Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File:                     _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier:          4CagAQjR2W/5G9M+SeB3VlzpHc2qL/g3oXepwS145fA=
Subject key identifier:   52:AC:6E:F8:E7:51:37:04:68:A3:8D:DD:00:BA:03:A3:8D:B6:80:74
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer:       /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial:       01983C8583A9A730CB8675320480FAB5A26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number:          158B
Signing time:             Thu 24 Jul 2025 13:00:39 +0000
Manifest this update:     Thu 24 Jul 2025 13:00:39 +0000
Manifest next update:     Fri 25 Jul 2025 13:00:39 +0000
Files and hashes:         1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
                          2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: mibA7aC/na2qLDYuISLXdiTl82Y2uerM1t7QZntzwpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:85:83:a9:a7:30:cb:86:75:32:04:80:fa:b5:a2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
        Validity
            Not Before: Jul 24 13:00:39 2025 GMT
            Not After : Jul 25 13:00:39 2025 GMT
        Subject: CN=52ac6ef8e751370468a38ddd00ba03a38db68074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:58:b3:ca:0c:62:40:67:cc:1e:be:2c:76:
                    2c:71:c9:60:c9:33:6b:68:1f:83:dd:f4:6a:9e:2e:
                    43:c1:03:fe:3c:ef:e5:0e:0c:a4:cf:fa:03:38:df:
                    e8:68:8c:45:91:44:a3:d7:a1:09:b9:03:cd:f2:1f:
                    51:c6:fd:51:9b:d9:e7:46:1e:03:c0:29:62:96:c9:
                    ce:f1:b7:e0:c2:ed:5c:07:1e:e8:f6:bd:01:de:ac:
                    74:0c:fd:ab:70:08:24:43:32:34:f5:73:66:df:0d:
                    0e:ad:49:8f:b2:de:d6:8a:17:a4:b1:a0:49:c8:2d:
                    a7:a7:21:11:b3:90:87:0e:7d:7e:94:5c:26:70:a5:
                    89:5f:12:49:1e:b7:41:39:50:b9:1f:b3:dd:31:a6:
                    f8:1b:4f:11:60:4d:a3:6d:fd:2b:9c:6b:01:69:7a:
                    c1:45:27:9e:d0:ae:f7:b1:f6:75:e1:71:38:9c:ab:
                    20:ee:1d:1e:fb:bb:f1:2c:75:96:d1:37:46:eb:54:
                    ee:d0:75:1f:42:b1:10:28:50:89:f1:e2:e1:b0:cd:
                    45:76:e6:e3:73:7a:82:50:49:5a:fe:63:50:79:cb:
                    c1:ad:86:03:d2:4f:43:24:01:19:7b:ed:57:29:14:
                    6d:06:24:85:a9:f2:56:c8:84:ae:db:09:2b:d6:bd:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AC:6E:F8:E7:51:37:04:68:A3:8D:DD:00:BA:03:A3:8D:B6:80:74
            X509v3 Authority Key Identifier:
                keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:47:20:66:4e:5e:79:60:af:8e:a2:d6:bf:dd:8f:8d:29:b5:
         c0:3d:e1:56:a0:1d:83:d7:71:88:60:6e:47:e4:b9:88:c5:8f:
         16:26:2a:b5:1f:f5:19:42:a0:25:ad:de:39:ca:ba:31:0c:2c:
         de:5c:5f:98:4b:93:31:41:21:2a:6f:59:c8:4d:fb:27:14:06:
         0c:b9:a2:d8:26:7f:c8:58:bb:30:25:26:5d:ec:74:0f:6f:0d:
         48:c6:99:56:39:bb:b4:cf:fe:b5:cf:60:ae:81:fa:e9:00:31:
         84:2e:6e:38:9b:a4:97:bb:5e:28:41:f1:ee:7a:0e:ee:43:b4:
         49:41:f9:25:00:c7:8f:68:56:22:45:37:22:e3:63:b1:b4:1c:
         92:b4:57:bd:f8:a0:cd:ab:35:e3:4e:ee:81:18:c4:4a:96:cc:
         a8:3f:f6:52:72:14:ad:42:2c:4f:fc:e2:b5:5d:90:88:ff:cb:
         53:91:5c:89:5a:7d:a8:be:36:b0:d7:03:84:fb:ac:e3:64:24:
         18:5a:9f:77:ab:0b:a7:ab:8c:4f:77:17:5d:fb:7a:53:59:c8:
         d3:ef:ba:45:80:39:48:a3:1d:a2:fb:4f:42:c7:93:22:44:01:
         b4:a3:88:ec:59:0f:1b:2b:ef:60:a6:8d:bf:d9:3b:4e:94:08:
         33:ec:92:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg8hYOppzDLhnUyBID6taJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZDNjMTc0MmZjMDVhODBhMmRjNmJiMGViZTEwMzBhOWJi
YzhjOTQwHhcNMjUwNzI0MTMwMDM5WhcNMjUwNzI1MTMwMDM5WjAzMTEwLwYDVQQD
Eyg1MmFjNmVmOGU3NTEzNzA0NjhhMzhkZGQwMGJhMDNhMzhkYjY4MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nJYs8oMYkBnzB6+LHYscclgyTNr
aB+D3fRqni5DwQP+PO/lDgykz/oDON/oaIxFkUSj16EJuQPN8h9Rxv1Rm9nnRh4D
wClilsnO8bfgwu1cBx7o9r0B3qx0DP2rcAgkQzI09XNm3w0OrUmPst7WiheksaBJ
yC2npyERs5CHDn1+lFwmcKWJXxJJHrdBOVC5H7PdMab4G08RYE2jbf0rnGsBaXrB
RSee0K73sfZ14XE4nKsg7h0e+7vxLHWW0TdG61Tu0HUfQrEQKFCJ8eLhsM1Fdubj
c3qCUEla/mNQecvBrYYD0k9DJAEZe+1XKRRtBiSFqfJWyISu2wkr1r3AXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKsbvjnUTcEaKON3QC6A6ONtoB0MB8GA1UdIwQY
MBaAFP/TwXQvwFqAotxrsOvhAwqbvIyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTIt
MGYwYmM0MDFlMWUxLzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTItMGYwYmM0MDFlMWUx
LzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEcgZk5e
eWCvjqLWv92PjSm1wD3hVqAdg9dxiGBuR+S5iMWPFiYqtR/1GUKgJa3eOcq6MQws
3lxfmEuTMUEhKm9ZyE37JxQGDLmi2CZ/yFi7MCUmXex0D28NSMaZVjm7tM/+tc9g
roH66QAxhC5uOJukl7teKEHx7noO7kO0SUH5JQDHj2hWIkU3IuNjsbQckrRXvfig
zas1407ugRjESpbMqD/2UnIUrUIsT/zitV2QiP/LU5FciVp9qL42sNcDhPus42Qk
GFqfd6sLp6uMT3cXXft6U1nI0++6RYA5SKMdovtPQseTIkQBtKOI7FkPGyvvYKaN
v9k7TpQIM+yS8g==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:11:35 2025 by rpki-client