Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          cgbZGD0Udtnl5YgkCslMqstoY7rEGlY0TY5Aq621oXk=
Subject key identifier:   25:CB:08:DC:7A:C6:40:75:60:93:5C:E6:E9:77:A0:AD:DF:4B:13:AD
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       019745F90CBE8EB0E3D9A1BD8D7E9FB31373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 16:00:38 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:38 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:38 +0000
Files and hashes:         1: BKkYw6wCv0BCzIN9mNvcFYakNOY.roa (hash: JOy8URSCrbw8xxAKeoSqWbsMyce29owmtAkGhYDeHjY=)
                          2: H1WmesnGsPGxvhrpIvl23X68COY.roa (hash: NWrgkD59WkzlbvqU60CxucBVP2HdE5fZ9W7KVT7TpRE=)
                          3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: hdjJ2/1Hmipc1gLRGurNhhmmvqbsdgEE6hs2zrBSs3Q=)
                          4: igy17iTeqaYCdBBLyoPaHClVJqQ.roa (hash: B+Liv7dvp/EsH5cWaQvjUo2qiny7+O+NyRrhBkq35hU=)
                          5: wcBe8u24JXjeTWcCpL97nHKl1AU.roa (hash: OcQcSR3oTfsUHozUBTzFplqG9Qb0tgWAtrlG+anwobY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:0c:be:8e:b0:e3:d9:a1:bd:8d:7e:9f:b3:13:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Jun  6 16:00:38 2025 GMT
            Not After : Jun  7 16:00:38 2025 GMT
        Subject: CN=25cb08dc7ac6407560935ce6e977a0addf4b13ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:39:02:26:55:a8:9d:1b:3a:65:17:76:a4:
                    0a:38:3c:49:f2:7e:05:5e:6b:05:42:7d:64:73:62:
                    af:a4:63:8e:1a:d0:e4:bc:21:9d:6b:43:5c:1d:46:
                    a8:f7:63:d4:a2:90:2b:1e:1b:a5:de:af:6c:d6:92:
                    45:d4:f2:92:1f:d6:e7:3c:8b:c1:8e:a1:46:7c:42:
                    76:37:68:f2:43:82:a9:29:56:ef:77:44:91:d6:f8:
                    21:83:d2:7c:d7:86:37:34:8d:21:cc:d7:ea:e3:cf:
                    64:61:6f:29:0c:c5:3b:c4:36:34:a5:b9:2c:b6:b0:
                    78:bf:63:3d:78:18:39:81:82:67:6b:0d:1b:aa:e0:
                    6b:2b:5a:94:a2:b5:c1:ed:e6:e1:8e:70:b6:b9:61:
                    60:ff:5b:5c:ed:94:00:25:bc:ed:34:df:8f:5c:aa:
                    e6:48:66:f1:60:02:9e:23:db:76:b3:77:d3:73:00:
                    4b:02:a2:a3:30:68:99:4a:77:e5:ab:2f:54:25:48:
                    42:61:1c:cc:97:47:a4:4d:3e:d8:1b:5b:4f:4e:2f:
                    44:c8:0d:4f:1f:73:27:db:bc:de:39:f2:22:8d:5a:
                    61:1a:33:6f:b3:64:ce:6f:33:b7:31:91:d2:d4:c7:
                    d1:36:ee:f8:83:d7:bf:77:fa:a1:a9:3f:4f:9d:66:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:08:DC:7A:C6:40:75:60:93:5C:E6:E9:77:A0:AD:DF:4B:13:AD
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:81:57:10:a9:4d:5a:32:07:c8:14:47:c9:1b:c8:3e:e3:
         a2:02:79:27:2f:0d:a4:db:6d:e8:90:65:d6:00:ac:81:0b:59:
         58:d2:0c:8c:23:5b:ac:e7:ee:85:a7:2e:45:0a:cf:36:98:20:
         63:54:3e:f4:e1:c2:71:d8:11:c5:83:6a:e4:aa:a3:54:39:68:
         9b:a8:ff:d9:29:f1:ab:5b:d8:ef:ed:df:c6:56:35:f0:dc:f7:
         3a:f3:13:95:89:f2:09:00:25:91:98:d1:ea:ad:e9:c3:27:90:
         dc:c7:82:95:ab:6d:b5:de:9d:58:66:15:3b:3d:e5:74:10:41:
         98:56:60:5d:f5:70:62:70:50:f2:54:be:bf:c6:db:e4:f8:91:
         59:a4:9e:b9:74:c4:f3:17:89:70:2f:ad:41:fb:4e:06:8b:d9:
         3e:98:3d:6c:8e:a8:47:fe:9e:a6:80:6d:0a:c6:8b:b0:63:ad:
         0d:10:09:be:03:cd:c5:25:1b:1a:63:2f:63:9b:58:1d:5e:bc:
         24:a4:72:cd:56:9c:5c:b0:3d:36:ce:1c:62:f5:9c:be:c4:ad:
         b6:28:fa:a1:3a:80:58:c8:9a:ff:cd:71:fb:5a:c3:7e:07:cf:
         8f:db:96:2f:a4:4f:d0:24:44:ef:b6:8f:39:1f:4e:c6:3a:2d:
         ff:6a:28:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+Qy+jrDj2aG9jX6fsxNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWJkZGFlNmE3YWNlZTgzYTMyMmEwZTc0M2E2NzU5ZDg1
MzY1ZjIwHhcNMjUwNjA2MTYwMDM4WhcNMjUwNjA3MTYwMDM4WjAzMTEwLwYDVQQD
EygyNWNiMDhkYzdhYzY0MDc1NjA5MzVjZTZlOTc3YTBhZGRmNGIxM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEo5AiZVqJ0bOmUXdqQKODxJ8n4F
XmsFQn1kc2KvpGOOGtDkvCGda0NcHUao92PUopArHhul3q9s1pJF1PKSH9bnPIvB
jqFGfEJ2N2jyQ4KpKVbvd0SR1vghg9J814Y3NI0hzNfq489kYW8pDMU7xDY0pbks
trB4v2M9eBg5gYJnaw0bquBrK1qUorXB7ebhjnC2uWFg/1tc7ZQAJbztNN+PXKrm
SGbxYAKeI9t2s3fTcwBLAqKjMGiZSnflqy9UJUhCYRzMl0ekTT7YG1tPTi9EyA1P
H3Mn27zeOfIijVphGjNvs2TObzO3MZHS1MfRNu74g9e/d/qhqT9PnWYA1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXLCNx6xkB1YJNc5ul3oK3fSxOtMB8GA1UdIwQY
MBaAFEbr3a5qes7oOjIqDnQ6Z1nYU2XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDIt
MmJjOTA3OTRkMzhkLzEvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDItMmJjOTA3OTRkMzhk
LzEvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiWBVxCp
TVoyB8gUR8kbyD7jogJ5Jy8NpNtt6JBl1gCsgQtZWNIMjCNbrOfuhacuRQrPNpgg
Y1Q+9OHCcdgRxYNq5KqjVDlom6j/2Snxq1vY7+3fxlY18Nz3OvMTlYnyCQAlkZjR
6q3pwyeQ3MeClatttd6dWGYVOz3ldBBBmFZgXfVwYnBQ8lS+v8bb5PiRWaSeuXTE
8xeJcC+tQftOBovZPpg9bI6oR/6epoBtCsaLsGOtDRAJvgPNxSUbGmMvY5tYHV68
JKRyzVacXLA9Ns4cYvWcvsSttij6oTqAWMia/81x+1rDfgfPj9uWL6RP0CRE77aP
OR9Oxjot/2ootA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:23 2025 by rpki-client