Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          vPHbjdQjW0gtIJJyQ0NAmASuiHgXSmUsLHgevlnk8Ng=
Subject key identifier:   64:C1:5D:B6:0D:23:B1:23:D1:19:D5:C1:61:F2:67:56:A3:94:8C:33
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       01974931A396A848A2676ACEE1C622FDB863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          134D
Signing time:             Sat 07 Jun 2025 07:01:19 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:19 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:19 +0000
Files and hashes:         1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
                          2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
                          3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
                          4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: E5Zx9GBbNYuYU8zUd75mazFv/uRZRcqKLp7Q4YwFXJE=)
                          5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:a3:96:a8:48:a2:67:6a:ce:e1:c6:22:fd:b8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Jun  7 07:01:19 2025 GMT
            Not After : Jun  8 07:01:19 2025 GMT
        Subject: CN=64c15db60d23b123d119d5c161f26756a3948c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:3f:89:49:7c:3e:00:08:d9:68:66:1f:6d:
                    bc:17:90:ba:dc:80:c3:1d:23:84:d5:9c:28:b3:9d:
                    36:90:01:b4:93:e0:e5:c1:ca:5f:81:7e:d5:c3:fe:
                    8c:4b:81:dd:53:2a:64:e4:87:c6:67:82:a6:9c:2c:
                    ef:b0:d2:21:95:3e:b0:04:f1:35:e1:95:dd:f4:f2:
                    9d:98:d8:49:e7:59:d6:d8:38:93:b3:96:02:c6:16:
                    a0:59:ce:90:69:16:c4:0a:dc:b0:53:22:dc:6a:15:
                    c3:79:5f:b7:40:08:7f:a8:a8:8a:bf:41:6f:bc:e6:
                    5d:1b:70:af:1a:51:6b:6f:88:d8:f9:4d:b3:27:ac:
                    3a:97:07:ac:f8:ec:d9:12:14:08:42:21:53:33:24:
                    77:86:70:d1:ba:2a:49:23:58:9a:85:21:91:c7:05:
                    46:f6:e9:44:41:e8:cf:d7:6f:8c:3b:7b:06:4a:7a:
                    3d:7d:36:af:78:c1:56:b3:e6:60:db:dc:7a:7d:33:
                    65:ac:f8:c7:69:23:b0:5a:b7:24:64:93:52:df:d7:
                    45:37:4f:49:c5:f1:66:b3:60:28:59:73:40:43:8c:
                    2b:58:44:05:cb:47:5a:e8:81:16:bf:a7:6e:04:de:
                    a2:2f:e9:00:64:72:fc:a9:b7:ec:8d:9e:65:cf:ad:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:5D:B6:0D:23:B1:23:D1:19:D5:C1:61:F2:67:56:A3:94:8C:33
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2c:89:1c:9c:9a:14:1a:98:ca:38:02:25:54:92:b3:a5:f6:
         f6:36:0c:99:67:48:8f:4e:a8:eb:c1:19:90:7c:d3:c2:4f:24:
         4a:83:51:b2:77:e8:4d:ee:dd:1b:10:f2:09:f1:30:bd:ea:ff:
         14:28:0f:a4:e2:d4:d3:5f:49:4e:e5:64:ec:0a:d3:d3:2a:9b:
         72:ba:a9:54:2f:b6:37:55:cb:d7:aa:f0:6d:1a:41:b4:42:f5:
         b9:5f:b8:c3:7b:f6:bc:83:1b:a1:7a:38:ea:9b:56:5c:e1:1f:
         bc:21:1b:33:3e:f0:12:49:9b:6c:a1:49:92:c2:41:c2:d3:3c:
         be:8d:38:bf:87:65:d3:ca:4b:9b:fa:01:ec:92:35:fc:eb:94:
         b7:b1:d4:aa:9f:5a:c1:27:d7:4d:d7:11:f9:55:e2:13:1a:b7:
         e6:9a:8d:5c:20:30:65:a5:89:34:f2:ef:bb:f8:a6:5c:50:10:
         19:88:6e:f2:18:cf:b1:4e:f6:52:13:ee:b2:c4:e8:7e:8b:94:
         cb:aa:48:a2:47:92:55:2d:82:99:f5:66:cd:9e:4e:48:ff:f3:
         3e:4d:18:61:f8:96:fb:15:8d:62:81:bb:78:e7:6a:bc:a8:a3:
         6d:41:9b:be:68:74:1c:6e:b7:b7:ae:4e:33:70:a8:b4:08:39:
         5f:1c:cb:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMaOWqEiiZ2rO4cYi/bhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4
NmU5YTAwHhcNMjUwNjA3MDcwMTE5WhcNMjUwNjA4MDcwMTE5WjAzMTEwLwYDVQQD
Eyg2NGMxNWRiNjBkMjNiMTIzZDExOWQ1YzE2MWYyNjc1NmEzOTQ4YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2s/iUl8PgAI2WhmH228F5C63IDD
HSOE1Zwos502kAG0k+DlwcpfgX7Vw/6MS4HdUypk5IfGZ4KmnCzvsNIhlT6wBPE1
4ZXd9PKdmNhJ51nW2DiTs5YCxhagWc6QaRbECtywUyLcahXDeV+3QAh/qKiKv0Fv
vOZdG3CvGlFrb4jY+U2zJ6w6lwes+OzZEhQIQiFTMyR3hnDRuipJI1iahSGRxwVG
9ulEQejP12+MO3sGSno9fTaveMFWs+Zg29x6fTNlrPjHaSOwWrckZJNS39dFN09J
xfFms2AoWXNAQ4wrWEQFy0da6IEWv6duBN6iL+kAZHL8qbfsjZ5lz60SPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTBXbYNI7Ej0RnVwWHyZ1ajlIwzMB8GA1UdIwQY
MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt
MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji
LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSyJHJya
FBqYyjgCJVSSs6X29jYMmWdIj06o68EZkHzTwk8kSoNRsnfoTe7dGxDyCfEwver/
FCgPpOLU019JTuVk7ArT0yqbcrqpVC+2N1XL16rwbRpBtEL1uV+4w3v2vIMboXo4
6ptWXOEfvCEbMz7wEkmbbKFJksJBwtM8vo04v4dl08pLm/oB7JI1/OuUt7HUqp9a
wSfXTdcR+VXiExq35pqNXCAwZaWJNPLvu/imXFAQGYhu8hjPsU72UhPussTofouU
y6pIokeSVS2CmfVmzZ5OSP/zPk0YYfiW+xWNYoG7eOdqvKijbUGbvmh0HG63t65O
M3CotAg5XxzLqg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:50 2025 by rpki-client