Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File:                     4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier:          gUxfdbkQfTsHUj1JlTBxDhrRg1rWSEVBZlXKyFNjiOc=
Subject key identifier:   8B:D1:79:38:63:D0:5A:A9:1A:57:2D:4B:2F:CA:C2:91:F0:5B:8F:6B
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer:       /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial:       0197808D29C974A9A5EAE6D2369D82CD99F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number:          159B
Signing time:             Wed 18 Jun 2025 01:00:24 +0000
Manifest this update:     Wed 18 Jun 2025 01:00:24 +0000
Manifest next update:     Thu 19 Jun 2025 01:00:24 +0000
Files and hashes:         1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: g4awh1Veh343iFIOBlxQf0bs42ku7YhUHGYgE9HGXUM=)
                          2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:8d:29:c9:74:a9:a5:ea:e6:d2:36:9d:82:cd:99:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
        Validity
            Not Before: Jun 18 01:00:24 2025 GMT
            Not After : Jun 19 01:00:24 2025 GMT
        Subject: CN=8bd1793863d05aa91a572d4b2fcac291f05b8f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:ea:ff:5a:fb:1c:7a:32:79:02:96:e9:30:
                    49:0e:c2:8a:6d:ee:33:61:61:72:ed:26:61:a4:56:
                    59:79:61:aa:1d:df:4c:27:56:f3:4c:d9:cc:67:8a:
                    e6:5e:e2:d0:c7:2f:fc:13:f6:dc:78:f3:39:d0:63:
                    6c:46:f5:84:4a:3e:9d:b2:00:20:de:03:1d:77:f7:
                    f2:ff:29:a3:f6:e3:62:64:57:7e:9e:cc:bd:7a:e2:
                    5b:7c:44:5f:00:63:ac:2d:e4:d4:b3:57:e7:32:e6:
                    8d:5a:d4:2b:64:1e:2c:e4:1a:8e:10:d8:be:24:1d:
                    4d:fb:cc:a3:55:aa:e6:14:8a:72:9c:87:1f:80:82:
                    5f:2b:46:5d:e8:ec:70:86:e3:91:bc:14:d7:4b:c3:
                    92:1d:4d:00:a6:b2:e4:2c:39:75:56:65:01:3a:db:
                    b5:a6:f7:a2:ba:b6:f2:08:fc:ce:de:ff:47:b8:5a:
                    3a:df:e6:4d:93:1b:5a:8c:b8:a3:4b:a8:1a:cb:12:
                    25:9d:c5:0a:18:59:12:3a:59:5e:07:19:0e:24:57:
                    90:28:17:50:8d:99:38:17:9a:1e:74:30:0b:b0:5f:
                    0b:92:54:78:54:0b:53:6c:2f:87:3e:52:dc:d5:4e:
                    c5:ff:b6:57:76:af:c6:12:5f:c2:54:8e:4b:29:1c:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:79:38:63:D0:5A:A9:1A:57:2D:4B:2F:CA:C2:91:F0:5B:8F:6B
            X509v3 Authority Key Identifier:
                keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:64:5b:3a:fc:4a:24:7e:c0:d6:b2:a8:e5:fb:ce:54:d2:88:
         56:00:97:3c:61:e5:5d:79:8b:b7:6a:12:6b:f4:6f:34:71:88:
         94:24:5f:e9:0c:91:22:84:ac:30:ab:23:2a:3e:f9:5e:84:5a:
         d2:05:3e:1d:da:cf:52:40:5e:7f:9b:27:0e:05:87:46:19:64:
         fb:a7:96:c0:a8:2f:ad:de:78:bc:ac:99:85:e2:1f:f4:3e:78:
         4c:a4:bc:39:c0:66:75:76:ec:8a:4f:2d:4d:12:d5:d6:0f:79:
         fd:25:ac:1e:95:ec:b9:bd:b2:43:17:4a:bb:88:1b:e5:0d:59:
         44:a5:f2:a2:3f:4d:3f:97:cd:93:61:ea:7d:80:e6:3e:93:0b:
         7e:a1:e3:e4:d7:0d:a0:60:60:74:1a:89:8b:d7:14:22:8e:69:
         59:91:56:90:ae:2e:06:f1:88:3d:2b:fc:33:22:bc:4f:ba:c4:
         da:32:cd:4b:bb:b1:1d:70:34:f2:6f:89:29:8a:e1:9f:68:cd:
         6f:17:a3:21:eb:dd:3d:c5:be:34:84:97:41:8e:31:8f:d0:17:
         bc:92:16:13:3e:3f:3c:a8:a3:59:62:35:81:eb:11:56:ec:a2:
         07:b7:36:f6:60:1e:64:5c:05:da:70:c8:37:25:8f:d9:da:bb:
         ea:1c:74:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAjSnJdKml6ubSNp2CzZnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDRlMWMyMDExNGQ3NzMxNjk0ZGRjNGYyNzdjNGRmMWJm
ZmM0ZjgwHhcNMjUwNjE4MDEwMDI0WhcNMjUwNjE5MDEwMDI0WjAzMTEwLwYDVQQD
Eyg4YmQxNzkzODYzZDA1YWE5MWE1NzJkNGIyZmNhYzI5MWYwNWI4ZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXnq/1r7HHoyeQKW6TBJDsKKbe4z
YWFy7SZhpFZZeWGqHd9MJ1bzTNnMZ4rmXuLQxy/8E/bcePM50GNsRvWESj6dsgAg
3gMdd/fy/ymj9uNiZFd+nsy9euJbfERfAGOsLeTUs1fnMuaNWtQrZB4s5BqOENi+
JB1N+8yjVarmFIpynIcfgIJfK0Zd6OxwhuORvBTXS8OSHU0AprLkLDl1VmUBOtu1
pveiurbyCPzO3v9HuFo63+ZNkxtajLijS6gayxIlncUKGFkSOlleBxkOJFeQKBdQ
jZk4F5oedDALsF8LklR4VAtTbC+HPlLc1U7F/7ZXdq/GEl/CVI5LKRynbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvReThj0FqpGlctSy/KwpHwW49rMB8GA1UdIwQY
MBaAFOIE4cIBFNdzFpTdxPJ3xN8b/8T4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYt
MTNkMzgwNzE1Y2VmLzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYtMTNkMzgwNzE1Y2Vm
LzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGRbOvxK
JH7A1rKo5fvOVNKIVgCXPGHlXXmLt2oSa/RvNHGIlCRf6QyRIoSsMKsjKj75XoRa
0gU+HdrPUkBef5snDgWHRhlk+6eWwKgvrd54vKyZheIf9D54TKS8OcBmdXbsik8t
TRLV1g95/SWsHpXsub2yQxdKu4gb5Q1ZRKXyoj9NP5fNk2HqfYDmPpMLfqHj5NcN
oGBgdBqJi9cUIo5pWZFWkK4uBvGIPSv8MyK8T7rE2jLNS7uxHXA08m+JKYrhn2jN
bxejIevdPcW+NISXQY4xj9AXvJIWEz4/PKijWWI1gesRVuyiB7c29mAeZFwF2nDI
NyWP2dq76hx0Gg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:37:59 2025 by rpki-client