Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          vxGquGcvGsMCUuvo3y19jsRRlTSWkUFvFYMgjjfx5ho=
Subject key identifier:   3B:9C:51:59:FF:7E:91:8C:5A:BC:1D:AA:56:1E:88:1C:E0:E5:39:C6
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       01977F7AD1F12548C2ADF6893FAD61A9B02F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          159A
Signing time:             Tue 17 Jun 2025 20:00:44 +0000
Manifest this update:     Tue 17 Jun 2025 20:00:44 +0000
Manifest next update:     Wed 18 Jun 2025 20:00:44 +0000
Files and hashes:         1: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (hash: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=)
                          2: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (hash: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=)
                          3: LHiOtk6tL1CXrv20IpGcmi0303Q.roa (hash: V/XoU0KL7XbTl000bnNR3hPbksWkdzPpz1xOimffKQc=)
                          4: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: QRQsFhsLL8oGgMOTNEorENy2bg6nemiPcG3uqPP+NTU=)
                          5: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (hash: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=)
                          6: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (hash: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:7a:d1:f1:25:48:c2:ad:f6:89:3f:ad:61:a9:b0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Jun 17 20:00:44 2025 GMT
            Not After : Jun 18 20:00:44 2025 GMT
        Subject: CN=3b9c5159ff7e918c5abc1daa561e881ce0e539c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:a7:54:62:6f:2b:cf:4d:0c:6d:4b:c5:92:
                    f5:60:f6:e7:1b:5a:7e:89:c8:3c:e6:5a:f2:e1:e1:
                    ef:7e:71:a5:ce:f5:40:23:e9:0d:ff:5c:c9:d2:f3:
                    60:04:19:91:f5:4b:17:d2:c3:32:d5:29:cb:42:7f:
                    b2:b2:ea:a5:20:68:ce:66:81:c0:5a:30:6e:11:77:
                    72:ca:d8:f9:c9:52:02:f4:1a:8e:f3:3a:bf:72:cd:
                    8d:3b:d9:91:43:32:e7:29:d7:19:2e:68:2c:1e:8d:
                    63:12:6c:d0:38:fb:ac:38:3d:5b:0a:5a:3c:e5:f5:
                    70:f7:2e:7e:88:0a:12:5d:93:02:22:cf:00:bd:a4:
                    ad:e5:ae:51:f5:ce:18:17:c9:e6:15:4f:89:a3:c0:
                    f2:3b:1d:14:bf:db:b4:71:43:ea:a8:16:db:f6:b9:
                    06:71:16:e5:25:28:ff:b1:32:ab:65:bc:1b:de:9a:
                    d5:1d:1a:2c:49:9a:0c:df:f9:24:a1:11:da:76:b8:
                    66:79:95:06:88:fd:ca:2e:86:48:1d:ff:e0:ac:cc:
                    fe:81:9a:32:02:49:8c:3f:23:fe:f2:82:c4:3b:09:
                    09:ab:71:fc:b8:5f:d0:6e:29:1f:62:95:c6:78:bb:
                    c5:44:09:c7:98:76:c9:7c:81:ab:77:1e:77:57:20:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9C:51:59:FF:7E:91:8C:5A:BC:1D:AA:56:1E:88:1C:E0:E5:39:C6
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:cc:d6:d9:cf:b5:78:a8:42:7a:f6:c4:fb:f2:c8:2a:00:04:
         1a:0e:59:fe:fb:eb:e7:a4:ad:cc:d2:b2:3a:29:03:20:2a:2c:
         a8:a0:49:37:b3:95:44:d5:7c:21:7f:4a:dc:1e:9f:62:a6:93:
         f6:30:17:8d:95:88:a5:d1:3d:27:4f:9a:29:cf:41:57:0e:f2:
         46:fc:ec:c4:14:e1:92:60:e4:22:4d:73:50:55:4f:ab:6f:ff:
         e2:43:a7:52:74:38:95:88:f5:c8:2c:f3:38:c1:73:67:93:e4:
         55:97:03:a9:58:b2:b0:4f:c9:45:1f:24:30:d8:3e:3d:e2:69:
         64:33:42:b8:f2:83:06:c6:8c:7f:fa:8f:8e:4f:ad:f4:d7:ca:
         b9:2a:ae:8f:11:0a:84:01:00:13:66:23:32:51:ee:e2:4d:0c:
         3e:08:bb:c6:4c:7f:ed:bd:73:c3:40:46:37:78:5e:79:ba:a1:
         22:98:1a:a8:10:f0:1b:82:93:cd:f1:32:43:9d:25:4e:52:e7:
         85:df:26:ca:29:58:5d:d3:e9:5e:78:cf:3f:45:6c:4c:50:50:
         a9:37:05:4e:26:08:54:93:73:4b:02:43:70:ec:59:87:2c:4f:
         ff:42:07:7f:a7:3b:5e:48:20:e2:15:4f:b7:11:12:7d:cd:f3:
         3d:c1:b2:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/etHxJUjCrfaJP61hqbAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjUwNjE3MjAwMDQ0WhcNMjUwNjE4MjAwMDQ0WjAzMTEwLwYDVQQD
EygzYjljNTE1OWZmN2U5MThjNWFiYzFkYWE1NjFlODgxY2UwZTUzOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqWnVGJvK89NDG1LxZL1YPbnG1p+
icg85lry4eHvfnGlzvVAI+kN/1zJ0vNgBBmR9UsX0sMy1SnLQn+ysuqlIGjOZoHA
WjBuEXdyytj5yVIC9BqO8zq/cs2NO9mRQzLnKdcZLmgsHo1jEmzQOPusOD1bClo8
5fVw9y5+iAoSXZMCIs8AvaSt5a5R9c4YF8nmFU+Jo8DyOx0Uv9u0cUPqqBbb9rkG
cRblJSj/sTKrZbwb3prVHRosSZoM3/kkoRHadrhmeZUGiP3KLoZIHf/grMz+gZoy
AkmMPyP+8oLEOwkJq3H8uF/QbikfYpXGeLvFRAnHmHbJfIGrdx53VyBWpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDucUVn/fpGMWrwdqlYeiBzg5TnGMB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8zW2c+1
eKhCevbE+/LIKgAEGg5Z/vvr56StzNKyOikDICosqKBJN7OVRNV8IX9K3B6fYqaT
9jAXjZWIpdE9J0+aKc9BVw7yRvzsxBThkmDkIk1zUFVPq2//4kOnUnQ4lYj1yCzz
OMFzZ5PkVZcDqViysE/JRR8kMNg+PeJpZDNCuPKDBsaMf/qPjk+t9NfKuSqujxEK
hAEAE2YjMlHu4k0MPgi7xkx/7b1zw0BGN3heebqhIpgaqBDwG4KTzfEyQ50lTlLn
hd8myilYXdPpXnjPP0VsTFBQqTcFTiYIVJNzSwJDcOxZhyxP/0IHf6c7Xkgg4hVP
txESfc3zPcGynA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:00:10 2025 by rpki-client