Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          3H6AXFcso4W47pXilYA2+/UreOD/sHC0S0zoc763VaU=
Subject key identifier:   1A:01:39:CB:32:54:D2:E8:A9:DB:95:DD:82:9D:95:36:AF:57:3F:8D
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       019761DE49FA57E1EF7D350BC548C5B32DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          158C
Signing time:             Thu 12 Jun 2025 02:00:47 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:47 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:47 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: 89odrrJtpF5A1kCw0xFgOINvdXFNTWjv0TQunWGHOsc=)
                          2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
                          3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
                          4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:de:49:fa:57:e1:ef:7d:35:0b:c5:48:c5:b3:2d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Jun 12 02:00:47 2025 GMT
            Not After : Jun 13 02:00:47 2025 GMT
        Subject: CN=1a0139cb3254d2e8a9db95dd829d9536af573f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:ff:a0:83:cd:cb:3e:60:b6:76:35:a7:db:
                    64:c8:00:1c:72:12:dd:c2:fd:dc:12:ef:84:3f:35:
                    b7:c0:15:64:e2:db:87:18:cc:dc:1c:ef:53:c1:d5:
                    53:e7:bc:22:73:66:18:c0:fa:6e:e0:21:10:13:ee:
                    03:66:61:9f:4b:26:87:d4:d8:ba:5a:b9:cc:23:bf:
                    3c:d1:4d:23:7b:a2:7a:50:1b:97:d3:b2:f9:fc:bf:
                    e5:4b:f5:5a:65:63:2c:67:ff:07:f3:8c:de:88:54:
                    48:b3:ad:0a:8d:4b:85:ee:47:6a:ef:ae:8a:f3:89:
                    c0:cd:80:c0:e2:0f:11:4d:92:0c:e6:3c:9e:5c:1e:
                    e7:0f:f8:c1:2e:b7:3d:c9:a6:25:c4:92:81:f3:a0:
                    5d:84:ad:05:4e:11:2b:22:91:dc:cf:13:ef:76:9d:
                    e6:3a:03:d8:19:6e:3e:37:5d:23:ae:19:3e:97:39:
                    c7:df:df:c4:fc:3c:18:12:19:a5:d6:13:6a:35:30:
                    7f:1d:59:0d:95:85:05:6d:d2:06:89:e8:d5:90:e4:
                    f9:a2:d7:80:3c:63:b0:6f:f8:b2:8c:cf:0d:36:14:
                    96:22:65:aa:44:d6:d8:06:8c:e2:d8:fc:6c:4b:4a:
                    cf:fe:f4:1b:67:aa:73:ae:94:d3:bd:eb:20:5c:8f:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:01:39:CB:32:54:D2:E8:A9:DB:95:DD:82:9D:95:36:AF:57:3F:8D
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:18:e0:22:b7:4f:8d:88:dc:a9:06:c2:56:c6:ad:29:e9:4e:
         57:bf:71:42:b9:1e:86:13:88:6c:4c:bc:fd:08:12:c4:8b:93:
         1d:72:51:3b:6d:6d:26:bc:8e:12:b2:b4:85:9b:ae:f2:01:6e:
         1c:70:8e:ff:c1:a9:77:da:2a:8a:8d:9e:e3:57:6f:e1:d0:50:
         cc:32:52:24:48:11:12:61:3f:44:75:8d:a7:b4:d9:d9:d5:21:
         dd:eb:4b:2e:50:28:0c:83:fc:dd:d4:6f:24:ba:37:bb:fd:58:
         52:5c:37:a7:4b:e0:96:ca:0a:b6:4f:e0:00:9d:ef:27:50:5e:
         21:a6:f7:4f:b2:8e:77:28:e3:39:b9:fa:ee:55:b2:bb:7b:a3:
         db:ec:25:65:6b:fc:f8:e0:c1:da:32:9b:b8:73:b5:62:ff:9b:
         5e:29:b7:18:63:a3:05:e1:65:f8:00:08:63:cd:3f:6b:4b:92:
         00:76:30:bf:e9:16:e8:8d:36:63:5b:33:b9:11:18:34:2e:19:
         52:0e:9e:dc:41:5c:93:4e:2b:4b:c0:0a:0e:db:2e:99:da:6a:
         02:da:56:0c:0f:b5:90:df:5c:5a:93:39:0c:20:97:ab:bf:8e:
         8b:82:3a:4b:26:67:c5:32:a7:f5:15:9d:e2:72:7f:bd:8f:b3:
         59:26:ab:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdh3kn6V+HvfTULxUjFsy3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjUwNjEyMDIwMDQ3WhcNMjUwNjEzMDIwMDQ3WjAzMTEwLwYDVQQD
EygxYTAxMzljYjMyNTRkMmU4YTlkYjk1ZGQ4MjlkOTUzNmFmNTczZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H//oIPNyz5gtnY1p9tkyAAcchLd
wv3cEu+EPzW3wBVk4tuHGMzcHO9TwdVT57wic2YYwPpu4CEQE+4DZmGfSyaH1Ni6
WrnMI7880U0je6J6UBuX07L5/L/lS/VaZWMsZ/8H84zeiFRIs60KjUuF7kdq766K
84nAzYDA4g8RTZIM5jyeXB7nD/jBLrc9yaYlxJKB86BdhK0FThErIpHczxPvdp3m
OgPYGW4+N10jrhk+lznH39/E/DwYEhml1hNqNTB/HVkNlYUFbdIGiejVkOT5oteA
PGOwb/iyjM8NNhSWImWqRNbYBozi2PxsS0rP/vQbZ6pzrpTTvesgXI9UGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoBOcsyVNLoqduV3YKdlTavVz+NMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBjgIrdP
jYjcqQbCVsatKelOV79xQrkehhOIbEy8/QgSxIuTHXJRO21tJryOErK0hZuu8gFu
HHCO/8Gpd9oqio2e41dv4dBQzDJSJEgREmE/RHWNp7TZ2dUh3etLLlAoDIP83dRv
JLo3u/1YUlw3p0vglsoKtk/gAJ3vJ1BeIab3T7KOdyjjObn67lWyu3uj2+wlZWv8
+ODB2jKbuHO1Yv+bXim3GGOjBeFl+AAIY80/a0uSAHYwv+kW6I02Y1szuREYNC4Z
Ug6e3EFck04rS8AKDtsumdpqAtpWDA+1kN9cWpM5DCCXq7+Oi4I6SyZnxTKn9RWd
4nJ/vY+zWSarqg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:30:13 2025 by rpki-client