Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File:                     qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier:          q73B3dMZRyL9XrKk8AhUjNi/pOdg7fN1aY8lub5UvQE=
Subject key identifier:   C1:87:1A:22:D9:F6:30:31:03:22:BB:26:61:71:77:BF:4C:A2:60:DA
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer:       /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial:       01973FC0010F77C757B430A618F605D6FD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number:          157C
Signing time:             Thu 05 Jun 2025 11:00:37 +0000
Manifest this update:     Thu 05 Jun 2025 11:00:37 +0000
Manifest next update:     Fri 06 Jun 2025 11:00:37 +0000
Files and hashes:         1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
                          2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
                          3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
                          4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: xieP71+B5cI4KuItaimDqDuU7tpKc+KGvmqV1GjwZXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3f:c0:01:0f:77:c7:57:b4:30:a6:18:f6:05:d6:fd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
        Validity
            Not Before: Jun  5 11:00:37 2025 GMT
            Not After : Jun  6 11:00:37 2025 GMT
        Subject: CN=c1871a22d9f630310322bb26617177bf4ca260da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:f6:ec:f4:21:e2:d1:97:18:17:a4:57:e7:
                    02:c5:39:54:27:4e:a8:48:62:ce:a4:a1:82:0b:67:
                    63:4e:1f:ff:8d:ec:36:11:53:ca:db:07:ee:2d:bc:
                    c5:3b:4d:f3:a3:1c:a2:de:8f:e1:97:52:21:c1:74:
                    e3:8f:35:f3:86:9b:6e:4e:e8:6e:d9:f1:2b:c2:4c:
                    d0:fe:99:59:1f:53:4c:63:3b:9c:80:eb:02:99:3a:
                    ea:a1:eb:54:02:9b:7b:a0:d3:af:40:fd:ab:9d:d6:
                    95:bd:26:96:64:59:33:ca:79:72:18:f6:18:5c:b2:
                    1b:24:52:8e:ce:26:c6:0d:49:00:17:b2:9b:cf:73:
                    fc:f8:aa:51:59:23:d6:07:69:fa:f2:53:c7:b8:f5:
                    32:40:43:fe:f3:4f:c5:96:56:24:96:65:ae:3f:85:
                    48:2b:98:a2:e7:2c:34:bf:2d:7b:3c:98:62:a0:c9:
                    11:f2:68:42:12:f1:05:dc:93:68:29:05:ae:3b:ad:
                    98:96:5c:41:14:4e:c4:56:31:24:a4:92:cf:09:06:
                    89:d1:8c:cd:ab:8c:11:78:b7:3d:63:54:be:d8:7b:
                    7f:21:33:db:1a:80:c5:3c:59:ae:4f:e3:ca:c2:5c:
                    c8:ca:8e:cc:d2:18:14:ab:93:88:e2:f1:75:49:70:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:87:1A:22:D9:F6:30:31:03:22:BB:26:61:71:77:BF:4C:A2:60:DA
            X509v3 Authority Key Identifier:
                keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:58:49:b9:ec:de:15:ea:8e:36:f7:83:d1:f0:79:ab:52:95:
         dc:82:77:43:b3:a4:ae:2c:c1:9e:af:6a:a7:cf:d3:b5:55:43:
         87:0f:e6:1e:d9:41:f8:38:65:d7:e4:41:85:c0:6b:ec:61:8c:
         1f:f1:51:8b:f1:c1:0b:27:f5:24:a5:3f:99:c1:9c:eb:a8:cc:
         46:48:58:e2:4a:8c:8e:28:8c:19:44:79:13:f6:18:bd:3f:42:
         c9:fb:1b:2d:75:cf:dd:03:90:18:a0:a0:07:7a:96:ed:67:bb:
         3d:70:53:96:9e:7e:9e:6d:82:59:7c:1c:d9:f9:8b:16:33:d0:
         5e:8a:f5:01:03:be:33:65:a0:8c:b7:f7:c8:f8:ab:56:27:4a:
         85:01:a6:7c:14:d5:d5:9d:43:97:22:fd:a0:fd:9e:66:f2:72:
         2a:af:80:a7:d6:7d:13:86:b4:56:bc:24:43:d6:58:91:73:4b:
         04:1c:05:c8:fd:0f:0f:0e:09:88:32:ee:b4:48:05:50:34:2d:
         3e:81:0b:d1:02:30:7e:df:fb:2c:b1:6e:81:47:7f:a9:33:0b:
         5f:8e:b1:d2:92:a2:11:6e:64:dc:5b:85:5e:e5:2c:d2:b0:6f:
         af:3d:ea:35:e7:f7:b3:de:52:19:50:c8:75:8c:cf:ae:e8:85:
         6b:c0:84:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc/wAEPd8dXtDCmGPYF1v01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMmU1YjY3ZjI1Y2JkODgyY2E0ZDAyM2QyMWVmOThkNDgz
NzM1ZGIwHhcNMjUwNjA1MTEwMDM3WhcNMjUwNjA2MTEwMDM3WjAzMTEwLwYDVQQD
EyhjMTg3MWEyMmQ5ZjYzMDMxMDMyMmJiMjY2MTcxNzdiZjRjYTI2MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JT27PQh4tGXGBekV+cCxTlUJ06o
SGLOpKGCC2djTh//jew2EVPK2wfuLbzFO03zoxyi3o/hl1IhwXTjjzXzhptuTuhu
2fErwkzQ/plZH1NMYzucgOsCmTrqoetUApt7oNOvQP2rndaVvSaWZFkzynlyGPYY
XLIbJFKOzibGDUkAF7Kbz3P8+KpRWSPWB2n68lPHuPUyQEP+80/FllYklmWuP4VI
K5ii5yw0vy17PJhioMkR8mhCEvEF3JNoKQWuO62YllxBFE7EVjEkpJLPCQaJ0YzN
q4wReLc9Y1S+2Ht/ITPbGoDFPFmuT+PKwlzIyo7M0hgUq5OI4vF1SXCHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGHGiLZ9jAxAyK7JmFxd79MomDaMB8GA1UdIwQY
MBaAFKsuW2fyXL2ILKTQI9Ie+Y1INzXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEt
M2Y2ZWMyNDk3MTdjLzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEtM2Y2ZWMyNDk3MTdj
LzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1hJueze
FeqONveD0fB5q1KV3IJ3Q7OkrizBnq9qp8/TtVVDhw/mHtlB+Dhl1+RBhcBr7GGM
H/FRi/HBCyf1JKU/mcGc66jMRkhY4kqMjiiMGUR5E/YYvT9CyfsbLXXP3QOQGKCg
B3qW7We7PXBTlp5+nm2CWXwc2fmLFjPQXor1AQO+M2WgjLf3yPirVidKhQGmfBTV
1Z1DlyL9oP2eZvJyKq+Ap9Z9E4a0VrwkQ9ZYkXNLBBwFyP0PDw4JiDLutEgFUDQt
PoEL0QIwft/7LLFugUd/qTMLX46x0pKiEW5k3FuFXuUs0rBvrz3qNef3s95SGVDI
dYzPruiFa8CEcw==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:55 2025 by rpki-client