Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File:                     2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier:          DSEzMF7Mu9I0VwjfUm7zn3BKq0ZGib4/7QB5JV9HxbY=
Subject key identifier:   E6:FC:28:F6:D3:7A:BD:49:53:96:BA:70:7B:08:99:89:E4:68:8C:3F
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer:       /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial:       01974B1F3FF9AB38E9EF530699FE47C11DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 16:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:28 +0000
Files and hashes:         1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: bHOeBT+O1QAiBxE6+CkLngmhldEeC9hLIKykiB+moGc=)
                          2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:3f:f9:ab:38:e9:ef:53:06:99:fe:47:c1:1d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
        Validity
            Not Before: Jun  7 16:00:28 2025 GMT
            Not After : Jun  8 16:00:28 2025 GMT
        Subject: CN=e6fc28f6d37abd495396ba707b089989e4688c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:52:e5:d6:96:92:aa:c4:04:09:94:0e:56:
                    25:76:6e:71:91:40:e0:0f:82:64:8d:9e:a8:e0:49:
                    00:40:58:f6:32:a3:ee:ff:60:5e:9e:cf:0d:5a:a0:
                    c9:8d:3f:b7:75:82:ce:6a:15:37:d4:f1:96:19:d6:
                    cf:04:fc:70:79:49:ec:c4:9b:e5:e4:45:b7:a1:9e:
                    36:c0:7d:9a:c9:72:ec:ad:b2:94:1f:f9:71:78:fd:
                    cc:d1:c6:13:e3:66:65:f3:fd:83:b5:63:cf:ea:ac:
                    f2:d4:dd:53:79:62:cc:62:08:7e:5d:32:49:08:70:
                    7e:39:9b:1a:81:2d:30:ac:30:5f:8e:68:c8:07:2e:
                    ec:d6:ca:14:44:ca:b5:cc:72:0d:fd:c6:6a:24:0b:
                    7f:b4:7a:cc:70:19:a1:c0:58:4e:0a:47:f8:e8:7c:
                    ba:d0:88:f7:92:0d:01:34:6e:71:5a:89:0b:6c:51:
                    78:08:ce:71:67:09:08:1b:11:6d:28:7f:c7:6d:40:
                    82:c1:5f:f3:72:a1:12:43:e1:2f:b3:8c:b8:49:1e:
                    d4:d9:fa:7e:e6:dd:f4:52:5a:97:b0:f7:68:87:90:
                    f8:5f:20:4d:0b:86:a1:9c:28:18:32:aa:39:80:f0:
                    66:8f:33:9d:37:35:60:dd:83:39:c3:69:42:67:72:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FC:28:F6:D3:7A:BD:49:53:96:BA:70:7B:08:99:89:E4:68:8C:3F
            X509v3 Authority Key Identifier:
                keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a0:7c:28:ae:a1:24:57:e7:f2:13:19:83:3e:b2:23:09:11:
         17:c6:d0:d7:01:f5:02:a4:e2:bc:a6:eb:07:a3:6d:6a:1c:b2:
         22:c5:2f:af:ee:45:b1:2c:30:34:d3:56:cc:a6:a6:55:9a:1d:
         ce:bc:de:13:8d:c6:12:0b:ed:97:99:65:e1:ff:16:6a:09:fb:
         79:86:4b:74:4e:07:89:47:a3:71:61:05:55:de:20:71:21:89:
         b5:4a:c0:8f:b1:ae:54:6b:20:93:b1:5f:4f:53:76:be:21:e2:
         9b:3b:9c:21:b2:a5:1f:e7:1e:0f:67:2e:34:0b:48:73:3e:f1:
         0d:2f:f9:37:2c:6f:9f:84:f9:c9:d0:58:51:39:b3:94:4e:08:
         b5:e3:17:b0:5f:7e:28:5f:85:d7:15:10:ab:2e:76:8f:97:55:
         9c:a8:26:fa:f3:21:4b:4f:66:1b:bd:e5:d8:74:ea:68:0e:f8:
         f1:e8:94:30:82:14:bc:fe:e9:ce:38:1d:11:6c:d5:ff:a1:97:
         10:98:40:81:cc:96:a3:03:b8:0f:8e:e7:ee:c7:83:b3:20:20:
         8c:15:fc:7f:00:e9:bb:37:84:67:87:28:ba:12:e9:c2:67:2a:
         70:f1:5b:a3:f6:dc:a2:06:e4:1a:70:1c:ba:f7:83:0c:2e:2f:
         06:40:f0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLHz/5qzjp71MGmf5HwR3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4
NWU0NjEwHhcNMjUwNjA3MTYwMDI4WhcNMjUwNjA4MTYwMDI4WjAzMTEwLwYDVQQD
EyhlNmZjMjhmNmQzN2FiZDQ5NTM5NmJhNzA3YjA4OTk4OWU0Njg4YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMVS5daWkqrEBAmUDlYldm5xkUDg
D4JkjZ6o4EkAQFj2MqPu/2Bens8NWqDJjT+3dYLOahU31PGWGdbPBPxweUnsxJvl
5EW3oZ42wH2ayXLsrbKUH/lxeP3M0cYT42Zl8/2DtWPP6qzy1N1TeWLMYgh+XTJJ
CHB+OZsagS0wrDBfjmjIBy7s1soURMq1zHIN/cZqJAt/tHrMcBmhwFhOCkf46Hy6
0Ij3kg0BNG5xWokLbFF4CM5xZwkIGxFtKH/HbUCCwV/zcqESQ+Evs4y4SR7U2fp+
5t30UlqXsPdoh5D4XyBNC4ahnCgYMqo5gPBmjzOdNzVg3YM5w2lCZ3Kd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb8KPbTer1JU5a6cHsImYnkaIw/MB8GA1UdIwQY
MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt
NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl
LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKB8KK6h
JFfn8hMZgz6yIwkRF8bQ1wH1AqTivKbrB6NtahyyIsUvr+5FsSwwNNNWzKamVZod
zrzeE43GEgvtl5ll4f8Wagn7eYZLdE4HiUejcWEFVd4gcSGJtUrAj7GuVGsgk7Ff
T1N2viHimzucIbKlH+ceD2cuNAtIcz7xDS/5Nyxvn4T5ydBYUTmzlE4IteMXsF9+
KF+F1xUQqy52j5dVnKgm+vMhS09mG73l2HTqaA748eiUMIIUvP7pzjgdEWzV/6GX
EJhAgcyWowO4D47n7seDsyAgjBX8fwDpuzeEZ4couhLpwmcqcPFbo/bcogbkGnAc
uveDDC4vBkDwXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:41 2025 by rpki-client