Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File:                     flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier:          +mZ7YpnOrVuys2+RKEMe/0iHWuMyQWZgd+2K9auvO0s=
Subject key identifier:   36:67:F1:F0:E1:71:4B:25:D1:AA:40:A6:67:92:32:8D:1E:DB:D0:2D
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer:       /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial:       01976A05AB03F33DA9C172EA14285D9B2336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 16:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:45 +0000
Files and hashes:         1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: XeHahz0A26UMwikEmJ2MiyfdoBXz5w6rJVs2kt/eIes=)
                          2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:ab:03:f3:3d:a9:c1:72:ea:14:28:5d:9b:23:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
        Validity
            Not Before: Jun 13 16:00:45 2025 GMT
            Not After : Jun 14 16:00:45 2025 GMT
        Subject: CN=3667f1f0e1714b25d1aa40a66792328d1edbd02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:d9:61:e7:6f:42:74:a5:ba:96:4b:c8:d5:
                    a2:bb:fb:0c:9e:1a:63:b7:01:39:97:ca:08:2f:d6:
                    02:a6:d9:c1:5d:32:b4:81:10:d8:65:a4:92:75:26:
                    c5:4e:86:b9:26:26:cb:6f:b3:b1:c0:57:5f:4a:cd:
                    a9:f0:97:99:6f:53:d0:e9:0f:85:e7:9f:89:09:27:
                    b1:c8:2e:7e:a1:d3:5a:fe:76:bf:ba:ab:65:57:25:
                    21:b3:7c:94:00:58:a7:86:30:c9:65:25:29:4c:11:
                    d2:57:14:58:51:67:58:63:84:2b:31:91:e0:f2:e3:
                    76:0b:ee:3d:72:ba:6e:56:21:8e:06:1f:43:60:ca:
                    77:72:eb:e6:24:9f:5b:4c:00:46:29:24:93:87:bd:
                    ea:73:ea:5d:56:46:a8:1c:85:42:4a:54:d8:15:93:
                    2a:5e:8b:c5:50:f6:d8:33:64:7c:2f:0d:ac:d6:86:
                    4b:fc:66:6a:11:41:b9:86:47:d5:8e:a3:71:44:89:
                    cf:1f:fe:ed:36:fa:d9:57:2e:65:51:4a:e5:a8:ce:
                    11:53:e5:b5:9d:ba:91:2f:9a:48:a2:3a:44:ac:f3:
                    37:a6:a7:84:ee:9a:82:ff:61:5e:43:7c:04:6d:5f:
                    8a:92:4b:3e:a5:60:93:ae:c8:ea:92:5b:8b:22:b1:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:F1:F0:E1:71:4B:25:D1:AA:40:A6:67:92:32:8D:1E:DB:D0:2D
            X509v3 Authority Key Identifier:
                keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:22:f8:d2:44:3f:39:59:fa:54:ba:60:63:e2:3a:23:33:c2:
         7c:ba:b5:8d:ae:47:22:42:3b:80:2e:7f:94:bd:47:49:cb:2b:
         9b:e2:a0:73:df:95:2c:85:4e:34:7b:21:78:e0:f0:b1:0c:8a:
         27:6e:6b:fa:d0:98:ba:6a:87:6b:e7:de:f6:59:22:78:db:6f:
         e0:4b:2f:7c:f8:1a:26:02:e1:09:31:ac:13:4e:af:52:27:87:
         2d:05:0b:12:24:9e:d9:76:4d:71:95:a1:0b:15:35:31:0d:c4:
         a0:9d:0d:c3:9a:a1:1e:6a:0a:ac:0c:22:6d:39:a6:fa:b2:51:
         8f:be:88:78:dc:2f:05:be:47:ff:02:60:49:d2:89:63:79:df:
         13:62:61:3d:89:57:0f:13:e3:ad:85:2f:11:b7:d4:57:09:77:
         76:47:ea:e0:df:47:54:87:a0:4a:2d:20:7d:46:6b:f8:0d:d3:
         9d:25:76:ef:06:3e:a2:60:5e:2e:6f:b0:97:e8:0f:af:76:16:
         e2:79:b9:b3:a9:08:49:e2:ee:56:47:84:aa:4c:90:2d:e1:c8:
         98:90:aa:43:ee:2b:96:bf:48:ad:fe:bf:a4:7d:41:de:32:a4:
         7c:75:fa:d1:ed:9a:aa:7a:d1:a6:60:ac:da:34:46:c7:fc:e8:
         d3:48:ec:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBasD8z2pwXLqFChdmyM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTJmYWI2ZDMyMDZlYjYwYTMxZGI5NmM3MmQ5NGZjMjQy
YzBhMDgwHhcNMjUwNjEzMTYwMDQ1WhcNMjUwNjE0MTYwMDQ1WjAzMTEwLwYDVQQD
EygzNjY3ZjFmMGUxNzE0YjI1ZDFhYTQwYTY2NzkyMzI4ZDFlZGJkMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGfZYedvQnSlupZLyNWiu/sMnhpj
twE5l8oIL9YCptnBXTK0gRDYZaSSdSbFToa5JibLb7OxwFdfSs2p8JeZb1PQ6Q+F
55+JCSexyC5+odNa/na/uqtlVyUhs3yUAFinhjDJZSUpTBHSVxRYUWdYY4QrMZHg
8uN2C+49crpuViGOBh9DYMp3cuvmJJ9bTABGKSSTh73qc+pdVkaoHIVCSlTYFZMq
XovFUPbYM2R8Lw2s1oZL/GZqEUG5hkfVjqNxRInPH/7tNvrZVy5lUUrlqM4RU+W1
nbqRL5pIojpErPM3pqeE7pqC/2FeQ3wEbV+Kkks+pWCTrsjqkluLIrHHUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZn8fDhcUsl0apApmeSMo0e29AtMB8GA1UdIwQY
MBaAFH5S+rbTIG62CjHblsctlPwkLAoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjIt
YTVjOTNhN2I5ZmE1LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjItYTVjOTNhN2I5ZmE1
LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyL40kQ/
OVn6VLpgY+I6IzPCfLq1ja5HIkI7gC5/lL1HScsrm+Kgc9+VLIVONHsheODwsQyK
J25r+tCYumqHa+fe9lkieNtv4EsvfPgaJgLhCTGsE06vUieHLQULEiSe2XZNcZWh
CxU1MQ3EoJ0Nw5qhHmoKrAwibTmm+rJRj76IeNwvBb5H/wJgSdKJY3nfE2JhPYlX
DxPjrYUvEbfUVwl3dkfq4N9HVIegSi0gfUZr+A3TnSV27wY+omBeLm+wl+gPr3YW
4nm5s6kISeLuVkeEqkyQLeHImJCqQ+4rlr9Irf6/pH1B3jKkfHX60e2aqnrRpmCs
2jRGx/zo00jsYQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:37 2025 by rpki-client