Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File:                     w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier:          sWuqblgVdaehuYiijrVs/Y50VRngeqRJdtnqA2W5wqg=
Subject key identifier:   11:80:1F:E0:50:EA:D9:E6:FC:E9:57:2A:D2:95:89:EF:E1:31:03:05
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer:       /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial:       01974666FE51ABD929F87E80113342F00FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 18:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:44 +0000
Files and hashes:         1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
                          2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
                          3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: d15k5OZyeIPk6VNyt0O51eASyHJXw/R9WQC5XqLj6WI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:fe:51:ab:d9:29:f8:7e:80:11:33:42:f0:0f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
        Validity
            Not Before: Jun  6 18:00:44 2025 GMT
            Not After : Jun  7 18:00:44 2025 GMT
        Subject: CN=11801fe050ead9e6fce9572ad29589efe1310305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:ff:f4:72:8d:1c:ba:16:e3:ff:0d:85:b4:
                    c2:1c:1f:3b:25:aa:4b:b5:f6:9f:d3:07:77:48:8f:
                    73:42:2d:77:df:ac:1f:5b:3b:b3:7a:0a:cb:e5:8a:
                    ee:fa:4a:8a:78:1a:df:2d:ff:55:79:7a:0a:70:07:
                    d2:cb:d1:de:f6:d2:32:16:3d:d6:26:00:b9:c6:69:
                    05:78:c6:61:a1:e9:ba:2f:ec:70:80:dd:97:70:f4:
                    11:a1:74:f3:a4:57:f3:b4:2d:7c:30:a9:0f:55:b5:
                    26:c4:d8:25:84:67:7c:0b:db:df:30:29:ca:56:d2:
                    ed:c2:3c:d8:d4:f2:93:cb:c6:db:48:37:f1:9c:3e:
                    33:77:b0:45:ca:44:79:e2:4d:dc:e4:93:84:f2:53:
                    dd:05:9b:c5:86:62:b7:a0:09:59:1a:4b:2b:9b:ba:
                    da:63:79:98:9d:5b:d8:6c:37:fc:b0:35:cb:ab:6d:
                    6c:43:65:82:19:44:32:ca:4e:42:bd:cc:bc:74:89:
                    bf:c9:e3:5c:ca:d7:c5:59:1d:3b:ab:d5:e3:0a:05:
                    9a:2f:d9:ed:b6:8d:a5:ee:1f:1c:ff:22:fc:d5:43:
                    2a:26:4b:dd:74:07:ee:e8:ce:1e:d2:37:11:e9:18:
                    1e:28:fa:17:85:c1:50:60:1b:ec:3b:c8:ec:b2:7e:
                    15:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:1F:E0:50:EA:D9:E6:FC:E9:57:2A:D2:95:89:EF:E1:31:03:05
            X509v3 Authority Key Identifier:
                keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:74:cc:22:7a:1d:fb:87:83:5d:4f:d6:43:5d:c6:ce:3e:44:
         40:08:ac:13:d4:57:f9:9f:a6:0c:a5:4c:44:3d:b1:bc:5f:7e:
         5c:8b:eb:07:b7:fe:0c:27:8c:67:0c:5e:3f:3d:5a:4a:21:74:
         24:0a:be:38:c5:30:cf:20:a3:de:e5:e2:f9:d1:5b:8a:0b:7d:
         77:2e:38:01:74:87:9f:07:51:48:eb:27:c7:31:03:e3:be:e0:
         9e:8d:15:8c:56:85:98:a8:ea:a1:ab:c3:45:6a:54:5f:6f:30:
         2f:fb:ab:e3:69:03:b4:26:3d:4f:be:bf:2e:9e:76:57:a1:b3:
         83:63:31:0a:c4:94:33:bf:95:69:f7:35:68:fa:c4:0f:86:af:
         1e:e9:7b:d1:1f:9a:83:a8:57:ab:27:05:c8:d5:46:af:45:44:
         e7:c0:af:63:6e:93:bd:76:29:ed:5f:84:50:df:5b:b6:56:b4:
         d9:80:e0:50:8f:ed:f5:27:fb:28:9d:b5:17:84:20:24:85:43:
         2e:87:f2:a5:81:61:87:7c:bf:56:67:3c:be:39:2b:d8:10:9c:
         bc:bc:46:19:9e:90:bb:69:9a:f9:f5:21:ac:33:37:c7:f0:ec:
         cd:fe:c6:b5:ee:c1:03:f3:12:1e:f3:b8:b8:53:6d:b2:d3:77:
         ea:94:0a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZv5Rq9kp+H6AETNC8A/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTQ5ZjY1YTNkNjgwYzQyOGZkOTRkNjdlNjVhMjcwOWYw
MjkyY2YwHhcNMjUwNjA2MTgwMDQ0WhcNMjUwNjA3MTgwMDQ0WjAzMTEwLwYDVQQD
EygxMTgwMWZlMDUwZWFkOWU2ZmNlOTU3MmFkMjk1ODllZmUxMzEwMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonL/9HKNHLoW4/8NhbTCHB87JapL
tfaf0wd3SI9zQi1336wfWzuzegrL5Yru+kqKeBrfLf9VeXoKcAfSy9He9tIyFj3W
JgC5xmkFeMZhoem6L+xwgN2XcPQRoXTzpFfztC18MKkPVbUmxNglhGd8C9vfMCnK
VtLtwjzY1PKTy8bbSDfxnD4zd7BFykR54k3c5JOE8lPdBZvFhmK3oAlZGksrm7ra
Y3mYnVvYbDf8sDXLq21sQ2WCGUQyyk5Cvcy8dIm/yeNcytfFWR07q9XjCgWaL9nt
to2l7h8c/yL81UMqJkvddAfu6M4e0jcR6RgeKPoXhcFQYBvsO8jssn4V6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGAH+BQ6tnm/OlXKtKVie/hMQMFMB8GA1UdIwQY
MBaAFMOkn2Wj1oDEKP2U1n5lonCfApLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNGU4ZGQtZGUzYy00N2ZhLWEwMjQt
ZjMzNzk3ZTM5YmIyLzEvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNGU4ZGQtZGUzYy00N2ZhLWEwMjQtZjMzNzk3ZTM5YmIy
LzEvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3TMInod
+4eDXU/WQ13Gzj5EQAisE9RX+Z+mDKVMRD2xvF9+XIvrB7f+DCeMZwxePz1aSiF0
JAq+OMUwzyCj3uXi+dFbigt9dy44AXSHnwdRSOsnxzED477gno0VjFaFmKjqoavD
RWpUX28wL/ur42kDtCY9T76/Lp52V6Gzg2MxCsSUM7+Vafc1aPrED4avHul70R+a
g6hXqycFyNVGr0VE58CvY26TvXYp7V+EUN9btla02YDgUI/t9Sf7KJ21F4QgJIVD
LofypYFhh3y/Vmc8vjkr2BCcvLxGGZ6Qu2ma+fUhrDM3x/Dszf7Gte7BA/MSHvO4
uFNtstN36pQKJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:42 2025 by rpki-client