Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File:                     qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier:          egpgUBV71IX6xz5Kk9Mi/8Tw8OObOAuLod3+hgOtSkQ=
Subject key identifier:   9C:64:79:62:F7:53:4E:BE:B2:FA:B2:61:04:2A:3D:84:76:E7:AC:41
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer:       /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial:       0197670437EB942E83FB60DEF605FF8AF37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number:          158A
Signing time:             Fri 13 Jun 2025 02:00:19 +0000
Manifest this update:     Fri 13 Jun 2025 02:00:19 +0000
Manifest next update:     Sat 14 Jun 2025 02:00:19 +0000
Files and hashes:         1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
                          2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
                          3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: pp2qb7KbQl82GHrUFE83iNTn8YJLaom47KYWGLMOlSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:04:37:eb:94:2e:83:fb:60:de:f6:05:ff:8a:f3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
        Validity
            Not Before: Jun 13 02:00:19 2025 GMT
            Not After : Jun 14 02:00:19 2025 GMT
        Subject: CN=9c647962f7534ebeb2fab261042a3d8476e7ac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:a4:c1:21:06:84:69:22:98:78:6b:86:1d:
                    11:f2:b6:a4:04:ef:4b:51:55:98:84:ce:2b:81:22:
                    69:c8:9b:9d:28:56:ed:77:15:b8:cd:a7:df:0b:9e:
                    c7:d1:ab:00:3a:70:bf:ff:4b:75:2b:18:84:bd:62:
                    6c:a2:33:b2:bc:8a:9e:c5:c9:43:54:e1:dd:42:60:
                    c1:f6:52:bf:8f:7b:ee:97:65:0c:60:38:fa:fe:c0:
                    58:86:03:6a:fc:3e:7c:54:10:ac:58:75:d3:18:12:
                    fd:ef:aa:44:17:e2:a4:5b:d1:c4:33:91:16:ec:87:
                    3c:72:1e:48:ae:1e:59:ea:ae:2e:2f:4e:4f:e0:48:
                    60:11:ef:59:42:41:11:c1:fd:65:b2:bb:07:d4:c7:
                    c7:24:51:14:ff:d6:d8:85:d8:e4:17:05:cf:99:3e:
                    07:46:1d:4f:25:7a:fc:31:8a:0e:63:70:d9:3c:b1:
                    a9:3d:73:43:6f:0c:69:e6:e7:01:29:bb:3e:56:0f:
                    9c:1a:f5:84:16:3e:46:ba:7b:bd:03:42:44:c8:65:
                    68:80:50:07:3b:d1:7c:16:a9:28:38:ab:f1:bc:be:
                    6f:e2:df:f3:cb:56:89:07:08:96:5c:02:67:ec:fd:
                    49:cb:ec:a9:40:01:8a:6f:c2:83:4f:4a:9f:85:f8:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:79:62:F7:53:4E:BE:B2:FA:B2:61:04:2A:3D:84:76:E7:AC:41
            X509v3 Authority Key Identifier:
                keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:89:86:5b:00:10:95:07:77:94:ab:37:ee:33:b5:38:ba:0c:
         fa:e7:30:db:92:ea:2f:a2:0c:62:7b:90:d8:67:ed:86:92:4f:
         e1:3b:fa:5d:af:b4:aa:4b:97:e3:2b:b6:b7:96:d4:ab:b4:40:
         dd:e6:94:69:6a:67:d2:77:63:f9:d3:25:88:14:89:04:aa:be:
         4a:83:ad:56:98:79:8b:9e:76:a6:e8:be:34:fb:2c:0b:34:a2:
         07:56:2f:29:65:88:62:ed:01:d0:b8:30:29:50:52:41:86:55:
         64:31:60:6b:38:19:f2:45:48:ee:c3:37:36:4c:b7:68:bc:8c:
         14:55:33:cd:9a:ee:f8:6d:58:d4:a2:c4:90:0b:57:3f:2e:3a:
         47:28:1f:1e:9a:bc:c1:93:77:31:6a:b3:99:b8:fa:f7:a4:5e:
         9c:a3:73:29:ac:35:78:9b:71:74:00:59:f5:ea:e3:9b:36:20:
         20:93:df:4a:cb:3e:89:f1:ea:84:aa:86:bb:f4:5e:8c:2f:6f:
         4f:62:19:2d:fc:b9:e1:7c:76:46:c9:5e:dc:59:42:42:0d:d7:
         ec:c5:c3:32:a6:91:23:52:07:77:cd:78:2e:27:fd:2c:25:94:
         2d:d7:c5:76:69:04:df:62:2d:4c:36:0e:15:ff:e7:ff:38:6e:
         9b:62:3d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnBDfrlC6D+2De9gX/ivN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk
ZWUzNzQwHhcNMjUwNjEzMDIwMDE5WhcNMjUwNjE0MDIwMDE5WjAzMTEwLwYDVQQD
Eyg5YzY0Nzk2MmY3NTM0ZWJlYjJmYWIyNjEwNDJhM2Q4NDc2ZTdhYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ekwSEGhGkimHhrhh0R8rakBO9L
UVWYhM4rgSJpyJudKFbtdxW4zaffC57H0asAOnC//0t1KxiEvWJsojOyvIqexclD
VOHdQmDB9lK/j3vul2UMYDj6/sBYhgNq/D58VBCsWHXTGBL976pEF+KkW9HEM5EW
7Ic8ch5Irh5Z6q4uL05P4EhgEe9ZQkERwf1lsrsH1MfHJFEU/9bYhdjkFwXPmT4H
Rh1PJXr8MYoOY3DZPLGpPXNDbwxp5ucBKbs+Vg+cGvWEFj5Gunu9A0JEyGVogFAH
O9F8FqkoOKvxvL5v4t/zy1aJBwiWXAJn7P1Jy+ypQAGKb8KDT0qfhfh1+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxkeWL3U06+svqyYQQqPYR256xBMB8GA1UdIwQY
MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt
YWNkODdjNTQ2MDQ4LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4
LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADImGWwAQ
lQd3lKs37jO1OLoM+ucw25LqL6IMYnuQ2GfthpJP4Tv6Xa+0qkuX4yu2t5bUq7RA
3eaUaWpn0ndj+dMliBSJBKq+SoOtVph5i552pui+NPssCzSiB1YvKWWIYu0B0Lgw
KVBSQYZVZDFgazgZ8kVI7sM3Nky3aLyMFFUzzZru+G1Y1KLEkAtXPy46RygfHpq8
wZN3MWqzmbj696RenKNzKaw1eJtxdABZ9erjmzYgIJPfSss+ifHqhKqGu/RejC9v
T2IZLfy54Xx2Rsle3FlCQg3X7MXDMqaRI1IHd814Lif9LCWULdfFdmkE32ItTDYO
Ff/n/zhum2I9rA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:50:48 2025 by rpki-client