Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          TIbzxNLoKavnayzsgjxx7uNo2A5I0HOXSzpMyhuoI7U=
Subject key identifier:   18:E2:43:98:4D:F8:CF:0C:F6:FD:70:04:A4:CA:8B:A4:69:19:90:49
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       01974A43700A9D5E904B5690CE4B9CFB93CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 12:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:22 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: ir5f/oftz2Ng/r04IhqUDoTBgC1ZDL36aO3W6BVjeUw=)
                          2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
                          3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
                          4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
                          5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:70:0a:9d:5e:90:4b:56:90:ce:4b:9c:fb:93:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: Jun  7 12:00:22 2025 GMT
            Not After : Jun  8 12:00:22 2025 GMT
        Subject: CN=18e243984df8cf0cf6fd7004a4ca8ba469199049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:48:43:77:42:c8:bd:ce:79:6a:e7:09:fe:
                    65:92:64:6f:8c:a7:cf:ce:c7:77:ec:88:ca:40:36:
                    16:81:8d:f5:4a:49:13:9d:88:a8:d5:3e:2b:c1:ce:
                    0e:85:66:47:47:67:ba:3c:d5:1c:16:b5:5d:fe:97:
                    a9:e3:d9:f2:2b:c0:0f:25:8d:04:b6:61:4f:65:ad:
                    ee:1b:58:3d:0d:05:9a:62:60:b3:7f:77:e7:bf:f6:
                    55:6a:f4:03:f9:6c:62:0b:8f:0d:f9:36:e1:54:5e:
                    94:e8:d6:ce:62:91:a7:4f:08:23:73:cb:58:4a:9e:
                    03:2c:63:a0:0b:ff:cd:12:d9:ee:0f:b2:a3:53:76:
                    70:fd:da:44:fd:32:57:d4:76:f3:5e:8d:32:f6:76:
                    c5:d9:90:4b:7d:bb:0a:3d:40:e8:d3:fb:c5:e2:fe:
                    94:4d:e3:10:53:34:c1:30:d6:ae:6d:b4:1d:62:dc:
                    50:23:1f:7f:af:2a:5f:03:9f:1b:b6:76:1a:e2:df:
                    0b:e9:7b:54:e3:aa:85:6c:fc:eb:5e:c1:4a:c8:f1:
                    70:dd:fb:1e:ec:73:ff:e5:80:18:a3:f0:57:45:6a:
                    aa:1c:e9:ed:bc:7f:2c:24:f1:24:4e:0c:99:01:b5:
                    3b:b6:eb:77:d4:26:52:9a:dd:85:fa:37:52:61:e4:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:43:98:4D:F8:CF:0C:F6:FD:70:04:A4:CA:8B:A4:69:19:90:49
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4e:68:3a:cf:99:9a:ae:06:00:f7:17:d5:38:f8:ab:2c:cd:
         8d:4d:2f:d2:bb:8c:cf:54:85:2f:20:a2:bc:2b:a7:af:51:bd:
         c7:87:5c:ac:ed:a5:67:86:47:c7:d5:f9:79:b6:02:b0:60:ed:
         9b:4c:92:87:a0:3c:fc:44:78:27:63:41:bf:57:ae:a1:16:1c:
         7a:be:e3:19:36:91:a0:b7:1d:ac:2e:12:10:47:2e:64:f2:9a:
         a4:ad:0f:f7:b8:d7:5e:f4:43:7e:35:48:20:fc:d6:9e:a4:09:
         9a:5e:03:8f:11:30:c4:d3:b4:51:cc:ce:11:53:61:0d:f9:8c:
         a5:86:ca:9f:8a:e0:a0:23:42:5a:8b:ee:da:06:ac:6b:80:fe:
         00:37:52:db:34:34:ec:fe:21:f5:dc:ed:2d:69:c6:ef:e2:3b:
         73:80:c5:ee:b3:2c:9b:7a:e4:18:33:dd:09:20:fc:83:64:3d:
         7c:4f:4c:fb:02:8f:14:09:02:82:e3:98:ff:2c:7c:06:05:da:
         f4:84:2d:32:db:98:f7:ad:50:45:5a:23:1a:91:82:c9:7a:71:
         5c:75:00:7a:63:51:2e:91:14:5b:fc:51:ad:37:ee:b7:f7:6d:
         0a:31:c7:bb:25:66:a8:f6:9f:af:57:c5:5d:1c:4d:8d:a4:5b:
         cc:9b:30:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ3AKnV6QS1aQzkuc+5PMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGY0ODAzZTU0YjA4NGE5OWNiN2JiMDQ0YmY3OTEzMjc1
OTRiNzMwHhcNMjUwNjA3MTIwMDIyWhcNMjUwNjA4MTIwMDIyWjAzMTEwLwYDVQQD
EygxOGUyNDM5ODRkZjhjZjBjZjZmZDcwMDRhNGNhOGJhNDY5MTk5MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEdIQ3dCyL3OeWrnCf5lkmRvjKfP
zsd37IjKQDYWgY31SkkTnYio1T4rwc4OhWZHR2e6PNUcFrVd/pep49nyK8APJY0E
tmFPZa3uG1g9DQWaYmCzf3fnv/ZVavQD+WxiC48N+TbhVF6U6NbOYpGnTwgjc8tY
Sp4DLGOgC//NEtnuD7KjU3Zw/dpE/TJX1HbzXo0y9nbF2ZBLfbsKPUDo0/vF4v6U
TeMQUzTBMNaubbQdYtxQIx9/rypfA58btnYa4t8L6XtU46qFbPzrXsFKyPFw3fse
7HP/5YAYo/BXRWqqHOntvH8sJPEkTgyZAbU7tut31CZSmt2F+jdSYeRhsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjiQ5hN+M8M9v1wBKTKi6RpGZBJMB8GA1UdIwQY
MBaAFNHfSAPlSwhKmct7sES/eRMnWUtzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5Nzct
NDhmNWU4NzY3ZDAyLzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5NzctNDhmNWU4NzY3ZDAy
LzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW05oOs+Z
mq4GAPcX1Tj4qyzNjU0v0ruMz1SFLyCivCunr1G9x4dcrO2lZ4ZHx9X5ebYCsGDt
m0ySh6A8/ER4J2NBv1euoRYcer7jGTaRoLcdrC4SEEcuZPKapK0P97jXXvRDfjVI
IPzWnqQJml4DjxEwxNO0UczOEVNhDfmMpYbKn4rgoCNCWovu2gasa4D+ADdS2zQ0
7P4h9dztLWnG7+I7c4DF7rMsm3rkGDPdCSD8g2Q9fE9M+wKPFAkCguOY/yx8BgXa
9IQtMtuY961QRVojGpGCyXpxXHUAemNRLpEUW/xRrTfut/dtCjHHuyVmqPafr1fF
XRxNjaRbzJswxA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:58:42 2025 by rpki-client