Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File:                     1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier:          zeRee0PsbV5pqDwFSnNUacwlpgMdxTGIcYQB/oCXVaU=
Subject key identifier:   9E:7F:6F:2D:3B:EA:E9:E9:D5:74:48:A6:BD:F0:84:CD:0E:61:64:0F
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer:       /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial:       01976C6237E9AFB1A6632C46FA9487D41FFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 03:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:05 +0000
Files and hashes:         1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: 5NJeVqEoixOZQ7dltrjXwbAh0B0qnt8pyzEpn0ofJyQ=)
                          2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:37:e9:af:b1:a6:63:2c:46:fa:94:87:d4:1f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
        Validity
            Not Before: Jun 14 03:01:05 2025 GMT
            Not After : Jun 15 03:01:05 2025 GMT
        Subject: CN=9e7f6f2d3beae9e9d57448a6bdf084cd0e61640f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:8c:9c:ff:be:36:c4:53:1a:fb:13:01:fc:
                    d9:06:84:df:6c:2d:ff:3d:33:ce:a3:0e:27:de:41:
                    e8:c7:25:e4:26:4e:e3:66:53:5a:cc:05:f1:ce:9a:
                    1e:f0:98:4f:0d:a9:bf:af:34:da:c3:b5:f6:b8:1a:
                    d8:f8:8f:67:4c:04:c6:76:c7:d3:7d:3f:7f:30:ff:
                    95:38:d7:fe:f1:69:d3:5f:ea:65:f9:54:7b:c9:e8:
                    86:10:54:69:e9:31:35:3e:87:97:43:e7:3d:8b:4e:
                    81:9f:e6:85:aa:ce:9f:41:0f:7b:ae:26:99:d4:1d:
                    0d:98:dd:e3:99:cf:5f:2f:f4:b8:40:3f:35:d6:45:
                    16:de:74:8a:63:4f:25:f7:54:e8:68:66:55:02:b4:
                    8b:04:4e:40:4f:9f:65:94:1d:79:27:47:56:f8:f5:
                    9c:21:88:45:61:a7:5d:68:aa:43:02:69:24:be:e7:
                    17:f8:13:4b:bd:3a:1e:c2:f5:98:62:f1:2b:94:8a:
                    88:36:0d:b9:d7:f3:be:a9:b0:14:ca:1b:f2:7c:3b:
                    e3:5b:55:8b:f1:1e:21:9e:0d:1c:f2:42:c1:46:ce:
                    d3:d4:f2:b3:11:66:66:d5:64:8b:0f:57:69:bf:d5:
                    d4:52:ac:21:73:a2:bb:23:b9:e4:38:91:54:79:2c:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:6F:2D:3B:EA:E9:E9:D5:74:48:A6:BD:F0:84:CD:0E:61:64:0F
            X509v3 Authority Key Identifier:
                keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:61:60:76:ff:63:e6:30:77:59:4d:e1:2f:eb:37:35:31:4c:
         55:aa:f0:64:6a:2d:43:1b:5a:b4:c6:98:78:7f:78:4d:fc:7c:
         9a:20:84:99:1c:cc:3e:b4:b4:c8:ce:d0:5f:04:78:3e:55:30:
         36:e4:80:b2:bd:0e:12:27:4e:3d:f8:bf:e9:8e:4e:32:79:43:
         f6:b1:de:84:d3:cc:b0:29:31:ee:49:f0:28:ac:95:cd:18:64:
         ee:8f:36:6c:83:7e:6a:e7:7d:35:e9:33:ab:da:96:0e:58:8d:
         44:53:4c:73:66:18:c8:78:c3:82:9e:05:60:6a:17:75:d7:ff:
         1c:b9:0c:f7:ab:5b:3d:da:92:f5:a6:9c:43:9b:3f:a7:99:17:
         3b:fd:ac:0d:2e:aa:5c:e0:ca:d8:20:c4:42:73:5d:13:55:4f:
         0b:af:5b:57:23:b6:0c:20:4d:b0:31:b4:9e:c2:ba:b9:7e:20:
         c5:0d:ee:82:91:aa:fd:31:a0:d7:c8:dd:26:88:10:3e:2f:31:
         44:17:c6:a9:22:30:47:2c:90:b7:f7:db:30:95:ee:b1:ce:e3:
         a1:9a:59:8a:cd:53:90:44:34:bc:53:e6:fd:20:6b:0f:21:0e:
         75:66:0b:7a:e5:97:9f:b0:3e:04:fb:0f:35:14:75:fb:2a:e8:
         e8:0a:23:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYjfpr7GmYyxG+pSH1B/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDZlMjQ0MzBkYmE4OWJkY2UyMmM2YmYzMjgxOGNiZGU2
YmJjYTAwHhcNMjUwNjE0MDMwMTA1WhcNMjUwNjE1MDMwMTA1WjAzMTEwLwYDVQQD
Eyg5ZTdmNmYyZDNiZWFlOWU5ZDU3NDQ4YTZiZGYwODRjZDBlNjE2NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NaMnP++NsRTGvsTAfzZBoTfbC3/
PTPOow4n3kHoxyXkJk7jZlNazAXxzpoe8JhPDam/rzTaw7X2uBrY+I9nTATGdsfT
fT9/MP+VONf+8WnTX+pl+VR7yeiGEFRp6TE1PoeXQ+c9i06Bn+aFqs6fQQ97riaZ
1B0NmN3jmc9fL/S4QD811kUW3nSKY08l91ToaGZVArSLBE5AT59llB15J0dW+PWc
IYhFYaddaKpDAmkkvucX+BNLvToewvWYYvErlIqINg251/O+qbAUyhvyfDvjW1WL
8R4hng0c8kLBRs7T1PKzEWZm1WSLD1dpv9XUUqwhc6K7I7nkOJFUeSxHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5/by076unp1XRIpr3whM0OYWQPMB8GA1UdIwQY
MBaAFNVG4kQw26ib3OIsa/MoGMvea7ygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjkt
ZDA2Y2ZhMjI2YzY0LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjktZDA2Y2ZhMjI2YzY0
LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGFgdv9j
5jB3WU3hL+s3NTFMVarwZGotQxtatMaYeH94Tfx8miCEmRzMPrS0yM7QXwR4PlUw
NuSAsr0OEidOPfi/6Y5OMnlD9rHehNPMsCkx7knwKKyVzRhk7o82bIN+aud9Nekz
q9qWDliNRFNMc2YYyHjDgp4FYGoXddf/HLkM96tbPdqS9aacQ5s/p5kXO/2sDS6q
XODK2CDEQnNdE1VPC69bVyO2DCBNsDG0nsK6uX4gxQ3ugpGq/TGg18jdJogQPi8x
RBfGqSIwRyyQt/fbMJXusc7joZpZis1TkEQ0vFPm/SBrDyEOdWYLeuWXn7A+BPsP
NRR1+yro6AojvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:13 2025 by rpki-client