Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
File:                     kOphmXVeYwDwQCwqCO1DegpzAB4.mft (raw, json)
Hash identifier:          Ux+kLIvz2jULgB1iOq84p5uuHEVKhO2YGkWin8zjnUc=
Subject key identifier:   D3:56:E6:5E:E3:ED:71:2D:A8:D5:67:97:67:9C:13:DC:6E:50:F8:F4
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Certificate issuer:       /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial:       01974967C349561DC29378CAB852E9F693F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 08:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:26 +0000
Files and hashes:         1: KatNB724uDRt0-ZiwLjIS5tNdSI.roa (hash: 44IwgAiGyeQdbyG6MSKbubj3iGudNdrcCJvguuMAbNQ=)
                          2: kOphmXVeYwDwQCwqCO1DegpzAB4.crl (hash: FAWP+u9ztDy6hdWDGmSiez0/BFlm58rs6H5Fjwi/OEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:c3:49:56:1d:c2:93:78:ca:b8:52:e9:f6:93:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
        Validity
            Not Before: Jun  7 08:00:26 2025 GMT
            Not After : Jun  8 08:00:26 2025 GMT
        Subject: CN=d356e65ee3ed712da8d56797679c13dc6e50f8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:bc:e7:63:79:aa:eb:14:20:22:21:b1:4c:
                    4f:39:60:34:14:d8:56:e7:29:20:46:72:84:82:83:
                    a8:2b:1e:b8:bf:1f:a0:b8:a3:d5:39:53:ff:f4:f4:
                    f5:e4:eb:98:78:7f:88:9b:f2:17:b9:28:68:b0:40:
                    54:62:a7:bf:9e:4b:d6:1d:67:bb:82:d0:93:a1:ec:
                    19:fb:ad:b3:06:60:f6:e8:1d:d7:29:ad:f2:60:b8:
                    c7:50:94:9c:ee:66:09:78:78:7f:1a:40:27:1c:9b:
                    06:17:15:9f:89:e1:48:a9:8e:11:65:12:3b:27:a1:
                    70:82:b0:38:77:0b:7e:ef:5c:64:cd:22:75:8c:a2:
                    77:1b:2c:e4:ab:4f:ee:a2:d5:bf:64:54:92:b2:25:
                    cc:9e:9d:82:d5:8a:0e:a2:0b:28:ff:27:bb:c3:f0:
                    64:dd:1e:a0:27:06:a5:d4:f2:14:f8:c2:8a:6a:32:
                    71:1c:6b:60:cc:bb:db:f3:09:a0:6e:e6:8b:16:96:
                    72:cf:81:5f:b4:70:99:55:6b:41:cf:6a:3a:96:a8:
                    45:56:fb:79:86:d5:81:8c:a3:08:45:4c:65:62:8e:
                    48:e6:42:06:a0:80:d8:64:fc:d4:ed:91:c7:ed:67:
                    fa:74:c2:c4:1c:56:b4:ec:dd:f3:85:5b:8b:25:67:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:E6:5E:E3:ED:71:2D:A8:D5:67:97:67:9C:13:DC:6E:50:F8:F4
            X509v3 Authority Key Identifier:
                keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:76:8b:eb:fe:c5:d4:08:99:e6:af:a8:0a:44:df:e2:da:e9:
         b9:29:7c:80:7a:44:c0:63:cf:18:4b:8d:dc:09:a5:a6:63:a5:
         2a:a2:28:08:8b:49:a4:c0:73:f1:4e:b1:0c:ce:82:4d:a4:ac:
         ac:a9:12:bc:ae:64:d1:5a:b4:82:42:40:be:ca:62:8c:74:17:
         a5:62:66:26:0c:93:66:83:49:d3:ef:a7:77:29:1d:d7:bc:32:
         a6:c3:1a:67:0f:d0:45:51:7e:2e:af:88:9f:35:38:43:5b:ff:
         a2:a3:a0:02:c2:d0:d7:83:4e:0e:c4:32:a6:9f:ec:6a:9a:fd:
         4e:fd:6d:ab:00:a6:b1:93:83:13:ad:77:39:78:3f:61:e4:00:
         d5:a2:8c:7b:cc:b0:57:c1:e4:f9:ea:56:79:5e:f0:42:e7:b5:
         7f:1c:11:9a:74:3f:3c:58:47:7e:c7:29:15:c2:1d:11:32:f3:
         2e:f5:d1:6e:4f:ce:9b:9f:b9:64:8f:00:2a:05:3f:36:87:69:
         7a:d8:4c:93:94:6a:d6:c3:aa:43:ec:45:67:24:38:0e:f5:36:
         33:5f:25:69:44:18:30:a4:41:b3:12:38:77:e9:b8:eb:83:e6:
         7b:93:b5:b9:3d:50:18:4e:1f:44:f9:55:00:7e:1e:a1:4e:d4:
         9d:03:71:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ8NJVh3Ck3jKuFLp9pP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWE2MTk5NzU1ZTYzMDBmMDQwMmMyYTA4ZWQ0MzdhMGE3
MzAwMWUwHhcNMjUwNjA3MDgwMDI2WhcNMjUwNjA4MDgwMDI2WjAzMTEwLwYDVQQD
EyhkMzU2ZTY1ZWUzZWQ3MTJkYThkNTY3OTc2NzljMTNkYzZlNTBmOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxK852N5qusUICIhsUxPOWA0FNhW
5ykgRnKEgoOoKx64vx+guKPVOVP/9PT15OuYeH+Im/IXuShosEBUYqe/nkvWHWe7
gtCToewZ+62zBmD26B3XKa3yYLjHUJSc7mYJeHh/GkAnHJsGFxWfieFIqY4RZRI7
J6FwgrA4dwt+71xkzSJ1jKJ3Gyzkq0/uotW/ZFSSsiXMnp2C1YoOogso/ye7w/Bk
3R6gJwal1PIU+MKKajJxHGtgzLvb8wmgbuaLFpZyz4FftHCZVWtBz2o6lqhFVvt5
htWBjKMIRUxlYo5I5kIGoIDYZPzU7ZHH7Wf6dMLEHFa07N3zhVuLJWenmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNW5l7j7XEtqNVnl2ecE9xuUPj0MB8GA1UdIwQY
MBaAFJDqYZl1XmMA8EAsKgjtQ3oKcwAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTkt
YzM5ODA4ZDAzYTE4LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTktYzM5ODA4ZDAzYTE4
LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3aL6/7F
1AiZ5q+oCkTf4trpuSl8gHpEwGPPGEuN3AmlpmOlKqIoCItJpMBz8U6xDM6CTaSs
rKkSvK5k0Vq0gkJAvspijHQXpWJmJgyTZoNJ0++ndykd17wypsMaZw/QRVF+Lq+I
nzU4Q1v/oqOgAsLQ14NODsQypp/sapr9Tv1tqwCmsZODE613OXg/YeQA1aKMe8yw
V8Hk+epWeV7wQue1fxwRmnQ/PFhHfscpFcIdETLzLvXRbk/Om5+5ZI8AKgU/Nodp
ethMk5Rq1sOqQ+xFZyQ4DvU2M18laUQYMKRBsxI4d+m464Pme5O1uT1QGE4fRPlV
AH4eoU7UnQNx1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:29 2025 by rpki-client