Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
File:                     mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json)
Hash identifier:          PYP8kTmJdf/IUbwAXFAsyGR51g0GmteJHsg8DBRn75U=
Subject key identifier:   1C:44:D1:8F:EB:64:47:B7:17:43:10:21:8E:82:93:9B:43:AC:00:BD
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Certificate issuer:       /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial:       01974A7AC0963613B2133E62E50C1AD0B4A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 13:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:47 +0000
Files and hashes:         1: Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa (hash: VGsuyNfzfr/GzDDdXYimTSNFocuLHOKMiHb8B0Qh1O4=)
                          2: M8tcAEtobc_HjXn0aPPPoIVg2j0.roa (hash: jvlpLwOiPWCn9YztYqEXIDpMuvLmxqIvyCBv7RToVIs=)
                          3: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: z+/p02+OiwRPaNqaVVYlLc7JQn7R6rMZ7OwFt4eq/Xo=)
                          4: urzNFgi_gE8fSu_5YoQ_GQRDVw0.roa (hash: T8tIXkvw/aUJVTl8RyXo5fkRTTwdXnzNgefZluAgHWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:c0:96:36:13:b2:13:3e:62:e5:0c:1a:d0:b4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
        Validity
            Not Before: Jun  7 13:00:47 2025 GMT
            Not After : Jun  8 13:00:47 2025 GMT
        Subject: CN=1c44d18feb6447b7174310218e82939b43ac00bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:3b:c8:d1:58:57:9e:e7:6f:3c:c8:30:0f:
                    2e:6c:7f:1c:e5:26:36:31:5f:d8:c5:f9:f3:c4:c3:
                    e8:92:00:80:d3:54:e2:d4:42:64:63:4b:85:7f:d2:
                    f6:7d:a5:67:8f:ea:94:0e:8a:3c:f9:09:61:00:25:
                    45:18:a3:8a:c4:58:d7:16:f7:87:06:0f:a0:52:5a:
                    0a:e6:d7:3d:f0:36:0f:98:e0:c9:1e:d3:77:5f:7f:
                    ab:65:32:1b:fb:62:72:03:68:57:b7:ce:44:c8:05:
                    b1:87:a1:48:aa:23:dd:ed:03:91:37:0f:55:e7:da:
                    29:72:c1:53:08:7a:2a:a0:fd:0b:a9:fa:3c:a8:fc:
                    5b:b0:e9:b8:29:d3:15:22:3f:27:5a:3e:99:69:44:
                    65:0a:8b:b3:6a:c5:b7:50:21:0b:32:25:5c:9a:cb:
                    3c:9f:5f:21:68:63:b3:9e:b7:a3:a1:06:25:7b:21:
                    72:83:b1:92:ae:ba:93:bf:c9:02:1c:3f:5a:3b:38:
                    4f:e9:92:3b:9f:98:9c:dd:35:57:18:ef:d7:c5:aa:
                    be:4b:04:7e:07:5f:34:17:69:79:41:a9:2e:30:29:
                    ef:f6:0e:e4:9c:67:12:85:c9:32:b7:a3:f1:9a:96:
                    3f:46:91:91:6e:e4:29:4d:79:dd:48:e3:b5:73:86:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:44:D1:8F:EB:64:47:B7:17:43:10:21:8E:82:93:9B:43:AC:00:BD
            X509v3 Authority Key Identifier:
                keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:71:df:6e:50:6b:74:a8:c8:22:22:c3:d4:5a:d2:a7:c2:32:
         0c:d6:90:ce:e5:93:01:36:7a:e4:c1:9d:8c:c5:2c:9e:24:0d:
         32:36:4c:24:8b:c4:61:92:27:e1:53:9f:41:5d:82:6e:5d:77:
         ba:50:41:81:f5:1b:dc:4e:51:22:81:60:48:50:5a:6e:18:20:
         44:5b:16:c8:f8:51:a4:0b:6e:97:99:e2:8a:0f:ef:c4:c6:60:
         6d:9a:31:72:90:aa:17:ee:e5:6c:5d:0b:fd:be:b8:77:9b:1c:
         c2:40:e1:d0:0f:22:33:96:89:3d:b7:13:cc:d8:25:a5:fe:fa:
         b3:58:b6:50:b5:06:88:42:69:c8:cf:a5:3a:b8:40:bd:5d:96:
         be:28:3d:2f:3d:0a:43:65:71:53:98:cd:79:03:6f:ac:c6:e1:
         f3:82:11:f4:2c:c7:a0:a6:9c:a4:9c:ee:c0:1a:91:38:19:a2:
         1a:b8:f6:bb:06:f2:ad:f6:50:56:10:5b:9f:64:4f:26:9a:f9:
         2f:af:18:05:27:97:3c:38:20:c8:aa:8c:7b:f5:3b:e1:d2:46:
         cc:db:3f:5d:1d:a9:20:36:f7:25:1a:f2:d6:0d:bc:e2:ec:53:
         68:c5:2d:ce:67:13:bd:5d:c6:66:65:1a:38:8f:aa:90:73:ac:
         a8:00:2b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKesCWNhOyEz5i5Qwa0LSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTdkNjYxYWZjYTNkMzM3MGI4ZTYzNDQ5NGQ1MjQ2Yjgz
ZDU4NWYwHhcNMjUwNjA3MTMwMDQ3WhcNMjUwNjA4MTMwMDQ3WjAzMTEwLwYDVQQD
EygxYzQ0ZDE4ZmViNjQ0N2I3MTc0MzEwMjE4ZTgyOTM5YjQzYWMwMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz07yNFYV57nbzzIMA8ubH8c5SY2
MV/YxfnzxMPokgCA01Ti1EJkY0uFf9L2faVnj+qUDoo8+QlhACVFGKOKxFjXFveH
Bg+gUloK5tc98DYPmODJHtN3X3+rZTIb+2JyA2hXt85EyAWxh6FIqiPd7QORNw9V
59opcsFTCHoqoP0Lqfo8qPxbsOm4KdMVIj8nWj6ZaURlCouzasW3UCELMiVcmss8
n18haGOznrejoQYleyFyg7GSrrqTv8kCHD9aOzhP6ZI7n5ic3TVXGO/Xxaq+SwR+
B180F2l5QakuMCnv9g7knGcShckyt6PxmpY/RpGRbuQpTXndSOO1c4ZgNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxE0Y/rZEe3F0MQIY6Ck5tDrAC9MB8GA1UdIwQY
MBaAFJrn1mGvyj0zcLjmNElNUka4PVhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt
M2I2OGE0OWRjMDQyLzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy
LzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHHfblBr
dKjIIiLD1FrSp8IyDNaQzuWTATZ65MGdjMUsniQNMjZMJIvEYZIn4VOfQV2Cbl13
ulBBgfUb3E5RIoFgSFBabhggRFsWyPhRpAtul5niig/vxMZgbZoxcpCqF+7lbF0L
/b64d5scwkDh0A8iM5aJPbcTzNglpf76s1i2ULUGiEJpyM+lOrhAvV2Wvig9Lz0K
Q2VxU5jNeQNvrMbh84IR9CzHoKacpJzuwBqROBmiGrj2uwbyrfZQVhBbn2RPJpr5
L68YBSeXPDggyKqMe/U74dJGzNs/XR2pIDb3JRry1g284uxTaMUtzmcTvV3GZmUa
OI+qkHOsqAArRg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:16:17 2025 by rpki-client