Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          9pwkIhFyW9ivCENnapzTUfVmFppJE1PYoTketODZ4ro=
Subject key identifier:   92:A4:99:46:C2:9F:2F:5A:AD:28:26:B3:10:0B:8A:5E:EC:E2:93:F3
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       01974D44E62D2CF788D8CC03592A31C3CE96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 02:00:50 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:50 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:50 +0000
Files and hashes:         1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
                          2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: bRMFU/YYIPK7jMlA3cMearAqgO06LMkqIf/pfF87TwY=)
                          4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:e6:2d:2c:f7:88:d8:cc:03:59:2a:31:c3:ce:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Jun  8 02:00:50 2025 GMT
            Not After : Jun  9 02:00:50 2025 GMT
        Subject: CN=92a49946c29f2f5aad2826b3100b8a5eece293f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:ea:f3:4a:13:11:82:7d:54:c1:39:61:2d:
                    77:a6:7c:db:23:64:ea:1d:49:24:93:98:c6:26:2e:
                    d8:89:de:c6:9a:f5:eb:65:03:06:43:db:b5:8b:6d:
                    13:17:6b:63:8f:d9:19:75:ee:67:9f:f7:19:d2:e9:
                    aa:e4:5f:43:56:8f:f6:ff:2d:20:34:0f:bb:59:fe:
                    aa:f6:e9:2d:e4:a9:4c:73:11:cc:63:d2:2f:54:6a:
                    70:67:23:7d:ed:e7:89:f2:d1:e4:e9:f4:13:c0:1f:
                    27:ea:5c:04:3c:96:15:64:1d:63:ef:af:20:42:ae:
                    35:b5:06:40:bd:20:79:20:ff:68:05:3f:0c:69:67:
                    84:d3:f8:77:23:07:ce:52:89:f0:e7:98:8c:77:07:
                    f7:30:37:3e:7f:0b:71:84:e6:89:c0:5f:07:b7:40:
                    dd:da:47:ea:03:82:1d:b4:36:c3:14:09:08:c9:3b:
                    c4:ec:44:ce:4d:c2:ef:32:0b:6d:8f:c8:0f:2a:b8:
                    8e:bc:06:be:72:35:bf:59:5d:3d:b5:ef:34:77:d5:
                    d5:cd:a7:e4:39:48:2f:27:c5:db:c2:64:6e:3c:ad:
                    24:fb:7b:8c:54:57:2d:19:25:a5:ad:27:8c:8e:90:
                    d4:b0:6e:39:1d:11:7f:1b:73:f8:87:54:be:5e:43:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:99:46:C2:9F:2F:5A:AD:28:26:B3:10:0B:8A:5E:EC:E2:93:F3
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:70:e5:03:78:eb:05:79:ab:7e:be:98:0e:3c:18:34:d1:
         7e:32:e9:5b:01:5c:4e:1d:ae:4d:61:fd:9e:42:e1:c0:9b:f0:
         2c:d1:d3:cf:5a:8a:16:4c:96:b9:74:6f:19:39:4d:5f:41:e3:
         0c:02:42:3f:30:ab:9c:c7:9d:eb:19:41:9d:e1:0d:f9:84:41:
         12:d5:f8:7a:d4:1a:1f:8e:ab:de:ed:66:a2:77:5e:c6:8d:11:
         ce:8b:c3:5d:dd:64:2d:b7:d2:2f:c9:32:91:b2:d0:bb:89:f0:
         09:18:9d:a0:ab:ee:59:f2:fd:09:4f:09:da:43:40:f9:0d:4c:
         a2:64:72:1a:8b:a0:7c:0c:4a:85:80:aa:5c:80:60:21:7f:0a:
         77:a3:38:20:a2:72:63:f0:af:4f:70:0b:61:e3:8a:2a:91:a4:
         00:82:04:29:fc:63:eb:15:74:d1:b3:3d:8d:5c:fd:f8:dd:d1:
         9b:67:e6:08:91:46:c6:f5:f7:72:4d:01:a8:11:d3:9f:9d:ef:
         cb:8b:a6:12:be:27:2a:68:c3:46:53:98:0a:c1:8d:29:aa:f2:
         98:3e:a0:cf:04:49:cc:86:50:f6:01:d7:11:d2:c7:79:4c:84:
         29:2a:84:82:23:16:3c:c8:d3:c8:5e:9f:b5:e9:03:c9:1d:57:
         6a:fe:ed:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNROYtLPeI2MwDWSoxw86WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh
ZmViOTUwHhcNMjUwNjA4MDIwMDUwWhcNMjUwNjA5MDIwMDUwWjAzMTEwLwYDVQQD
Eyg5MmE0OTk0NmMyOWYyZjVhYWQyODI2YjMxMDBiOGE1ZWVjZTI5M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mnq80oTEYJ9VME5YS13pnzbI2Tq
HUkkk5jGJi7Yid7GmvXrZQMGQ9u1i20TF2tjj9kZde5nn/cZ0umq5F9DVo/2/y0g
NA+7Wf6q9ukt5KlMcxHMY9IvVGpwZyN97eeJ8tHk6fQTwB8n6lwEPJYVZB1j768g
Qq41tQZAvSB5IP9oBT8MaWeE0/h3IwfOUonw55iMdwf3MDc+fwtxhOaJwF8Ht0Dd
2kfqA4IdtDbDFAkIyTvE7ETOTcLvMgttj8gPKriOvAa+cjW/WV09te80d9XVzafk
OUgvJ8XbwmRuPK0k+3uMVFctGSWlrSeMjpDUsG45HRF/G3P4h1S+XkOkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKkmUbCny9arSgmsxALil7s4pPzMB8GA1UdIwQY
MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct
N2Q1OTMwMzNkMDA1LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1
LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6dw5QN4
6wV5q36+mA48GDTRfjLpWwFcTh2uTWH9nkLhwJvwLNHTz1qKFkyWuXRvGTlNX0Hj
DAJCPzCrnMed6xlBneEN+YRBEtX4etQaH46r3u1mondexo0RzovDXd1kLbfSL8ky
kbLQu4nwCRidoKvuWfL9CU8J2kNA+Q1MomRyGougfAxKhYCqXIBgIX8Kd6M4IKJy
Y/CvT3ALYeOKKpGkAIIEKfxj6xV00bM9jVz9+N3Rm2fmCJFGxvX3ck0BqBHTn53v
y4umEr4nKmjDRlOYCsGNKarymD6gzwRJzIZQ9gHXEdLHeUyEKSqEgiMWPMjTyF6f
tekDyR1Xav7t6g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:18:16 2025 by rpki-client