Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File:                     7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier:          +FHLsyzTuB51774Doq0EA1nsE4x8fPqaxPVjEOpC6Rg=
Subject key identifier:   5A:69:FA:A3:8F:9C:FA:C1:F4:BA:6E:6F:D0:79:87:79:DA:C6:9B:85
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer:       /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial:       019778D4D8B9C9907EC900F0B7234924101F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number:          152A
Signing time:             Mon 16 Jun 2025 13:01:44 +0000
Manifest this update:     Mon 16 Jun 2025 13:01:44 +0000
Manifest next update:     Tue 17 Jun 2025 13:01:44 +0000
Files and hashes:         1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: 7NhOrzvFCIZTqycYvAQNfCAx8ltAxRBekaZwT9Ed4SY=)
                          2: AKJNBvg_Wp6-g3QkU1hgfnYKS_I.roa (hash: 8/1gxZ5RhK3Xfc9FWx/YXavES1/BKptW13V8wouvEZc=)
                          3: NPvM3xVxkQ_LMP_9_lAVPXggEPY.roa (hash: WMRbhoyDgXHVdgSvk5Bk4s0agvzfv3IFLc0hFCDdwCk=)
                          4: R2R6Zwpm3C7mEGCf96myxK2TaP8.roa (hash: JHhhJ/hqneURZNBRt/i03bXTcRI7N5eSJkdKe9AFbQI=)
                          5: buWauLtfMC3GcFJJMi4SlwdwaoI.roa (hash: dGDi40pRAf4C2JEAwUiWsT7itHv7hqD0XOyXY8zr8H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d4:d8:b9:c9:90:7e:c9:00:f0:b7:23:49:24:10:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
        Validity
            Not Before: Jun 16 13:01:44 2025 GMT
            Not After : Jun 17 13:01:44 2025 GMT
        Subject: CN=5a69faa38f9cfac1f4ba6e6fd0798779dac69b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:cd:2c:40:95:e5:de:e1:e1:cf:e8:8f:b1:
                    94:73:f9:03:e4:63:6a:39:1a:32:6d:b0:8c:9b:74:
                    e7:50:5b:23:a6:76:b9:a4:03:c0:a3:bd:6e:0c:82:
                    66:ff:03:50:c1:00:cc:2c:10:67:71:cb:88:93:96:
                    19:e1:dc:d0:f6:e1:4c:69:76:6e:b1:00:61:b6:03:
                    90:3e:af:9d:c1:9b:ed:52:61:ab:78:9a:5f:bf:fa:
                    1f:2f:bd:40:52:ac:09:9d:1f:4a:e7:fd:da:e1:32:
                    d1:fd:69:bf:a1:29:a5:91:b8:fa:02:23:00:cd:9c:
                    0f:7a:7b:3b:3e:7b:52:25:55:93:64:57:7e:28:2f:
                    99:51:08:01:27:c3:1e:40:76:df:17:84:f1:8e:22:
                    fe:9b:ce:3d:77:fb:f9:4d:33:a5:a1:19:ca:2f:52:
                    3c:16:db:05:b6:81:05:e3:61:c9:d2:af:30:a0:02:
                    c6:63:51:68:bd:ac:cb:ec:42:8c:8d:12:40:26:82:
                    b4:97:bd:ec:f1:b1:b4:0d:65:c3:d8:fa:f3:8a:e5:
                    06:99:bc:f7:5a:cb:ad:bc:cb:90:76:5f:ab:ad:23:
                    71:ec:9f:e5:04:59:f1:81:1f:df:b8:12:b8:5d:f3:
