Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          UHsdhHVa/FKgm7WJ2iYOd1OvakQSNotGpA9W0XmRtXo=
Subject key identifier:   7B:9A:76:24:63:F3:CB:43:CE:36:92:FF:46:EE:DA:83:BF:B2:BB:7B
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       01974C31FF750F415F34791CE2597FB61E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 21:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:34 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: kQZnkkcjQ65gPbaNMexTJ463BN/oTeu5Duz7YGCyqnQ=)
                          2: uSVVlqHZvV5YEhwqY0z-9BTB1zI.roa (hash: AWa2RaP+hTglbbgDdOdlnFQ+mgvTTY8nknDwYB/qQE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:ff:75:0f:41:5f:34:79:1c:e2:59:7f:b6:1e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: Jun  7 21:00:34 2025 GMT
            Not After : Jun  8 21:00:34 2025 GMT
        Subject: CN=7b9a762463f3cb43ce3692ff46eeda83bfb2bb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:4a:a7:c7:a4:72:aa:35:6b:f6:a2:a2:4f:
                    49:4b:72:e3:aa:94:f0:1a:41:9c:89:b1:97:21:95:
                    4a:f3:fe:90:3f:4b:f7:31:98:31:49:a0:db:9a:89:
                    c4:30:b8:9b:2a:9d:02:47:fa:b3:aa:c6:2c:1f:a4:
                    a9:31:b0:09:45:e9:47:ba:cd:f0:4e:a2:9a:75:b4:
                    86:9d:a6:6e:74:8b:6a:e4:bf:29:2e:60:93:c7:68:
                    3a:01:b7:b2:a2:0f:d5:4e:12:30:74:fc:07:92:81:
                    c0:d8:d1:b1:b6:e9:ec:da:ff:5c:47:d7:03:49:dd:
                    d5:90:8b:21:09:53:67:52:bc:77:f2:22:44:67:49:
                    8d:b9:b5:9c:ea:a7:1a:5b:40:ab:55:40:2a:e1:13:
                    0c:bf:89:81:a2:47:e5:0a:20:4f:05:58:8e:f3:c6:
                    6f:b6:53:ec:9e:c8:c6:2e:a9:a3:b4:e7:5a:40:dd:
                    2c:2f:00:3e:b1:17:bb:58:19:09:95:12:32:db:87:
                    54:6d:e3:4a:a7:3e:56:56:4c:1c:fe:f4:d3:82:68:
                    af:13:d9:45:3e:9b:62:72:88:4a:45:91:3e:f3:d5:
                    ba:4e:20:92:e1:25:5a:2c:76:ec:7e:60:4f:b4:3c:
                    4b:d3:a1:7b:fb:7c:96:ee:f2:a0:11:32:c9:60:5b:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:76:24:63:F3:CB:43:CE:36:92:FF:46:EE:DA:83:BF:B2:BB:7B
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:2b:5c:b0:1a:35:ca:17:3e:50:2a:cd:a6:da:02:31:ca:ac:
         1f:f3:91:20:23:1e:fc:f2:b7:3f:ff:30:eb:6d:e6:ee:1a:d4:
         19:c9:0c:07:eb:f9:cb:a8:f4:4c:bd:dc:32:2a:6d:36:9c:88:
         40:72:db:2c:ec:53:f4:85:f5:9f:6f:69:99:f9:37:0e:23:24:
         d0:f4:cd:42:7f:ed:f2:37:9c:6f:aa:5b:33:30:41:a0:39:87:
         84:0f:e6:03:1a:72:a2:09:2e:1e:8e:2a:d0:c8:51:fa:6e:49:
         2d:ba:bb:f7:1d:2c:d8:84:d7:7c:17:d5:81:75:18:be:24:70:
         f3:c1:1e:32:18:2c:d4:e2:84:a6:f5:9d:e2:15:c8:b0:f0:3a:
         1a:f9:96:99:44:64:e7:72:32:5e:30:54:1d:16:04:ec:e7:49:
         3d:23:67:be:25:49:e8:55:c5:6e:29:f2:c3:af:d0:c6:4d:a4:
         38:20:f6:3a:32:47:6b:11:6d:2a:4e:43:4f:69:df:e4:fa:ea:
         ae:52:a9:a6:00:1b:cf:00:d6:3c:8c:d7:0a:14:fb:b5:3b:d0:
         a2:7a:10:bf:ec:9d:25:dc:ff:03:b0:e8:4e:76:55:f6:b2:7f:
         03:97:eb:fb:c6:97:da:86:bd:d0:b4:2b:df:ef:c5:4a:c1:14:
         81:4e:7b:77
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdMMf91D0FfNHkc4ll/th5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj
OGJkNTYwHhcNMjUwNjA3MjEwMDM0WhcNMjUwNjA4MjEwMDM0WjAzMTEwLwYDVQQD
Eyg3YjlhNzYyNDYzZjNjYjQzY2UzNjkyZmY0NmVlZGE4M2JmYjJiYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp55Kp8ekcqo1a/aiok9JS3LjqpTw
GkGcibGXIZVK8/6QP0v3MZgxSaDbmonEMLibKp0CR/qzqsYsH6SpMbAJRelHus3w
TqKadbSGnaZudItq5L8pLmCTx2g6Abeyog/VThIwdPwHkoHA2NGxtuns2v9cR9cD
Sd3VkIshCVNnUrx38iJEZ0mNubWc6qcaW0CrVUAq4RMMv4mBokflCiBPBViO88Zv
tlPsnsjGLqmjtOdaQN0sLwA+sRe7WBkJlRIy24dUbeNKpz5WVkwc/vTTgmivE9lF
PpticohKRZE+89W6TiCS4SVaLHbsfmBPtDxL06F7+3yW7vKgETLJYFsK8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHuadiRj88tDzjaS/0bu2oO/srt7MB8GA1UdIwQY
MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5
LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl
ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Ctc
sBo1yhc+UCrNptoCMcqsH/ORICMe/PK3P/8w623m7hrUGckMB+v5y6j0TL3cMipt
NpyIQHLbLOxT9IX1n29pmfk3DiMk0PTNQn/t8jecb6pbMzBBoDmHhA/mAxpyogku
Ho4q0MhR+m5JLbq79x0s2ITXfBfVgXUYviRw88EeMhgs1OKEpvWd4hXIsPA6GvmW
mURk53IyXjBUHRYE7OdJPSNnviVJ6FXFbinyw6/Qxk2kOCD2OjJHaxFtKk5DT2nf
5PrqrlKppgAbzwDWPIzXChT7tTvQonoQv+ydJdz/A7DoTnZV9rJ/A5fr+8aX2oa9
0LQr3+/FSsEUgU57dw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:16 2025 by rpki-client