Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File:                     K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier:          LRfmbCREpOpr9gbUIsSzoSdBZCPHGb16yGykpxsc1xY=
Subject key identifier:   B9:8D:DA:C3:F2:19:19:98:A9:F3:28:F6:6A:83:95:B1:89:94:84:58
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer:       /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial:       0197609482FD4C4921C763226C11927F28AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number:          158D
Signing time:             Wed 11 Jun 2025 20:00:34 +0000
Manifest this update:     Wed 11 Jun 2025 20:00:34 +0000
Manifest next update:     Thu 12 Jun 2025 20:00:34 +0000
Files and hashes:         1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
                          2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
                          3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: SZ6Y2cLNR7SlACegD59mBMME4xJXbB9dXzlmI/vloE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:94:82:fd:4c:49:21:c7:63:22:6c:11:92:7f:28:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
        Validity
            Not Before: Jun 11 20:00:34 2025 GMT
            Not After : Jun 12 20:00:34 2025 GMT
        Subject: CN=b98ddac3f2191998a9f328f66a8395b189948458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:0a:57:d6:ce:e9:96:87:cc:fa:95:1b:bc:
                    f7:5d:cc:af:9b:5d:d6:95:2b:05:b4:c2:1d:0a:12:
                    80:7d:78:58:17:0d:da:67:1c:c8:88:b5:53:d1:bd:
                    09:f4:6b:af:4b:b3:53:ec:6e:93:d4:14:38:2e:9a:
                    26:89:44:88:34:a5:fb:87:2f:6d:7d:4a:e9:da:89:
                    03:29:81:58:93:5d:1c:de:31:84:62:59:bc:8d:73:
                    ec:1f:34:11:e7:26:e2:99:a5:eb:e3:5b:6a:f4:c0:
                    d7:0c:fe:fa:ac:df:46:ba:97:fe:0d:9f:80:69:02:
                    62:8a:97:c8:a8:99:13:7e:b0:70:4e:6a:65:8c:77:
                    a8:9d:76:ec:73:f3:90:56:d8:fa:70:0e:ff:02:a4:
                    c1:5a:21:b8:62:a0:81:01:e2:bf:53:b2:19:56:1d:
                    65:9f:6d:77:3b:44:7b:ed:f6:b9:d6:3c:12:08:10:
                    34:42:17:8d:97:c9:12:29:87:53:d6:4c:b0:cf:3f:
                    4a:af:20:d5:2a:20:8b:22:b4:a9:ea:40:cd:14:7a:
                    32:df:89:5e:a1:a3:f8:ae:7f:b3:21:a6:52:f3:4b:
                    a6:f5:99:ba:4f:e2:60:8e:ef:48:a1:83:f2:6a:f2:
                    fd:3b:29:d7:77:1c:4e:0c:94:70:64:16:0d:a8:a6:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8D:DA:C3:F2:19:19:98:A9:F3:28:F6:6A:83:95:B1:89:94:84:58
            X509v3 Authority Key Identifier:
                keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d4:89:74:04:d3:c5:a3:d9:ab:bc:5b:dd:ce:0d:42:bc:1b:
         75:45:8e:8b:32:f3:35:34:5a:03:97:ec:31:70:72:9c:0f:79:
         1f:52:08:10:79:51:d4:e7:34:89:fd:e4:cc:6a:a6:54:75:91:
         0b:e4:0e:85:1d:25:25:96:d1:ae:b3:5a:58:5e:cc:8c:6c:08:
         f2:a5:c5:ed:12:60:62:96:26:87:b6:e4:e9:b2:cb:8f:2d:a3:
         8c:45:fc:69:7e:75:7a:8b:4d:e2:a4:74:5a:19:0f:c6:39:00:
         80:b1:93:ad:36:2c:d5:b8:70:c2:ca:d6:2a:d9:90:97:39:ec:
         b9:8f:b3:5b:1f:97:0e:aa:24:17:f3:40:46:4c:d2:4d:b6:0f:
         22:84:45:d5:71:a1:2a:91:4f:56:8d:ec:a3:ac:52:c8:41:a8:
         78:81:ec:ad:ef:3a:8c:88:f4:d0:ae:bf:9e:7e:d7:df:af:03:
         5c:69:61:80:8b:ac:e6:96:4f:28:e2:a2:2d:86:c2:2e:36:f3:
         f4:11:83:30:a1:9e:e9:a1:0c:40:57:53:b1:2d:3b:af:02:39:
         a7:85:b7:be:a0:1c:52:82:07:4b:27:35:12:5c:30:42:92:a4:
         e3:14:50:c4:9e:eb:ee:10:eb:4c:04:58:b8:88:20:31:78:2c:
         fd:67:20:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglIL9TEkhx2MibBGSfyivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3
YzBjMWIwHhcNMjUwNjExMjAwMDM0WhcNMjUwNjEyMjAwMDM0WjAzMTEwLwYDVQQD
EyhiOThkZGFjM2YyMTkxOTk4YTlmMzI4ZjY2YTgzOTViMTg5OTQ4NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCUKV9bO6ZaHzPqVG7z3Xcyvm13W
lSsFtMIdChKAfXhYFw3aZxzIiLVT0b0J9GuvS7NT7G6T1BQ4LpomiUSINKX7hy9t
fUrp2okDKYFYk10c3jGEYlm8jXPsHzQR5ybimaXr41tq9MDXDP76rN9Gupf+DZ+A
aQJiipfIqJkTfrBwTmpljHeonXbsc/OQVtj6cA7/AqTBWiG4YqCBAeK/U7IZVh1l
n213O0R77fa51jwSCBA0QheNl8kSKYdT1kywzz9KryDVKiCLIrSp6kDNFHoy34le
oaP4rn+zIaZS80um9Zm6T+Jgju9IoYPyavL9OynXdxxODJRwZBYNqKaRxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmN2sPyGRmYqfMo9mqDlbGJlIRYMB8GA1UdIwQY
MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt
NmIzYTQ3NjY3Y2E4LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4
LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9SJdATT
xaPZq7xb3c4NQrwbdUWOizLzNTRaA5fsMXBynA95H1IIEHlR1Oc0if3kzGqmVHWR
C+QOhR0lJZbRrrNaWF7MjGwI8qXF7RJgYpYmh7bk6bLLjy2jjEX8aX51eotN4qR0
WhkPxjkAgLGTrTYs1bhwwsrWKtmQlznsuY+zWx+XDqokF/NARkzSTbYPIoRF1XGh
KpFPVo3so6xSyEGoeIHsre86jIj00K6/nn7X368DXGlhgIus5pZPKOKiLYbCLjbz
9BGDMKGe6aEMQFdTsS07rwI5p4W3vqAcUoIHSyc1ElwwQpKk4xRQxJ7r7hDrTARY
uIggMXgs/WcgIA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:13 2025 by rpki-client