Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File:                     4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier:          lqykTiX89Ioi6rYeqkx/TVh3pCIb/dqWrUkYRu9nvqM=
Subject key identifier:   81:B3:24:5C:97:3E:73:54:1D:55:1E:CA:CF:5C:C2:5D:49:D6:35:1C
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       01976F632F11EB12AEBF9F7E975AACDF96FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 17:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 17:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 17:01:00 +0000
Files and hashes:         1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
                          2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: mBhDtU3ht77TrBBMy1fygGVN+fNZdMvqM50TBrNcnz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:2f:11:eb:12:ae:bf:9f:7e:97:5a:ac:df:96:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: Jun 14 17:01:00 2025 GMT
            Not After : Jun 15 17:01:00 2025 GMT
        Subject: CN=81b3245c973e73541d551ecacf5cc25d49d6351c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:3e:a5:43:a7:73:95:11:ca:92:4a:2b:ed:
                    e9:03:63:04:a0:bc:f5:f5:e2:86:c1:6b:74:b6:71:
                    94:3f:9f:32:dd:79:be:85:5b:12:0b:8c:fd:3c:b7:
                    9f:ec:5b:c6:87:9f:9a:1e:d5:73:b8:4c:29:bd:f6:
                    11:ce:b2:45:8a:df:7c:5a:2e:17:a3:aa:7f:30:09:
                    41:3f:9c:88:fe:34:37:44:bf:24:a3:45:84:e7:58:
                    8a:e0:ed:23:4a:cd:d4:55:b0:31:1a:15:58:60:ae:
                    99:7b:a6:29:e0:b8:36:6a:fc:40:0b:f6:b6:2e:fb:
                    d3:2f:0c:12:46:34:4f:5d:ae:a8:69:0d:89:84:07:
                    41:62:7f:3b:e4:e4:e8:7e:6f:cb:ca:46:99:c2:d8:
                    09:e5:e8:39:35:0f:67:b7:b8:1e:70:d9:fe:4c:a3:
                    be:6f:44:b4:1f:9e:1b:26:7e:97:cd:bb:2d:20:c6:
                    78:2f:de:8d:cc:87:d1:3d:31:9b:e4:a7:54:eb:71:
                    67:15:99:8e:c5:92:6b:e6:b3:94:5e:81:59:d5:2d:
                    aa:09:7d:c5:fd:4c:de:94:fc:c1:41:44:da:a9:bf:
                    30:54:f8:59:12:56:02:e4:8d:4f:6b:ef:cc:1f:64:
                    2c:36:fa:69:d6:8f:48:e8:bf:8c:58:63:e0:35:24:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B3:24:5C:97:3E:73:54:1D:55:1E:CA:CF:5C:C2:5D:49:D6:35:1C
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:82:3b:2f:b3:7e:6e:2a:14:99:0f:44:d6:04:27:99:33:
         74:f4:73:a8:6c:23:b2:d7:26:80:c5:ff:ad:7c:22:b1:11:b6:
         42:f5:53:4f:92:06:bf:70:a9:59:2d:7d:07:8f:89:0c:ea:48:
         e0:1b:ce:8e:db:d5:ae:1c:2e:f6:d8:65:9e:2f:43:26:3c:24:
         0e:e6:b9:5e:4f:92:9b:73:f7:11:47:13:79:89:b6:b6:ce:5b:
         10:11:78:72:65:1b:0a:eb:f6:f3:08:68:8a:11:ef:ca:ac:32:
         2d:42:b4:dc:32:ec:09:55:fd:62:22:83:dc:0c:4b:97:37:7c:
         9a:39:0d:4a:b0:0d:e2:7f:79:c8:a6:11:fd:96:b7:07:ba:4d:
         b4:a3:72:20:df:8e:a1:52:b4:1b:a2:c8:f6:33:8b:73:34:2a:
         52:7e:65:f7:4f:fa:7c:0f:61:03:2b:20:88:6e:25:91:e7:52:
         5d:f6:8a:0d:0f:df:39:59:f3:5a:0c:f1:d1:dc:3c:d9:d3:67:
         ca:41:d3:6a:f0:39:06:31:e9:1a:27:b0:7a:d4:34:cc:0c:8f:
         56:9b:50:0d:c9:5d:ec:af:09:ce:df:8f:d5:c3:9a:1c:31:2c:
         c3:c8:76:93:39:62:23:f8:92:b4:27:f1:43:42:68:9a:81:08:
         37:70:04:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYy8R6xKuv59+l1qs35b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1
NWZiNDMwHhcNMjUwNjE0MTcwMTAwWhcNMjUwNjE1MTcwMTAwWjAzMTEwLwYDVQQD
Eyg4MWIzMjQ1Yzk3M2U3MzU0MWQ1NTFlY2FjZjVjYzI1ZDQ5ZDYzNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ0+pUOnc5URypJKK+3pA2MEoLz1
9eKGwWt0tnGUP58y3Xm+hVsSC4z9PLef7FvGh5+aHtVzuEwpvfYRzrJFit98Wi4X
o6p/MAlBP5yI/jQ3RL8ko0WE51iK4O0jSs3UVbAxGhVYYK6Ze6Yp4Lg2avxAC/a2
LvvTLwwSRjRPXa6oaQ2JhAdBYn875OTofm/LykaZwtgJ5eg5NQ9nt7gecNn+TKO+
b0S0H54bJn6XzbstIMZ4L96NzIfRPTGb5KdU63FnFZmOxZJr5rOUXoFZ1S2qCX3F
/UzelPzBQUTaqb8wVPhZElYC5I1Pa+/MH2QsNvpp1o9I6L+MWGPgNSQn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGzJFyXPnNUHVUeys9cwl1J1jUcMB8GA1UdIwQY
MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt
Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi
LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMiCOy+z
fm4qFJkPRNYEJ5kzdPRzqGwjstcmgMX/rXwisRG2QvVTT5IGv3CpWS19B4+JDOpI
4BvOjtvVrhwu9thlni9DJjwkDua5Xk+Sm3P3EUcTeYm2ts5bEBF4cmUbCuv28who
ihHvyqwyLUK03DLsCVX9YiKD3AxLlzd8mjkNSrAN4n95yKYR/Za3B7pNtKNyIN+O
oVK0G6LI9jOLczQqUn5l90/6fA9hAysgiG4lkedSXfaKDQ/fOVnzWgzx0dw82dNn
ykHTavA5BjHpGiewetQ0zAyPVptQDcld7K8Jzt+P1cOaHDEsw8h2kzliI/iStCfx
Q0JomoEIN3AEHw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:44:28 2025 by rpki-client