Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
File:                     FR5sPcXWdU_k9gqCscxVGreA34s.mft (raw, json)
Hash identifier:          CpcuiyDgHAu3+mgf6zX1iGdxDNOHisUrdizCjjG5mYE=
Subject key identifier:   F6:5A:38:3E:0F:E8:96:11:02:67:F6:C8:FF:E6:2D:1B:F3:E3:AB:21
Authority key identifier: 15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
Certificate issuer:       /CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Certificate serial:       01976D06FC8C6C2EA6C682A83BA71A21BF46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 06:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 06:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 06:01:03 +0000
Files and hashes:         1: FR5sPcXWdU_k9gqCscxVGreA34s.crl (hash: c/LMNRUYfI8blMt9XdCMb2WxRuLeODJV9ocWCuYrEnE=)
                          2: H35Cm8Po0LU1BOfN5tJ4BT4fPEo.roa (hash: F+upw1/HpLM3WaLlt0Qi9SCbAq0VRTzqm01IyvK059A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:fc:8c:6c:2e:a6:c6:82:a8:3b:a7:1a:21:bf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
        Validity
            Not Before: Jun 14 06:01:03 2025 GMT
            Not After : Jun 15 06:01:03 2025 GMT
        Subject: CN=f65a383e0fe896110267f6c8ffe62d1bf3e3ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:44:2f:eb:0a:80:65:3a:25:27:54:df:9b:
                    29:7a:b2:b3:99:a1:b5:a5:9b:f3:43:0c:5e:4a:2e:
                    0b:a1:29:50:eb:be:55:bc:d9:4d:7e:7f:b2:8a:ad:
                    de:b3:9b:7d:39:42:22:d8:43:5f:69:7c:60:46:6e:
                    65:2c:8d:64:75:87:59:f5:94:e8:04:eb:ec:b7:84:
                    2a:a2:25:6a:69:61:7b:c7:a7:e1:8e:3e:fe:de:ea:
                    64:4a:72:01:90:0a:7f:37:fb:4c:48:9d:10:02:54:
                    0d:b1:1c:27:ab:01:6f:aa:e7:16:f9:05:0d:40:f7:
                    66:60:18:b1:2b:1e:32:e5:5c:06:a1:22:b6:8a:2e:
                    bb:e5:18:bb:da:43:b9:cb:9c:41:24:af:db:cf:03:
                    fc:ed:78:0e:09:d8:89:4e:c9:99:0d:0c:f4:35:c8:
                    1f:06:e5:f0:57:c7:70:94:05:0b:90:d6:09:0d:96:
                    b2:dc:3f:00:45:5d:12:5e:62:32:b8:52:72:e2:fa:
                    01:7d:7c:ba:34:5c:31:59:f9:08:97:1d:1d:b2:d3:
                    5a:55:93:c6:9c:c5:06:0d:5b:f6:c2:b6:01:79:c1:
                    76:83:df:ea:83:ec:d6:91:9e:e3:17:d2:81:7c:33:
                    f1:b0:de:cd:c9:f6:23:0a:19:22:55:d0:fd:40:0a:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5A:38:3E:0F:E8:96:11:02:67:F6:C8:FF:E6:2D:1B:F3:E3:AB:21
            X509v3 Authority Key Identifier:
