Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
File:                     Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft (raw, json)
Hash identifier:          OhvLB0qzNfkSt+LWOmJwQBjDktSTs3cU7o5r/Yk7OzU=
Subject key identifier:   89:0A:01:40:97:05:BA:2C:02:EB:C5:CF:C3:89:6F:77:31:AA:A1:24
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       01976EBE5B3D95AAC4E883D3F5DDB09D6A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
Manifest number:          159A
Signing time:             Sat 14 Jun 2025 14:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:58 +0000
Files and hashes:         1: Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl (hash: a94MBiID17s7YI8wlGnx8UgOf5TjM+MviA00+CXO5Yk=)
                          2: GkXcWKv2tiZbmRFso5KDAtIlFEs.roa (hash: qBk0djYI/QNSD8TA0vX6gS28tOn4bjIOUEqnaYwDuO8=)
                          3: MAzNFV2te9n7kjEaFpStK8vBowc.roa (hash: cw6Ks/U2S63sovwgOc3pI9cS6N4rqlfzqVdKZqK6qIU=)
                          4: jmKQUYSEuZIWnZkjgKqeurLJKlA.roa (hash: ubeUqXL5MrFy3GKLg6YblSSTGgynKbrvwUY5fbq4vzw=)
                          5: si63heC5AIvLLejmiH4SUxw44s0.roa (hash: A2b+++OovlxutbnaWL8WBqlzNLX6SyYHAUqNmWE0KKc=)
                          6: tzI-3RvxZseZ0auE1vTr_8vXlHs.roa (hash: CiZ/fhpSU1BnMxFu5Ur8z7I7FFKUZ6D5j7i0HG/zpqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:5b:3d:95:aa:c4:e8:83:d3:f5:dd:b0:9d:6a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: Jun 14 14:00:58 2025 GMT
            Not After : Jun 15 14:00:58 2025 GMT
        Subject: CN=890a01409705ba2c02ebc5cfc3896f7731aaa124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:de:34:38:d3:03:f4:a3:1e:d2:be:5f:90:
                    2c:84:1c:b5:07:b2:37:89:bb:21:a9:0d:61:b9:75:
                    3b:1c:39:2c:64:7e:79:05:41:bd:43:3d:4b:32:1b:
                    43:6f:b6:43:1a:50:54:a7:16:44:ff:91:20:c7:47:
                    6a:ac:89:21:a4:60:9a:cd:8b:21:2d:c9:e3:0d:a0:
                    33:7d:fa:22:66:5a:d6:b2:fe:30:c5:df:14:0f:68:
                    fa:e1:8e:7d:1c:02:27:28:a6:cd:fe:6a:f3:93:90:
                    a2:d9:f8:0f:3c:ec:0f:f1:52:0f:a1:8b:2b:1d:ef:
                    51:ff:4c:c6:f0:11:76:98:36:de:b9:53:74:b6:9f:
                    e8:b4:5e:cb:c1:30:83:58:61:72:b6:08:92:a4:09:
                    e9:30:9c:4e:96:99:87:49:ab:dd:7f:cd:a7:8a:ef:
                    f3:50:0d:f4:52:f5:c8:cb:3a:34:6a:ff:45:04:f4:
                    fa:da:89:59:d2:c7:38:99:86:31:64:ca:8d:50:38:
                    37:57:bb:21:7b:4f:6c:52:6c:f1:a3:ae:42:9d:76:
                    89:c0:ff:b6:70:d2:bc:1d:64:01:88:9b:7d:86:c8:
