Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File:                     wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier:          MG+H6bWBP02AHB4HSpxpoOZbv/vj0G4QLcGiTmUDf1k=
Subject key identifier:   AD:56:82:07:F6:7C:7E:69:C6:EC:0B:24:52:CB:22:11:FE:A4:34:19
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer:       /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial:       019765F19128F7B0C36D8616ED68875285FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number:          158C
Signing time:             Thu 12 Jun 2025 21:00:19 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:19 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:19 +0000
Files and hashes:         1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
                          2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: AcUaNPbF+oJpOSdYnHYHzboidpCfNQMIYK+xqkHNJdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f1:91:28:f7:b0:c3:6d:86:16:ed:68:87:52:85:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
        Validity
            Not Before: Jun 12 21:00:19 2025 GMT
            Not After : Jun 13 21:00:19 2025 GMT
        Subject: CN=ad568207f67c7e69c6ec0b2452cb2211fea43419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:32:9e:c3:36:52:98:4f:f0:16:5b:10:fe:
                    0f:e5:1a:af:34:57:17:f7:b4:0d:e7:38:04:1d:82:
                    59:9c:9e:bd:d2:7d:21:5a:f3:13:f2:18:e1:4e:94:
                    ad:0a:ac:0e:83:f9:a8:28:e0:83:27:44:e3:d6:e1:
                    eb:c1:ac:a0:a2:45:ec:67:c3:40:d0:ed:a6:cd:a2:
                    81:30:ca:e4:b9:e1:e6:31:9f:fd:c2:9e:bd:4f:ce:
                    18:3c:7e:7b:ab:91:07:fd:d6:ef:5b:36:83:a6:65:
                    90:f6:82:16:07:2c:42:c1:b9:50:e3:ea:24:60:48:
                    28:64:da:f8:e4:7f:49:03:b1:a4:65:e6:35:d0:e9:
                    f7:95:da:87:e1:ad:31:c7:16:76:a0:e1:c2:12:fb:
                    a5:5b:e9:f9:80:fc:21:99:25:50:82:f0:33:68:54:
                    c9:7b:9a:6a:3e:54:e3:5f:38:79:70:82:68:1e:86:
                    51:13:f9:51:c3:6a:4f:96:82:33:9f:09:f0:1c:81:
                    17:4a:d2:cc:22:00:d1:cb:45:f9:9f:26:a8:fd:46:
                    a7:c3:c7:38:4a:40:41:c5:f8:eb:83:3e:2f:82:8f:
                    3b:3c:b4:f3:22:8d:76:82:cf:b8:8a:83:89:c4:aa:
                    27:a7:2d:5f:bf:31:fb:98:56:1b:29:3f:a8:55:36:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:56:82:07:F6:7C:7E:69:C6:EC:0B:24:52:CB:22:11:FE:A4:34:19
            X509v3 Authority Key Identifier:
                keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:37:51:18:e8:02:e9:05:67:93:e5:6f:97:5f:05:31:c6:40:
         98:da:07:36:dc:47:dc:4f:fc:73:c8:b0:14:77:c8:b7:4b:43:
         5a:f0:8f:df:7f:5d:ca:06:49:bd:d9:44:83:59:c1:ac:2b:d4:
         9d:70:c1:b7:60:1a:3e:d7:11:76:00:ee:b0:b2:9b:a2:9a:ef:
         81:97:82:92:dd:e9:66:b6:bd:ac:fc:d1:0e:12:4a:ff:ae:4b:
         f0:81:1a:3d:bb:de:73:2b:94:8d:9b:81:a0:08:ff:45:0f:de:
         92:e4:7f:bb:df:15:53:71:3e:28:82:c6:f4:56:6f:6a:e6:5c:
         9c:d4:20:fc:42:57:c7:2f:3b:9c:28:24:17:87:56:97:22:81:
         ec:94:16:69:92:6e:1b:5e:5b:69:cd:7c:3c:1b:87:29:9a:ed:
         2e:fe:56:5b:22:7e:b2:3c:af:a9:b8:b5:53:09:21:22:34:7c:
         33:95:c0:51:58:58:b0:60:dd:f6:a9:c0:25:99:fc:0b:7e:6d:
         d5:9a:fa:d1:61:9b:53:e3:0c:75:a6:9e:cf:2b:03:01:68:e4:
         c0:ea:95:4d:4c:91:58:02:9b:af:6d:2c:e3:3a:34:d3:ac:58:
         49:09:59:d1:02:46:d8:75:a0:1f:9a:c9:6d:24:38:7e:0e:9a:
         68:19:67:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdl8ZEo97DDbYYW7WiHUoX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTdhNGE4MjE3MmIyMDZhZmVlMWMxM2QyOTZlZTI2MDM4
NWI1NzEwHhcNMjUwNjEyMjEwMDE5WhcNMjUwNjEzMjEwMDE5WjAzMTEwLwYDVQQD
EyhhZDU2ODIwN2Y2N2M3ZTY5YzZlYzBiMjQ1MmNiMjIxMWZlYTQzNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2kynsM2UphP8BZbEP4P5RqvNFcX
97QN5zgEHYJZnJ690n0hWvMT8hjhTpStCqwOg/moKOCDJ0Tj1uHrwaygokXsZ8NA
0O2mzaKBMMrkueHmMZ/9wp69T84YPH57q5EH/dbvWzaDpmWQ9oIWByxCwblQ4+ok
YEgoZNr45H9JA7GkZeY10On3ldqH4a0xxxZ2oOHCEvulW+n5gPwhmSVQgvAzaFTJ
e5pqPlTjXzh5cIJoHoZRE/lRw2pPloIznwnwHIEXStLMIgDRy0X5nyao/Uanw8c4
SkBBxfjrgz4vgo87PLTzIo12gs+4ioOJxKonpy1fvzH7mFYbKT+oVTaInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1Wggf2fH5pxuwLJFLLIhH+pDQZMB8GA1UdIwQY
MBaAFMAXpKghcrIGr+4cE9KW7iYDhbVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMt
OTBhZGVjODVkZDg1LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMtOTBhZGVjODVkZDg1
LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTdRGOgC
6QVnk+Vvl18FMcZAmNoHNtxH3E/8c8iwFHfIt0tDWvCP339dygZJvdlEg1nBrCvU
nXDBt2AaPtcRdgDusLKboprvgZeCkt3pZra9rPzRDhJK/65L8IEaPbvecyuUjZuB
oAj/RQ/ekuR/u98VU3E+KILG9FZvauZcnNQg/EJXxy87nCgkF4dWlyKB7JQWaZJu
G15bac18PBuHKZrtLv5WWyJ+sjyvqbi1UwkhIjR8M5XAUVhYsGDd9qnAJZn8C35t
1Zr60WGbU+MMdaaezysDAWjkwOqVTUyRWAKbr20s4zo006xYSQlZ0QJG2HWgH5rJ
bSQ4fg6aaBln1g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 05:38:31 2025 by rpki-client