Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File:                     u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier:          l/BZnIN2ZX9b8Sc+2bHu4ZEXX5/4nN0MtKBUIl4yz5Q=
Subject key identifier:   77:42:92:84:EE:CC:15:24:37:71:51:F9:DF:22:83:90:D0:C8:EA:03
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer:       /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial:       01992DB5A198AFFE7BA2D11B0FC0965400C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number:          154E
Signing time:             Tue 09 Sep 2025 09:01:41 +0000
Manifest this update:     Tue 09 Sep 2025 09:01:41 +0000
Manifest next update:     Wed 10 Sep 2025 09:01:41 +0000
Files and hashes:         1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
                          2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
                          3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
                          4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: FB7JKvUU4/BZwQklLw/G2D3xzAKa8GX4NpFTAq39LEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:b5:a1:98:af:fe:7b:a2:d1:1b:0f:c0:96:54:00:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
        Validity
            Not Before: Sep  9 09:01:41 2025 GMT
            Not After : Sep 10 09:01:41 2025 GMT
        Subject: CN=77429284eecc1524377151f9df228390d0c8ea03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:dd:92:6d:89:4f:d0:71:08:63:21:b1:fe:
                    a5:cc:0a:9f:b7:fc:6e:de:8e:6d:8f:13:a4:ed:b6:
                    21:29:5f:80:c6:f0:32:a0:cf:68:ac:a5:2c:05:66:
                    2a:85:09:03:e3:b3:70:d3:0e:7a:6f:cd:62:3f:c9:
                    27:b9:32:01:f2:f9:84:28:de:79:bd:9c:c2:8b:d1:
                    05:19:b1:b3:01:35:61:24:12:47:de:cb:12:3b:14:
                    a6:3f:57:5d:ac:1e:ab:81:8f:e1:58:c3:a5:a9:f7:
                    14:e6:ef:99:b2:d0:10:a4:99:cc:76:ed:6f:38:e4:
                    64:3d:59:f5:93:80:e6:63:7b:6c:ef:bc:b9:b1:14:
                    40:1c:31:a5:b9:71:e2:8f:71:54:2e:58:06:bc:01:
                    a8:ce:59:4d:aa:9f:cf:0b:6c:70:ea:49:a0:9b:51:
                    5e:e3:51:82:9a:f5:c2:9d:de:96:a7:10:a4:fc:c9:
                    be:92:0c:07:40:9c:f8:cc:93:65:95:36:c2:7c:96:
                    55:e4:f0:fc:bb:a4:1f:eb:eb:5e:a8:68:81:8f:4e:
                    e6:0b:c6:22:5e:5f:be:23:8e:0d:cb:10:f2:be:0a:
                    49:5c:f6:be:87:5e:45:6a:88:ef:5e:2c:27:6d:8f:
                    b8:0a:cb:a8:e0:76:7f:19:b0:98:76:d5:b7:df:92:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:92:84:EE:CC:15:24:37:71:51:F9:DF:22:83:90:D0:C8:EA:03
            X509v3 Authority Key Identifier:
                keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:ef:9b:e3:03:14:71:e1:63:3e:53:45:a1:4a:af:c3:43:
         14:f3:72:43:03:87:b4:e1:f6:ad:b5:5d:10:bc:50:7a:3a:1b:
         68:d4:e4:a8:58:9c:92:30:c7:f6:55:56:90:79:80:74:6e:97:
         d2:e5:48:25:e9:56:30:6f:e4:56:15:12:6c:af:96:39:b6:7f:
         2f:0f:d3:4e:38:f7:22:31:d7:12:d4:2a:98:8c:81:bf:d9:59:
         4b:62:c3:8e:48:1d:be:87:57:5f:c9:19:44:39:0f:b5:c0:4e:
         fe:10:c1:a3:10:6c:c8:59:9e:63:76:14:83:68:ad:84:60:f7:
         59:0b:2b:79:6d:16:38:9f:0a:7d:86:1c:25:3f:54:70:ca:92:
         9e:bc:f6:e1:24:83:a4:80:fc:b9:b8:ca:f0:3e:6e:94:97:4b:
         34:87:89:ac:96:43:40:f1:5a:04:c3:5a:6b:f6:2e:ae:18:ef:
         9b:ac:c2:db:63:24:19:b3:d0:fb:43:90:90:ce:f7:b8:58:b5:
         b0:ad:1f:85:b1:d1:17:25:51:5e:e4:75:6f:ac:60:78:a7:28:
         28:e3:7b:01:0a:75:9c:58:ac:52:32:a1:3d:c9:d6:c0:5e:05:
         49:d7:a9:71:5f:38:91:e4:67:5c:22:23:18:6c:cb:79:21:f7:
         8c:d0:3d:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttaGYr/57otEbD8CWVADCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm
NjIyNGEwHhcNMjUwOTA5MDkwMTQxWhcNMjUwOTEwMDkwMTQxWjAzMTEwLwYDVQQD
Eyg3NzQyOTI4NGVlY2MxNTI0Mzc3MTUxZjlkZjIyODM5MGQwYzhlYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lzdkm2JT9BxCGMhsf6lzAqft/xu
3o5tjxOk7bYhKV+AxvAyoM9orKUsBWYqhQkD47Nw0w56b81iP8knuTIB8vmEKN55
vZzCi9EFGbGzATVhJBJH3ssSOxSmP1ddrB6rgY/hWMOlqfcU5u+ZstAQpJnMdu1v
OORkPVn1k4DmY3ts77y5sRRAHDGluXHij3FULlgGvAGozllNqp/PC2xw6kmgm1Fe
41GCmvXCnd6WpxCk/Mm+kgwHQJz4zJNllTbCfJZV5PD8u6Qf6+teqGiBj07mC8Yi
Xl++I44NyxDyvgpJXPa+h15FaojvXiwnbY+4Csuo4HZ/GbCYdtW335ICTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdCkoTuzBUkN3FR+d8ig5DQyOoDMB8GA1UdIwQY
MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt
YmE1MTMyM2RiNGU1LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1
LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnrvm+MD
FHHhYz5TRaFKr8NDFPNyQwOHtOH2rbVdELxQejobaNTkqFickjDH9lVWkHmAdG6X
0uVIJelWMG/kVhUSbK+WObZ/Lw/TTjj3IjHXEtQqmIyBv9lZS2LDjkgdvodXX8kZ
RDkPtcBO/hDBoxBsyFmeY3YUg2ithGD3WQsreW0WOJ8KfYYcJT9UcMqSnrz24SSD
pID8ubjK8D5ulJdLNIeJrJZDQPFaBMNaa/Yurhjvm6zC22MkGbPQ+0OQkM73uFi1
sK0fhbHRFyVRXuR1b6xgeKcoKON7AQp1nFisUjKhPcnWwF4FSdepcV84keRnXCIj
GGzLeSH3jNA9ZA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 11:31:06 2025 by rpki-client