                    7d:c8:31:f5:1d:b2:d2:49:d4:bc:27:35:d1:be:83:
                    23:d1:dc:25:62:3e:f9:83:c8:f5:f6:aa:a0:c0:33:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:01:40:97:05:BA:2C:02:EB:C5:CF:C3:89:6F:77:31:AA:A1:24
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:be:8f:46:8c:c3:35:f3:1e:c5:28:ea:3c:28:c4:d1:43:
         9d:8b:ae:6d:30:49:58:f5:21:f8:b4:9e:ac:08:b5:44:3c:ff:
         b5:01:9e:75:50:78:8d:2c:c6:80:38:99:f8:c5:84:bf:b9:d8:
         d9:08:5e:c6:40:05:dd:e5:d9:54:47:f9:10:74:ee:37:1b:bf:
         27:a0:dd:8b:1a:36:56:bf:35:ad:12:74:13:1d:4b:95:29:33:
         fe:a9:bc:94:d3:7f:99:c1:d0:6e:ea:35:68:cd:5f:0d:e2:43:
         00:73:61:db:2e:87:6e:d5:79:b3:3c:68:5e:02:6c:55:03:03:
         e6:e6:dd:79:3c:e1:14:09:6f:7f:f8:8f:00:e0:71:48:e4:4b:
         c2:d6:ed:a0:b9:d3:ec:88:ca:c6:2e:14:43:f5:91:35:51:eb:
         c5:2f:2a:c6:68:a0:6d:7a:b7:79:50:27:f1:ff:cb:9c:db:1e:
         94:76:4f:ec:e3:bc:d1:2f:cd:fc:0b:4f:5a:9c:72:65:c4:a5:
         47:70:22:77:a2:64:85:d5:64:e6:d8:0f:8b:59:a7:9f:54:75:
         16:c3:f5:dc:b0:85:00:3d:15:b3:54:2d:1b:2d:8f:3a:91:19:
         e4:5a:82:9a:bc:a8:ee:f3:4c:62:83:b1:16:6d:2e:cf:95:22:
         f6:44:ac:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvls9larE6IPT9d2wnWp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZWEzN2E4ZTczZTc2NzlhOTMzZDcwZjdiOWM4NzIwODEw
MjQ0NTUwHhcNMjUwNjE0MTQwMDU4WhcNMjUwNjE1MTQwMDU4WjAzMTEwLwYDVQQD
Eyg4OTBhMDE0MDk3MDViYTJjMDJlYmM1Y2ZjMzg5NmY3NzMxYWFhMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46HeNDjTA/SjHtK+X5AshBy1B7I3
ibshqQ1huXU7HDksZH55BUG9Qz1LMhtDb7ZDGlBUpxZE/5Egx0dqrIkhpGCazYsh
LcnjDaAzffoiZlrWsv4wxd8UD2j64Y59HAInKKbN/mrzk5Ci2fgPPOwP8VIPoYsr
He9R/0zG8BF2mDbeuVN0tp/otF7LwTCDWGFytgiSpAnpMJxOlpmHSavdf82niu/z
UA30UvXIyzo0av9FBPT62olZ0sc4mYYxZMqNUDg3V7she09sUmzxo65CnXaJwP+2
cNK8HWQBiJt9hsh9yDH1HbLSSdS8JzXRvoMj0dwlYj75g8j19qqgwDNqnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkKAUCXBbosAuvFz8OJb3cxqqEkMB8GA1UdIwQY
MBaAFBbqN6jnPnZ5qTPXD3uchyCBAkRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWIt
NDcyYjBkMDcyZTgzLzEvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWItNDcyYjBkMDcyZTgz
LzEvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef2+j0aM
wzXzHsUo6jwoxNFDnYuubTBJWPUh+LSerAi1RDz/tQGedVB4jSzGgDiZ+MWEv7nY
2QhexkAF3eXZVEf5EHTuNxu/J6Ddixo2Vr81rRJ0Ex1LlSkz/qm8lNN/mcHQbuo1
aM1fDeJDAHNh2y6HbtV5szxoXgJsVQMD5ubdeTzhFAlvf/iPAOBxSORLwtbtoLnT
7IjKxi4UQ/WRNVHrxS8qxmigbXq3eVAn8f/LnNselHZP7OO80S/N/AtPWpxyZcSl
R3Aid6JkhdVk5tgPi1mnn1R1FsP13LCFAD0Vs1QtGy2POpEZ5FqCmryo7vNMYoOx
Fm0uz5Ui9kSsiw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:02:40 2025 by rpki-client