Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File:                     1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier:          GAq84cYU3rGeyhMb53JMLZ4XeZLoPAx7WMpKFg3EqgI=
Subject key identifier:   78:3F:07:A7:55:F8:5A:B2:17:10:F6:02:DC:E9:38:69:2B:CE:A0:16
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer:       /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial:       0197733F9BED8DE6552E1868A8CA308CE36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number:          159B
Signing time:             Sun 15 Jun 2025 11:00:37 +0000
Manifest this update:     Sun 15 Jun 2025 11:00:37 +0000
Manifest next update:     Mon 16 Jun 2025 11:00:37 +0000
Files and hashes:         1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: V5afFmvwvqiv0WR6LyZBFFRtw5ZvmDdwYHNXO2LgU6k=)
                          2: 2FKZPhg0yZwll-7IKKrQiY_2JZg.roa (hash: gHgBdXS8XWNL7U3Ymd+KumYNoM9Ez64AQgUONNJnO6M=)
                          3: JqUTwDiQz2XN4n_rtc98QSVcAgU.roa (hash: pHiFb9tQ1YpNIqFbFLQQworD9lfd3ZDQhLB+/lsEeNI=)
                          4: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=)
                          5: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=)
                          6: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=)
                          7: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=)
                          8: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=)
                          9: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:3f:9b:ed:8d:e6:55:2e:18:68:a8:ca:30:8c:e3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
        Validity
            Not Before: Jun 15 11:00:37 2025 GMT
            Not After : Jun 16 11:00:37 2025 GMT
        Subject: CN=783f07a755f85ab21710f602dce938692bcea016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:40:56:a1:c0:fe:ef:51:52:21:91:a4:00:
                    07:85:63:d9:53:e4:fa:27:86:0b:df:c8:3a:7e:6e:
                    a5:19:c6:2b:d1:f6:57:b1:b7:28:ec:61:94:ca:5c:
                    e0:6e:4d:80:c3:d5:93:d5:2c:8e:91:bd:15:e9:87:
                    08:9e:c7:83:96:70:25:dc:db:c8:72:f7:ef:8d:2a:
                    d1:78:61:df:43:d8:9d:d1:a8:24:44:de:92:f1:35:
                    b2:bf:06:ed:40:18:51:ef:79:73:96:79:bf:1d:47:
                    cb:d9:63:3c:09:eb:07:49:ed:d0:3d:07:ba:57:d6:
                    00:fb:29:00:00:ec:57:7b:2d:b6:7e:e1:92:48:1d:
                    f2:54:32:46:36:80:63:0b:0a:4b:da:22:a4:50:9b:
                    16:8e:ba:f8:b3:e3:96:df:b8:84:e1:44:79:b0:4e:
                    5a:24:78:61:2d:9c:78:e2:e9:61:30:a3:ec:e6:5b:
                    1a:f9:9d:d3:5b:75:4f:59:23:82:2d:84:bd:bf:ad:
                    1a:6b:3c:1c:1e:1a:0f:5f:cd:96:28:c1:0b:36:f5:
                    2d:13:6c:e2:4a:96:5a:a2:b3:86:f9:7b:01:01:1a:
                    91:7d:9c:12:57:26:3f:3f:e9:ec:da:3b:a8:95:b8:
                    95:cb:d2:f9:75:11:36:c7:04:9a:cf:c3:3e:19:6b:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3F:07:A7:55:F8:5A:B2:17:10:F6:02:DC:E9:38:69:2B:CE:A0:16
            X509v3 Authority Key Identifier:
                keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:c8:4f:68:f9:60:b4:4c:01:2a:a4:c3:bf:c0:c9:f6:6a:
         e2:29:40:f2:5b:a6:bc:db:d1:97:d3:1d:27:6f:cb:b5:f8:92:
         e5:d5:1d:51:ab:43:f0:97:78:09:65:7b:19:9e:c9:c6:34:13:
         0e:df:d0:64:04:17:22:6e:ba:67:41:37:61:2f:5a:01:61:9b:
         5b:dc:55:59:65:9f:11:11:b5:ff:82:41:57:1c:0c:1e:cc:81:
         ac:a5:ec:b5:89:9f:fe:e1:4a:43:c5:b5:49:86:15:c8:31:7e:
         6e:8a:b1:36:1c:aa:49:fe:16:68:a6:36:d2:fc:98:87:70:63:
         f0:c0:f9:31:dc:72:bf:6a:76:21:1a:ee:d2:19:9d:27:cc:49:
         b8:a4:61:84:52:cc:c2:2d:cc:6e:5b:25:66:21:05:9f:2e:96:
         42:dc:24:59:d4:5d:13:16:9e:9c:81:66:a9:60:48:4b:49:9a:
         e4:3a:84:64:dc:b1:e9:e2:90:53:39:1a:ac:1d:2e:71:ac:72:
         d5:2c:3c:26:60:44:4e:c6:ba:72:7a:ed:7f:d3:cc:77:41:70:
         b4:8e:20:27:d0:42:04:53:3a:f8:13:5f:8f:02:be:13:da:96:
         c9:7a:0b:23:18:16:62:93:26:69:6e:55:f5:93:a9:8a:5d:9c:
         97:e2:1f:8d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdzP5vtjeZVLhhoqMowjONqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2
MDk4MmIwHhcNMjUwNjE1MTEwMDM3WhcNMjUwNjE2MTEwMDM3WjAzMTEwLwYDVQQD
Eyg3ODNmMDdhNzU1Zjg1YWIyMTcxMGY2MDJkY2U5Mzg2OTJiY2VhMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7VAVqHA/u9RUiGRpAAHhWPZU+T6
J4YL38g6fm6lGcYr0fZXsbco7GGUylzgbk2Aw9WT1SyOkb0V6YcInseDlnAl3NvI
cvfvjSrReGHfQ9id0agkRN6S8TWyvwbtQBhR73lzlnm/HUfL2WM8CesHSe3QPQe6
V9YA+ykAAOxXey22fuGSSB3yVDJGNoBjCwpL2iKkUJsWjrr4s+OW37iE4UR5sE5a
JHhhLZx44ulhMKPs5lsa+Z3TW3VPWSOCLYS9v60aazwcHhoPX82WKMELNvUtE2zi
SpZaorOG+XsBARqRfZwSVyY/P+ns2juolbiVy9L5dRE2xwSaz8M+GWv6HwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHg/B6dV+FqyFxD2AtzpOGkrzqAWMB8GA1UdIwQY
MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy
LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm
M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo3I
T2j5YLRMASqkw7/AyfZq4ilA8lumvNvRl9MdJ2/LtfiS5dUdUatD8Jd4CWV7GZ7J
xjQTDt/QZAQXIm66Z0E3YS9aAWGbW9xVWWWfERG1/4JBVxwMHsyBrKXstYmf/uFK
Q8W1SYYVyDF+boqxNhyqSf4WaKY20vyYh3Bj8MD5Mdxyv2p2IRru0hmdJ8xJuKRh
hFLMwi3MblslZiEFny6WQtwkWdRdExaenIFmqWBIS0ma5DqEZNyx6eKQUzkarB0u
caxy1Sw8JmBETsa6cnrtf9PMd0FwtI4gJ9BCBFM6+BNfjwK+E9qWyXoLIxgWYpMm
aW5V9ZOpil2cl+IfjQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:03 2025 by rpki-client