Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File:                     Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier:          EFyeOavlXo8C+cPSVgNM8foJThJBYQALGhb8yLddoMw=
Subject key identifier:   FD:C6:0C:94:5F:78:54:55:38:D0:D7:5F:CD:D5:6F:27:E3:EC:4A:37
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer:       /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial:       019784338C948F005DD9BF137FF419F0DB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number:          159C
Signing time:             Wed 18 Jun 2025 18:01:00 +0000
Manifest this update:     Wed 18 Jun 2025 18:01:00 +0000
Manifest next update:     Thu 19 Jun 2025 18:01:00 +0000
Files and hashes:         1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: XMOtnOdHdhxoITiLIi+eDW0Ot19WXXlC3t00bmSxhcc=)
                          2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:33:8c:94:8f:00:5d:d9:bf:13:7f:f4:19:f0:db:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
        Validity
            Not Before: Jun 18 18:01:00 2025 GMT
            Not After : Jun 19 18:01:00 2025 GMT
        Subject: CN=fdc60c945f78545538d0d75fcdd56f27e3ec4a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:98:37:a6:91:1a:ac:c2:15:0a:d8:ef:87:98:
                    b1:04:5b:66:b6:b3:45:55:04:1b:c3:3c:9b:35:1c:
                    74:36:ad:35:cd:23:77:fd:6d:cf:e5:74:4f:f5:26:
                    f8:2e:7a:37:60:56:ea:03:98:38:29:4b:9f:e4:00:
                    70:c3:55:63:57:01:b8:02:71:71:36:ae:89:59:1e:
                    20:9e:91:38:e5:75:3c:fc:e2:a4:08:27:a5:85:96:
                    5a:9b:65:22:40:9a:ae:5f:a3:ca:ef:05:0a:25:9c:
                    cb:de:2a:9e:7a:21:48:fb:e9:b9:35:aa:96:2c:4c:
                    2b:4b:87:66:dd:bf:9e:84:0b:a4:a7:1d:8c:13:c1:
                    ee:42:09:94:e0:ba:65:80:11:2f:b9:df:e4:b6:3d:
                    7c:37:22:e4:59:80:67:15:9e:f7:42:1a:02:c8:9c:
                    f1:6d:8e:c8:83:e8:38:c9:04:ea:93:70:cc:07:a8:
                    aa:de:3f:80:2a:86:16:3a:8a:c9:fe:da:11:d7:ef:
                    06:8e:13:ef:6a:42:f0:ea:39:bf:fd:d8:a7:4b:5d:
                    80:a4:59:58:ca:27:00:6b:19:4c:e5:96:d5:37:53:
                    bf:1e:09:a5:66:d8:1d:db:de:00:6c:8f:78:ed:68:
                    31:e5:35:e9:2b:6f:af:a4:3b:8c:77:5a:00:25:ea:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C6:0C:94:5F:78:54:55:38:D0:D7:5F:CD:D5:6F:27:E3:EC:4A:37
            X509v3 Authority Key Identifier:
                keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:72:f1:70:10:8e:25:c3:7f:76:22:02:81:f4:a5:13:1f:bb:
         ea:9c:02:a6:52:fc:37:8b:53:4a:d6:aa:8c:7f:7c:7b:18:23:
         7f:06:12:cb:28:4b:1b:c6:c1:0b:09:19:3a:da:2f:54:22:43:
         65:5d:77:a4:a6:a8:5f:ee:c2:aa:6b:d6:bb:4c:d4:f4:f1:cc:
         6e:8c:cc:a9:73:1c:3a:89:f2:46:82:38:5d:bf:33:dc:95:6d:
         25:41:56:f5:58:5c:c2:a6:0a:df:47:68:38:03:53:44:0d:c9:
         a2:57:25:d6:56:3b:d6:9c:26:da:b2:e5:00:f3:93:cd:fd:18:
         f3:b4:be:22:d8:80:93:28:71:11:bf:c7:f6:8b:9c:00:dc:48:
         65:40:12:38:e0:a4:0a:b8:e7:65:63:45:9f:1c:6f:81:33:b3:
         e4:28:58:c7:32:d1:bb:a6:14:83:35:74:9e:ce:2e:a4:a5:0e:
         b2:ef:ff:13:8f:be:e5:37:c5:1e:dc:cc:23:75:fa:5d:05:d6:
         4d:72:71:0d:67:de:c5:14:67:e7:3d:75:f0:59:4f:5c:b9:54:
         0e:28:4f:49:e2:c8:ec:c7:df:1d:d7:b8:c9:1c:e7:3b:a0:c5:
         c0:da:14:51:62:a9:f1:90:d8:84:5b:e5:79:75:2a:5c:7b:cf:
         a6:a4:65:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeEM4yUjwBd2b8Tf/QZ8NtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Mzg3YzU2YjMzMWZmODRiYzEwZDhhYzkwZTFlMmMxNmYx
NzIzNDUwHhcNMjUwNjE4MTgwMTAwWhcNMjUwNjE5MTgwMTAwWjAzMTEwLwYDVQQD
EyhmZGM2MGM5NDVmNzg1NDU1MzhkMGQ3NWZjZGQ1NmYyN2UzZWM0YTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZg3ppEarMIVCtjvh5ixBFtmtrNF
VQQbwzybNRx0Nq01zSN3/W3P5XRP9Sb4Lno3YFbqA5g4KUuf5ABww1VjVwG4AnFx
Nq6JWR4gnpE45XU8/OKkCCelhZZam2UiQJquX6PK7wUKJZzL3iqeeiFI++m5NaqW
LEwrS4dm3b+ehAukpx2ME8HuQgmU4LplgBEvud/ktj18NyLkWYBnFZ73QhoCyJzx
bY7Ig+g4yQTqk3DMB6iq3j+AKoYWOorJ/toR1+8GjhPvakLw6jm//dinS12ApFlY
yicAaxlM5ZbVN1O/HgmlZtgd294AbI947Wgx5TXpK2+vpDuMd1oAJepKbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3GDJRfeFRVONDXX83Vbyfj7Eo3MB8GA1UdIwQY
MBaAFEY4fFazMf+EvBDYrJDh4sFvFyNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUt
MjNiYjM5YTgzNDgxLzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUtMjNiYjM5YTgzNDgx
LzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHLxcBCO
JcN/diICgfSlEx+76pwCplL8N4tTStaqjH98exgjfwYSyyhLG8bBCwkZOtovVCJD
ZV13pKaoX+7CqmvWu0zU9PHMbozMqXMcOonyRoI4Xb8z3JVtJUFW9VhcwqYK30do
OANTRA3Jolcl1lY71pwm2rLlAPOTzf0Y87S+ItiAkyhxEb/H9oucANxIZUASOOCk
CrjnZWNFnxxvgTOz5ChYxzLRu6YUgzV0ns4upKUOsu//E4++5TfFHtzMI3X6XQXW
TXJxDWfexRRn5z118FlPXLlUDihPSeLI7MffHde4yRznO6DFwNoUUWKp8ZDYhFvl
eXUqXHvPpqRlUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:14:12 2025 by rpki-client