Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
File:                     TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json)
Hash identifier:          F2UYOD68rSh+kxowUc0owGfnNAj3EnP6lL5oaTnErJY=
Subject key identifier:   A1:21:56:55:60:B8:8D:C1:17:ED:1A:BB:12:D8:0F:47:02:C1:40:5C
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Certificate issuer:       /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial:       01976DAB696749895E140EFA88BEF8C7FC76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
Manifest number:          159A
Signing time:             Sat 14 Jun 2025 09:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:39 +0000
Files and hashes:         1: 5ihFdcr9l-tc7rukSnsuZYO-sCc.roa (hash: jVp/K4TFXHukJ6ToifAvqgLYscP9U1YkYRjyQ/vS7rs=)
                          2: 6yNeqI6cfHc3f4rCblxx3TjO0eA.roa (hash: gtLbnA120/ol5rBCSdNOOaWzTA+gt7YvBjty1F7J0T4=)
                          3: 7gxbTtd2MWAA1UFCEQXYPpfPvms.roa (hash: amp+QH+F/V8niu7DI7vvmehuw42ndWHc/H0Eed9oDAk=)
                          4: CwYygfo9jnbGuyyosVtnwcbQSLk.roa (hash: rDCG+Vedl9KUCPHae/ViKic222skTUa8bdoX1jGnAHk=)
                          5: GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa (hash: q+xSJMcbTKpowxU7QHIFpGoYjDWd2eTHceMvN5t2SgQ=)
                          6: HFBEdH3RlWYpvPeNgp6xKhpodko.roa (hash: JH1fjI/K5jNqNFebQu9ct1cPojHEsM6BVZLaKE0xEso=)
                          7: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: w3DTEsw2cXtt0eza2rMHesK5NiwnUZoP7gR0DelfP60=)
                          8: cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa (hash: byumgI5wcwBFgn7pCdwnQhSp1RnK/Pa96CjEn1SbRyM=)
                          9: ehged3mZieiEQPKX6YV4LMY94IA.roa (hash: 7eCOyiKG9ZW1g+yYlD3ivpQA1oY2V4uQMAsWpNV5czU=)
                          10: isgHEY3DLcIdH7fzaoi9hSSweWI.roa (hash: UYsZ1nus3c+5ErOsOKu1wsJtYaH8MiA2+iXpl5haTe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:69:67:49:89:5e:14:0e:fa:88:be:f8:c7:fc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
        Validity
            Not Before: Jun 14 09:00:39 2025 GMT
            Not After : Jun 15 09:00:39 2025 GMT
        Subject: CN=a121565560b88dc117ed1abb12d80f4702c1405c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:b8:51:f7:c0:dd:96:2e:b9:5b:e8:35:4f:
                    6d:fa:42:47:70:82:31:c0:cf:48:7b:f9:b3:6b:34:
                    5b:41:68:a3:13:96:1b:59:89:aa:c0:a0:04:08:5e:
                    ca:6c:f4:af:a4:c7:b5:35:f1:a5:a8:ff:fd:a2:1b:
                    05:7a:12:34:6d:f7:06:4e:8b:b7:e9:f6:81:55:d6:
                    e8:8e:93:07:a4:90:f4:cc:77:62:60:de:47:71:ab:
                    61:15:97:71:de:f6:0b:4c:ca:75:e6:52:4c:62:df:
                    9d:ad:5c:45:aa:f4:a3:b6:6b:38:50:b4:94:35:f6:
                    71:00:13:30:6e:c4:a2:cb:de:78:4e:f8:dd:d5:df:
                    50:86:b0:5d:ca:c9:be:cf:40:95:7f:5f:5e:77:8f:
