Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File:                     znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier:          fnuLVyFxBCjbgo+eXTJbK/tjW6/Qjxr5Ya6KtzaByGQ=
Subject key identifier:   43:C7:B4:6C:B0:5F:FE:9B:D3:91:8C:17:FC:42:13:A4:6E:D3:A0:82
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer:       /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial:       01974E8E80DD584BAA7A0ED108AA713C03B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 08:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:51 +0000
Files and hashes:         1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
                          2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: QJvXcWzKXrvuyKJfKfBfVQRvh+hX47F+sM0VVLZF4wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:80:dd:58:4b:aa:7a:0e:d1:08:aa:71:3c:03:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
        Validity
            Not Before: Jun  8 08:00:51 2025 GMT
            Not After : Jun  9 08:00:51 2025 GMT
        Subject: CN=43c7b46cb05ffe9bd3918c17fc4213a46ed3a082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:b2:3b:fe:ac:41:9b:a5:e4:4b:fe:f4:41:
                    e6:f9:4b:0e:9b:4b:c7:b4:ff:5d:0b:02:0a:29:6b:
                    f1:ab:0d:f7:c4:f4:6a:22:7b:76:14:99:5b:12:a2:
                    ba:76:c5:ac:6e:4d:77:4e:6e:6c:43:eb:c5:6a:9e:
                    78:be:bb:0a:01:45:c9:ce:92:9e:51:69:c6:8c:9f:
                    fe:dd:7d:4a:16:79:48:6f:57:48:3f:8b:a9:0a:ed:
                    3a:e1:2d:05:cf:91:ec:0a:13:25:e7:ec:9d:7b:67:
                    83:2f:51:fe:43:5a:ee:6f:aa:86:9c:88:1f:7e:7c:
                    70:63:b5:0e:d7:75:ce:bd:b6:f9:d6:f1:b5:43:b2:
                    b1:48:c6:9f:c3:5b:01:5d:69:fc:e6:cc:b0:fb:7c:
                    c2:54:80:03:c0:3f:88:2e:a9:78:9b:6e:e5:98:ae:
                    c0:b7:a6:4f:b9:4b:ae:8b:a9:70:ad:b3:75:71:67:
                    85:42:66:7c:56:08:4d:a7:50:56:22:22:3d:91:b7:
                    f2:5b:22:36:53:e7:51:29:ba:95:d7:04:63:77:43:
                    71:db:7b:fe:35:6d:db:95:f4:c9:b1:61:09:9d:3d:
                    5e:22:b3:a1:92:9a:f7:d8:54:66:41:e4:39:04:a8:
                    07:28:1d:da:4b:9b:37:ad:96:cf:66:08:23:24:2c:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C7:B4:6C:B0:5F:FE:9B:D3:91:8C:17:FC:42:13:A4:6E:D3:A0:82
            X509v3 Authority Key Identifier:
                keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:d1:83:d5:be:24:f1:52:a2:3b:cc:c1:88:14:d9:17:d2:
         26:d3:f2:a0:d5:9d:70:63:40:e4:e1:f6:4f:7c:72:2d:f3:22:
         0b:eb:a6:6e:0e:92:21:4e:2e:7e:af:89:10:95:ea:db:1d:81:
         08:92:cd:0c:0f:1e:33:b8:1f:2b:ea:73:91:ce:83:1e:b9:11:
         64:6e:ee:f5:70:cf:96:02:80:f2:af:5d:84:b4:3f:e0:03:28:
         01:dc:c1:6d:a2:bf:ec:5f:8f:75:8c:7d:e4:01:3e:e0:2f:81:
         ea:d9:f0:87:ac:e0:1f:90:7d:e7:02:7d:6c:62:96:42:ce:aa:
         0b:81:4a:fb:49:07:1f:40:2b:07:d5:59:ea:98:0d:8b:bd:d2:
         06:d3:c0:39:b5:b8:07:a8:41:0b:68:56:9b:ff:22:16:9c:fa:
         e3:18:49:f4:bc:15:96:94:b8:b5:7e:13:2c:c5:88:1a:ad:71:
         c7:b7:f8:a6:7d:15:72:cb:5c:5d:94:60:92:aa:ac:72:ac:4a:
         e4:65:49:3e:ad:ab:28:43:27:0a:b1:72:f0:8e:ed:f3:37:9e:
         c2:a2:de:36:be:aa:8e:df:c1:65:e5:fa:2a:a9:ac:40:86:d0:
         06:18:95:51:81:d1:97:7f:60:0a:67:ef:f3:4f:a8:2c:bc:32:
         f9:e7:f8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjoDdWEuqeg7RCKpxPAO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzBmZTY5OGU0ZGFlOWQ3YzMyYmMxNTZjNDE4MDY0ZmRj
ZmY0YjAwHhcNMjUwNjA4MDgwMDUxWhcNMjUwNjA5MDgwMDUxWjAzMTEwLwYDVQQD
Eyg0M2M3YjQ2Y2IwNWZmZTliZDM5MThjMTdmYzQyMTNhNDZlZDNhMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kGyO/6sQZul5Ev+9EHm+UsOm0vH
tP9dCwIKKWvxqw33xPRqInt2FJlbEqK6dsWsbk13Tm5sQ+vFap54vrsKAUXJzpKe
UWnGjJ/+3X1KFnlIb1dIP4upCu064S0Fz5HsChMl5+yde2eDL1H+Q1rub6qGnIgf
fnxwY7UO13XOvbb51vG1Q7KxSMafw1sBXWn85syw+3zCVIADwD+ILql4m27lmK7A
t6ZPuUuui6lwrbN1cWeFQmZ8VghNp1BWIiI9kbfyWyI2U+dRKbqV1wRjd0Nx23v+
NW3blfTJsWEJnT1eIrOhkpr32FRmQeQ5BKgHKB3aS5s3rZbPZggjJCxmfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPHtGywX/6b05GMF/xCE6Ru06CCMB8GA1UdIwQY
MBaAFM5w/mmOTa6dfDK8FWxBgGT9z/SwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2Qt
ODFmZWEwZjc3Mjg2LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2QtODFmZWEwZjc3Mjg2
LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPfRg9W+
JPFSojvMwYgU2RfSJtPyoNWdcGNA5OH2T3xyLfMiC+umbg6SIU4ufq+JEJXq2x2B
CJLNDA8eM7gfK+pzkc6DHrkRZG7u9XDPlgKA8q9dhLQ/4AMoAdzBbaK/7F+PdYx9
5AE+4C+B6tnwh6zgH5B95wJ9bGKWQs6qC4FK+0kHH0ArB9VZ6pgNi73SBtPAObW4
B6hBC2hWm/8iFpz64xhJ9LwVlpS4tX4TLMWIGq1xx7f4pn0VcstcXZRgkqqscqxK
5GVJPq2rKEMnCrFy8I7t8zeewqLeNr6qjt/BZeX6KqmsQIbQBhiVUYHRl39gCmfv
80+oLLwy+ef4yw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:53:58 2025 by rpki-client