Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File:                     xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier:          kVGlrUWVP3QzQEWNM+ClNPM5OR+2BepIr0zwea1PRn8=
Subject key identifier:   AC:15:36:60:4E:7F:29:21:50:4E:5B:C9:97:8C:AA:3F:07:33:A2:73
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer:       /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial:       0197759C33770CDAF7C15CC2F9CF86C19C40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number:          141D
Signing time:             Sun 15 Jun 2025 22:01:00 +0000
Manifest this update:     Sun 15 Jun 2025 22:01:00 +0000
Manifest next update:     Mon 16 Jun 2025 22:01:00 +0000
Files and hashes:         1: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (hash: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=)
                          2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: Qj1IsiV1986fmHqb0mHcAUNZUMNpHRhpkNtFhByLDqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:9c:33:77:0c:da:f7:c1:5c:c2:f9:cf:86:c1:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
        Validity
            Not Before: Jun 15 22:01:00 2025 GMT
            Not After : Jun 16 22:01:00 2025 GMT
        Subject: CN=ac1536604e7f2921504e5bc9978caa3f0733a273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:b3:ac:f7:da:0c:19:25:dc:13:8c:a2:5f:
                    ce:b8:09:5a:72:6a:25:23:10:c4:97:c6:71:78:4e:
                    e4:13:00:0c:4c:2c:1a:cd:a4:e5:55:23:6a:5a:66:
                    3e:99:31:a0:7b:07:15:d8:18:ea:37:e0:16:a4:12:
                    23:39:1e:f1:49:df:0d:2b:d7:6a:2f:7d:ac:73:69:
                    06:04:22:65:6f:ac:5a:df:e9:bc:62:c1:15:57:bd:
                    62:92:89:1c:2c:98:24:c6:32:f7:64:cc:aa:64:d3:
                    47:89:22:6d:ea:c4:61:3d:e7:3a:6d:96:38:7a:8b:
                    b9:9a:10:6d:56:92:ee:76:dc:ee:b1:8d:40:97:75:
                    3c:f4:66:a5:19:1b:18:1d:af:10:04:0b:5e:39:a9:
                    ed:c8:8b:9a:67:6d:12:07:59:73:cc:88:ed:2b:62:
                    9b:e9:93:2a:ac:a0:05:f4:3e:da:cd:9e:8e:c0:78:
                    1b:37:40:6f:6f:a6:4c:36:0f:c7:e3:3f:79:e1:59:
                    2a:0e:b0:32:9e:72:ab:cd:2a:7e:a7:23:ca:29:20:
                    36:e6:ea:dd:85:1d:7c:2c:04:2d:af:ab:a5:1f:10:
                    03:0a:8b:d9:3a:06:97:cd:ee:bf:65:74:c9:38:90:
                    46:26:7d:71:42:cb:52:73:b2:af:7e:fc:6c:c5:71:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:15:36:60:4E:7F:29:21:50:4E:5B:C9:97:8C:AA:3F:07:33:A2:73
            X509v3 Authority Key Identifier:
                keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:98:e5:ed:dc:03:38:7d:2d:19:92:48:71:cb:f6:9a:4b:
         6d:df:fb:fb:68:3e:35:74:d1:b1:d3:da:be:28:25:ef:cc:2f:
         cb:4a:83:59:6a:2a:65:4d:ae:2d:3c:90:de:bf:e3:9d:a9:53:
         33:58:55:55:50:40:c2:7d:a0:23:ad:0a:06:ae:fa:b0:37:78:
         9d:b3:fa:4a:a8:49:d4:03:12:fc:cd:23:ce:72:b5:6a:7b:95:
         09:16:6e:dc:75:1e:c4:90:55:8e:31:e9:76:ad:27:1e:50:34:
         7e:fd:c9:92:22:de:68:9a:56:1a:21:ae:eb:c5:69:6e:ef:03:
         df:46:55:96:c8:ba:48:58:88:a6:78:bf:0d:33:75:6e:84:06:
         75:f0:58:49:6a:3c:22:cc:42:1a:b0:a9:fe:95:3a:97:1e:d5:
         11:5b:47:04:54:93:5a:69:bf:ae:c3:e1:10:a2:da:13:46:83:
         cc:c6:cb:21:af:6e:54:c9:7c:2f:c7:28:e7:b8:7e:51:07:62:
         ff:5b:5e:42:51:01:8c:d6:45:1c:03:4a:bc:8e:51:8b:72:48:
         47:13:fb:bd:b5:ea:23:0e:5c:f6:e8:bd:a7:36:52:0b:ae:5e:
         36:b3:b7:91:1c:f1:84:c4:b2:23:57:2f:30:cb:92:84:f4:9b:
         2d:2d:70:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1nDN3DNr3wVzC+c+GwZxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZjJkOGJhMWIxOTIxMWZhOWY5YzBkYjU1MTU0NTEzMzEw
MmNjYmIwHhcNMjUwNjE1MjIwMTAwWhcNMjUwNjE2MjIwMTAwWjAzMTEwLwYDVQQD
EyhhYzE1MzY2MDRlN2YyOTIxNTA0ZTViYzk5NzhjYWEzZjA3MzNhMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrOzrPfaDBkl3BOMol/OuAlacmol
IxDEl8ZxeE7kEwAMTCwazaTlVSNqWmY+mTGgewcV2BjqN+AWpBIjOR7xSd8NK9dq
L32sc2kGBCJlb6xa3+m8YsEVV71ikokcLJgkxjL3ZMyqZNNHiSJt6sRhPec6bZY4
eou5mhBtVpLudtzusY1Al3U89GalGRsYHa8QBAteOantyIuaZ20SB1lzzIjtK2Kb
6ZMqrKAF9D7azZ6OwHgbN0Bvb6ZMNg/H4z954VkqDrAynnKrzSp+pyPKKSA25urd
hR18LAQtr6ulHxADCovZOgaXze6/ZXTJOJBGJn1xQstSc7KvfvxsxXGMKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwVNmBOfykhUE5byZeMqj8HM6JzMB8GA1UdIwQY
MBaAFMTy2LobGSEfqfnA21UVRRMxAsy7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmIt
YzVlZWU1N2VkMmU2LzEveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmItYzVlZWU1N2VkMmU2
LzEveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaiY5e3c
Azh9LRmSSHHL9ppLbd/7+2g+NXTRsdPavigl78wvy0qDWWoqZU2uLTyQ3r/jnalT
M1hVVVBAwn2gI60KBq76sDd4nbP6SqhJ1AMS/M0jznK1anuVCRZu3HUexJBVjjHp
dq0nHlA0fv3JkiLeaJpWGiGu68Vpbu8D30ZVlsi6SFiIpni/DTN1boQGdfBYSWo8
IsxCGrCp/pU6lx7VEVtHBFSTWmm/rsPhEKLaE0aDzMbLIa9uVMl8L8co57h+UQdi
/1teQlEBjNZFHANKvI5Ri3JIRxP7vbXqIw5c9ui9pzZSC65eNrO3kRzxhMSyI1cv
MMuShPSbLS1wfA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:02:48 2025 by rpki-client