                    70:c1:0a:05:07:5a:91:2a:1a:9c:5b:d4:e2:03:32:
                    fb:78:00:01:fe:34:7c:91:46:21:bc:cb:d5:ce:31:
                    de:10:dc:39:70:a5:35:c1:54:a6:50:99:77:f9:7f:
                    21:22:b0:11:2d:a0:fd:31:c4:1f:27:34:14:11:fb:
                    cf:25:ce:f1:b6:70:84:7a:2d:0b:fb:57:d5:6f:d2:
                    63:65:8e:e7:b0:06:72:76:fd:25:3a:0d:70:b0:dc:
                    41:52:f0:a3:83:7c:2c:7d:49:33:5d:6d:4a:c4:86:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:21:56:55:60:B8:8D:C1:17:ED:1A:BB:12:D8:0F:47:02:C1:40:5C
            X509v3 Authority Key Identifier:
                keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:4b:74:a1:88:4e:57:63:a3:e6:6c:13:a3:57:1e:5f:20:
         04:d6:be:c6:b1:e2:75:1d:3a:c8:59:95:e8:06:90:72:13:d7:
         b9:2e:77:0c:be:10:fd:f5:d6:be:39:15:e0:71:51:ac:c4:a2:
         99:bc:8c:09:3e:5c:7c:fb:97:4e:96:c9:92:9a:89:15:33:24:
         e6:5d:c6:f9:61:d6:fb:a1:cf:c0:a2:75:d6:a0:43:e0:82:1a:
         f3:6f:9a:24:0e:c6:e1:32:08:55:c2:1d:03:6a:aa:24:15:3a:
         57:77:1f:92:e2:39:77:52:9f:4a:02:16:31:4f:fa:e9:6f:02:
         62:c1:8d:9d:06:e9:f2:67:c0:3b:be:48:1b:fa:00:6e:12:a1:
         0b:ff:ab:90:43:60:e0:1b:4d:7e:9c:8d:e5:fd:1b:c4:f0:7a:
         9d:ad:14:91:a6:64:28:50:71:cb:cf:a5:44:c2:d5:34:f7:5f:
         2d:4b:2e:a7:1a:5f:63:1b:aa:34:70:4d:ec:fa:be:8c:ee:42:
         75:e1:94:51:c8:5b:6b:e9:b2:67:6f:ea:bf:fb:cb:a4:21:59:
         2f:aa:b3:ec:82:c2:a2:94:49:7d:57:36:84:e6:e2:84:84:4f:
         98:c7:38:10:93:15:8b:ef:32:87:52:49:66:b3:10:84:e4:ec:
         00:55:d9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq2lnSYleFA76iL74x/x2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx
NDExMTEwHhcNMjUwNjE0MDkwMDM5WhcNMjUwNjE1MDkwMDM5WjAzMTEwLwYDVQQD
EyhhMTIxNTY1NTYwYjg4ZGMxMTdlZDFhYmIxMmQ4MGY0NzAyYzE0MDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt464UffA3ZYuuVvoNU9t+kJHcIIx
wM9Ie/mzazRbQWijE5YbWYmqwKAECF7KbPSvpMe1NfGlqP/9ohsFehI0bfcGTou3
6faBVdbojpMHpJD0zHdiYN5HcathFZdx3vYLTMp15lJMYt+drVxFqvSjtms4ULSU
NfZxABMwbsSiy954Tvjd1d9QhrBdysm+z0CVf19ed49wwQoFB1qRKhqcW9TiAzL7
eAAB/jR8kUYhvMvVzjHeENw5cKU1wVSmUJl3+X8hIrARLaD9McQfJzQUEfvPJc7x
tnCEei0L+1fVb9JjZY7nsAZydv0lOg1wsNxBUvCjg3wsfUkzXW1KxIZn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEhVlVguI3BF+0auxLYD0cCwUBcMB8GA1UdIwQY
MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt
NzI2ZjgzZDIzODkyLzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky
LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLxLdKGI
Tldjo+ZsE6NXHl8gBNa+xrHidR06yFmV6AaQchPXuS53DL4Q/fXWvjkV4HFRrMSi
mbyMCT5cfPuXTpbJkpqJFTMk5l3G+WHW+6HPwKJ11qBD4IIa82+aJA7G4TIIVcId
A2qqJBU6V3cfkuI5d1KfSgIWMU/66W8CYsGNnQbp8mfAO75IG/oAbhKhC/+rkENg
4BtNfpyN5f0bxPB6na0UkaZkKFBxy8+lRMLVNPdfLUsupxpfYxuqNHBN7Pq+jO5C
deGUUchba+myZ2/qv/vLpCFZL6qz7ILCopRJfVc2hObihIRPmMc4EJMVi+8yh1JJ
ZrMQhOTsAFXZVw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:54 2025 by rpki-client