Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          zWdrYKDeHM2QNCsVyn2uZljRJuEACGY0grfelRIZ0IQ=
Subject key identifier:   8F:75:EA:CB:B4:FF:28:59:1B:7E:52:53:A0:66:62:30:BE:DE:DD:42
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       01974AE85D1148E86D4A2DB4C691D338F6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 15:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:31 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: fM3AF7uYvQKPwDwZw3Uiyijku/e6AQi5arT7x5ZI7PU=)
                          2: BgyYhjdlX54FNLBOgRi8uw75ivU.roa (hash: zzLTHJ8bOyhzXoEVwavpxvrPBboJmkVXfTzNirwZrsg=)
                          3: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (hash: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=)
                          4: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (hash: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=)
                          5: UKl3alsL8yH60mBrWhBQKGsUsvQ.roa (hash: NEBoD+GODx6lckBJaJWB/4++/wxgc2RbKTzZ6lIXc7I=)
                          6: h81MQCGUH4YWhsU7_noNE9t-6Ag.roa (hash: B55fQoBAEqhRk0fmuOYVFDE0A21yTHmBQBoOyLnBQrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:5d:11:48:e8:6d:4a:2d:b4:c6:91:d3:38:f6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Jun  7 15:00:31 2025 GMT
            Not After : Jun  8 15:00:31 2025 GMT
        Subject: CN=8f75eacbb4ff28591b7e5253a0666230bededd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:4a:f6:3b:bb:13:54:6d:9c:97:9b:c8:e7:
                    49:0e:eb:95:7b:f1:d0:75:d0:3f:d0:e6:95:95:e3:
                    7e:08:a3:ed:17:60:d8:aa:2c:84:64:49:79:fa:b1:
                    bf:73:55:2f:09:19:54:f1:d4:59:04:3c:b2:dc:63:
                    6c:e9:e3:0f:f4:f4:24:39:8b:22:b3:a3:48:53:ef:
                    d1:03:32:82:75:4e:64:41:4a:2f:0a:6a:3c:f2:f1:
                    c3:b2:32:18:ec:bc:20:a7:28:0a:e1:be:53:89:c6:
                    b4:c7:9e:70:4a:48:56:86:02:0a:1d:2f:00:3e:1b:
                    42:05:35:02:72:c0:b1:6a:08:cf:ed:b4:e1:51:f3:
                    43:5e:e7:2c:4e:e3:33:a1:b3:52:37:88:b5:21:6e:
                    92:8b:57:34:85:18:e4:3a:c2:eb:1d:35:8a:d3:07:
                    2e:08:a7:15:6f:c6:d8:b1:05:86:7d:72:ba:d3:b1:
                    e8:44:2d:e3:18:4f:2d:04:ea:40:0b:82:64:4e:c9:
                    46:70:44:92:1c:9f:d2:74:a3:9b:b8:72:75:6b:a0:
                    62:60:5b:21:5a:70:3d:c1:e1:99:08:12:f2:cd:94:
                    1f:13:b1:db:1b:22:34:75:a6:7b:fb:22:00:79:67:
                    e2:12:b2:50:45:51:13:7e:05:00:2a:a0:82:b3:47:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:75:EA:CB:B4:FF:28:59:1B:7E:52:53:A0:66:62:30:BE:DE:DD:42
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d1:dc:5d:22:a3:b5:79:b5:1a:3f:ef:fa:2b:a8:58:28:7e:
         84:83:e3:10:ae:b9:42:dd:c3:93:38:8f:6d:85:dc:64:e9:01:
         ef:93:9b:1e:79:d5:c0:44:d0:16:31:a3:ee:ff:39:0e:7f:0d:
         43:04:d7:93:42:db:2b:4d:3c:db:3f:8e:88:3c:d5:79:20:09:
         36:24:9d:07:2b:ce:f5:5f:55:42:94:c8:e9:37:1b:0c:7b:17:
         ea:2d:73:c2:90:4b:4e:75:59:20:e9:bf:07:b4:c9:aa:a1:91:
         04:ee:40:d2:48:eb:19:aa:36:ee:a8:8c:a1:15:24:fd:bc:4c:
         62:b6:89:6a:4e:41:b2:86:e3:ff:b2:9c:81:c2:54:52:d2:ac:
         ae:9e:10:56:02:f9:2c:65:62:7b:de:01:b4:89:ae:d6:55:76:
         06:24:26:ef:b5:c9:f4:da:9f:2f:07:74:c9:c9:4a:55:76:e0:
         ef:8a:d5:46:f8:dd:a8:7d:0a:d2:20:12:fc:c3:7a:a0:0e:e2:
         c9:5b:cb:05:6b:f0:44:1b:e1:34:af:c2:fb:41:28:29:55:c1:
         c4:fa:d2:ff:61:f0:b8:87:aa:93:06:82:4e:d5:b9:14:73:4e:
         92:74:e1:57:7a:7e:a2:d7:21:8e:24:64:0f:19:2d:b9:07:8f:
         bb:c9:29:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6F0RSOhtSi20xpHTOPapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlN2M4MmIyMjc2Y2JkZjEzMGNjYWQwNDZiNjVmZWFiMmMy
N2VkNDkwHhcNMjUwNjA3MTUwMDMxWhcNMjUwNjA4MTUwMDMxWjAzMTEwLwYDVQQD
Eyg4Zjc1ZWFjYmI0ZmYyODU5MWI3ZTUyNTNhMDY2NjIzMGJlZGVkZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTJK9ju7E1RtnJebyOdJDuuVe/HQ
ddA/0OaVleN+CKPtF2DYqiyEZEl5+rG/c1UvCRlU8dRZBDyy3GNs6eMP9PQkOYsi
s6NIU+/RAzKCdU5kQUovCmo88vHDsjIY7LwgpygK4b5Tica0x55wSkhWhgIKHS8A
PhtCBTUCcsCxagjP7bThUfNDXucsTuMzobNSN4i1IW6Si1c0hRjkOsLrHTWK0wcu
CKcVb8bYsQWGfXK607HoRC3jGE8tBOpAC4JkTslGcESSHJ/SdKObuHJ1a6BiYFsh
WnA9weGZCBLyzZQfE7HbGyI0daZ7+yIAeWfiErJQRVETfgUAKqCCs0dubQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI916su0/yhZG35SU6BmYjC+3t1CMB8GA1UdIwQY
MBaAFN58grInbL3xMMytBGtl/qssJ+1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODkt
N2ZhZjdjMWRlN2IwLzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODktN2ZhZjdjMWRlN2Iw
LzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdHcXSKj
tXm1Gj/v+iuoWCh+hIPjEK65Qt3DkziPbYXcZOkB75ObHnnVwETQFjGj7v85Dn8N
QwTXk0LbK0082z+OiDzVeSAJNiSdByvO9V9VQpTI6TcbDHsX6i1zwpBLTnVZIOm/
B7TJqqGRBO5A0kjrGao27qiMoRUk/bxMYraJak5Bsobj/7KcgcJUUtKsrp4QVgL5
LGVie94BtImu1lV2BiQm77XJ9NqfLwd0yclKVXbg74rVRvjdqH0K0iAS/MN6oA7i
yVvLBWvwRBvhNK/C+0EoKVXBxPrS/2HwuIeqkwaCTtW5FHNOknThV3p+otchjiRk
DxktuQePu8kptg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:02 2025 by rpki-client