Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
File:                     RruCFbImbaPA9spVzHuoAOmt4qI.mft (raw, json)
Hash identifier:          qDb+uAgTd73TS6jRdE6+5Idg5G6rLZtXywsjPfI1eHE=
Subject key identifier:   F9:44:9D:46:86:81:C4:04:E8:FE:9D:09:04:3F:DD:98:23:68:2C:C8
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Certificate issuer:       /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial:       019776E637BC55DDB7153A11057409036575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
Manifest number:          159D
Signing time:             Mon 16 Jun 2025 04:01:28 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:28 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:28 +0000
Files and hashes:         1: 9L0Co8CEy186G13kaYMinlb5Afg.roa (hash: 6p7nu1hIgCVQFvaFdpUf1fbcZ1K03G9ItG/q4By8N9A=)
                          2: E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa (hash: YbPt+4+0edt07crfTPCARczh/UjImehgu5s1r3RYYLE=)
                          3: RruCFbImbaPA9spVzHuoAOmt4qI.crl (hash: 7Lt+CslDDLvBJdo1+fsmZVhMYvnVcgQzlV/PmwnBBUQ=)
                          4: o4qJydU8QHB9yf5elCeoJvNBmoA.roa (hash: 2K8rsjnSWXQjx0NDAMp9U5sFUQZR7E/jK97Yg8CSOow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e6:37:bc:55:dd:b7:15:3a:11:05:74:09:03:65:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
        Validity
            Not Before: Jun 16 04:01:28 2025 GMT
            Not After : Jun 17 04:01:28 2025 GMT
        Subject: CN=f9449d468681c404e8fe9d09043fdd9823682cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:38:b8:1a:b6:60:8c:92:2d:3b:26:b0:1f:
                    3d:6e:58:1f:4d:09:4d:5d:93:59:bc:af:e3:d8:ab:
                    58:35:69:49:b6:f2:ae:b0:9e:b8:bf:47:c9:4d:40:
                    9b:66:c6:3e:3d:28:1e:4d:ba:58:f9:37:a3:98:7e:
                    03:5e:19:52:fe:54:59:e9:6d:3d:70:78:44:0c:21:
                    b2:3b:8c:3d:07:6b:66:04:06:d9:b3:c1:97:87:16:
                    f2:78:bd:01:96:31:aa:05:e8:85:a4:e0:5e:7e:2b:
                    e5:87:2d:48:5e:dc:d9:84:84:33:ae:a2:65:25:31:
                    2f:bd:c4:d5:b4:f5:25:bb:5c:40:44:26:23:2c:c2:
                    ff:9d:d8:af:a3:a9:86:11:8f:b2:c6:19:cc:5a:d1:
                    6c:58:2e:b5:e2:cd:01:d8:00:80:6e:22:58:28:22:
                    4f:10:a2:79:00:7c:06:37:c3:5f:01:d2:bc:a0:95:
                    1b:99:af:29:6b:e0:bb:91:1d:d8:10:d8:0b:1e:4e:
                    f0:6f:21:a5:e3:14:24:36:f0:13:83:ee:44:c5:69:
                    b7:ec:18:3f:5f:09:e4:11:77:ac:eb:2f:63:3c:1d:
                    5b:df:e3:90:74:91:d8:ba:12:be:f7:3b:46:cf:12:
                    6d:87:ec:c0:34:25:f2:8e:f8:95:05:74:ee:c6:42:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:44:9D:46:86:81:C4:04:E8:FE:9D:09:04:3F:DD:98:23:68:2C:C8
            X509v3 Authority Key Identifier:
                keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e4:47:08:7d:45:08:75:be:3e:61:db:78:e7:22:2c:6d:e5:
         bb:15:da:bc:c2:d8:86:44:35:d4:f2:e6:6c:3b:ec:48:13:66:
         2d:33:40:d2:16:87:18:f4:d7:06:d5:a3:70:2f:79:59:eb:3c:
         ee:33:6a:74:e8:32:32:37:61:d5:65:f7:95:df:9c:7a:d4:3a:
         08:e2:07:88:31:81:16:3a:22:87:4c:5e:62:4b:15:16:1d:94:
         e5:00:f1:dc:03:48:b3:2e:b9:9a:e5:40:2d:ab:d3:d6:5e:c4:
         fc:96:82:ac:00:04:78:ad:eb:8e:85:4e:90:32:a5:07:d3:11:
         64:1d:ec:55:49:04:23:1e:86:5c:b1:1c:55:77:9e:db:be:79:
         f2:3d:e5:0d:80:b9:b5:81:2f:a1:b8:72:a7:01:8a:af:30:fa:
         03:59:54:cb:3b:e9:21:b2:d6:90:f2:20:e5:f1:19:55:d3:83:
         6e:e9:37:86:ff:4e:19:a9:3a:7c:65:e7:d6:24:db:6c:ad:92:
         75:fa:95:93:aa:bf:15:6c:30:f8:b1:48:62:f6:bd:e5:55:7e:
         3f:d2:17:3b:20:9b:c1:a0:32:3f:c6:0a:30:8b:dc:78:a3:c3:
         13:3f:56:51:53:15:45:6b:8e:a0:2c:ba:63:33:cb:c3:94:d8:
         0b:e8:11:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25je8Vd23FToRBXQJA2V1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmI4MjE1YjIyNjZkYTNjMGY2Y2E1NWNjN2JhODAwZTlh
ZGUyYTIwHhcNMjUwNjE2MDQwMTI4WhcNMjUwNjE3MDQwMTI4WjAzMTEwLwYDVQQD
EyhmOTQ0OWQ0Njg2ODFjNDA0ZThmZTlkMDkwNDNmZGQ5ODIzNjgyY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy04uBq2YIySLTsmsB89blgfTQlN
XZNZvK/j2KtYNWlJtvKusJ64v0fJTUCbZsY+PSgeTbpY+TejmH4DXhlS/lRZ6W09
cHhEDCGyO4w9B2tmBAbZs8GXhxbyeL0BljGqBeiFpOBefivlhy1IXtzZhIQzrqJl
JTEvvcTVtPUlu1xARCYjLML/ndivo6mGEY+yxhnMWtFsWC614s0B2ACAbiJYKCJP
EKJ5AHwGN8NfAdK8oJUbma8pa+C7kR3YENgLHk7wbyGl4xQkNvATg+5ExWm37Bg/
XwnkEXes6y9jPB1b3+OQdJHYuhK+9ztGzxJth+zANCXyjviVBXTuxkLVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlEnUaGgcQE6P6dCQQ/3ZgjaCzIMB8GA1UdIwQY
MBaAFEa7ghWyJm2jwPbKVcx7qADpreKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMt
N2E1NGRiNTllYzJkLzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMtN2E1NGRiNTllYzJk
LzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ORHCH1F
CHW+PmHbeOciLG3luxXavMLYhkQ11PLmbDvsSBNmLTNA0haHGPTXBtWjcC95Wes8
7jNqdOgyMjdh1WX3ld+cetQ6COIHiDGBFjoih0xeYksVFh2U5QDx3ANIsy65muVA
LavT1l7E/JaCrAAEeK3rjoVOkDKlB9MRZB3sVUkEIx6GXLEcVXee27558j3lDYC5
tYEvobhypwGKrzD6A1lUyzvpIbLWkPIg5fEZVdODbuk3hv9OGak6fGXn1iTbbK2S
dfqVk6q/FWww+LFIYva95VV+P9IXOyCbwaAyP8YKMIvceKPDEz9WUVMVRWuOoCy6
YzPLw5TYC+gRfA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:43 2025 by rpki-client