                    34:50:57:6e:27:77:0e:07:50:ae:e9:56:1b:68:0a:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:FA:A3:8F:9C:FA:C1:F4:BA:6E:6F:D0:79:87:79:DA:C6:9B:85
            X509v3 Authority Key Identifier:
                keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:e5:c9:43:5e:c2:79:12:a5:e4:3c:03:34:86:51:ac:89:
         ab:c2:6f:2e:f8:22:12:55:bb:18:f0:26:e5:56:66:ff:40:e9:
         c3:08:2e:f3:98:b9:a2:9b:97:87:94:5c:1e:aa:95:76:76:6e:
         49:18:53:bc:a4:71:d7:81:8b:3f:49:57:a9:b4:3d:9b:33:ab:
         06:77:3f:8e:94:3c:db:a9:76:00:98:c5:9a:8b:11:b2:83:b1:
         66:05:ee:e8:51:c1:24:32:81:f2:99:5d:ba:af:9d:fd:36:29:
         b6:bb:2c:56:1b:57:84:b8:e4:b6:55:05:2b:5a:1b:14:0e:2f:
         33:7f:3e:59:24:a3:86:9c:8b:88:66:48:70:f2:dd:8b:76:d2:
         31:1b:6a:c1:7f:75:47:b5:2c:a9:81:93:d5:0e:e2:85:7e:39:
         05:af:27:82:33:2d:49:74:2e:47:ff:26:95:5e:9e:8b:17:86:
         15:77:26:20:78:5d:09:9a:76:7e:99:33:62:ce:7a:19:3d:5d:
         73:71:9d:33:90:92:30:7b:68:5a:50:3a:df:86:b7:b2:5b:4b:
         b8:5d:fd:24:e8:a2:35:60:1b:71:9f:d7:2f:2d:ad:d3:7c:d2:
         b6:4d:35:34:24:28:d9:15:ec:49:07:c4:94:22:40:ec:c7:88:
         06:a6:22:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd41Ni5yZB+yQDwtyNJJBAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNGMzZmMwMTIyZDgzMWZiZWE4YWJiMjBhNGU5YjY1YzU0
MDM5YjIwHhcNMjUwNjE2MTMwMTQ0WhcNMjUwNjE3MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg1YTY5ZmFhMzhmOWNmYWMxZjRiYTZlNmZkMDc5ODc3OWRhYzY5Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wzNLECV5d7h4c/oj7GUc/kD5GNq
ORoybbCMm3TnUFsjpna5pAPAo71uDIJm/wNQwQDMLBBnccuIk5YZ4dzQ9uFMaXZu
sQBhtgOQPq+dwZvtUmGreJpfv/ofL71AUqwJnR9K5/3a4TLR/Wm/oSmlkbj6AiMA
zZwPens7PntSJVWTZFd+KC+ZUQgBJ8MeQHbfF4TxjiL+m849d/v5TTOloRnKL1I8
FtsFtoEF42HJ0q8woALGY1FovazL7EKMjRJAJoK0l73s8bG0DWXD2PrziuUGmbz3
WsutvMuQdl+rrSNx7J/lBFnxgR/fuBK4XfM0UFduJ3cOB1Cu6VYbaAqdfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpp+qOPnPrB9Lpub9B5h3naxpuFMB8GA1UdIwQY
MBaAFO5MP8ASLYMfvqirsgpOm2XFQDmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjkt
M2FjN2Q5NjIzMjkxLzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjktM2FjN2Q5NjIzMjkx
LzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyjlyUNe
wnkSpeQ8AzSGUayJq8JvLvgiElW7GPAm5VZm/0Dpwwgu85i5opuXh5RcHqqVdnZu
SRhTvKRx14GLP0lXqbQ9mzOrBnc/jpQ826l2AJjFmosRsoOxZgXu6FHBJDKB8pld
uq+d/TYptrssVhtXhLjktlUFK1obFA4vM38+WSSjhpyLiGZIcPLdi3bSMRtqwX91
R7UsqYGT1Q7ihX45Ba8ngjMtSXQuR/8mlV6eixeGFXcmIHhdCZp2fpkzYs56GT1d
c3GdM5CSMHtoWlA634a3sltLuF39JOiiNWAbcZ/XLy2t03zStk01NCQo2RXsSQfE
lCJA7MeIBqYiRA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:32 2025 by rpki-client