Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File:                     weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier:          nEEar7oecGwcy5VASClcBln4n0rcvawTWAYwr2NvgpI=
Subject key identifier:   39:DE:3D:84:C5:7A:8F:70:EF:45:4A:13:C9:CC:CB:00:7C:23:FA:E8
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer:       /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial:       019769CF37C3C426C4968049CD0D9FA058DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 15:01:17 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:17 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:17 +0000
Files and hashes:         1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
                          2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: mzbCEYCuYvxu/z95YwTyuIBBV6ZTl4jKFqfSie6rn4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:37:c3:c4:26:c4:96:80:49:cd:0d:9f:a0:58:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
        Validity
            Not Before: Jun 13 15:01:17 2025 GMT
            Not After : Jun 14 15:01:17 2025 GMT
        Subject: CN=39de3d84c57a8f70ef454a13c9cccb007c23fae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:34:52:66:3b:27:3e:f6:56:c8:d2:50:a8:
                    32:81:f8:80:6b:0f:d0:77:d4:ec:b9:1b:f3:85:13:
                    7d:3f:b7:65:98:75:71:60:51:71:5f:fb:5c:4c:33:
                    17:aa:4a:e8:93:29:6a:32:e7:d3:f8:93:9b:1d:22:
                    9e:d1:de:30:71:6c:d2:c5:da:8c:3e:1d:cf:21:c8:
                    f9:65:25:c2:f1:9a:f2:69:83:a2:63:ad:0e:5d:46:
                    b6:af:d6:d8:55:08:8a:f1:98:b2:02:0c:7d:0e:bb:
                    d6:d0:6c:42:c1:4c:07:72:db:a1:f2:25:42:89:0a:
                    5b:2c:4c:88:6e:aa:c9:92:db:e9:97:7d:d4:e4:71:
                    21:af:8d:a6:39:52:e0:74:13:96:e3:63:70:d5:64:
                    f0:78:16:70:82:b9:6e:d0:17:4e:b5:ec:0c:62:02:
                    8a:60:59:59:64:7d:26:18:f4:8f:ea:b1:ac:ce:f1:
                    38:a9:5f:f6:a1:19:2a:e6:5e:0d:4a:5c:c3:c6:74:
                    da:8a:b9:02:bc:e1:53:e0:b0:62:be:cc:b2:33:40:
                    33:6b:68:06:e7:3c:de:b1:fd:da:26:0a:22:5d:5e:
                    c6:04:5b:5e:43:58:6e:ae:ab:cf:7f:97:52:11:9e:
                    d7:1e:2e:bd:4d:a2:d1:c2:ce:c4:05:7f:c7:c6:45:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DE:3D:84:C5:7A:8F:70:EF:45:4A:13:C9:CC:CB:00:7C:23:FA:E8
            X509v3 Authority Key Identifier:
                keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:04:de:e5:09:32:29:f7:02:a7:72:02:6c:0f:63:3f:0c:99:
         6c:fd:5a:ac:76:18:d2:ff:b1:ed:e3:7b:a1:08:fb:7a:20:47:
         df:d3:96:b2:81:7c:51:7a:05:91:08:e7:c5:4f:9e:46:03:f8:
         81:a0:9b:70:21:16:5a:cf:e4:10:95:4e:54:2c:87:a9:b0:fd:
         54:64:b3:97:1f:c9:2f:78:5f:3b:f7:46:0c:84:3a:c6:dc:b3:
         59:23:0e:e1:24:e1:c8:8c:b1:5d:e0:c9:c8:98:16:55:c8:0d:
         62:e5:f2:ab:f5:42:93:8d:05:b8:a3:a6:c2:41:49:9f:83:66:
         f8:9c:e1:07:56:ed:d9:e8:0d:5a:ca:bd:af:fe:7e:b0:1f:44:
         9e:a9:ee:1a:e6:5e:1e:0c:a0:bb:22:54:52:d2:29:e6:e7:36:
         f2:81:d2:23:69:c1:34:06:5b:03:23:69:a7:0f:66:f0:48:3f:
         f4:2f:1b:eb:d6:22:e4:2a:05:cc:03:2d:c0:d9:0f:d0:df:fd:
         29:eb:f6:d8:42:ba:86:1e:05:93:6f:14:a8:83:f1:22:53:07:
         5c:fe:fd:94:64:82:85:58:f9:87:71:72:dc:43:01:e2:ed:cd:
         db:51:14:cb:30:3f:dc:f6:29:c8:d7:8b:24:15:ae:29:20:12:
         98:e3:48:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzzfDxCbEloBJzQ2foFjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZTI0NjRkZDZkMDQyMzA5NTE1ZjdlNWI2NGVhNjVjMDg5
YjQ2MTYwHhcNMjUwNjEzMTUwMTE3WhcNMjUwNjE0MTUwMTE3WjAzMTEwLwYDVQQD
EygzOWRlM2Q4NGM1N2E4ZjcwZWY0NTRhMTNjOWNjY2IwMDdjMjNmYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Bo0UmY7Jz72VsjSUKgygfiAaw/Q
d9TsuRvzhRN9P7dlmHVxYFFxX/tcTDMXqkrokylqMufT+JObHSKe0d4wcWzSxdqM
Ph3PIcj5ZSXC8ZryaYOiY60OXUa2r9bYVQiK8ZiyAgx9DrvW0GxCwUwHctuh8iVC
iQpbLEyIbqrJktvpl33U5HEhr42mOVLgdBOW42Nw1WTweBZwgrlu0BdOtewMYgKK
YFlZZH0mGPSP6rGszvE4qV/2oRkq5l4NSlzDxnTairkCvOFT4LBivsyyM0Aza2gG
5zzesf3aJgoiXV7GBFteQ1hurqvPf5dSEZ7XHi69TaLRws7EBX/HxkX0awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnePYTFeo9w70VKE8nMywB8I/roMB8GA1UdIwQY
MBaAFMHiRk3W0EIwlRX35bZOplwIm0YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNTZmYWItZGU5Ny00Njc5LWE0NjUt
Yjk2ZDY3MTRhMTc0LzEvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNTZmYWItZGU5Ny00Njc5LWE0NjUtYjk2ZDY3MTRhMTc0
LzEvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIATe5Qky
KfcCp3ICbA9jPwyZbP1arHYY0v+x7eN7oQj7eiBH39OWsoF8UXoFkQjnxU+eRgP4
gaCbcCEWWs/kEJVOVCyHqbD9VGSzlx/JL3hfO/dGDIQ6xtyzWSMO4SThyIyxXeDJ
yJgWVcgNYuXyq/VCk40FuKOmwkFJn4Nm+JzhB1bt2egNWsq9r/5+sB9EnqnuGuZe
HgyguyJUUtIp5uc28oHSI2nBNAZbAyNppw9m8Eg/9C8b69Yi5CoFzAMtwNkP0N/9
Kev22EK6hh4Fk28UqIPxIlMHXP79lGSChVj5h3Fy3EMB4u3N21EUyzA/3PYpyNeL
JBWuKSASmONIug==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:12 2025 by rpki-client