Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File:                     0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier:          fYk+xNSB08ZWZ+6xpsVh8kixL1zcazxfBy2OwWD9n1M=
Subject key identifier:   07:51:DB:72:27:86:2D:48:20:ED:0B:34:DA:70:A6:AD:32:AA:56:B7
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer:       /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial:       01976515F4649926C320FFEB3588F7D3C2DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number:          158C
Signing time:             Thu 12 Jun 2025 17:00:26 +0000
Manifest this update:     Thu 12 Jun 2025 17:00:26 +0000
Manifest next update:     Fri 13 Jun 2025 17:00:26 +0000
Files and hashes:         1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: z6k0Oi+ed4Ye9MmzoSGF1WrRbz7maLy+PheK/8ogwAM=)
                          2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
                          3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:15:f4:64:99:26:c3:20:ff:eb:35:88:f7:d3:c2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
        Validity
            Not Before: Jun 12 17:00:26 2025 GMT
            Not After : Jun 13 17:00:26 2025 GMT
        Subject: CN=0751db7227862d4820ed0b34da70a6ad32aa56b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:95:9c:7f:ba:76:c7:c5:4b:c9:f4:cf:71:
                    5b:f2:03:e5:74:c4:a0:f7:4e:01:a4:76:2c:19:90:
                    9c:6b:bc:50:29:cc:d2:84:4a:e5:89:7c:4e:71:65:
                    bb:a2:9a:a6:ad:e5:89:5d:1a:9b:eb:73:a8:45:98:
                    13:b7:09:b5:37:e8:1c:83:5e:a4:fa:b4:ef:ad:8d:
                    d9:b3:98:28:c2:ad:ef:9d:3c:c6:13:60:3b:68:d1:
                    cb:9c:14:34:41:ea:a6:30:ab:4e:20:6b:91:87:4e:
                    32:23:ed:53:36:eb:80:5a:d6:55:e3:2b:1d:c0:64:
                    f8:c3:f4:44:d2:93:e1:f4:e1:33:b7:46:a7:ad:62:
                    25:5c:c9:14:4c:a3:97:4f:50:75:56:cf:f9:24:4f:
                    cc:3d:1c:fd:a9:49:cd:27:bd:93:56:a3:db:b2:18:
                    27:a6:59:05:ac:f0:ef:c4:93:50:9a:2b:98:5f:17:
                    cf:d6:e5:35:fa:fb:67:f4:f4:18:9e:88:71:9a:e3:
                    f2:34:74:25:04:cd:09:d9:a9:84:78:6f:a2:37:02:
                    3a:b0:cb:c9:71:cc:ba:cb:a7:3d:ec:0e:9b:ab:e2:
                    00:f5:85:ab:e9:68:80:7a:a1:3c:ca:ee:38:72:00:
                    05:e9:e8:49:d8:50:08:6f:3e:58:5e:89:67:4d:e8:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:DB:72:27:86:2D:48:20:ED:0B:34:DA:70:A6:AD:32:AA:56:B7
            X509v3 Authority Key Identifier:
                keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:ee:06:9f:97:aa:cd:74:39:4c:99:ad:11:d2:c8:83:b5:
         4e:54:22:a4:74:1f:b5:f4:eb:76:05:64:2c:45:e6:b0:80:3c:
         0a:17:2d:04:f8:7d:85:d4:d6:bf:b5:18:a1:28:e9:e1:bc:a4:
         61:d9:fb:85:71:9a:8f:9e:a4:ef:4a:39:5d:b2:cf:49:8a:36:
         98:73:69:1d:60:8f:99:f8:b7:4b:92:ca:1e:b7:97:2f:13:d5:
         71:6d:20:e7:4e:82:09:00:2d:36:8e:e2:2b:49:d8:e9:83:41:
         86:14:d6:78:71:bc:ea:75:a1:97:74:9e:21:cc:62:03:ec:0b:
         16:bf:62:fa:32:b2:be:1e:03:92:f1:24:f9:a7:b6:1e:f2:95:
         33:c6:eb:ea:41:da:da:5d:1a:db:72:24:5a:e1:18:a8:03:ae:
         1d:aa:bb:36:0d:8a:cd:68:49:f5:ab:bb:22:e5:e3:1e:7d:92:
         5f:0a:2a:56:2a:5e:4b:f8:70:20:7f:1a:53:c2:dc:35:e5:b3:
         7a:65:20:96:9d:28:9b:99:22:fc:a7:5c:00:e4:b3:83:2a:31:
         68:4f:b5:e0:f2:72:13:39:4a:ed:96:c5:a1:91:f0:80:34:62:
         20:9c:03:7e:07:bb:65:f6:2a:7f:14:21:04:48:c0:0a:5d:99:
         52:29:cc:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlFfRkmSbDIP/rNYj308LaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWE4NWM0NWJmNTNjM2Q4OGE3NjY5NWFhZmViYmQ0YWE3
N2JiYzEwHhcNMjUwNjEyMTcwMDI2WhcNMjUwNjEzMTcwMDI2WjAzMTEwLwYDVQQD
EygwNzUxZGI3MjI3ODYyZDQ4MjBlZDBiMzRkYTcwYTZhZDMyYWE1NmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9mVnH+6dsfFS8n0z3Fb8gPldMSg
904BpHYsGZCca7xQKczShErliXxOcWW7opqmreWJXRqb63OoRZgTtwm1N+gcg16k
+rTvrY3Zs5gowq3vnTzGE2A7aNHLnBQ0QeqmMKtOIGuRh04yI+1TNuuAWtZV4ysd
wGT4w/RE0pPh9OEzt0anrWIlXMkUTKOXT1B1Vs/5JE/MPRz9qUnNJ72TVqPbshgn
plkFrPDvxJNQmiuYXxfP1uU1+vtn9PQYnohxmuPyNHQlBM0J2amEeG+iNwI6sMvJ
ccy6y6c97A6bq+IA9YWr6WiAeqE8yu44cgAF6ehJ2FAIbz5YXolnTeiXVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdR23Inhi1IIO0LNNpwpq0yqla3MB8GA1UdIwQY
MBaAFNBahcRb9Tw9iKdmlar+u9Sqd7vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUt
NGY5ODQwZGVmYTFmLzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUtNGY5ODQwZGVmYTFm
LzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8ruBp+X
qs10OUyZrRHSyIO1TlQipHQftfTrdgVkLEXmsIA8ChctBPh9hdTWv7UYoSjp4byk
Ydn7hXGaj56k70o5XbLPSYo2mHNpHWCPmfi3S5LKHreXLxPVcW0g506CCQAtNo7i
K0nY6YNBhhTWeHG86nWhl3SeIcxiA+wLFr9i+jKyvh4DkvEk+ae2HvKVM8br6kHa
2l0a23IkWuEYqAOuHaq7Ng2KzWhJ9au7IuXjHn2SXwoqVipeS/hwIH8aU8LcNeWz
emUglp0om5ki/KdcAOSzgyoxaE+14PJyEzlK7ZbFoZHwgDRiIJwDfge7ZfYqfxQh
BEjACl2ZUinMEA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 03:57:40 2025 by rpki-client