Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File:                     v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier:          0DD4dCETKfyO3hTWN9wO/mTa/+s0MbKGE4Wk9yQlO7o=
Subject key identifier:   47:CA:C0:9E:9E:C2:2A:25:6E:2D:FC:64:0E:56:9B:68:23:CD:E6:F1
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer:       /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial:       01974A0C92827B3359515F3DD79C641C0656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 11:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:27 +0000
Files and hashes:         1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
                          2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: 5OpuCbHSG2ASGzzd18yj+yJgw5acBxOfv2WWecjpl70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:92:82:7b:33:59:51:5f:3d:d7:9c:64:1c:06:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
        Validity
            Not Before: Jun  7 11:00:27 2025 GMT
            Not After : Jun  8 11:00:27 2025 GMT
        Subject: CN=47cac09e9ec22a256e2dfc640e569b6823cde6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:23:03:50:88:ee:70:3f:d2:27:75:a0:82:
                    b8:6a:4b:70:15:e2:1c:9c:94:7a:79:5e:a0:78:f7:
                    33:64:77:5a:fe:6e:21:ac:18:fb:e7:17:46:82:0c:
                    92:b3:67:74:08:5a:32:e3:20:04:39:62:e1:72:af:
                    bb:96:1c:37:af:92:df:f4:b9:a9:b9:e7:aa:f5:58:
                    59:b4:74:30:f2:e2:f0:c8:54:49:1b:d8:ce:52:62:
                    da:77:59:a8:d1:20:07:ee:7f:3b:79:65:c9:e9:92:
                    91:28:ab:bb:ae:a7:32:01:0e:63:25:07:66:97:2d:
                    0a:51:db:b4:78:3c:a1:77:9b:22:4d:f9:14:73:12:
                    ce:d5:6c:94:38:30:7c:94:68:0c:2d:73:94:56:a7:
                    59:c6:8b:b7:e8:cf:0e:91:31:cc:e5:bb:cc:fd:2f:
                    87:4d:db:88:a7:da:9b:f4:fd:54:40:26:2d:c1:ec:
                    70:e8:45:7c:ee:5b:8a:cd:ce:d8:e2:c4:23:d0:3f:
                    35:2d:44:ce:31:e6:f5:72:39:c1:30:39:66:30:02:
                    67:9b:f2:8b:73:2f:c3:a9:49:0b:b9:e8:9c:75:24:
                    a1:6c:92:1d:38:ba:e4:be:a1:44:4b:c9:eb:20:6b:
                    ad:37:59:cf:80:b5:4e:cd:e9:39:64:f5:d9:2e:8e:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CA:C0:9E:9E:C2:2A:25:6E:2D:FC:64:0E:56:9B:68:23:CD:E6:F1
            X509v3 Authority Key Identifier:
                keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:2b:5d:b3:a0:51:0a:63:9f:a9:1c:5a:74:8e:c2:33:ce:
         35:24:bf:4d:1e:92:43:c7:4b:f9:0b:b8:f3:53:19:7a:f0:17:
         32:ca:4c:86:19:94:ca:5a:34:30:c6:15:d8:b8:b5:fd:b2:30:
         91:5e:08:75:f5:62:cc:c5:3d:b6:f0:b8:e3:64:48:c6:14:fb:
         e4:26:88:1c:2b:0c:8e:f7:26:b4:e9:08:2c:ea:89:c6:7c:f9:
         a6:da:45:ea:57:16:b9:39:49:f4:cb:cf:4a:20:7e:02:e0:ab:
         ae:ea:f5:fd:f8:46:a4:5e:c5:c8:fa:bc:e8:c8:43:87:25:25:
         0f:4e:64:6d:99:9a:76:b8:d7:51:68:43:5f:27:35:14:de:8c:
         9e:fe:ee:1a:16:bb:84:a4:9a:13:d7:65:94:59:b0:f5:2b:dc:
         59:16:b6:a9:48:32:5c:6b:98:bc:69:24:99:4c:7c:e1:2b:cf:
         bc:aa:f0:c9:29:cb:53:f8:43:e0:16:83:67:09:02:1b:7f:92:
         53:a1:d0:fe:99:cc:60:5f:79:3e:0f:b1:65:17:a2:7a:29:9d:
         69:85:33:7f:6f:36:64:2a:5d:dd:26:1e:54:13:74:52:2b:02:
         31:7b:ab:e3:39:30:64:bc:96:6b:e8:fe:5e:63:43:6b:c1:3f:
         08:b5:2e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDJKCezNZUV8915xkHAZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjUwNjA3MTEwMDI3WhcNMjUwNjA4MTEwMDI3WjAzMTEwLwYDVQQD
Eyg0N2NhYzA5ZTllYzIyYTI1NmUyZGZjNjQwZTU2OWI2ODIzY2RlNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz40jA1CI7nA/0id1oIK4aktwFeIc
nJR6eV6gePczZHda/m4hrBj75xdGggySs2d0CFoy4yAEOWLhcq+7lhw3r5Lf9Lmp
ueeq9VhZtHQw8uLwyFRJG9jOUmLad1mo0SAH7n87eWXJ6ZKRKKu7rqcyAQ5jJQdm
ly0KUdu0eDyhd5siTfkUcxLO1WyUODB8lGgMLXOUVqdZxou36M8OkTHM5bvM/S+H
TduIp9qb9P1UQCYtwexw6EV87luKzc7Y4sQj0D81LUTOMeb1cjnBMDlmMAJnm/KL
cy/DqUkLueicdSShbJIdOLrkvqFES8nrIGutN1nPgLVOzek5ZPXZLo7VrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfKwJ6ewiolbi38ZA5Wm2gjzebxMB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa04rXbOg
UQpjn6kcWnSOwjPONSS/TR6SQ8dL+Qu481MZevAXMspMhhmUylo0MMYV2Li1/bIw
kV4IdfVizMU9tvC442RIxhT75CaIHCsMjvcmtOkILOqJxnz5ptpF6lcWuTlJ9MvP
SiB+AuCrrur1/fhGpF7FyPq86MhDhyUlD05kbZmadrjXUWhDXyc1FN6Mnv7uGha7
hKSaE9dllFmw9SvcWRa2qUgyXGuYvGkkmUx84SvPvKrwySnLU/hD4BaDZwkCG3+S
U6HQ/pnMYF95Pg+xZReieimdaYUzf282ZCpd3SYeVBN0UisCMXur4zkwZLyWa+j+
XmNDa8E/CLUufg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:38:44 2025 by rpki-client