Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          2WCTYjV7AealdZtufvE/H4YCwzdg4VT9TFI3Xtzt+40=
Subject key identifier:   82:82:51:4C:26:96:53:28:F7:90:65:43:CF:E0:71:5B:24:C7:2B:40
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       01976997A2059F736AB4247DC5CC5EE3BC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          159C
Signing time:             Fri 13 Jun 2025 14:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:34 +0000
Files and hashes:         1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
                          2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
                          3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
                          4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
                          5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: r+lL2jGzRSULMpnOX60kks9/3NwWB7L54/8fRU8egvA=)
                          7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
                          8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
                          9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
                          10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
                          11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
                          12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
                          13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
                          14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
                          15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
                          16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
                          17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
                          18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
                          19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
                          20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:a2:05:9f:73:6a:b4:24:7d:c5:cc:5e:e3:bc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Jun 13 14:00:34 2025 GMT
            Not After : Jun 14 14:00:34 2025 GMT
        Subject: CN=8282514c26965328f7906543cfe0715b24c72b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:19:7a:98:10:f6:7b:1b:6c:06:c9:96:bc:
                    e2:9d:74:f8:27:9f:4d:90:97:0e:8e:86:fc:98:25:
                    8f:7d:95:86:69:a5:3a:7a:81:40:a6:11:1e:fc:03:
                    6e:b4:15:8e:01:8b:d2:78:2a:c1:a9:1c:87:91:1f:
                    66:42:a9:a5:91:b2:22:bf:75:2e:78:52:ab:4f:0c:
                    d1:d4:74:be:5c:e5:78:28:ae:7f:60:1e:11:9c:b9:
                    86:1f:f7:1c:fa:6d:e1:8a:da:73:39:40:17:d5:63:
                    04:8f:93:d5:2b:c8:13:01:6f:e4:67:88:47:39:74:
                    c9:91:a8:ed:4b:e6:26:13:a5:c8:09:59:09:2c:2b:
                    91:a4:e4:5f:01:eb:46:5e:b3:1d:a8:0a:51:db:13:
                    69:53:26:03:2d:9c:06:8f:f3:e0:37:bf:4a:79:5f:
                    a6:ae:cf:ef:0c:92:47:19:81:a9:2b:ef:6d:f7:6d:
                    4b:6e:50:49:94:85:23:c7:bb:84:1a:56:89:d5:2d:
                    6f:d0:60:8e:58:bd:c0:b3:14:47:79:ac:e6:ed:97:
                    d6:5e:50:42:1a:01:20:37:6b:3c:33:be:d3:de:4e:
                    35:7f:ec:7e:66:bb:4d:96:b0:10:4a:a5:4d:57:12:
                    de:23:7b:cd:18:c0:a7:97:ed:6e:25:ea:d9:a3:96:
                    c5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:82:51:4C:26:96:53:28:F7:90:65:43:CF:E0:71:5B:24:C7:2B:40
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:53:ec:6d:3a:43:27:d5:26:59:b0:22:68:72:03:ca:17:
         9f:e7:b0:98:66:a3:62:51:ed:3e:c4:a2:0d:93:20:73:19:33:
         96:fd:6c:b1:ce:df:4a:98:a6:a6:25:b7:58:43:22:fb:4d:13:
         ce:5b:9c:cb:0c:90:f0:59:bc:44:8c:c6:8c:86:ca:c3:1d:bc:
         13:09:6f:45:6a:ca:27:68:1a:61:b2:49:65:cf:95:e1:e9:ce:
         be:e0:c8:c8:98:20:9d:ef:a0:8d:84:44:96:26:14:12:dc:1b:
         cf:e2:b0:a7:99:b8:33:09:e4:bb:47:45:78:a0:03:44:db:30:
         63:4b:88:eb:be:98:7a:b0:d8:5c:cc:ca:5e:c4:2f:32:b3:a2:
         7a:2f:a5:2d:42:86:b3:08:95:52:e9:a5:e6:8b:68:63:04:30:
         59:f0:55:97:6d:cc:b1:0a:4e:92:0b:98:3a:8b:c9:e9:05:55:
         08:a8:a1:51:9d:eb:b8:cd:9e:ed:7e:a4:b9:a4:ce:e7:c2:f5:
         d6:f8:86:83:bd:85:9d:2c:31:88:53:4a:4f:4a:97:dc:32:a6:
         8c:3d:9e:15:f9:52:29:f4:86:c4:c8:ed:db:ce:8a:63:56:6c:
         ee:08:3e:11:10:6c:be:bf:77:6d:c7:1c:5e:b7:7d:6d:62:a3:
         20:8c:35:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl6IFn3NqtCR9xcxe47yeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjUwNjEzMTQwMDM0WhcNMjUwNjE0MTQwMDM0WjAzMTEwLwYDVQQD
Eyg4MjgyNTE0YzI2OTY1MzI4Zjc5MDY1NDNjZmUwNzE1YjI0YzcyYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55YZepgQ9nsbbAbJlrzinXT4J59N
kJcOjob8mCWPfZWGaaU6eoFAphEe/ANutBWOAYvSeCrBqRyHkR9mQqmlkbIiv3Uu
eFKrTwzR1HS+XOV4KK5/YB4RnLmGH/cc+m3hitpzOUAX1WMEj5PVK8gTAW/kZ4hH
OXTJkajtS+YmE6XICVkJLCuRpORfAetGXrMdqApR2xNpUyYDLZwGj/PgN79KeV+m
rs/vDJJHGYGpK+9t921LblBJlIUjx7uEGlaJ1S1v0GCOWL3AsxRHeazm7ZfWXlBC
GgEgN2s8M77T3k41f+x+ZrtNlrAQSqVNVxLeI3vNGMCnl+1uJerZo5bFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKCUUwmllMo95BlQ8/gcVskxytAMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe59T7G06
QyfVJlmwImhyA8oXn+ewmGajYlHtPsSiDZMgcxkzlv1ssc7fSpimpiW3WEMi+00T
zlucywyQ8Fm8RIzGjIbKwx28EwlvRWrKJ2gaYbJJZc+V4enOvuDIyJggne+gjYRE
liYUEtwbz+Kwp5m4Mwnku0dFeKADRNswY0uI676YerDYXMzKXsQvMrOiei+lLUKG
swiVUuml5otoYwQwWfBVl23MsQpOkguYOovJ6QVVCKihUZ3ruM2e7X6kuaTO58L1
1viGg72FnSwxiFNKT0qX3DKmjD2eFflSKfSGxMjt286KY1Zs7gg+ERBsvr93bccc
Xrd9bWKjIIw1gA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:55 2025 by rpki-client