Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          RevVxZ3vyduNvqVYhX3VvfsUfNN3xCIoNoEQ7Gj12ZY=
Subject key identifier:   79:A4:ED:06:1E:D9:50:1D:25:88:90:CC:A2:95:D1:57:EF:7B:93:B8
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       0197470BD8DBA4D2592246498D210FB0AC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 21:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:48 +0000
Files and hashes:         1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
                          2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
                          3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: J1aO/UVUZBk7cnf8c62TBN/zdm92TCz+ZEFSlHRuOcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:d8:db:a4:d2:59:22:46:49:8d:21:0f:b0:ac:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Jun  6 21:00:48 2025 GMT
            Not After : Jun  7 21:00:48 2025 GMT
        Subject: CN=79a4ed061ed9501d258890cca295d157ef7b93b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:af:74:ee:9d:43:58:92:f9:95:f5:21:5e:
                    27:52:58:63:55:ba:92:ee:48:bc:31:b6:6e:bc:3f:
                    c4:7e:78:3d:88:f3:c2:23:d7:36:1e:d6:6b:5a:bf:
                    58:80:bb:fe:97:64:97:99:e9:ed:02:4f:c2:91:6d:
                    62:37:03:63:38:fa:3b:5e:92:ec:b8:f5:79:66:d1:
                    c1:d3:c5:e7:a4:5a:c0:df:5b:61:69:cb:1a:49:4b:
                    84:cc:10:f2:5f:f1:09:f2:6c:3d:8a:38:90:44:47:
                    2e:05:ec:6f:b4:49:a3:db:c1:da:6c:10:67:a5:c4:
                    bc:2a:91:16:33:34:88:df:cf:91:70:19:24:2e:3c:
                    f7:2a:09:f6:89:2e:24:cc:d4:df:da:ed:16:51:2a:
                    39:66:ed:29:96:63:7b:db:a0:e8:08:0f:42:a6:f9:
                    be:65:79:95:c5:bf:23:90:2a:7b:46:f0:66:f4:d1:
                    e9:bf:c9:88:03:3b:d2:42:89:6b:8f:c8:ce:a8:23:
                    28:84:c4:5c:2a:9b:93:df:8b:c3:a5:e3:58:32:f5:
                    36:67:d3:58:10:27:fb:10:30:23:b9:11:71:cd:8c:
                    91:7e:d9:c5:b3:c6:b4:6e:5e:5e:d5:a2:52:81:3a:
                    d2:8d:c3:36:7c:18:01:34:06:a5:c0:47:c8:f1:d1:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:ED:06:1E:D9:50:1D:25:88:90:CC:A2:95:D1:57:EF:7B:93:B8
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:29:c4:02:64:28:7f:ec:69:b3:41:81:ed:a3:08:6e:6c:
         97:23:8b:b8:ce:09:4f:27:34:b1:b0:04:61:62:56:c0:2b:80:
         7f:87:b1:e7:2c:f2:da:1d:91:f0:49:f3:76:c6:64:eb:aa:52:
         7c:de:17:de:01:66:88:19:5b:19:39:8d:81:f3:d9:fe:dc:17:
         58:21:e1:e9:fc:c8:00:2e:2b:48:52:1a:76:dd:db:fe:26:40:
         7f:10:67:81:86:b8:5a:34:9f:f2:85:e7:4f:a1:98:d7:9a:a1:
         83:2c:e1:0c:b4:c3:c5:77:3b:ef:92:1d:67:26:85:ba:26:59:
         6d:92:91:ce:5f:ec:b8:56:a1:76:18:37:cf:bb:81:b2:19:9e:
         e7:06:77:db:77:e6:03:b1:b9:7b:9b:f8:f4:5c:1e:39:6b:9c:
         cc:34:36:f5:19:95:2b:1e:67:b8:89:e0:be:8b:f7:f2:20:16:
         bd:72:4c:27:17:db:65:a3:7f:fb:04:8d:fc:e7:05:d7:8f:4d:
         22:25:03:1c:7b:c4:b4:3f:82:db:61:ca:c8:8a:b2:29:9f:c5:
         e0:23:ff:b6:4f:e6:c8:55:d0:eb:f1:e2:1f:30:1f:ab:a8:68:
         21:e0:7a:22:8a:13:3d:cc:c1:9a:cc:f9:52:c7:36:13:54:ae:
         ee:d4:4d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC9jbpNJZIkZJjSEPsKx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjUwNjA2MjEwMDQ4WhcNMjUwNjA3MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg3OWE0ZWQwNjFlZDk1MDFkMjU4ODkwY2NhMjk1ZDE1N2VmN2I5M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRyvdO6dQ1iS+ZX1IV4nUlhjVbqS
7ki8MbZuvD/Efng9iPPCI9c2HtZrWr9YgLv+l2SXmentAk/CkW1iNwNjOPo7XpLs
uPV5ZtHB08XnpFrA31thacsaSUuEzBDyX/EJ8mw9ijiQREcuBexvtEmj28HabBBn
pcS8KpEWMzSI38+RcBkkLjz3Kgn2iS4kzNTf2u0WUSo5Zu0plmN726DoCA9Cpvm+
ZXmVxb8jkCp7RvBm9NHpv8mIAzvSQolrj8jOqCMohMRcKpuT34vDpeNYMvU2Z9NY
ECf7EDAjuRFxzYyRftnFs8a0bl5e1aJSgTrSjcM2fBgBNAalwEfI8dFOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmk7QYe2VAdJYiQzKKV0Vfve5O4MB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSwpxAJk
KH/sabNBge2jCG5slyOLuM4JTyc0sbAEYWJWwCuAf4ex5yzy2h2R8EnzdsZk66pS
fN4X3gFmiBlbGTmNgfPZ/twXWCHh6fzIAC4rSFIadt3b/iZAfxBngYa4WjSf8oXn
T6GY15qhgyzhDLTDxXc775IdZyaFuiZZbZKRzl/suFahdhg3z7uBshme5wZ323fm
A7G5e5v49FweOWuczDQ29RmVKx5nuIngvov38iAWvXJMJxfbZaN/+wSN/OcF149N
IiUDHHvEtD+C22HKyIqyKZ/F4CP/tk/myFXQ6/HiHzAfq6hoIeB6IooTPczBmsz5
Usc2E1Su7tRN4g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:33:39 2025 by rpki-client