Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          PEc3ym8Td00Ksj4l86Df2gUTnOjIKE77sDJPQcioXVM=
Subject key identifier:   59:78:C2:FF:E2:83:C4:45:9A:B6:DF:6C:E2:8C:D4:D1:4F:56:A1:11
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       019747429679B37CA640D95A0CCE637F499D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          157E
Signing time:             Fri 06 Jun 2025 22:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:35 +0000
Files and hashes:         1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=)
                          2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: yF5HngGlGk7h4Fm6+enWX3XloF23vbNYoKpovKT8d0E=)
                          3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=)
                          4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=)
                          5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=)
                          6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:96:79:b3:7c:a6:40:d9:5a:0c:ce:63:7f:49:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Jun  6 22:00:35 2025 GMT
            Not After : Jun  7 22:00:35 2025 GMT
        Subject: CN=5978c2ffe283c4459ab6df6ce28cd4d14f56a111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:41:6a:be:48:cd:33:c4:e3:c0:b0:0b:c8:
                    c8:6a:78:4b:08:7c:ef:61:ca:2e:fe:94:75:89:f3:
                    64:97:a0:bd:bc:c9:fb:e4:da:98:5e:8f:7f:45:85:
                    18:2d:d7:d8:0f:07:3e:a1:62:cb:70:85:1f:0a:fa:
                    57:3d:67:46:6e:74:9e:a1:ae:8a:86:fd:a4:c6:86:
                    14:79:56:ec:8e:69:32:31:2a:79:b5:87:8b:32:3c:
                    e2:d1:9e:14:bd:c9:c1:05:fb:4f:57:02:67:58:91:
                    54:1f:b7:03:47:7f:e5:fa:95:1c:10:bf:50:af:f4:
                    84:0c:5f:bb:06:b0:27:dc:3a:e9:61:ba:b7:db:e6:
                    35:bb:90:d1:00:2c:73:25:5f:e4:55:db:75:93:52:
                    2e:cd:62:ec:64:b5:52:95:3f:6d:f2:90:36:2a:4f:
                    00:a0:53:f2:a3:ac:b7:d7:92:d3:73:99:5b:4f:66:
                    66:85:d4:33:c4:ec:8c:18:62:7a:90:c7:27:c9:d3:
                    7b:e4:1e:ff:de:98:bf:32:0f:c1:a9:fb:9d:b9:c2:
                    5d:6c:9e:f4:6a:fb:88:17:4f:c7:4b:9e:95:76:96:
                    d8:c3:c8:e3:04:a2:37:2c:4e:5f:d4:39:9c:5e:0b:
                    95:12:d3:da:ab:30:36:f8:8c:1e:d7:47:cf:da:91:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:78:C2:FF:E2:83:C4:45:9A:B6:DF:6C:E2:8C:D4:D1:4F:56:A1:11
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:f3:b3:1e:2c:b4:52:43:fd:ac:84:0e:18:aa:35:31:f6:
         b6:d0:f0:ce:20:e6:b1:b6:e2:2b:29:17:1c:d8:16:6a:cf:20:
         98:93:97:0e:98:eb:7a:f5:24:4f:c5:1a:49:bc:7a:f9:c9:dd:
         a3:60:9f:65:74:b8:95:a4:cc:05:32:79:71:7a:ba:91:ed:13:
         c2:fe:8b:fb:86:57:b0:a3:4c:04:5a:fb:d3:43:49:8a:90:02:
         2c:ce:72:b4:86:3e:9f:98:93:02:b5:00:e8:28:58:b3:b8:d5:
         96:bb:77:d4:49:5e:9c:e7:17:71:c0:7c:c1:3b:5d:2f:01:7f:
         40:0f:32:f9:50:c8:6e:76:ed:c1:26:04:74:5b:e0:eb:15:68:
         52:05:ce:1e:91:c1:d7:e8:47:0e:e7:ac:21:d0:e1:38:2f:d4:
         a1:dd:7e:d6:56:42:da:a6:cb:5c:32:db:8a:6b:5b:75:41:84:
         9d:43:2d:8f:8c:c6:b2:ed:66:99:3c:a4:96:69:26:f0:55:70:
         ec:15:cb:ac:9e:d0:7a:e1:9d:84:58:26:f4:f4:0b:49:ed:6c:
         40:4d:7b:76:5a:85:57:e4:44:c6:47:30:0f:5d:42:c3:28:ec:
         3e:aa:5e:bb:5b:30:24:73:13:d8:8e:9c:31:e1:ab:8f:d2:c0:
         06:51:68:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQpZ5s3ymQNlaDM5jf0mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4
N2UxZTEwHhcNMjUwNjA2MjIwMDM1WhcNMjUwNjA3MjIwMDM1WjAzMTEwLwYDVQQD
Eyg1OTc4YzJmZmUyODNjNDQ1OWFiNmRmNmNlMjhjZDRkMTRmNTZhMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XlBar5IzTPE48CwC8jIanhLCHzv
Ycou/pR1ifNkl6C9vMn75NqYXo9/RYUYLdfYDwc+oWLLcIUfCvpXPWdGbnSeoa6K
hv2kxoYUeVbsjmkyMSp5tYeLMjzi0Z4UvcnBBftPVwJnWJFUH7cDR3/l+pUcEL9Q
r/SEDF+7BrAn3DrpYbq32+Y1u5DRACxzJV/kVdt1k1IuzWLsZLVSlT9t8pA2Kk8A
oFPyo6y315LTc5lbT2ZmhdQzxOyMGGJ6kMcnydN75B7/3pi/Mg/BqfuducJdbJ70
avuIF0/HS56VdpbYw8jjBKI3LE5f1DmcXguVEtPaqzA2+Iwe10fP2pE2hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl4wv/ig8RFmrbfbOKM1NFPVqERMB8GA1UdIwQY
MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt
ZmZjY2EzZTFmMTdmLzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm
LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamTzsx4s
tFJD/ayEDhiqNTH2ttDwziDmsbbiKykXHNgWas8gmJOXDpjrevUkT8UaSbx6+cnd
o2CfZXS4laTMBTJ5cXq6ke0Twv6L+4ZXsKNMBFr700NJipACLM5ytIY+n5iTArUA
6ChYs7jVlrt31ElenOcXccB8wTtdLwF/QA8y+VDIbnbtwSYEdFvg6xVoUgXOHpHB
1+hHDuesIdDhOC/Uod1+1lZC2qbLXDLbimtbdUGEnUMtj4zGsu1mmTyklmkm8FVw
7BXLrJ7QeuGdhFgm9PQLSe1sQE17dlqFV+RExkcwD11CwyjsPqpeu1swJHMT2I6c
MeGrj9LABlFosg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:07 2025 by rpki-client