Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          To2M/OGpjJVuxa/gbWtqhYyXRlzC3j0UyXONb9VzkGA=
Subject key identifier:   81:EF:58:04:A4:95:3B:CB:76:75:72:68:E9:EE:4D:59:56:BD:C1:BC
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       01976B85FCF115FD515EB4CAF01B41BE6F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 23:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:32 +0000
Files and hashes:         1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
                          2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
                          3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
                          4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: SFoJ5/uP7GjMRG2As09eREAASReeN/nCv3w2nemy35I=)
                          5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:85:fc:f1:15:fd:51:5e:b4:ca:f0:1b:41:be:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Jun 13 23:00:32 2025 GMT
            Not After : Jun 14 23:00:32 2025 GMT
        Subject: CN=81ef5804a4953bcb76757268e9ee4d5956bdc1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:bf:0a:cd:4b:15:c6:a4:11:f8:99:18:c5:
                    7d:22:3c:f8:4d:ca:57:31:4e:ec:56:66:f8:f5:8a:
                    e8:ed:ac:18:f2:2a:7f:4d:8f:9d:1e:2a:07:22:67:
                    75:a2:5c:19:0a:a8:fe:60:7c:71:7d:1a:65:0f:b4:
                    a0:dc:22:65:8e:57:25:79:a9:86:de:cf:ac:be:2e:
                    50:5b:8c:fd:74:df:ae:47:cb:a2:b9:4a:cd:90:56:
                    7b:da:65:d6:0b:99:10:4a:b4:bd:80:0a:48:99:f1:
                    87:91:e5:2e:f5:69:aa:7c:85:13:4b:64:09:b6:d1:
                    1e:dd:20:20:66:9a:0b:f3:26:eb:9d:73:55:5d:91:
                    28:73:fd:7d:ff:4c:78:d3:ab:25:0a:4f:d3:3d:d4:
                    90:47:7f:d5:1b:cc:07:a8:e5:c2:84:e2:28:0d:25:
                    af:6b:7e:67:8a:43:da:5c:bd:71:5d:dc:c1:fe:97:
                    24:af:6b:2d:c9:8e:f3:5b:4c:64:36:da:d2:6d:c6:
                    f5:2b:8e:cf:2b:dc:ad:46:56:03:04:01:80:f9:46:
                    d7:c7:92:e3:23:4b:8f:73:37:10:29:f1:0b:d6:83:
                    63:4e:93:65:69:73:fd:a2:03:ea:22:e2:6f:d7:5e:
                    94:c9:23:a0:38:fa:c5:f9:93:4a:50:19:33:26:1c:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:58:04:A4:95:3B:CB:76:75:72:68:E9:EE:4D:59:56:BD:C1:BC
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:1d:d4:50:c0:2e:8f:ca:c2:2e:49:ea:e8:d5:dd:a1:0b:
         ae:a4:08:78:86:9e:67:a5:4d:ab:5a:9c:a9:6a:2c:63:6b:36:
         7c:6c:b9:0e:44:21:d0:8e:d2:b8:e9:c0:7f:34:34:27:37:87:
         1f:f9:cb:68:8f:67:aa:77:df:b9:c1:44:9c:18:6a:62:bd:31:
         be:24:56:55:6f:8c:87:f6:c7:e6:91:70:04:75:00:ec:ee:98:
         5a:a7:ff:04:8d:77:61:39:8f:f3:45:6d:dd:4b:f6:ff:cf:95:
         d9:77:bb:1d:43:f8:e0:72:ea:8b:03:68:1f:60:ad:b6:56:98:
         c3:ac:a8:1c:b6:e7:19:22:39:29:f1:3a:3b:1b:c7:5d:a2:10:
         5c:8a:66:33:00:ee:c1:8b:23:4c:a0:86:cd:4a:6e:15:b9:2e:
         2e:ac:19:e7:98:92:49:94:b3:9d:fe:30:67:ee:be:20:e5:a3:
         24:fe:65:a5:b9:d8:4a:8c:94:f4:9d:5b:77:85:b0:93:fe:86:
         ce:26:88:8f:45:28:4c:a0:24:0e:70:55:dd:97:6f:f4:e4:cd:
         e9:b7:2a:27:d2:b0:91:48:9b:89:e9:6b:96:69:8f:66:8a:68:
         55:61:03:9c:90:e8:6a:08:ed:53:6f:1a:66:0d:ce:df:a8:6a:
         91:b0:0c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhfzxFf1RXrTK8BtBvm9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNGQxYzg3OTBhOTEzZTgzMmM3MzNkZmY3NzhkZWU3OTEy
OTcwMGEwHhcNMjUwNjEzMjMwMDMyWhcNMjUwNjE0MjMwMDMyWjAzMTEwLwYDVQQD
Eyg4MWVmNTgwNGE0OTUzYmNiNzY3NTcyNjhlOWVlNGQ1OTU2YmRjMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11i/Cs1LFcakEfiZGMV9Ijz4TcpX
MU7sVmb49Yro7awY8ip/TY+dHioHImd1olwZCqj+YHxxfRplD7Sg3CJljlcleamG
3s+svi5QW4z9dN+uR8uiuUrNkFZ72mXWC5kQSrS9gApImfGHkeUu9WmqfIUTS2QJ
ttEe3SAgZpoL8ybrnXNVXZEoc/19/0x406slCk/TPdSQR3/VG8wHqOXChOIoDSWv
a35nikPaXL1xXdzB/pckr2styY7zW0xkNtrSbcb1K47PK9ytRlYDBAGA+UbXx5Lj
I0uPczcQKfEL1oNjTpNlaXP9ogPqIuJv116UySOgOPrF+ZNKUBkzJhwBuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHvWASklTvLdnVyaOnuTVlWvcG8MB8GA1UdIwQY
MBaAFH1NHIeQqRPoMscz3/d43ueRKXAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUt
ZjhkNjYyYjk2ZGFiLzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUtZjhkNjYyYjk2ZGFi
LzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp0d1FDA
Lo/Kwi5J6ujV3aELrqQIeIaeZ6VNq1qcqWosY2s2fGy5DkQh0I7SuOnAfzQ0JzeH
H/nLaI9nqnffucFEnBhqYr0xviRWVW+Mh/bH5pFwBHUA7O6YWqf/BI13YTmP80Vt
3Uv2/8+V2Xe7HUP44HLqiwNoH2CttlaYw6yoHLbnGSI5KfE6OxvHXaIQXIpmMwDu
wYsjTKCGzUpuFbkuLqwZ55iSSZSznf4wZ+6+IOWjJP5lpbnYSoyU9J1bd4Wwk/6G
ziaIj0UoTKAkDnBV3Zdv9OTN6bcqJ9KwkUibielrlmmPZopoVWEDnJDoagjtU28a
Zg3O36hqkbAMwg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:38 2025 by rpki-client