Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          7xihtjYp3pExT/uae1F67PY7zTAHfU6TZw/7VQpPwaw=
Subject key identifier:   FA:F4:72:EF:C2:E6:38:D3:3F:64:4A:7F:48:FA:BD:A0:0D:D9:A3:E3
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       0197488BF8717233336DA43B197F40F68272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          158B
Signing time:             Sat 07 Jun 2025 04:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:21 +0000
Files and hashes:         1: 1-URZqQquaOMP-9g7rT4jquZDbLY.roa (hash: 9avlk18PNZo3C/1d4M2snDrA2piYc891rXihkOFd4Fw=)
                          2: C_ziNaXKn4VDpbrAEu9weVF52JA.roa (hash: uW9Tu1YIQ5nRvRVJvhMOdJvsptWQiAhpmFSnfRGl4eY=)
                          3: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: LPdCPNPyqN8piiUjBm5va/NFevu99W6L69v4oQgycYk=)
                          4: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8b:f8:71:72:33:33:6d:a4:3b:19:7f:40:f6:82:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Jun  7 04:00:21 2025 GMT
            Not After : Jun  8 04:00:21 2025 GMT
        Subject: CN=faf472efc2e638d33f644a7f48fabda00dd9a3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:cf:fb:6a:0d:c9:29:7d:f0:87:a6:de:c9:
                    72:d8:21:6c:65:ce:06:ae:2d:9c:8a:0e:2f:bc:3e:
                    28:4f:ff:bf:f9:8a:8f:76:31:fa:23:4e:cf:37:0c:
                    3b:af:7c:8e:a8:cc:5b:db:a4:3a:e0:b5:e6:b1:af:
                    d7:9e:52:cc:a9:e6:79:e8:60:27:f4:8c:c9:de:f6:
                    0d:fb:57:83:6d:8d:95:7f:a5:80:25:54:06:f0:0c:
                    ac:01:37:99:f2:ba:3f:f3:39:a3:c5:8f:85:6f:aa:
                    07:d0:29:94:8c:96:bd:0a:d7:29:66:b9:ec:19:fb:
                    67:80:5d:29:55:a9:14:9a:35:c9:aa:eb:ef:47:62:
                    c6:ba:cd:e6:b3:cb:82:c6:90:e2:da:15:aa:f8:69:
                    6c:00:ef:94:b5:f1:d4:bc:81:b1:f3:b1:32:83:96:
                    c0:bc:1e:d2:9f:50:96:32:2b:f0:6a:f4:5b:56:ce:
                    b5:31:b0:07:53:df:bc:f2:2f:4a:1c:f5:f3:ce:16:
                    76:6a:b0:6d:72:80:81:82:80:c9:31:a0:f8:cd:30:
                    6b:a3:8f:be:3b:de:43:07:fb:63:48:c5:1b:4b:5f:
                    59:c7:09:55:d4:3b:b5:64:fb:7f:7d:2f:b5:fd:3a:
                    36:3b:19:23:6e:e8:2f:25:75:c4:33:63:c5:c9:a8:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F4:72:EF:C2:E6:38:D3:3F:64:4A:7F:48:FA:BD:A0:0D:D9:A3:E3
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:75:ce:53:8f:a6:ad:0a:c8:b8:a6:77:6a:ed:47:4e:14:32:
         0a:89:30:7f:f0:ab:c4:06:bb:17:25:3c:56:4a:c5:01:3d:26:
         12:2d:fb:d2:40:52:7e:62:c7:c5:c7:45:74:60:7e:70:f7:c5:
         ec:2e:35:3b:c8:83:20:4d:92:42:66:a5:c5:0b:92:e1:a2:7e:
         7a:02:e5:ab:69:3b:ff:c1:ae:1f:58:4b:67:94:56:40:d0:56:
         9b:7d:78:7e:be:a9:b9:4f:e3:04:28:db:3e:5e:39:6a:12:7c:
         ea:47:43:ca:a3:b6:28:96:85:4c:12:27:58:26:e5:19:44:a2:
         f7:29:10:3d:41:36:08:b8:a3:30:37:7d:f1:cd:66:48:70:1b:
         14:4a:2f:22:8a:bc:ee:4b:86:63:fa:0b:40:37:8f:4e:86:48:
         e3:02:f1:76:63:55:8a:c5:fe:4b:0e:95:b7:eb:fd:1c:03:c6:
         2d:39:e6:81:e8:ad:72:31:84:c6:26:ca:bb:61:74:75:43:0c:
         10:ec:28:8f:7d:4b:a3:22:ce:1b:80:3b:76:6d:54:2d:43:2c:
         2b:e0:04:f8:2a:ac:3f:85:08:8b:5b:9b:97:be:11:99:11:4d:
         ec:d8:bf:da:72:29:d3:3d:82:a9:0b:1f:69:3f:40:70:20:4f:
         2c:a3:a5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIi/hxcjMzbaQ7GX9A9oJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2
YWEzMmUwHhcNMjUwNjA3MDQwMDIxWhcNMjUwNjA4MDQwMDIxWjAzMTEwLwYDVQQD
EyhmYWY0NzJlZmMyZTYzOGQzM2Y2NDRhN2Y0OGZhYmRhMDBkZDlhM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7fP+2oNySl98Iem3sly2CFsZc4G
ri2cig4vvD4oT/+/+YqPdjH6I07PNww7r3yOqMxb26Q64LXmsa/XnlLMqeZ56GAn
9IzJ3vYN+1eDbY2Vf6WAJVQG8AysATeZ8ro/8zmjxY+Fb6oH0CmUjJa9CtcpZrns
GftngF0pVakUmjXJquvvR2LGus3ms8uCxpDi2hWq+GlsAO+UtfHUvIGx87Eyg5bA
vB7Sn1CWMivwavRbVs61MbAHU9+88i9KHPXzzhZ2arBtcoCBgoDJMaD4zTBro4++
O95DB/tjSMUbS19ZxwlV1Du1ZPt/fS+1/To2OxkjbugvJXXEM2PFyajDLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr0cu/C5jjTP2RKf0j6vaAN2aPjMB8GA1UdIwQY
MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt
YjBiYWQxOGYwMmQwLzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw
LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHXOU4+m
rQrIuKZ3au1HThQyCokwf/CrxAa7FyU8VkrFAT0mEi370kBSfmLHxcdFdGB+cPfF
7C41O8iDIE2SQmalxQuS4aJ+egLlq2k7/8GuH1hLZ5RWQNBWm314fr6puU/jBCjb
Pl45ahJ86kdDyqO2KJaFTBInWCblGUSi9ykQPUE2CLijMDd98c1mSHAbFEovIoq8
7kuGY/oLQDePToZI4wLxdmNVisX+Sw6Vt+v9HAPGLTnmgeitcjGExibKu2F0dUMM
EOwoj31LoyLOG4A7dm1ULUMsK+AE+CqsP4UIi1ubl74RmRFN7Ni/2nIp0z2CqQsf
aT9AcCBPLKOl7g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:38 2025 by rpki-client