Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
File:                     05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json)
Hash identifier:          a9cv7scjC3/jTWR7GIjeNMGLy/BDQHHdOLygC3YgqRY=
Subject key identifier:   35:26:72:3A:05:0A:DE:BF:43:22:B5:CC:70:CB:2F:FC:C8:44:68:D4
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Certificate issuer:       /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial:       01974D7BBBEF53DFED2D128B764789CF5864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 03:00:43 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:43 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:43 +0000
Files and hashes:         1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: GRUi6ipOQfp8gPHE4h4D4yQfHxD/SwEnfVrd6z1k+LI=)
                          2: 0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa (hash: R/kohk8zDnLTG4mp1rru94qAndg3iws6yZ+eZfkkPz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:bb:ef:53:df:ed:2d:12:8b:76:47:89:cf:58:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
        Validity
            Not Before: Jun  8 03:00:43 2025 GMT
            Not After : Jun  9 03:00:43 2025 GMT
        Subject: CN=3526723a050adebf4322b5cc70cb2ffcc84468d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:62:d4:0c:10:2f:0e:6c:16:d8:69:51:5c:
                    7c:2d:7d:f1:31:3b:23:6c:c2:bc:1d:b2:ea:f7:8c:
                    c3:8e:0e:77:9a:6f:70:35:44:56:0f:7c:ee:37:b2:
                    88:89:8a:36:35:7b:48:ad:fd:ba:66:38:60:58:e7:
                    c1:5d:67:6d:cd:43:0f:fc:dd:b0:ee:ce:b3:73:d4:
                    5e:e5:a2:76:ca:f9:b9:54:f2:e4:5f:8e:3e:a9:95:
                    39:1a:c4:45:81:c9:be:be:21:2c:7e:88:85:87:45:
                    a5:25:28:c7:7f:cc:01:9b:1b:c1:f2:72:17:08:92:
                    23:83:85:d6:5c:d4:4d:99:13:3d:7f:cc:12:20:da:
                    10:2c:40:d2:03:07:a0:d8:c2:68:02:a1:0d:45:98:
                    20:3a:90:47:93:cb:28:11:13:cc:78:b3:dd:18:57:
                    ca:b1:77:23:20:41:4b:d1:b7:70:8f:fa:50:02:61:
                    d8:c9:45:7b:0e:4b:d4:7e:6e:62:c4:e4:ce:9e:11:
                    95:e4:3b:d1:13:95:6d:07:2b:4d:8f:3f:32:73:8e:
                    60:a5:03:6f:d6:c2:b4:03:4b:7d:d6:85:d9:31:b7:
                    c7:f0:2b:66:6f:91:1a:fa:30:89:c9:01:2b:90:69:
                    02:67:bc:bd:e6:fc:50:ed:fe:00:6a:1e:ef:fe:c7:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:26:72:3A:05:0A:DE:BF:43:22:B5:CC:70:CB:2F:FC:C8:44:68:D4
            X509v3 Authority Key Identifier:
                keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:92:e7:de:24:5e:b7:1e:10:00:5a:b1:1d:f8:05:85:95:
         c2:18:6a:e2:67:69:a6:12:e6:75:09:52:47:44:84:f9:f9:8d:
         58:1d:38:74:3f:70:85:95:68:e3:8e:ff:42:9b:75:77:53:06:
         77:60:e5:0d:26:42:b7:5d:19:42:5c:52:cc:32:82:28:19:82:
         80:d7:df:ac:4a:e3:2d:5d:fe:68:69:c3:63:19:a3:e2:f9:a6:
         17:db:03:59:4b:3a:80:fe:96:f2:4f:7a:5e:df:c9:dd:03:97:
         cf:62:c3:50:5c:e0:5d:17:dd:8d:3a:77:e0:6a:c7:d1:d4:3a:
         e4:93:19:21:9c:0c:fd:2c:eb:a4:fa:28:54:07:c6:13:34:df:
         98:ef:44:95:e3:38:b8:88:3e:16:98:38:95:cf:35:a0:90:77:
         dd:7f:b3:69:21:36:c0:1e:5d:46:aa:78:6d:78:04:33:10:66:
         17:02:7b:18:14:f2:6a:34:ab:ac:9b:9d:8a:dd:74:62:b5:3e:
         b6:6d:81:b6:4a:02:20:ea:03:de:da:da:6a:d0:51:4f:a6:82:
         c5:33:2c:e7:7e:d4:23:13:ee:ae:e3:60:10:b1:8f:b7:b5:65:
         35:79:f7:f9:62:8b:d8:1d:76:13:50:59:dc:3b:a0:3e:dd:88:
         cb:c9:fb:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe7vvU9/tLRKLdkeJz1hkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTQ5M2ExNzk5N2QzMWU4ZDVhYTZjY2M5YTZiZDc1N2Yx
NWMwMzAwHhcNMjUwNjA4MDMwMDQzWhcNMjUwNjA5MDMwMDQzWjAzMTEwLwYDVQQD
EygzNTI2NzIzYTA1MGFkZWJmNDMyMmI1Y2M3MGNiMmZmY2M4NDQ2OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA299i1AwQLw5sFthpUVx8LX3xMTsj
bMK8HbLq94zDjg53mm9wNURWD3zuN7KIiYo2NXtIrf26ZjhgWOfBXWdtzUMP/N2w
7s6zc9Re5aJ2yvm5VPLkX44+qZU5GsRFgcm+viEsfoiFh0WlJSjHf8wBmxvB8nIX
CJIjg4XWXNRNmRM9f8wSINoQLEDSAweg2MJoAqENRZggOpBHk8soERPMeLPdGFfK
sXcjIEFL0bdwj/pQAmHYyUV7DkvUfm5ixOTOnhGV5DvRE5VtBytNjz8yc45gpQNv
1sK0A0t91oXZMbfH8Ctmb5Ea+jCJyQErkGkCZ7y95vxQ7f4Aah7v/sceVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUmcjoFCt6/QyK1zHDLL/zIRGjUMB8GA1UdIwQY
MBaAFNOUk6F5l9MejVqmzMmmvXV/FcAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGIt
OTc5MjMyOTdjZGE3LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGItOTc5MjMyOTdjZGE3
LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcWS594k
XrceEABasR34BYWVwhhq4mdpphLmdQlSR0SE+fmNWB04dD9whZVo447/Qpt1d1MG
d2DlDSZCt10ZQlxSzDKCKBmCgNffrErjLV3+aGnDYxmj4vmmF9sDWUs6gP6W8k96
Xt/J3QOXz2LDUFzgXRfdjTp34GrH0dQ65JMZIZwM/SzrpPooVAfGEzTfmO9EleM4
uIg+Fpg4lc81oJB33X+zaSE2wB5dRqp4bXgEMxBmFwJ7GBTyajSrrJudit10YrU+
tm2BtkoCIOoD3traatBRT6aCxTMs537UIxPuruNgELGPt7VlNXn3+WKL2B12E1BZ
3DugPt2Iy8n7Vw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:59 2025 by rpki-client