Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File:                     gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier:          gyMcnPm6NE1rEns04aRm6cc8C/Qslj1o9Qxrp3cl+2I=
Subject key identifier:   CF:CF:6E:3A:0C:32:99:AB:B1:0D:ED:9F:FB:93:1D:CF:F3:B1:34:A5
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer:       /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial:       019770AC7FC0B192EFE3651AD8DBE4E03E84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number:          159D
Signing time:             Sat 14 Jun 2025 23:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:42 +0000
Files and hashes:         1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: 0gG10uqGmZ2eNNx74kettuR7NJuc2WiV7CC/vFnjvLA=)
                          2: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (hash: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:7f:c0:b1:92:ef:e3:65:1a:d8:db:e4:e0:3e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
        Validity
            Not Before: Jun 14 23:00:42 2025 GMT
            Not After : Jun 15 23:00:42 2025 GMT
        Subject: CN=cfcf6e3a0c3299abb10ded9ffb931dcff3b134a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:46:5a:56:6c:fb:37:5f:a7:03:70:6d:06:
                    3e:a4:6b:51:aa:45:69:51:43:5d:96:cd:3f:c1:ea:
                    dc:25:b2:ff:0e:48:cd:26:f7:45:40:8a:9f:e1:1b:
                    87:97:a4:75:78:cc:1b:03:f1:da:fe:45:0a:e1:9d:
                    f6:b1:ad:4f:31:6c:26:26:0d:7f:8b:9c:b0:6a:5d:
                    76:62:69:1e:ac:7f:a0:c4:ca:fc:28:53:c5:09:fd:
                    70:db:07:78:39:66:a3:8d:d6:52:c5:84:72:41:ab:
                    01:60:3a:84:dd:19:64:9b:d5:31:2c:8e:97:ab:5d:
                    e0:ff:db:cc:6a:51:e1:08:72:7e:01:bb:b0:b9:46:
                    b0:41:51:84:b9:f3:20:51:2e:af:4d:e5:d1:41:41:
                    cf:d1:31:ac:62:c7:b1:82:e2:6a:9d:2c:d4:a5:ef:
                    52:4e:10:6f:d4:f0:c6:8b:da:41:38:bd:ba:d6:51:
                    5f:76:d2:81:81:d0:8e:50:68:e6:d0:0e:24:b7:08:
                    89:fc:85:ad:35:8a:d8:e4:eb:91:75:c4:65:1e:59:
                    e1:ce:e6:44:20:7a:35:13:16:18:21:6d:fa:8e:01:
                    c8:1d:85:64:45:69:e8:b3:c1:e4:e9:74:bc:0d:98:
                    e3:21:99:6f:91:a9:0b:76:29:04:5a:e6:b1:cd:9b:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CF:6E:3A:0C:32:99:AB:B1:0D:ED:9F:FB:93:1D:CF:F3:B1:34:A5
            X509v3 Authority Key Identifier:
                keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:07:86:e4:42:47:84:29:c0:90:d8:5d:c4:77:c8:d9:34:
         26:3a:22:07:e8:8d:d7:f3:8d:85:e5:50:18:15:9d:e0:a3:ee:
         6e:ae:27:18:3d:de:c1:2a:f9:ae:17:a1:67:18:75:9c:57:6c:
         a5:13:93:fb:98:46:1f:75:45:e2:45:d1:39:d8:53:73:db:4c:
         a2:c9:5b:51:74:cd:3f:f2:67:ce:25:48:30:09:48:89:86:ca:
         35:55:80:fc:07:97:f4:d5:0a:be:21:75:10:1f:d4:30:0e:ed:
         51:68:04:0f:14:4f:86:72:8a:02:82:88:0f:ba:20:e8:84:51:
         49:79:06:ad:c6:21:fe:c0:62:a1:ee:92:71:2d:00:db:fa:cf:
         df:60:39:c1:a7:b6:85:50:3e:80:3d:1e:a8:30:2f:1a:40:70:
         82:c3:9b:62:f3:ce:9f:ee:d8:72:b6:16:d5:79:fa:ad:b5:23:
         33:39:c6:44:01:b5:9c:4b:3e:4f:ac:3f:6f:02:1b:fb:ca:85:
         c8:7e:33:0d:6d:b7:af:6a:a0:64:03:3f:2c:d8:e2:c0:b2:76:
         95:6e:3b:6c:cb:ff:47:1d:c4:73:ac:87:8a:00:95:f3:5b:41:
         49:3c:6e:e5:fa:23:7b:91:80:54:d7:7b:ec:ed:83:62:ab:85:
         af:b6:7b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrH/AsZLv42Ua2Nvk4D6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxM2UwNTFjYjgzMWQxOTg5NjA3YmI3NmMwYmM1NjkzZmY5
NDdiNTMwHhcNMjUwNjE0MjMwMDQyWhcNMjUwNjE1MjMwMDQyWjAzMTEwLwYDVQQD
EyhjZmNmNmUzYTBjMzI5OWFiYjEwZGVkOWZmYjkzMWRjZmYzYjEzNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqBGWlZs+zdfpwNwbQY+pGtRqkVp
UUNdls0/wercJbL/DkjNJvdFQIqf4RuHl6R1eMwbA/Ha/kUK4Z32sa1PMWwmJg1/
i5ywal12YmkerH+gxMr8KFPFCf1w2wd4OWajjdZSxYRyQasBYDqE3Rlkm9UxLI6X
q13g/9vMalHhCHJ+AbuwuUawQVGEufMgUS6vTeXRQUHP0TGsYsexguJqnSzUpe9S
ThBv1PDGi9pBOL261lFfdtKBgdCOUGjm0A4ktwiJ/IWtNYrY5OuRdcRlHlnhzuZE
IHo1ExYYIW36jgHIHYVkRWnos8Hk6XS8DZjjIZlvkakLdikEWuaxzZuGcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/PbjoMMpmrsQ3tn/uTHc/zsTSlMB8GA1UdIwQY
MBaAFIE+BRy4MdGYlge7dsC8VpP/lHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQt
ZjU3N2FhNDZkZTgzLzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQtZjU3N2FhNDZkZTgz
LzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqcHhuRC
R4QpwJDYXcR3yNk0JjoiB+iN1/ONheVQGBWd4KPubq4nGD3ewSr5rhehZxh1nFds
pROT+5hGH3VF4kXROdhTc9tMoslbUXTNP/JnziVIMAlIiYbKNVWA/AeX9NUKviF1
EB/UMA7tUWgEDxRPhnKKAoKID7og6IRRSXkGrcYh/sBioe6ScS0A2/rP32A5wae2
hVA+gD0eqDAvGkBwgsObYvPOn+7YcrYW1Xn6rbUjMznGRAG1nEs+T6w/bwIb+8qF
yH4zDW23r2qgZAM/LNjiwLJ2lW47bMv/Rx3Ec6yHigCV81tBSTxu5foje5GAVNd7
7O2DYquFr7Z7cw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:08 2025 by rpki-client