Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File:                     pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier:          phkXIV5YkGXEPzHFFEC9sS66EjpvxKb+WpU4XObmbBY=
Subject key identifier:   F8:55:C3:C3:09:46:D9:86:EE:EE:D9:6B:3C:9E:3F:A5:F3:D2:F3:2A
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer:       /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial:       0197481E1A2619B0DFA361D10E1C2EC8AEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 02:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:21 +0000
Files and hashes:         1: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (hash: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=)
                          2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: bDZ5rGhPWUpre7Pi9GE0CJFmmOPnp7Jpj6DKeUAnIVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:1a:26:19:b0:df:a3:61:d1:0e:1c:2e:c8:ae:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
        Validity
            Not Before: Jun  7 02:00:21 2025 GMT
            Not After : Jun  8 02:00:21 2025 GMT
        Subject: CN=f855c3c30946d986eeeed96b3c9e3fa5f3d2f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:a0:ea:29:45:f3:0f:25:96:05:65:0a:f3:
                    a0:d9:95:e7:7b:c8:99:07:41:46:ce:68:68:48:c8:
                    38:cd:4f:92:94:a4:16:9f:fc:12:d9:40:ac:ce:e8:
                    5a:43:ab:aa:37:85:87:c8:82:44:25:44:b7:5a:c6:
                    70:b0:2a:3c:11:79:af:9c:de:c4:d2:26:f9:6f:87:
                    5c:b0:9c:14:34:e5:ac:4b:4d:1d:43:e4:01:02:06:
                    c0:aa:3d:5c:f6:89:c0:ea:8b:ae:3d:8e:fa:ef:5e:
                    15:53:49:09:88:9a:5e:f1:f0:e6:f4:73:eb:3c:d8:
                    fc:39:12:fe:4d:ee:79:42:dc:15:7e:92:6f:b6:ed:
                    28:9b:23:2a:9f:b4:1b:01:fd:1e:3f:bb:a0:5c:83:
                    ef:2e:87:2d:c1:64:4d:0d:9f:f1:dc:ef:e1:b2:d0:
                    a6:d9:83:a1:0a:12:2c:e5:47:a5:49:06:b0:ec:12:
                    8d:98:9d:0f:80:35:53:70:94:90:f0:54:e9:0b:b3:
                    cb:4f:95:9b:2a:8f:7c:67:70:ab:91:1e:2e:fb:c0:
                    88:c9:1d:27:69:e5:09:50:8d:9a:9b:87:42:fe:ad:
                    7e:4f:c0:cf:4a:11:9b:3b:c7:f8:03:91:72:c7:98:
                    c5:49:f8:9d:bb:74:f0:54:33:30:dd:b4:62:78:60:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:55:C3:C3:09:46:D9:86:EE:EE:D9:6B:3C:9E:3F:A5:F3:D2:F3:2A
            X509v3 Authority Key Identifier:
                keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:51:c9:c8:4e:94:14:47:d3:2d:1b:67:56:c1:67:9b:a6:d3:
         85:d4:49:b3:43:8f:03:f3:b8:a9:b9:d7:90:f1:f1:6c:10:45:
         4c:41:2d:8b:35:0c:f5:7d:43:23:07:49:b2:84:2f:2b:f8:36:
         5e:dd:84:e1:a8:23:16:af:78:89:ad:b9:ee:a1:aa:aa:3d:cf:
         27:f9:33:4d:cf:3e:f8:e7:3e:28:cb:87:d5:3c:71:ea:98:94:
         00:49:8d:08:56:1b:40:c8:b4:a2:04:90:35:fb:43:77:cb:a9:
         9d:5c:5f:f4:71:ea:86:3c:88:3f:37:9c:08:8f:a6:f9:d8:5c:
         e9:81:0f:81:7e:19:db:e1:42:86:c6:f8:08:ec:d3:74:7a:75:
         20:35:a5:8a:e4:3c:42:22:c6:4e:65:d8:08:a1:1e:3b:a6:2b:
         bd:77:4b:0e:d4:6d:86:a9:94:09:ca:6d:75:92:07:4e:f3:63:
         ce:2d:bb:52:04:c9:25:e9:f1:85:9b:81:71:70:5a:9f:8e:ea:
         ad:5e:24:92:76:93:aa:4f:98:a0:5a:6e:af:1d:d0:3c:bd:69:
         32:a9:93:f1:12:cc:6f:ab:f0:df:0c:57:2a:a9:75:8d:6e:03:
         8e:b3:c3:af:ab:96:99:c3:a1:32:93:12:d3:e2:68:84:5d:48:
         9e:99:c3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHhomGbDfo2HRDhwuyK7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjJlMmM3NzUzNjUyYzc3ZGJiNzljYmUwNjliMmJhYjAz
ZjYwZGQwHhcNMjUwNjA3MDIwMDIxWhcNMjUwNjA4MDIwMDIxWjAzMTEwLwYDVQQD
EyhmODU1YzNjMzA5NDZkOTg2ZWVlZWQ5NmIzYzllM2ZhNWYzZDJmMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiyg6ilF8w8llgVlCvOg2ZXne8iZ
B0FGzmhoSMg4zU+SlKQWn/wS2UCszuhaQ6uqN4WHyIJEJUS3WsZwsCo8EXmvnN7E
0ib5b4dcsJwUNOWsS00dQ+QBAgbAqj1c9onA6ouuPY76714VU0kJiJpe8fDm9HPr
PNj8ORL+Te55QtwVfpJvtu0omyMqn7QbAf0eP7ugXIPvLoctwWRNDZ/x3O/hstCm
2YOhChIs5UelSQaw7BKNmJ0PgDVTcJSQ8FTpC7PLT5WbKo98Z3CrkR4u+8CIyR0n
aeUJUI2am4dC/q1+T8DPShGbO8f4A5Fyx5jFSfidu3TwVDMw3bRieGB9ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhVw8MJRtmG7u7ZazyeP6Xz0vMqMB8GA1UdIwQY
MBaAFKTy4sd1NlLHfbt5y+BpsrqwP2DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQt
OWQxYTJlMDkxMWI5LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQtOWQxYTJlMDkxMWI5
LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFHJyE6U
FEfTLRtnVsFnm6bThdRJs0OPA/O4qbnXkPHxbBBFTEEtizUM9X1DIwdJsoQvK/g2
Xt2E4agjFq94ia257qGqqj3PJ/kzTc8++Oc+KMuH1Txx6piUAEmNCFYbQMi0ogSQ
NftDd8upnVxf9HHqhjyIPzecCI+m+dhc6YEPgX4Z2+FChsb4COzTdHp1IDWliuQ8
QiLGTmXYCKEeO6YrvXdLDtRthqmUCcptdZIHTvNjzi27UgTJJenxhZuBcXBan47q
rV4kknaTqk+YoFpurx3QPL1pMqmT8RLMb6vw3wxXKql1jW4DjrPDr6uWmcOhMpMS
0+JohF1InpnDBw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:31:50 2025 by rpki-client