Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File:                     sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier:          +t6grou9P1EjkqsDqGq1ZL/gn+GkcRUAxA6JoPjcRfY=
Subject key identifier:   8A:B9:2B:C2:C8:5F:16:DB:08:64:91:FD:9A:7A:05:C6:83:97:15:A7
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer:       /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial:       019747B0EFD319571CF9738515B40A408B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 00:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:07 +0000
Files and hashes:         1: cRAAzm69rK1x2VXcQUJ_DYkM5W0.roa (hash: QMURLhpiB70UAjkJMuKHXFWklTM0r8n8ucBI0KCwX8g=)
                          2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: A2xYzkEzd0Ou3Q3aiDA2dumZ6os4jgH+Yx8mRzG3NTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:ef:d3:19:57:1c:f9:73:85:15:b4:0a:40:8b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
        Validity
            Not Before: Jun  7 00:01:07 2025 GMT
            Not After : Jun  8 00:01:07 2025 GMT
        Subject: CN=8ab92bc2c85f16db086491fd9a7a05c6839715a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:57:8b:1f:ed:86:eb:ed:21:27:a7:d5:f9:
                    9a:ff:b9:01:14:c7:72:ea:5b:1f:6a:1f:35:a9:58:
                    22:e7:30:07:11:eb:db:1d:d4:18:39:a0:d3:fd:81:
                    70:6a:1f:f5:d0:25:5b:70:38:47:ae:09:10:9e:e6:
                    00:84:28:df:a8:c8:ba:e7:a3:de:a0:c8:fa:6b:52:
                    13:b4:3f:21:ca:93:e7:c7:45:33:92:32:ff:9a:06:
                    55:5f:67:c4:5d:7b:12:43:e8:b1:46:20:db:d7:23:
                    4c:e6:db:33:0f:33:dc:1b:df:b4:cd:15:1b:c4:bf:
                    2c:47:49:41:74:90:42:37:07:52:df:c5:6c:95:68:
                    ee:b3:d8:17:04:52:86:37:6f:0b:db:f3:29:31:c8:
                    a3:96:07:21:ee:d4:a6:7f:bb:64:82:00:fa:9b:a7:
                    53:96:5e:47:37:16:fb:8e:cb:b6:8f:7c:28:43:a8:
                    be:1d:79:77:22:4c:0d:29:46:67:05:d7:03:43:0c:
                    bd:d2:55:f1:52:37:ba:7e:b1:51:e5:bf:e7:9e:aa:
                    ce:83:be:96:bc:4f:a8:1b:75:38:f3:0e:d6:d7:ea:
                    51:43:8e:2b:5d:f8:fd:5a:34:05:e0:3f:e0:ad:ac:
                    ea:4a:72:c0:5f:88:ea:e0:53:9f:09:e1:72:74:05:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B9:2B:C2:C8:5F:16:DB:08:64:91:FD:9A:7A:05:C6:83:97:15:A7
            X509v3 Authority Key Identifier:
                keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:69:13:fc:a2:3c:48:76:5b:59:30:fc:58:5f:e4:f9:0b:43:
         be:3b:06:26:03:1f:7a:94:18:4d:fe:8e:18:eb:43:1b:7d:89:
         50:be:75:75:74:a0:57:54:fc:66:49:b8:f1:6b:68:81:53:e6:
         c3:4a:ac:cb:9e:0f:5f:b3:7d:db:d5:d0:ac:13:f2:02:42:7e:
         db:ea:56:dd:70:fe:91:61:93:2a:50:81:65:7b:d8:9f:98:4b:
         68:ec:0e:6e:a9:4d:7d:42:26:06:ed:fb:60:c9:99:6a:ac:ae:
         95:3e:3d:d5:d5:9c:59:1e:d1:7e:22:1b:36:a9:90:95:6b:c2:
         8a:59:56:f0:0b:af:76:4a:7c:1e:6a:87:1c:c7:1b:49:4a:0d:
         43:89:6f:2a:c9:0f:8a:0d:f9:7a:85:bb:e8:5e:65:23:34:0a:
         3f:96:b7:bb:f0:a3:97:b2:4f:0c:c7:34:28:12:8e:0a:1f:a5:
         c4:26:14:57:a6:34:0b:f2:c6:d6:f7:b8:8d:5f:95:fd:56:69:
         dc:3a:ca:de:41:89:2d:8b:30:9c:07:d4:dd:67:20:2d:53:24:
         34:ca:a0:e0:82:46:12:5f:8d:74:b5:27:31:98:f9:9f:11:94:
         fe:47:35:80:ea:61:f0:50:63:65:b3:92:ea:81:00:79:4c:f1:
         15:d2:2c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsO/TGVcc+XOFFbQKQIs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw
NzhiOTAwHhcNMjUwNjA3MDAwMTA3WhcNMjUwNjA4MDAwMTA3WjAzMTEwLwYDVQQD
Eyg4YWI5MmJjMmM4NWYxNmRiMDg2NDkxZmQ5YTdhMDVjNjgzOTcxNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1pXix/thuvtISen1fma/7kBFMdy
6lsfah81qVgi5zAHEevbHdQYOaDT/YFwah/10CVbcDhHrgkQnuYAhCjfqMi656Pe
oMj6a1ITtD8hypPnx0UzkjL/mgZVX2fEXXsSQ+ixRiDb1yNM5tszDzPcG9+0zRUb
xL8sR0lBdJBCNwdS38VslWjus9gXBFKGN28L2/MpMcijlgch7tSmf7tkggD6m6dT
ll5HNxb7jsu2j3woQ6i+HXl3IkwNKUZnBdcDQwy90lXxUje6frFR5b/nnqrOg76W
vE+oG3U48w7W1+pRQ44rXfj9WjQF4D/grazqSnLAX4jq4FOfCeFydAUbmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq5K8LIXxbbCGSR/Zp6BcaDlxWnMB8GA1UdIwQY
MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt
Mjg0ZjdjOTYyMmI1LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1
LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGkT/KI8
SHZbWTD8WF/k+QtDvjsGJgMfepQYTf6OGOtDG32JUL51dXSgV1T8Zkm48WtogVPm
w0qsy54PX7N929XQrBPyAkJ+2+pW3XD+kWGTKlCBZXvYn5hLaOwObqlNfUImBu37
YMmZaqyulT491dWcWR7RfiIbNqmQlWvCillW8Auvdkp8HmqHHMcbSUoNQ4lvKskP
ig35eoW76F5lIzQKP5a3u/Cjl7JPDMc0KBKOCh+lxCYUV6Y0C/LG1ve4jV+V/VZp
3DrK3kGJLYswnAfU3WcgLVMkNMqg4IJGEl+NdLUnMZj5nxGU/kc1gOph8FBjZbOS
6oEAeUzxFdIsCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:24 2025 by rpki-client