Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File:                     vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier:          0OMYFgQZg52+tZVV4BW21mH22L3B0o/l4Fgi6IY5x0o=
Subject key identifier:   ED:1C:0C:25:E6:B1:B4:DB:91:31:7A:35:1B:5C:CE:93:3E:CA:F4:61
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer:       /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial:       019768BC06EA9C25012F06B098576094677A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number:          158B
Signing time:             Fri 13 Jun 2025 10:00:42 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:42 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:42 +0000
Files and hashes:         1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
                          2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: 1hRzWczBN7snbMqECMMTPGqM3lc1LA4NfwFsylCXGrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:06:ea:9c:25:01:2f:06:b0:98:57:60:94:67:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
        Validity
            Not Before: Jun 13 10:00:42 2025 GMT
            Not After : Jun 14 10:00:42 2025 GMT
        Subject: CN=ed1c0c25e6b1b4db91317a351b5cce933ecaf461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:a9:ae:69:10:1e:ca:cd:ba:54:31:02:c3:
                    c3:49:fd:83:96:76:5e:46:00:53:3a:df:78:0c:88:
                    88:15:91:09:63:81:bb:f4:b1:12:33:73:87:d4:80:
                    7f:ca:83:43:1d:77:18:2d:0d:95:f0:76:23:9d:28:
                    63:4e:3a:89:10:58:63:5e:44:5f:56:a2:e6:eb:28:
                    e3:85:be:ab:58:8d:6c:5a:dc:85:0c:2b:fd:cf:ce:
                    f0:59:52:a6:d3:a2:28:26:e8:e6:04:be:67:41:97:
                    02:ac:03:a7:df:47:0f:1e:69:de:69:8e:79:ab:cc:
                    3a:ef:86:d4:40:cf:97:bf:ef:e9:92:a5:29:86:48:
                    c2:43:3a:c2:95:e6:9a:87:2a:f9:48:d9:0b:e3:6b:
                    04:73:a2:60:41:1b:77:7a:ae:0b:2a:b7:2c:8d:43:
                    83:58:9a:f0:7d:33:a5:5b:a1:43:4a:b7:04:1e:5c:
                    f6:69:f3:40:2c:45:00:eb:85:06:8c:fe:b2:ed:74:
                    cb:31:fe:eb:68:95:7c:dd:89:56:d2:e2:4c:5d:fd:
                    bc:5f:25:cb:f8:81:28:86:2a:c5:dc:2c:66:ac:d9:
                    fe:55:46:d1:54:eb:2e:0a:b7:1d:e5:ed:78:ef:d8:
                    42:04:06:df:20:20:05:1e:57:5c:74:2e:6e:62:47:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:0C:25:E6:B1:B4:DB:91:31:7A:35:1B:5C:CE:93:3E:CA:F4:61
            X509v3 Authority Key Identifier:
                keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:57:2c:93:e0:54:fc:1c:bd:da:ef:ac:f7:cc:16:a6:9c:db:
         71:0f:96:dd:4b:37:78:ee:8f:4f:f9:eb:54:c7:d5:7a:a1:33:
         8e:2e:23:7b:b9:9f:d3:59:65:d0:0e:67:9e:07:67:30:6f:3b:
         0e:72:ac:ea:32:41:33:07:cf:34:3c:4d:cc:35:27:86:06:69:
         07:f5:4e:b7:07:87:ec:f8:5c:9c:5e:29:82:6b:a7:18:1a:59:
         f8:e5:34:cb:ff:99:7c:57:08:d8:8e:73:78:85:7f:e0:da:27:
         34:78:26:89:88:a8:e5:c1:f5:fd:24:03:66:16:6a:88:15:b7:
         e9:f0:e7:cb:4d:1b:f1:9c:f7:15:7e:bd:14:e1:9a:23:28:b7:
         f3:c4:b2:34:34:b1:de:e4:04:e1:3a:5b:29:35:d4:8e:13:be:
         07:62:3e:00:08:03:c9:e0:2a:22:43:91:0e:3b:21:88:4b:a4:
         62:77:99:03:7d:85:fe:b2:59:86:41:bf:2a:4e:c2:a8:b0:b7:
         d7:76:b2:a2:13:0f:1f:78:93:de:b6:83:b9:55:ad:e8:b9:f4:
         d7:79:ea:66:fc:c4:d4:46:03:74:e7:e0:b6:b3:61:ac:9b:90:
         d1:1d:fa:ee:24:da:c4:37:71:40:c8:22:bf:8e:96:ee:ef:4e:
         e7:57:ca:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovAbqnCUBLwawmFdglGd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy
Y2UzYTkwHhcNMjUwNjEzMTAwMDQyWhcNMjUwNjE0MTAwMDQyWjAzMTEwLwYDVQQD
EyhlZDFjMGMyNWU2YjFiNGRiOTEzMTdhMzUxYjVjY2U5MzNlY2FmNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ReprmkQHsrNulQxAsPDSf2DlnZe
RgBTOt94DIiIFZEJY4G79LESM3OH1IB/yoNDHXcYLQ2V8HYjnShjTjqJEFhjXkRf
VqLm6yjjhb6rWI1sWtyFDCv9z87wWVKm06IoJujmBL5nQZcCrAOn30cPHmneaY55
q8w674bUQM+Xv+/pkqUphkjCQzrCleaahyr5SNkL42sEc6JgQRt3eq4LKrcsjUOD
WJrwfTOlW6FDSrcEHlz2afNALEUA64UGjP6y7XTLMf7raJV83YlW0uJMXf28XyXL
+IEohirF3CxmrNn+VUbRVOsuCrcd5e1479hCBAbfICAFHldcdC5uYkeB4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0cDCXmsbTbkTF6NRtczpM+yvRhMB8GA1UdIwQY
MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt
NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll
LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVcsk+BU
/By92u+s98wWppzbcQ+W3Us3eO6PT/nrVMfVeqEzji4je7mf01ll0A5nngdnMG87
DnKs6jJBMwfPNDxNzDUnhgZpB/VOtweH7PhcnF4pgmunGBpZ+OU0y/+ZfFcI2I5z
eIV/4NonNHgmiYio5cH1/SQDZhZqiBW36fDny00b8Zz3FX69FOGaIyi388SyNDSx
3uQE4TpbKTXUjhO+B2I+AAgDyeAqIkORDjshiEukYneZA32F/rJZhkG/Kk7CqLC3
13ayohMPH3iT3raDuVWt6Ln013nqZvzE1EYDdOfgtrNhrJuQ0R367iTaxDdxQMgi
v46W7u9O51fK4A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:26 2025 by rpki-client