Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          fieq1jvYKrnIOHzMIpSMzg/sx5YMo2BRprEL0j3SKGs=
Subject key identifier:   D1:53:73:DB:63:BD:4E:99:29:75:6E:DA:D7:F5:85:14:0F:03:B1:37
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       0197703EAB0F0A4DA8C90D9814D3C7FD3D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 21:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:44 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: 2aG1jZxjDbB3G1aQwFFgvP2+lmFg4RP1gmQFvTwcCtw=)
                          2: 1-ZNTPcQUw8PaedWPij0FjBg6iOY.roa (hash: hVPLICluHooRq9Tlz1cpYKX47tdy3LL3+Q3QLkvNJ5E=)
                          3: 2Gw8QOnYAv2wXYmUeczArrriB1Q.roa (hash: scuEsz0Czk4jUI1o0fHWA1GaytybLeSIsLRXLL6rVAo=)
                          4: fXqeDNUF09E57BXRF0QIls-uZ44.roa (hash: hJ/0oVyr/hUhxK31bOGJWQ8EL165OcYQ6RwEzy2jKI8=)
                          5: uGd2svx2nM-ThRz4Z5ZLS4pryPE.roa (hash: miR6GHPuEFoodfHk/rc71EoG5Q+xZw/Ncoa5ppurE4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:ab:0f:0a:4d:a8:c9:0d:98:14:d3:c7:fd:3d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Jun 14 21:00:44 2025 GMT
            Not After : Jun 15 21:00:44 2025 GMT
        Subject: CN=d15373db63bd4e9929756edad7f585140f03b137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:01:d8:29:15:40:a3:3a:5c:1e:58:ee:b0:
                    29:3f:5f:2b:b5:2a:14:72:24:1e:d2:cd:ab:b0:fd:
                    a7:bf:37:c2:b0:b3:c7:b4:41:b4:89:a5:4e:f5:6f:
                    19:16:33:85:32:57:f6:62:ac:31:21:f6:a7:7b:0a:
                    a1:cb:81:e6:c2:10:fc:80:2e:6f:0e:ba:d5:f9:87:
                    b3:98:84:65:ba:fc:28:19:35:73:02:2e:90:b1:f1:
                    2d:55:eb:d5:d0:18:98:33:e3:a8:b5:db:fa:69:6d:
                    ab:1a:bc:5c:6c:ac:80:b9:af:99:f8:94:72:fa:5b:
                    cf:39:59:7e:72:76:b4:24:25:3b:dd:27:fa:2c:be:
                    d9:9e:98:c4:a7:08:ac:01:56:f3:ce:c8:ca:e0:30:
                    e7:95:cd:d8:07:8f:41:7c:e4:61:de:26:0c:1f:6f:
                    e0:d7:df:4e:24:4d:03:04:08:76:a8:6c:d9:70:a1:
                    d7:0b:6a:10:69:3a:5d:f2:d2:ad:ec:22:79:d9:e7:
                    6b:b6:4f:d6:1b:5b:74:87:61:5c:f0:b1:22:91:95:
                    20:4a:90:23:c6:35:15:22:1e:af:a0:16:de:57:15:
                    c3:f2:f7:7d:fa:61:b6:a2:80:28:9c:c5:95:5a:5c:
                    ca:07:cd:f4:04:9b:80:84:9b:56:ba:1b:f4:33:f6:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:73:DB:63:BD:4E:99:29:75:6E:DA:D7:F5:85:14:0F:03:B1:37
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:1a:90:eb:4a:9a:4e:9c:2a:58:3b:78:7c:8e:44:b3:0a:
         f3:c2:30:71:fa:46:c8:1e:24:30:f2:c4:bb:88:3f:4d:d9:cb:
         79:d5:d4:0f:77:1b:41:a1:38:34:e5:2e:9a:90:ee:00:c4:4e:
         99:5d:d8:5f:40:ac:e7:34:f2:f1:9c:9c:00:10:65:87:a8:db:
         60:7e:3e:d5:a4:15:63:de:62:ba:d2:90:92:ab:63:8a:b4:3b:
         6b:56:86:43:5c:4e:42:8c:7f:f8:d7:28:19:5d:40:80:80:06:
         53:13:f0:12:71:3a:27:c9:7c:c9:00:36:a6:86:05:22:02:14:
         eb:6d:67:91:5f:03:64:2f:30:e8:8c:fc:e5:ee:33:58:fa:0d:
         54:45:b6:c7:b0:68:61:c2:4c:1a:07:5f:cf:27:27:1d:56:f8:
         21:04:2e:b4:8b:64:3c:27:07:ec:c8:79:78:58:54:da:fa:1c:
         c4:7c:13:4c:46:d8:59:b1:0e:83:d9:0d:28:b8:05:07:57:1e:
         ea:68:85:65:cc:30:20:ce:02:51:f6:6d:65:80:8a:c2:49:ec:
         3c:f6:47:53:72:af:00:e5:ec:a2:4f:78:3c:1c:eb:ee:ce:fa:
         fe:2f:38:f7:6c:8b:96:ae:55:36:e8:4a:41:db:ef:96:fe:c1:
         7d:c3:f1:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPqsPCk2oyQ2YFNPH/T14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzA0NmQxNmNmYzM5MWIwMjhiODg3NDM3NzNjZTAwNWNm
OTdiMWQwHhcNMjUwNjE0MjEwMDQ0WhcNMjUwNjE1MjEwMDQ0WjAzMTEwLwYDVQQD
EyhkMTUzNzNkYjYzYmQ0ZTk5Mjk3NTZlZGFkN2Y1ODUxNDBmMDNiMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1oB2CkVQKM6XB5Y7rApP18rtSoU
ciQe0s2rsP2nvzfCsLPHtEG0iaVO9W8ZFjOFMlf2YqwxIfanewqhy4HmwhD8gC5v
DrrV+YezmIRluvwoGTVzAi6QsfEtVevV0BiYM+Ootdv6aW2rGrxcbKyAua+Z+JRy
+lvPOVl+cna0JCU73Sf6LL7ZnpjEpwisAVbzzsjK4DDnlc3YB49BfORh3iYMH2/g
199OJE0DBAh2qGzZcKHXC2oQaTpd8tKt7CJ52edrtk/WG1t0h2Fc8LEikZUgSpAj
xjUVIh6voBbeVxXD8vd9+mG2ooAonMWVWlzKB830BJuAhJtWuhv0M/YiCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFTc9tjvU6ZKXVu2tf1hRQPA7E3MB8GA1UdIwQY
MBaAFNAwRtFs/DkbAouIdDdzzgBc+XsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYt
ZGMwZTFhNzI1MjIxLzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYtZGMwZTFhNzI1MjIx
LzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0oakOtK
mk6cKlg7eHyORLMK88IwcfpGyB4kMPLEu4g/TdnLedXUD3cbQaE4NOUumpDuAMRO
mV3YX0Cs5zTy8ZycABBlh6jbYH4+1aQVY95iutKQkqtjirQ7a1aGQ1xOQox/+Nco
GV1AgIAGUxPwEnE6J8l8yQA2poYFIgIU621nkV8DZC8w6Iz85e4zWPoNVEW2x7Bo
YcJMGgdfzycnHVb4IQQutItkPCcH7Mh5eFhU2vocxHwTTEbYWbEOg9kNKLgFB1ce
6miFZcwwIM4CUfZtZYCKwknsPPZHU3KvAOXsok94PBzr7s76/i8492yLlq5VNuhK
Qdvvlv7BfcPxQA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:20:34 2025 by rpki-client