Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File:                     IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier:          Px+iMO5aihEyVwSvK3LISNZw3pCVWAlgj9Up3H9Sfrg=
Subject key identifier:   2B:97:74:63:AD:7F:F6:9A:CC:B3:3D:4F:1E:35:5E:63:24:92:F3:EF
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       01974C9FB3C8E39298298BAC98CD99014DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number:          158A
Signing time:             Sat 07 Jun 2025 23:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:24 +0000
Files and hashes:         1: GJD8bfj7CDyDTZI2kUpgDK-LxFE.roa (hash: PT10MFBUB5fp5Yrzzf9K0jem6hIintZDoPzR+wZ8gys=)
                          2: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: IOW0SWdigMEIBEZqwbbhoYAXWCIcl/0bMCCTm4F6Zao=)
                          3: V7WmFU14m96odb0vJ_cBmWZw2cs.roa (hash: g1WGH66JpNY1RGeN31ErEvWouzTCVBle7InxeJwxaqk=)
                          4: n-WWUpjJ7MYMStLhmDALvV4BwNw.roa (hash: mz0mPhV6HwUBsMpmeR/WiaLr/mHYJW7gp7wvEAXMlhc=)
                          5: uNRCg8RCGt-29v-27BZf_7lsI44.roa (hash: m/0/iSBb82vllm7VEgSPbCCwHT8ih3iEdCYjt2pJKGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:b3:c8:e3:92:98:29:8b:ac:98:cd:99:01:4d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: Jun  7 23:00:24 2025 GMT
            Not After : Jun  8 23:00:24 2025 GMT
        Subject: CN=2b977463ad7ff69accb33d4f1e355e632492f3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:10:62:8f:a9:b4:d0:b5:31:c0:e9:5d:a3:
                    66:a1:fc:93:dc:90:01:71:06:67:65:8f:b8:2e:cf:
                    f8:33:22:93:b9:e8:42:2d:1a:30:d8:35:86:41:5a:
                    7a:8a:49:4c:44:ca:15:e4:43:f5:45:32:46:4d:46:
                    f4:1d:a0:08:97:68:23:39:1f:a1:ce:a6:11:09:28:
                    7b:15:9a:b9:6b:ea:7b:75:d8:1a:de:b7:f4:f5:7d:
                    22:52:19:2e:64:ca:8c:1a:69:81:0e:c2:f4:89:44:
                    94:1c:2b:61:fa:e7:62:df:e5:c7:1b:16:de:92:44:
                    c6:c1:40:1b:1d:71:3e:97:4d:73:35:4a:f5:9b:e7:
                    f9:64:0a:a3:f5:14:83:06:3f:aa:3f:b4:6e:5c:be:
                    9c:9c:cc:3a:2a:be:bf:30:49:c5:dc:2b:2e:16:28:
                    67:23:6e:2c:f2:86:d0:73:8d:61:b2:88:b2:7b:00:
                    28:f9:b4:85:e4:a5:72:15:00:b9:d9:86:2e:85:e5:
                    4a:05:d7:ac:76:8f:7a:6f:e1:8f:e0:9d:e1:d5:c8:
                    f9:52:f4:d6:9e:26:54:27:3c:0c:15:aa:db:33:1e:
                    54:39:cd:d7:cd:e3:b6:ca:2e:00:7d:b8:82:4f:6b:
                    25:0c:3b:af:d2:b3:c0:e3:f6:8d:f0:a0:3e:30:0e:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:74:63:AD:7F:F6:9A:CC:B3:3D:4F:1E:35:5E:63:24:92:F3:EF
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:f0:ce:96:25:fb:79:7e:71:e6:1a:36:62:5f:57:76:d4:
         02:6d:9c:f5:8d:ad:17:2e:29:c1:09:4d:4f:56:bd:10:f5:49:
         93:18:21:75:e6:a0:57:fe:c9:ab:90:a1:01:ce:a8:9b:fa:20:
         95:ca:01:1f:be:18:c8:d4:36:5f:21:be:87:04:c6:2d:7f:fe:
         91:d2:48:0c:16:bd:a2:5e:b5:ee:df:64:27:e9:e6:1a:24:ef:
         36:dd:4d:5d:87:bd:d9:7e:74:55:da:9c:ce:43:3b:d2:62:5c:
         fd:da:06:c2:71:13:f0:6a:24:fb:14:77:6f:5e:1e:b9:83:d5:
         2b:22:d2:cd:28:8b:3a:c4:5b:04:19:32:84:05:c0:18:6a:c5:
         c6:c4:98:dd:43:29:f1:54:ec:6f:67:70:40:1a:cf:bb:92:63:
         9a:56:86:a1:b6:76:f2:3c:8a:aa:7a:22:4b:98:b9:fa:75:17:
         b7:68:0a:5a:d0:37:02:6b:b6:04:18:87:1f:a2:9e:69:b5:dc:
         e4:85:e4:c4:fd:82:86:51:ef:7c:fc:7f:70:da:77:c8:d2:75:
         01:48:75:a3:07:fe:64:cf:49:f2:aa:2c:54:3a:62:2b:4f:8b:
         f7:85:99:63:29:d2:06:6b:d9:d6:94:7a:ef:aa:22:1a:be:24:
         90:54:b7:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn7PI45KYKYusmM2ZAU3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi
YzBlMGYwHhcNMjUwNjA3MjMwMDI0WhcNMjUwNjA4MjMwMDI0WjAzMTEwLwYDVQQD
EygyYjk3NzQ2M2FkN2ZmNjlhY2NiMzNkNGYxZTM1NWU2MzI0OTJmM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhoQYo+ptNC1McDpXaNmofyT3JAB
cQZnZY+4Ls/4MyKTuehCLRow2DWGQVp6iklMRMoV5EP1RTJGTUb0HaAIl2gjOR+h
zqYRCSh7FZq5a+p7ddga3rf09X0iUhkuZMqMGmmBDsL0iUSUHCth+udi3+XHGxbe
kkTGwUAbHXE+l01zNUr1m+f5ZAqj9RSDBj+qP7RuXL6cnMw6Kr6/MEnF3CsuFihn
I24s8obQc41hsoiyewAo+bSF5KVyFQC52YYuheVKBdesdo96b+GP4J3h1cj5UvTW
niZUJzwMFarbMx5UOc3XzeO2yi4AfbiCT2slDDuv0rPA4/aN8KA+MA7pKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuXdGOtf/aazLM9Tx41XmMkkvPvMB8GA1UdIwQY
MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt
NzUxYjE3ZDFjNDM3LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5NzgtNzUxYjE3ZDFjNDM3
LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroXwzpYl
+3l+ceYaNmJfV3bUAm2c9Y2tFy4pwQlNT1a9EPVJkxghdeagV/7Jq5ChAc6om/og
lcoBH74YyNQ2XyG+hwTGLX/+kdJIDBa9ol617t9kJ+nmGiTvNt1NXYe92X50Vdqc
zkM70mJc/doGwnET8Gok+xR3b14euYPVKyLSzSiLOsRbBBkyhAXAGGrFxsSY3UMp
8VTsb2dwQBrPu5JjmlaGobZ28jyKqnoiS5i5+nUXt2gKWtA3Amu2BBiHH6KeabXc
5IXkxP2ChlHvfPx/cNp3yNJ1AUh1owf+ZM9J8qosVDpiK0+L94WZYynSBmvZ1pR6
76oiGr4kkFS3xw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:49 2025 by rpki-client