Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File:                     SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier:          XiF39jxvm0ol6r0urP8UMAjwIpin9m4OKwN78eH5np8=
Subject key identifier:   E5:F7:4B:EB:72:D4:AC:76:AE:6E:9B:F9:D8:7F:FA:AD:98:C3:BB:75
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       01976C2B53555E0CC131CC61CBAEFCB02833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 02:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:07 +0000
Files and hashes:         1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
                          2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: /eJuc/SnCUwXuQVWhxeNw3wD2Jru1MUCqk73UyuIn4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:53:55:5e:0c:c1:31:cc:61:cb:ae:fc:b0:28:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Jun 14 02:01:07 2025 GMT
            Not After : Jun 15 02:01:07 2025 GMT
        Subject: CN=e5f74beb72d4ac76ae6e9bf9d87ffaad98c3bb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:25:cc:1a:77:85:a9:06:4d:95:41:79:de:
                    63:10:1a:9f:81:c2:38:23:85:e5:d7:e6:1c:e4:a4:
                    9a:55:14:d4:f5:0a:08:d0:69:65:43:12:f4:eb:e1:
                    72:0f:ec:ff:b4:ea:70:13:cd:50:14:92:a3:e7:11:
                    fd:e8:47:bb:14:3a:70:f7:52:37:ab:81:7f:aa:72:
                    45:3a:bf:a7:01:dd:31:1a:6a:c9:bc:f6:e4:12:a6:
                    54:67:be:7e:fd:be:b9:d4:2f:aa:1d:56:6a:57:82:
                    af:57:d1:70:3f:0b:69:36:ae:95:84:3e:df:48:43:
                    17:94:b9:54:fe:17:db:a5:5e:b9:f9:b2:c9:fd:60:
                    68:20:d9:b7:1a:4e:a0:cf:8f:a3:76:49:2b:56:3f:
                    b6:fb:48:37:6d:7e:c4:5a:8f:68:f4:de:1a:0b:7a:
                    9b:a4:80:e8:6e:46:02:73:ed:47:99:ce:99:61:66:
                    e6:59:67:16:1c:14:ba:be:7e:de:84:fc:8b:9f:b0:
                    4f:d3:c1:ee:d0:16:ef:aa:79:bd:7d:83:7e:2e:b8:
                    24:73:d9:ef:d9:b2:10:69:52:d2:bb:96:33:db:c2:
                    c6:78:ea:6d:b0:af:4e:0d:11:f3:a4:0b:b1:8b:f7:
                    98:a9:1c:e6:cd:af:b8:a2:6e:48:35:b3:1b:07:9f:
                    11:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F7:4B:EB:72:D4:AC:76:AE:6E:9B:F9:D8:7F:FA:AD:98:C3:BB:75
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:99:80:cf:01:e8:fd:36:f4:f6:61:f8:aa:49:d7:03:74:1a:
         71:18:11:9c:32:78:c2:de:d5:90:88:13:75:54:e9:30:f6:55:
         02:bb:bc:90:0c:c2:09:49:19:76:50:45:98:db:48:98:ee:f7:
         b2:5a:33:3b:50:72:0c:be:8d:43:91:27:91:3f:dc:79:29:cb:
         90:e7:1c:05:b6:a7:6d:d0:bd:a5:1c:c3:4a:ee:41:d8:49:d0:
         7d:27:aa:5d:3f:ad:fc:5c:20:a9:12:bf:b6:20:b3:59:d9:7b:
         99:76:64:e4:b7:64:c1:d1:ba:8e:d6:59:5e:c6:01:7f:28:8b:
         cb:df:26:f6:da:60:79:b5:69:c4:2c:47:1f:40:e8:41:a5:88:
         3a:07:78:be:64:cb:1e:3f:d4:95:a7:2f:ca:96:e9:32:cc:bf:
         ec:88:50:7b:4b:bf:b6:39:c1:ee:48:f7:a8:e3:66:5d:c8:6f:
         81:31:6a:93:d5:1f:98:e6:23:6f:42:26:47:67:d8:03:d2:c3:
         3f:db:4b:e5:16:ad:6f:91:2d:6d:a5:c6:be:76:ba:96:23:af:
         08:86:91:1c:ec:f4:fa:d4:6d:d3:b9:6e:b1:11:30:8b:01:3c:
         bc:f3:72:ad:65:48:71:d6:2e:53:43:5e:d3:fa:c1:51:8c:b9:
         96:56:08:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK1NVXgzBMcxhy678sCgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDUyNmRiZjNkNTc4ZWQ4YjYzMGMwZTcxZGJkMThjZDU0
N2E1Y2QwHhcNMjUwNjE0MDIwMTA3WhcNMjUwNjE1MDIwMTA3WjAzMTEwLwYDVQQD
EyhlNWY3NGJlYjcyZDRhYzc2YWU2ZTliZjlkODdmZmFhZDk4YzNiYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nIlzBp3hakGTZVBed5jEBqfgcI4
I4Xl1+Yc5KSaVRTU9QoI0GllQxL06+FyD+z/tOpwE81QFJKj5xH96Ee7FDpw91I3
q4F/qnJFOr+nAd0xGmrJvPbkEqZUZ75+/b651C+qHVZqV4KvV9FwPwtpNq6VhD7f
SEMXlLlU/hfbpV65+bLJ/WBoINm3Gk6gz4+jdkkrVj+2+0g3bX7EWo9o9N4aC3qb
pIDobkYCc+1Hmc6ZYWbmWWcWHBS6vn7ehPyLn7BP08Hu0Bbvqnm9fYN+Lrgkc9nv
2bIQaVLSu5Yz28LGeOptsK9ODRHzpAuxi/eYqRzmza+4om5INbMbB58RgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOX3S+ty1Kx2rm6b+dh/+q2Yw7t1MB8GA1UdIwQY
MBaAFEgFJtvz1Xjti2MMDnHb0YzVR6XNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUt
ODAxMGYxM2JhMTVhLzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUtODAxMGYxM2JhMTVh
LzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApmAzwHo
/Tb09mH4qknXA3QacRgRnDJ4wt7VkIgTdVTpMPZVAru8kAzCCUkZdlBFmNtImO73
slozO1ByDL6NQ5EnkT/ceSnLkOccBbanbdC9pRzDSu5B2EnQfSeqXT+t/FwgqRK/
tiCzWdl7mXZk5LdkwdG6jtZZXsYBfyiLy98m9tpgebVpxCxHH0DoQaWIOgd4vmTL
Hj/UlacvypbpMsy/7IhQe0u/tjnB7kj3qONmXchvgTFqk9UfmOYjb0ImR2fYA9LD
P9tL5Ratb5EtbaXGvna6liOvCIaRHOz0+tRt07lusREwiwE8vPNyrWVIcdYuU0Ne
0/rBUYy5llYINQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:43 2025 by rpki-client