Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File:                     F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier:          6XpS9HfZZcuqM27Y98st60Rs3efxBA/6VmZS2HG7e6E=
Subject key identifier:   66:0F:7F:36:DB:BB:A1:49:53:C9:83:CF:5F:74:9C:12:21:E7:77:C1
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer:       /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial:       019747B0C6E4ED804D2399DB13C09AECCAE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 00:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:56 +0000
Files and hashes:         1: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=)
                          2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: px2l6GXXronq9bfpB5sW8Dk1ThQRrXK+kDlIa/EDf2Q=)
                          3: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=)
                          4: VXw6UdBxXA-7nRf32K-vpMGkPlc.roa (hash: QzJre4EdHsiyKrTcYmbfZ0cHsJk3xWmL9K5cUgcsYIU=)
                          5: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:c6:e4:ed:80:4d:23:99:db:13:c0:9a:ec:ca:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
        Validity
            Not Before: Jun  7 00:00:56 2025 GMT
            Not After : Jun  8 00:00:56 2025 GMT
        Subject: CN=660f7f36dbbba14953c983cf5f749c1221e777c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:aa:cb:a2:4f:fe:12:0b:1b:ec:b6:e7:b9:
                    1d:61:54:e0:bb:73:c3:5b:f6:b8:f6:8a:f5:b0:47:
                    4e:45:92:ab:5e:fc:83:70:d3:c0:79:f7:f8:e3:b9:
                    e9:fd:db:7d:d1:7d:aa:d8:4c:db:08:7b:b0:51:e2:
                    d3:1b:29:e5:a6:29:53:57:c3:bf:fd:24:8f:c7:72:
                    34:60:fe:81:8e:42:e2:a3:12:ba:66:ec:d2:33:af:
                    0e:c8:a9:e0:42:0c:b4:bc:e4:46:00:12:3b:38:8c:
                    9a:bb:58:d6:12:a4:a2:dd:62:26:03:d3:51:59:a2:
                    a8:e8:99:b6:bf:e7:f2:c5:6f:dd:2e:6b:67:12:02:
                    d6:72:d5:c7:c4:dc:50:a0:f7:7e:e3:6b:7f:50:34:
                    0c:0a:35:f2:f8:3c:fd:aa:2e:04:9f:96:fb:ab:8e:
                    8f:f2:77:3f:64:db:1a:41:5b:65:78:0a:93:8c:7b:
                    d5:55:6b:48:73:a8:1f:cf:d5:f2:69:1b:4d:ab:2e:
                    a3:02:51:58:ce:bd:eb:28:21:60:14:ed:f8:7b:99:
                    3b:37:b8:c9:d0:f8:e7:ee:c8:a3:ea:a1:09:37:be:
                    47:5c:ac:8e:99:80:40:0d:e4:ab:e4:0f:dc:e0:7a:
                    dc:70:90:4e:33:15:5c:94:8c:d8:fa:f9:c1:64:dd:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:7F:36:DB:BB:A1:49:53:C9:83:CF:5F:74:9C:12:21:E7:77:C1
            X509v3 Authority Key Identifier:
                keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:da:c1:c8:ba:39:6b:84:06:dc:69:b4:42:e3:86:cb:8c:
         76:60:a7:85:77:f2:91:1e:fc:41:f8:28:bc:35:4c:78:9d:58:
         12:2c:76:16:f5:87:65:e6:4b:ef:08:a7:15:39:a8:f2:8b:c7:
         53:6c:6e:cc:1e:fc:e6:6c:a2:d2:4a:54:22:2a:37:a9:ad:00:
         46:28:22:2e:d7:cb:04:85:8f:5d:86:21:db:72:47:1f:f5:a0:
         ab:e5:ad:ce:69:6b:f1:ab:d0:33:f1:ac:f6:5b:31:0d:0a:93:
         73:bc:95:8c:5e:f8:ab:0d:41:d9:2d:52:e2:54:db:57:f7:07:
         c2:c5:3a:cc:95:64:73:a3:81:6a:7c:c6:05:b7:5a:81:a9:47:
         24:23:ea:24:3f:e7:5b:9a:40:42:7d:2f:13:33:b6:54:14:aa:
         18:4c:99:6b:5e:6a:b9:19:ef:ff:b7:94:09:19:b6:1e:b5:8c:
         f0:fe:9a:c4:7d:c7:27:b9:59:8e:6f:44:89:63:26:e2:30:ef:
         1c:6b:26:07:08:05:ae:b0:68:1e:33:fc:13:5b:a3:92:78:19:
         59:72:60:cb:29:45:39:e4:ac:91:10:3e:02:59:ed:e1:5d:81:
         ec:bf:d1:1b:a0:ba:dd:c0:52:d9:c8:4b:15:9f:07:33:f7:2b:
         62:9e:ec:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsMbk7YBNI5nbE8Ca7MrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3
NGRlMGYwHhcNMjUwNjA3MDAwMDU2WhcNMjUwNjA4MDAwMDU2WjAzMTEwLwYDVQQD
Eyg2NjBmN2YzNmRiYmJhMTQ5NTNjOTgzY2Y1Zjc0OWMxMjIxZTc3N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6mqy6JP/hILG+y257kdYVTgu3PD
W/a49or1sEdORZKrXvyDcNPAeff447np/dt90X2q2EzbCHuwUeLTGynlpilTV8O/
/SSPx3I0YP6BjkLioxK6ZuzSM68OyKngQgy0vORGABI7OIyau1jWEqSi3WImA9NR
WaKo6Jm2v+fyxW/dLmtnEgLWctXHxNxQoPd+42t/UDQMCjXy+Dz9qi4En5b7q46P
8nc/ZNsaQVtleAqTjHvVVWtIc6gfz9XyaRtNqy6jAlFYzr3rKCFgFO34e5k7N7jJ
0Pjn7sij6qEJN75HXKyOmYBADeSr5A/c4HrccJBOMxVclIzY+vnBZN3ClwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYPfzbbu6FJU8mDz190nBIh53fBMB8GA1UdIwQY
MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt
YWM2N2EzNmU0YWFiLzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi
LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwHawci6
OWuEBtxptELjhsuMdmCnhXfykR78QfgovDVMeJ1YEix2FvWHZeZL7winFTmo8ovH
U2xuzB785myi0kpUIio3qa0ARigiLtfLBIWPXYYh23JHH/Wgq+Wtzmlr8avQM/Gs
9lsxDQqTc7yVjF74qw1B2S1S4lTbV/cHwsU6zJVkc6OBanzGBbdagalHJCPqJD/n
W5pAQn0vEzO2VBSqGEyZa15quRnv/7eUCRm2HrWM8P6axH3HJ7lZjm9EiWMm4jDv
HGsmBwgFrrBoHjP8E1ujkngZWXJgyylFOeSskRA+Alnt4V2B7L/RG6C63cBS2chL
FZ8HM/crYp7sbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:03 2025 by rpki-client