Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File:                     rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier:          Gt527cu+Qn16Ff8nDg86HjdUgq3KyGR2+/mfjkfhQIo=
Subject key identifier:   02:F0:85:EC:3E:A1:F3:34:B1:81:C0:94:93:4A:88:5F:8E:0D:D4:7C
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer:       /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial:       01976C61FFC1165E255ADA82D3AE8FFA46E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 03:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:51 +0000
Files and hashes:         1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
                          2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: L1/AQFyuz9xnBRw1B0TmTrUhePjiEg6QbMlnMTw1hJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:ff:c1:16:5e:25:5a:da:82:d3:ae:8f:fa:46:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
        Validity
            Not Before: Jun 14 03:00:51 2025 GMT
            Not After : Jun 15 03:00:51 2025 GMT
        Subject: CN=02f085ec3ea1f334b181c094934a885f8e0dd47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:50:30:5a:a5:1f:7a:1a:e3:55:8a:a6:b8:
                    08:c5:4e:8a:2c:ce:69:0c:ec:18:ce:ca:ea:ee:ed:
                    97:e7:38:73:b7:a5:59:a5:be:1f:a5:03:9d:34:e5:
                    5b:72:34:8f:15:ea:f3:92:f1:1e:21:64:a7:d1:24:
                    cc:6b:a9:a2:70:60:83:46:11:06:6f:76:16:35:d0:
                    5d:10:61:4c:5b:40:fe:80:eb:63:40:34:45:bf:cf:
                    e4:53:49:63:21:f7:63:e6:56:cf:f7:04:0b:0c:dd:
                    5e:4e:fc:ed:77:9e:91:d6:f5:4a:1c:88:f8:f7:4a:
                    c4:bc:4b:62:60:10:79:4b:06:60:95:a6:b0:10:08:
                    4c:94:fa:2e:bd:a1:dc:28:cd:b8:f1:42:07:00:33:
                    09:cf:e9:dd:2b:85:b3:76:a6:9b:be:f5:18:46:0d:
                    fd:88:93:6d:59:b2:ab:6d:89:c8:d3:0a:c7:9e:69:
                    86:a5:a3:88:f7:df:36:58:79:d6:92:44:73:d4:63:
                    e6:0f:de:61:b8:d2:5b:43:5f:b9:9f:78:bd:43:8d:
                    f1:6f:86:9f:c2:61:36:15:a5:04:ff:c9:6d:e5:a6:
                    06:c2:1b:66:f5:fb:21:99:e5:65:ac:49:e6:02:c1:
                    05:5c:40:6a:b5:57:7b:5a:37:1f:ca:24:97:e6:87:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:85:EC:3E:A1:F3:34:B1:81:C0:94:93:4A:88:5F:8E:0D:D4:7C
            X509v3 Authority Key Identifier:
                keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:c7:c5:00:fc:f4:e2:0d:7d:63:89:10:8d:08:a6:31:a3:
         0f:41:92:f8:d2:f9:b0:c4:14:6e:e8:37:4d:68:76:29:a6:e5:
         e2:28:6c:c2:b2:5c:c4:00:44:f8:da:a1:75:5f:a0:33:9b:38:
         2c:d1:5d:f5:6e:f6:32:fb:eb:00:80:07:32:7c:af:ff:ef:b8:
         2b:b1:73:46:77:8f:98:46:62:96:b7:9a:e4:c9:10:14:ea:80:
         c6:27:70:2c:99:62:03:4c:7c:b5:fd:0a:d9:d0:fa:78:85:f5:
         48:c2:05:c5:38:a1:f4:a6:90:9e:ef:c9:0d:e3:a6:59:3e:e1:
         3f:ef:04:59:31:f5:50:e5:4f:10:23:c0:f5:38:b0:fe:d1:90:
         56:71:95:51:ff:f1:8c:7d:86:8e:ad:63:1d:40:ce:e5:b3:da:
         ab:a7:24:5a:31:70:d2:0b:9c:b4:27:71:15:30:d8:93:46:0c:
         ba:37:11:b9:92:97:76:ef:05:7e:36:75:aa:d3:64:66:f2:77:
         34:e2:01:81:a5:3e:85:ae:80:d6:e4:b3:f8:1c:0d:2d:b1:c5:
         55:65:cf:5e:9e:be:1f:07:63:be:2c:58:25:53:09:cb:00:6d:
         f9:a0:d7:2b:75:d1:25:aa:71:62:44:e9:63:1f:55:8c:16:ca:
         25:e9:2d:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYf/BFl4lWtqC066P+kbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMzkyZjI4ZGVjNmI4Y2NlYjdjZDcwZTdhZjcxZDhjZGNh
YTlhMDYwHhcNMjUwNjE0MDMwMDUxWhcNMjUwNjE1MDMwMDUxWjAzMTEwLwYDVQQD
EygwMmYwODVlYzNlYTFmMzM0YjE4MWMwOTQ5MzRhODg1ZjhlMGRkNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXRQMFqlH3oa41WKprgIxU6KLM5p
DOwYzsrq7u2X5zhzt6VZpb4fpQOdNOVbcjSPFerzkvEeIWSn0STMa6micGCDRhEG
b3YWNdBdEGFMW0D+gOtjQDRFv8/kU0ljIfdj5lbP9wQLDN1eTvztd56R1vVKHIj4
90rEvEtiYBB5SwZglaawEAhMlPouvaHcKM248UIHADMJz+ndK4WzdqabvvUYRg39
iJNtWbKrbYnI0wrHnmmGpaOI9982WHnWkkRz1GPmD95huNJbQ1+5n3i9Q43xb4af
wmE2FaUE/8lt5aYGwhtm9fshmeVlrEnmAsEFXEBqtVd7WjcfyiSX5oeKqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALwhew+ofM0sYHAlJNKiF+ODdR8MB8GA1UdIwQY
MBaAFK85LyjexrjM63zXDnr3HYzcqpoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2Yt
YWI5ZWFkYjFkNzk3LzEvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2YtYWI5ZWFkYjFkNzk3
LzEvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjbHxQD8
9OINfWOJEI0IpjGjD0GS+NL5sMQUbug3TWh2Kabl4ihswrJcxABE+NqhdV+gM5s4
LNFd9W72MvvrAIAHMnyv/++4K7FzRnePmEZilrea5MkQFOqAxidwLJliA0x8tf0K
2dD6eIX1SMIFxTih9KaQnu/JDeOmWT7hP+8EWTH1UOVPECPA9Tiw/tGQVnGVUf/x
jH2Gjq1jHUDO5bPaq6ckWjFw0guctCdxFTDYk0YMujcRuZKXdu8FfjZ1qtNkZvJ3
NOIBgaU+ha6A1uSz+BwNLbHFVWXPXp6+HwdjvixYJVMJywBt+aDXK3XRJapxYkTp
Yx9VjBbKJektAw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:42 2025 by rpki-client