                keyid:15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:1c:00:94:07:98:ff:ff:bc:c2:9e:0b:09:d2:58:82:a2:
         39:9c:f4:4d:e7:c5:58:e8:f1:29:d4:44:4f:f3:3f:a2:40:c8:
         45:f0:3c:14:87:13:42:49:8e:f1:ee:2e:65:ff:52:08:f3:2b:
         8b:88:e0:f1:67:e3:73:34:9f:27:ab:0a:9e:a6:24:9c:76:c8:
         ad:c1:1e:ef:a9:52:3f:62:c4:f8:ad:32:15:7d:a0:6e:65:bc:
         6d:8f:fb:a5:4c:30:d7:c7:5d:2c:ae:fd:19:e4:94:e8:ac:f8:
         82:80:23:5d:23:e6:18:83:29:05:3f:9b:57:bb:f2:4c:45:ac:
         c2:58:c7:b9:88:a5:54:7a:98:64:0b:d5:a4:41:5f:4d:da:d7:
         cf:5f:99:59:be:11:91:ec:a9:77:f5:6c:68:ae:ea:f9:52:7e:
         7d:a0:1c:57:68:53:86:72:ae:d4:b7:6b:83:ac:eb:11:0c:84:
         99:a9:dd:dc:12:f9:41:14:11:bd:b0:3b:63:70:fd:39:71:bb:
         77:62:63:98:7a:4f:e4:a3:cf:e6:0b:96:fe:7b:c2:4d:44:aa:
         aa:db:9a:24:82:86:a5:dc:be:74:9f:4e:83:b9:fc:70:9f:7e:
         d2:33:1b:c9:74:e9:72:69:dc:43:5d:a9:98:7e:61:ee:83:fb:
         07:20:e3:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBvyMbC6mxoKoO6caIb9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MWU2YzNkYzVkNjc1NGZlNGY2MGE4MmIxY2M1NTFhYjc4
MGRmOGIwHhcNMjUwNjE0MDYwMTAzWhcNMjUwNjE1MDYwMTAzWjAzMTEwLwYDVQQD
EyhmNjVhMzgzZTBmZTg5NjExMDI2N2Y2YzhmZmU2MmQxYmYzZTNhYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHJEL+sKgGU6JSdU35sperKzmaG1
pZvzQwxeSi4LoSlQ675VvNlNfn+yiq3es5t9OUIi2ENfaXxgRm5lLI1kdYdZ9ZTo
BOvst4QqoiVqaWF7x6fhjj7+3upkSnIBkAp/N/tMSJ0QAlQNsRwnqwFvqucW+QUN
QPdmYBixKx4y5VwGoSK2ii675Ri72kO5y5xBJK/bzwP87XgOCdiJTsmZDQz0Ncgf
BuXwV8dwlAULkNYJDZay3D8ARV0SXmIyuFJy4voBfXy6NFwxWfkIlx0dstNaVZPG
nMUGDVv2wrYBecF2g9/qg+zWkZ7jF9KBfDPxsN7NyfYjChkiVdD9QArgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZaOD4P6JYRAmf2yP/mLRvz46shMB8GA1UdIwQY
MBaAFBUebD3F1nVP5PYKgrHMVRq3gN+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlI1c1BjWFdkVV9rOWdxQ3NjeFZHcmVBMzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZmZlNzctNmYzZC00MWNhLThkOGIt
NGEyYWFkNzk2ZmMxLzEvRlI1c1BjWFdkVV9rOWdxQ3NjeFZHcmVBMzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80ZmZlNzctNmYzZC00MWNhLThkOGItNGEyYWFkNzk2ZmMx
LzEvRlI1c1BjWFdkVV9rOWdxQ3NjeFZHcmVBMzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDocAJQH
mP//vMKeCwnSWIKiOZz0TefFWOjxKdRET/M/okDIRfA8FIcTQkmO8e4uZf9SCPMr
i4jg8WfjczSfJ6sKnqYknHbIrcEe76lSP2LE+K0yFX2gbmW8bY/7pUww18ddLK79
GeSU6Kz4goAjXSPmGIMpBT+bV7vyTEWswljHuYilVHqYZAvVpEFfTdrXz1+ZWb4R
keypd/VsaK7q+VJ+faAcV2hThnKu1Ldrg6zrEQyEmand3BL5QRQRvbA7Y3D9OXG7
d2JjmHpP5KPP5guW/nvCTUSqqtuaJIKGpdy+dJ9Og7n8cJ9+0jMbyXTpcmncQ12p
mH5h7oP7ByDjQw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:23 2025 by rpki-client