8d:17:9d:12:ef:3b:75:
         61:1f:2c:d1:e8:d2:39:5c:b9:f5:28:6a:e4:6a:82:ac:94:ab:
         ef:fd:18:e8:94:00:3b:e7:ce:e6:ab:0d:07:b9:0a:3c:0d:c8:
         8d:3b:91:ed:7f:1e:32:88:ce:58:f4:46:71:10:80:52:76:51:
         6b:e1:35:97:41:eb:e7:3a:4d:15:d7:f3:d3:53:13:a1:2c:ae:
         db:82:09:ea:23:71:15:84:20:8a:2b:02:62:7d:b2:1d:77:82:
         9c:7d:b2:ad:68:5a:e4:92:7a:da:cf:7b:c3:8c:cf:5b:aa:dc:
         f9:db:f5:01:76:7a:9d:33:c5:a8:60:0f:54:e9:c2:90:36:a0:
         19:c4:d1:43:ae:51:72:69:d0:42:c7:9d:5e:ed:51:cc:f5:6f:
         3b:21:5c:9e:e0:b1:46:d3:28:dc:e4:bc:b9:d0:5d:61:e9:2a:
         5a:7a:b0:95:8b:54:a7:1c:b1:b4:10:0d:16:c3:6a:50:bc:53:
         ee:72:f3:30:51:e2:c0:18:f9:e5:47:39:25:e2:0d:1e:fb:46:
         52:72:bf:c3:ba:d2:7b:f2:ae:0e:02:56:a8:8f:af:3d:44:c2:
         a1:07:d5:67:15:f8:fe:cc:1b:d0:6e:f3:4a:83:09:4c:0b:2c:
         7c:3c:51:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdDPvgqO7Gex+bKq7m19dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm
OWZjOTMwHhcNMjUwNjE0MDgwMDIxWhcNMjUwNjE1MDgwMDIxWjAzMTEwLwYDVQQD
Eyg4YzFiMzNkZWNmYjZmOWZhZDI0ODVlMzA4OTc1MDQ3YmZlZGU1OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu51zJczLYSOvF6d30tNmkhTYKUC2
UdfuKJtHmCPZ21J9aTO4xnM33CmJ1D+CcJEDfEY2HSRoSHFgiTGQduQzI6vo8mXn
syNFehDwDEopgUboLlEnJP6R6ZmE4j0LiZXjLQjXPH2oRHHG4yS7VIcyy/bD7MfX
7JC2PHviZDNd60sndcAN7W7VPgnh3xiBLJDFk0OX1BDKy0J8kr3y/GLTT2adtppS
p3lcbsD83izsM27/qQJdxfgGEAu/j3O1zG4z0vLxGJRDSzNKcn0oLHTiM4Gk3JtF
j/xd5694PEl9TC8b04G8W/db2OeyJE9HzPcHEZTbbg8P25DymO2BfqGfhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwbM97Ptvn60kheMIl1BHv+3limMB8GA1UdIwQY
MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt
M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh
LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucmOct0B
2s4EBiuNF50S7zt1YR8s0ejSOVy59Shq5GqCrJSr7/0Y6JQAO+fO5qsNB7kKPA3I
jTuR7X8eMojOWPRGcRCAUnZRa+E1l0Hr5zpNFdfz01MToSyu24IJ6iNxFYQgiisC
Yn2yHXeCnH2yrWha5JJ62s97w4zPW6rc+dv1AXZ6nTPFqGAPVOnCkDagGcTRQ65R
cmnQQsedXu1RzPVvOyFcnuCxRtMo3OS8udBdYekqWnqwlYtUpxyxtBANFsNqULxT
7nLzMFHiwBj55Uc5JeINHvtGUnK/w7rSe/KuDgJWqI+vPUTCoQfVZxX4/swb0G7z
SoMJTAssfDxRVg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:55 2025 by rpki-client