Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          VDuAVtZEpld7t8cg20+X6UYKtprtOyFHcR5LH9qW/PY=
Subject key identifier:   C9:54:FB:DE:3A:FB:F4:56:8E:E9:61:34:E4:4D:73:C3:66:82:B7:9E
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       0197469DCDCFCD94753E3D6216586CCA466B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 19:00:36 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:36 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:36 +0000
Files and hashes:         1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=)
                          2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=)
                          3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=)
                          4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: lR9ZuIlMek2Y0iLvcjySl0OVI+BSuZ8ElhV2y4SN/XQ=)
                          5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:cd:cf:cd:94:75:3e:3d:62:16:58:6c:ca:46:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Jun  6 19:00:36 2025 GMT
            Not After : Jun  7 19:00:36 2025 GMT
        Subject: CN=c954fbde3afbf4568ee96134e44d73c36682b79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:c4:ce:cd:91:9e:ff:8f:4c:cc:77:92:0d:
                    ff:e6:5c:27:e3:7e:70:3b:ef:9c:9d:1f:a2:57:04:
                    1d:f6:a7:df:0a:30:58:77:85:0c:c5:f1:16:fe:e3:
                    6a:c2:7a:42:eb:5c:85:1b:9e:8d:d1:cc:a8:42:f8:
                    a2:8b:a8:9e:ef:8f:be:38:a0:df:4a:b1:3d:83:51:
                    25:c6:23:3d:d9:ba:24:71:7c:56:f4:c8:9d:ac:88:
                    b6:6c:c9:f8:36:56:a3:da:26:fe:74:47:0c:bd:dd:
                    dc:1d:64:4c:82:cd:87:a1:1c:38:1d:f3:75:53:09:
                    6e:6e:e9:1b:3b:77:a2:3f:25:68:c1:5d:54:89:3d:
                    4a:53:e8:ca:64:36:29:f2:50:e1:70:f5:1e:33:ab:
                    da:54:68:a8:3a:eb:a4:8c:c7:08:49:83:3f:d5:f4:
                    e2:dc:36:53:76:b2:74:c4:50:a0:88:e2:bf:93:8d:
                    85:28:a8:de:f1:ee:2d:40:1c:ff:b0:ce:f0:dd:a1:
                    2e:96:e0:91:e7:7c:ac:1d:68:37:2a:46:f3:3d:69:
                    78:c1:ad:a0:f4:90:ec:59:56:ed:76:ea:b4:80:7b:
                    cc:f4:97:f5:66:e7:08:2a:d4:fb:45:6c:c6:85:b6:
                    8c:07:5a:31:14:22:16:1c:da:29:c6:b1:9d:00:8c:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:FB:DE:3A:FB:F4:56:8E:E9:61:34:E4:4D:73:C3:66:82:B7:9E
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:cf:9b:ad:f5:c9:a5:97:90:3b:60:55:bb:81:ba:9c:0d:
         26:8e:8f:0a:af:7e:3b:f3:dd:ed:d2:65:e5:ea:da:b8:a1:7b:
         57:62:69:3e:75:49:34:b7:3b:77:9d:bf:4a:7b:cd:03:72:d6:
         8a:7f:a6:23:90:6c:13:e9:e3:d5:10:4b:22:90:4e:54:2b:78:
         65:d9:80:e6:a1:d3:5a:0d:ec:4b:15:49:5f:3f:13:d8:4c:a1:
         fd:55:72:ec:76:00:b4:f6:7e:8e:55:20:c0:6e:66:05:aa:29:
         6f:9b:17:9c:e6:ad:ac:b5:27:90:42:2b:58:c4:4e:ab:86:31:
         01:e0:9f:46:fe:40:10:99:f6:99:f7:07:e5:be:2d:34:bb:14:
         76:ee:c0:59:70:ee:f3:16:71:71:57:a3:7d:64:79:da:8c:bb:
         85:3d:97:ae:3c:9e:be:2b:5e:9e:e1:7e:19:f3:fc:52:d7:2e:
         b7:8e:9e:26:ec:2a:e4:0f:ce:c5:7c:df:9f:b0:b4:f9:9a:30:
         92:40:7c:38:44:59:cc:69:24:6c:d5:6b:c1:37:c5:ef:7e:e3:
         e0:3b:e0:d7:b4:f5:04:f4:01:0f:90:57:53:7a:de:97:f2:4d:
         31:80:ce:da:ce:da:4c:89:8e:cf:99:0b:a8:52:0d:54:5d:46:
         dc:3d:15:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnc3PzZR1Pj1iFlhsykZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm
NDUwY2EwHhcNMjUwNjA2MTkwMDM2WhcNMjUwNjA3MTkwMDM2WjAzMTEwLwYDVQQD
EyhjOTU0ZmJkZTNhZmJmNDU2OGVlOTYxMzRlNDRkNzNjMzY2ODJiNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW/Ezs2Rnv+PTMx3kg3/5lwn435w
O++cnR+iVwQd9qffCjBYd4UMxfEW/uNqwnpC61yFG56N0cyoQviii6ie74++OKDf
SrE9g1ElxiM92bokcXxW9MidrIi2bMn4Nlaj2ib+dEcMvd3cHWRMgs2HoRw4HfN1
UwlubukbO3eiPyVowV1UiT1KU+jKZDYp8lDhcPUeM6vaVGioOuukjMcISYM/1fTi
3DZTdrJ0xFCgiOK/k42FKKje8e4tQBz/sM7w3aEuluCR53ysHWg3KkbzPWl4wa2g
9JDsWVbtduq0gHvM9Jf1ZucIKtT7RWzGhbaMB1oxFCIWHNopxrGdAIw1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlU+946+/RWjulhNORNc8NmgreeMB8GA1UdIwQY
MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt
ZWIxZjg3MTVlZWMwLzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw
LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVrPm631
yaWXkDtgVbuBupwNJo6PCq9+O/Pd7dJl5erauKF7V2JpPnVJNLc7d52/SnvNA3LW
in+mI5BsE+nj1RBLIpBOVCt4ZdmA5qHTWg3sSxVJXz8T2Eyh/VVy7HYAtPZ+jlUg
wG5mBaopb5sXnOatrLUnkEIrWMROq4YxAeCfRv5AEJn2mfcH5b4tNLsUdu7AWXDu
8xZxcVejfWR52oy7hT2XrjyevitenuF+GfP8Utcut46eJuwq5A/OxXzfn7C0+Zow
kkB8OERZzGkkbNVrwTfF737j4Dvg17T1BPQBD5BXU3rel/JNMYDO2s7aTImOz5kL
qFINVF1G3D0V1g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:28 2025 by rpki-client