Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File:                     uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier:          tTMI79pFyVZb8oatULYsp/PjkSEP4xiGOT9hTFp0ZW0=
Subject key identifier:   31:EF:7E:3F:B5:34:8C:94:C2:A3:22:CA:8F:4E:60:92:78:55:D8:61
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer:       /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial:       01976A3CA0071B6D47A2DEAAFD6BDFBC5F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 17:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 17:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 17:00:47 +0000
Files and hashes:         1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
                          2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: 5LTxPxXogzUigAjUCkSw30AX2rmCRx750kVH+m93qJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:a0:07:1b:6d:47:a2:de:aa:fd:6b:df:bc:5f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
        Validity
            Not Before: Jun 13 17:00:47 2025 GMT
            Not After : Jun 14 17:00:47 2025 GMT
        Subject: CN=31ef7e3fb5348c94c2a322ca8f4e60927855d861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:bd:73:fa:cc:c0:bf:e4:59:b4:ed:b9:9a:
                    75:9d:7f:a1:b0:eb:75:3e:f4:68:00:34:0b:cd:b0:
                    82:26:4c:8b:d3:d6:77:22:81:48:cc:ac:23:26:9c:
                    88:5a:45:61:ab:99:92:78:17:9b:c8:09:2b:2c:cf:
                    79:f6:dd:ee:f5:06:89:2e:8f:7f:c5:94:14:94:b9:
                    0c:e4:a2:cf:2a:aa:63:2d:65:5e:f5:ab:aa:0f:d8:
                    dd:27:ef:04:5f:7f:08:a0:b4:05:21:5d:41:4f:1b:
                    87:5c:5f:ae:2e:85:60:4d:95:12:87:e7:ff:7c:1b:
                    0b:d6:b9:e8:2d:f7:ca:c1:72:a1:9b:83:79:af:7d:
                    68:e1:1c:76:be:e8:34:ec:a7:3d:87:c2:4e:b8:0d:
                    05:37:66:7c:39:77:1f:56:33:27:78:09:4f:78:89:
                    57:8d:7f:85:f7:ea:af:80:61:c7:93:92:ee:e8:1e:
                    a9:26:bf:ac:84:5c:39:71:5a:35:06:ee:e8:19:92:
                    ac:31:4b:1f:b0:45:83:1b:04:8b:3d:bd:02:fd:d2:
                    fb:39:4e:f2:06:c2:50:43:49:2f:da:41:58:9b:3d:
                    81:f9:04:02:fa:77:88:4b:e4:e8:29:f2:50:be:0f:
                    20:29:c1:4d:7d:6b:62:1c:1f:c9:f6:f4:78:90:8d:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:7E:3F:B5:34:8C:94:C2:A3:22:CA:8F:4E:60:92:78:55:D8:61
            X509v3 Authority Key Identifier:
                keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:27:8e:b3:3d:6c:52:cf:bb:9a:a6:04:2d:83:7e:c9:3b:64:
         67:ba:0b:c2:d9:4c:4d:16:3b:cf:00:e1:8b:3e:6b:9b:78:d1:
         c4:51:9f:6a:9c:97:43:1d:f2:b5:d5:86:46:f4:14:3f:28:fd:
         7e:53:75:05:72:8b:06:a2:14:ca:b4:f8:0c:3f:41:66:2f:37:
         b6:e1:e9:4c:29:9e:08:f4:91:f1:ec:48:7e:e1:26:4f:36:1e:
         ff:1c:98:96:3f:a9:c3:d9:f9:57:c4:f2:18:41:46:56:c1:7c:
         b7:f6:8f:a9:6d:6e:03:8f:9d:fc:50:57:15:fa:0c:63:ed:b9:
         9f:1f:70:3a:38:90:42:9e:18:26:3a:16:22:8d:87:43:c4:91:
         98:77:2f:1b:22:b9:08:92:b5:19:f3:ac:bb:8e:9b:9a:00:dd:
         5a:25:2d:13:b9:96:cd:41:ad:81:75:bc:a1:d4:5b:93:60:e6:
         e3:03:d8:3d:63:0c:5b:21:8d:81:88:d2:d0:af:22:c2:e8:ed:
         06:4b:1d:5e:d6:3b:1e:9e:16:06:dd:de:61:a5:2c:b2:32:83:
         18:5e:fd:18:96:d4:8f:41:a3:98:cb:e9:bd:09:7b:a6:b3:72:
         b1:ad:78:4e:ee:f6:35:d2:43:20:0c:79:ac:d9:62:20:20:a3:
         4f:64:11:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqPKAHG21Hot6q/WvfvF96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2E3NDQwNWViZjdiMjUxY2NmYmJhN2MyYjIwZWMxNWY5
ZDhlNDgwHhcNMjUwNjEzMTcwMDQ3WhcNMjUwNjE0MTcwMDQ3WjAzMTEwLwYDVQQD
EygzMWVmN2UzZmI1MzQ4Yzk0YzJhMzIyY2E4ZjRlNjA5Mjc4NTVkODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOq9c/rMwL/kWbTtuZp1nX+hsOt1
PvRoADQLzbCCJkyL09Z3IoFIzKwjJpyIWkVhq5mSeBebyAkrLM959t3u9QaJLo9/
xZQUlLkM5KLPKqpjLWVe9auqD9jdJ+8EX38IoLQFIV1BTxuHXF+uLoVgTZUSh+f/
fBsL1rnoLffKwXKhm4N5r31o4Rx2vug07Kc9h8JOuA0FN2Z8OXcfVjMneAlPeIlX
jX+F9+qvgGHHk5Lu6B6pJr+shFw5cVo1Bu7oGZKsMUsfsEWDGwSLPb0C/dL7OU7y
BsJQQ0kv2kFYmz2B+QQC+neIS+ToKfJQvg8gKcFNfWtiHB/J9vR4kI3kvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHvfj+1NIyUwqMiyo9OYJJ4VdhhMB8GA1UdIwQY
MBaAFLk6dEBev3slHM+7p8KyDsFfnY5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQt
MGExMzRiNjUzNWM0LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQtMGExMzRiNjUzNWM0
LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCeOsz1s
Us+7mqYELYN+yTtkZ7oLwtlMTRY7zwDhiz5rm3jRxFGfapyXQx3ytdWGRvQUPyj9
flN1BXKLBqIUyrT4DD9BZi83tuHpTCmeCPSR8exIfuEmTzYe/xyYlj+pw9n5V8Ty
GEFGVsF8t/aPqW1uA4+d/FBXFfoMY+25nx9wOjiQQp4YJjoWIo2HQ8SRmHcvGyK5
CJK1GfOsu46bmgDdWiUtE7mWzUGtgXW8odRbk2Dm4wPYPWMMWyGNgYjS0K8iwujt
BksdXtY7Hp4WBt3eYaUssjKDGF79GJbUj0GjmMvpvQl7prNysa14Tu72NdJDIAx5
rNliICCjT2QRJg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:57:31 2025 by rpki-client