Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File:                     RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier:          TXFklpCY7np2XZsgfXnBgns2r44zePYW2IP3t4Ae9eU=
Subject key identifier:   F3:80:11:BA:96:21:3F:38:59:B8:F9:A1:42:99:43:A1:92:5D:8E:07
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer:       /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial:       01976EF545122EEC1020A4AA4D4D3F98C633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 15:00:57 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:57 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:57 +0000
Files and hashes:         1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: z+9mULbfgdpdSuxLOLKXaZLGft7QvnQuGuXD0nWR2/M=)
                          2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:45:12:2e:ec:10:20:a4:aa:4d:4d:3f:98:c6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
        Validity
            Not Before: Jun 14 15:00:57 2025 GMT
            Not After : Jun 15 15:00:57 2025 GMT
        Subject: CN=f38011ba96213f3859b8f9a1429943a1925d8e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:27:85:88:8f:b0:ce:c9:7c:07:13:10:29:
                    a5:3f:56:e9:70:8b:c6:ef:ef:85:04:2c:87:b7:d9:
                    1c:3e:52:62:b7:e5:79:b8:d9:51:9b:a7:b7:cd:42:
                    ef:37:3d:db:6f:e4:9a:8d:86:01:95:28:9e:d8:fb:
                    54:98:12:78:86:99:59:54:4f:36:fe:2b:43:86:f2:
                    f4:8a:b9:40:57:ee:ce:14:8a:8c:61:6a:22:c4:a4:
                    b1:a6:5e:20:67:21:06:a5:95:4a:70:b9:6e:fc:61:
                    fa:d9:11:ac:7a:67:ac:89:70:e5:2d:1d:65:5e:87:
                    a6:5b:f0:74:df:e8:0a:03:a6:ec:45:3c:34:f2:57:
                    2f:84:ad:82:65:7c:ef:b1:b2:70:d3:e6:27:69:4f:
                    74:82:20:9f:08:af:e7:cd:5a:7a:3b:78:00:fc:d3:
                    2f:03:5c:6f:cb:47:56:67:2f:1b:88:34:15:c4:9a:
                    86:a9:14:e8:da:8b:94:f4:ea:f3:60:30:ef:18:90:
                    e5:4a:30:31:d5:8d:09:87:97:e1:3b:e9:10:e7:3f:
                    4d:e8:2d:ff:f9:f1:3a:fa:26:89:93:bd:19:db:0c:
                    53:50:56:6c:a7:cd:d3:66:4c:1b:1c:0d:a6:f5:5d:
                    3d:ed:44:b0:ab:a4:d6:33:c5:6a:50:54:bc:ab:ee:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:80:11:BA:96:21:3F:38:59:B8:F9:A1:42:99:43:A1:92:5D:8E:07
            X509v3 Authority Key Identifier:
                keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:91:3d:ed:a3:1b:f9:55:ee:c7:96:9c:d0:9d:c7:31:f7:e2:
         4f:47:9c:86:8f:37:06:87:ec:5e:82:63:b4:47:29:c0:e2:44:
         dd:d0:60:61:38:6c:ab:6e:3f:2e:d9:88:23:02:d3:5d:76:4b:
         ab:bf:6e:8a:53:58:96:ab:de:dc:9a:3f:97:c7:28:e5:56:9c:
         85:d3:52:d3:81:03:d2:a4:c3:32:1f:bf:e0:80:d3:95:e5:fe:
         98:78:e8:34:23:10:5b:c0:df:a3:22:e1:20:d0:51:70:ff:8f:
         c4:1b:8f:0a:3e:c1:fd:de:76:36:2a:cf:70:e0:79:87:74:c7:
         90:13:f9:9e:e0:10:05:97:c0:d1:11:20:30:ff:a1:74:1a:8a:
         9c:7d:d4:f0:b8:60:6d:74:85:9f:7d:04:8d:95:39:4b:f9:cf:
         2c:76:ff:cf:51:8d:ab:6b:95:66:62:33:32:4f:5f:1b:3a:48:
         05:ba:98:26:79:76:88:e8:86:d2:1a:14:ba:99:5f:6f:3a:76:
         13:68:9c:e8:65:f6:05:4e:e0:e4:93:f7:57:f3:72:db:36:1b:
         d3:3f:3d:ab:93:17:34:4a:ae:0b:6b:cf:5b:22:e1:cf:c8:f2:
         05:bd:84:17:17:b0:82:03:4f:20:6a:54:54:b8:8f:73:4f:93:
         9b:2a:17:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9UUSLuwQIKSqTU0/mMYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2IwOWI4ZmRlZGU2Y2FiNTI0ZmNhYTNiMzFlNjE2YmEy
ZTQ4OTYwHhcNMjUwNjE0MTUwMDU3WhcNMjUwNjE1MTUwMDU3WjAzMTEwLwYDVQQD
EyhmMzgwMTFiYTk2MjEzZjM4NTliOGY5YTE0Mjk5NDNhMTkyNWQ4ZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKsnhYiPsM7JfAcTECmlP1bpcIvG
7++FBCyHt9kcPlJit+V5uNlRm6e3zULvNz3bb+SajYYBlSie2PtUmBJ4hplZVE82
/itDhvL0irlAV+7OFIqMYWoixKSxpl4gZyEGpZVKcLlu/GH62RGsemesiXDlLR1l
XoemW/B03+gKA6bsRTw08lcvhK2CZXzvsbJw0+YnaU90giCfCK/nzVp6O3gA/NMv
A1xvy0dWZy8biDQVxJqGqRTo2ouU9OrzYDDvGJDlSjAx1Y0Jh5fhO+kQ5z9N6C3/
+fE6+iaJk70Z2wxTUFZsp83TZkwbHA2m9V097USwq6TWM8VqUFS8q+7GIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOAEbqWIT84Wbj5oUKZQ6GSXY4HMB8GA1UdIwQY
MBaAFEc7Cbj97ebKtST8qjsx5ha6LkiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEt
MjU4ODU0ZTUwY2Y4LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEtMjU4ODU0ZTUwY2Y4
LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZE97aMb
+VXux5ac0J3HMffiT0echo83BofsXoJjtEcpwOJE3dBgYThsq24/LtmIIwLTXXZL
q79uilNYlqve3Jo/l8co5VachdNS04ED0qTDMh+/4IDTleX+mHjoNCMQW8DfoyLh
INBRcP+PxBuPCj7B/d52NirPcOB5h3THkBP5nuAQBZfA0REgMP+hdBqKnH3U8Lhg
bXSFn30EjZU5S/nPLHb/z1GNq2uVZmIzMk9fGzpIBbqYJnl2iOiG0hoUuplfbzp2
E2ic6GX2BU7g5JP3V/Ny2zYb0z89q5MXNEquC2vPWyLhz8jyBb2EFxewggNPIGpU
VLiPc0+TmyoXOw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:18 2025 by rpki-client