Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          OiEl9TK/f4cDr/uX5MtA0TACY8/MGzwGutS1a2wvb6g=
Subject key identifier:   C7:2F:7F:D3:86:54:DC:12:1E:40:E8:40:EB:CA:9F:EA:CC:13:3E:E2
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       01976D743B63E9A66659B41379B682F4B365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          154C
Signing time:             Sat 14 Jun 2025 08:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:23 +0000
Files and hashes:         1: 1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa (hash: xlDzBukhszCg1ynm8q0OHDdDRpBK+e0yk8+3eMgwkrM=)
                          2: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          3: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          4: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          5: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: +2/POTXnbhNaofi/waqMJ7BKs5Iv0dqeOyXaPyAHRMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:3b:63:e9:a6:66:59:b4:13:79:b6:82:f4:b3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Jun 14 08:00:23 2025 GMT
            Not After : Jun 15 08:00:23 2025 GMT
        Subject: CN=c72f7fd38654dc121e40e840ebca9feacc133ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:fd:e3:df:f9:f3:53:8d:86:c4:54:0b:2e:
                    d2:3e:cc:36:7f:0d:01:f2:25:0a:8d:44:13:5b:ca:
                    6d:86:01:9f:c8:0c:c7:e5:3f:d9:d0:51:be:9d:26:
                    4d:ad:68:29:d9:61:b3:26:ec:94:3b:cd:23:cf:76:
                    cc:3f:b9:c2:10:7f:22:d1:8a:7e:d7:aa:dc:1c:75:
                    7d:8a:6c:6a:6e:da:84:04:fc:75:e1:41:ce:1d:3a:
                    e9:cb:31:2f:c5:0c:bc:e6:15:a2:ad:2e:62:5c:32:
                    4a:b8:03:19:39:5d:24:55:58:2e:ed:83:0a:68:17:
                    3a:dd:c2:a0:e4:4a:74:b4:38:72:7d:fc:42:76:47:
                    5f:4c:6a:81:39:12:c5:aa:24:0d:69:67:03:77:01:
                    00:f3:56:f7:ae:02:d1:06:73:81:3e:0f:ac:10:b8:
                    e1:72:a1:f3:7a:2a:6a:8b:0d:7b:5c:da:05:4e:b9:
                    6f:c9:cb:03:3a:5a:fa:6b:92:41:8c:64:e1:af:18:
                    e3:6b:2f:a9:c4:b5:4e:1d:3e:c1:54:7c:e5:39:45:
                    4c:dc:b3:4c:e0:bb:16:1e:55:55:13:95:84:19:35:
                    e3:7f:e5:03:93:ab:60:24:ef:2c:d4:a3:87:08:da:
                    f5:69:e4:ad:0d:4c:08:24:50:4d:83:7f:ae:93:03:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2F:7F:D3:86:54:DC:12:1E:40:E8:40:EB:CA:9F:EA:CC:13:3E:E2
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:60:ac:cb:c4:3e:dc:4f:64:21:dd:21:36:dd:ad:0e:bc:a7:
         02:71:ce:9c:cd:3e:b3:9b:4d:31:85:cc:74:ff:ae:d6:29:cb:
         b1:ff:22:b5:1b:d2:d8:7d:6e:6d:d4:7e:7f:35:09:68:22:91:
         de:f0:7e:55:05:54:87:63:17:1b:f7:59:89:51:73:9c:c3:03:
         8f:70:e1:ba:be:ee:5a:01:0e:eb:d2:a9:b9:fd:a4:97:2b:9e:
         02:bf:90:27:45:07:fe:a2:46:61:8a:d5:96:08:96:60:37:28:
         34:4c:f5:3a:f2:d3:c2:89:90:51:f9:8d:b3:7b:d6:d7:01:ac:
         e6:37:37:85:da:5e:1e:e0:ee:6a:97:88:57:10:6c:3f:d5:c4:
         53:a4:4a:66:02:4b:b4:48:7f:0d:6f:f5:6b:46:d3:84:14:0d:
         86:56:19:50:5a:f3:84:9f:e0:f7:b6:37:37:c9:96:31:b2:22:
         a2:22:36:1e:74:bd:d2:98:2b:9b:29:74:ff:d8:c1:09:ad:e3:
         f4:52:01:5d:c6:0c:c9:d8:ae:0b:91:b6:38:ea:b5:18:af:0a:
         c7:9a:3a:11:d7:b5:43:d4:87:26:09:aa:c1:08:62:29:d8:71:
         c7:ea:f0:af:45:cc:32:f5:6c:85:b9:fb:f8:90:6c:21:c5:5f:
         6d:05:e4:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdDtj6aZmWbQTebaC9LNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4
MjRjMjgwHhcNMjUwNjE0MDgwMDIzWhcNMjUwNjE1MDgwMDIzWjAzMTEwLwYDVQQD
EyhjNzJmN2ZkMzg2NTRkYzEyMWU0MGU4NDBlYmNhOWZlYWNjMTMzZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HL949/581ONhsRUCy7SPsw2fw0B
8iUKjUQTW8pthgGfyAzH5T/Z0FG+nSZNrWgp2WGzJuyUO80jz3bMP7nCEH8i0Yp+
16rcHHV9imxqbtqEBPx14UHOHTrpyzEvxQy85hWirS5iXDJKuAMZOV0kVVgu7YMK
aBc63cKg5Ep0tDhyffxCdkdfTGqBORLFqiQNaWcDdwEA81b3rgLRBnOBPg+sELjh
cqHzeipqiw17XNoFTrlvycsDOlr6a5JBjGThrxjjay+pxLVOHT7BVHzlOUVM3LNM
4LsWHlVVE5WEGTXjf+UDk6tgJO8s1KOHCNr1aeStDUwIJFBNg3+ukwMcywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcvf9OGVNwSHkDoQOvKn+rMEz7iMB8GA1UdIwQY
MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt
YTc4MzQxMzA5OWQzLzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz
LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGCsy8Q+
3E9kId0hNt2tDrynAnHOnM0+s5tNMYXMdP+u1inLsf8itRvS2H1ubdR+fzUJaCKR
3vB+VQVUh2MXG/dZiVFznMMDj3Dhur7uWgEO69Kpuf2klyueAr+QJ0UH/qJGYYrV
lgiWYDcoNEz1OvLTwomQUfmNs3vW1wGs5jc3hdpeHuDuapeIVxBsP9XEU6RKZgJL
tEh/DW/1a0bThBQNhlYZUFrzhJ/g97Y3N8mWMbIioiI2HnS90pgrmyl0/9jBCa3j
9FIBXcYMydiuC5G2OOq1GK8Kx5o6Ede1Q9SHJgmqwQhiKdhxx+rwr0XMMvVshbn7
+JBsIcVfbQXkCg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:39 2025 by rpki-client