Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File:                     Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier:          e42QGssr0j6dWmqNx8Zg9bKtNeGoCwT6+a4VyJoSkg0=
Subject key identifier:   87:D7:79:46:B7:CE:01:E0:A2:F9:C1:C2:D0:ED:1D:AF:B0:AE:AA:43
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer:       /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial:       01976B1825DAA2DB83914433A036D8E9C481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 21:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 21:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 21:00:33 +0000
Files and hashes:         1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: nJ9ufJcN31jE+XTq3S5hYbR0UQyXknXVRg69RrzF678=)
                          2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 18:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:18:25:da:a2:db:83:91:44:33:a0:36:d8:e9:c4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
        Validity
            Not Before: Jun 13 21:00:33 2025 GMT
            Not After : Jun 14 21:00:33 2025 GMT
        Subject: CN=87d77946b7ce01e0a2f9c1c2d0ed1dafb0aeaa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:8b:fa:16:05:e8:5d:1f:18:8c:7d:6d:64:
                    9d:cd:98:32:ef:a4:2d:83:19:97:e1:b6:a2:59:45:
                    e9:99:f8:49:15:37:6a:5f:46:c3:0e:ce:9a:0f:6d:
                    a7:ef:83:7b:52:e2:8a:fe:70:41:1e:92:33:7a:c7:
                    30:fd:ca:e0:b6:cd:d2:82:98:f5:21:25:33:bb:4b:
                    c5:53:58:97:f0:36:b7:75:7f:3a:57:a0:b1:92:d4:
                    45:e5:84:c4:ab:e7:9f:f8:42:d2:5d:c6:6e:e1:5c:
                    5b:27:cd:5e:a2:f2:5f:56:46:bc:7e:65:45:f9:f6:
                    3c:40:c6:50:2e:ea:84:46:e2:9a:48:cf:bf:8c:95:
                    05:c9:3f:26:f4:b0:18:2c:31:41:27:ec:d7:5d:b9:
                    ce:ae:b5:29:0a:a0:66:8c:21:09:42:d9:97:a9:2e:
                    9d:ef:da:b1:a1:01:9c:e3:a3:8c:76:29:08:15:83:
                    69:48:b2:26:f6:c4:bf:26:0b:20:3d:4b:6b:4d:39:
                    5d:3d:61:b0:db:85:71:de:89:a1:eb:c3:c0:44:48:
                    e2:d8:67:b3:2a:31:32:cb:d0:64:6b:3f:e8:2c:b4:
                    4f:fc:95:76:f6:ca:8b:3d:68:f7:72:c5:40:67:aa:
                    2e:fb:aa:0a:a4:dd:c8:25:0c:7d:3b:1c:3c:b9:a0:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:79:46:B7:CE:01:E0:A2:F9:C1:C2:D0:ED:1D:AF:B0:AE:AA:43
            X509v3 Authority Key Identifier:
                keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:cb:2a:98:08:90:a4:7f:6f:3c:4d:d3:6d:21:ae:ce:c5:
         73:18:5d:ec:4e:03:69:30:f2:61:a7:a0:56:33:f7:f8:f9:3a:
         36:b2:6e:5c:82:df:18:ba:29:e8:14:5f:17:6f:eb:ca:b7:7b:
         22:63:b9:62:78:dc:30:f1:f1:d2:11:1c:38:27:cf:38:65:ff:
         dd:30:b0:03:15:ad:e4:c8:c4:96:e6:e0:a8:43:3b:dd:7a:dc:
         b5:4d:27:51:c0:32:00:a2:53:36:f0:d0:bc:67:13:96:02:b1:
         f4:aa:75:c2:29:32:25:41:66:f4:4e:8c:0d:b2:b3:be:9a:a0:
         21:bd:a9:76:f5:ee:6e:8b:a4:c1:34:8e:a2:55:0c:7d:08:f6:
         c6:ff:fe:e4:bd:03:4b:85:54:77:d6:fd:b6:cd:86:14:a7:6f:
         0b:a4:9f:42:df:4a:1d:0e:1e:34:5a:ec:2c:76:7f:39:ab:46:
         ce:96:79:d2:10:eb:a7:a5:0f:72:6a:4d:dd:14:2b:35:03:9f:
         04:aa:13:7c:8f:67:ed:47:85:a8:e7:0e:a5:24:60:38:fb:47:
         e2:10:38:c1:08:1e:ab:95:eb:b0:7e:27:d9:21:43:d5:25:68:
         cf:e0:68:03:27:43:b3:1e:07:0d:79:c4:b1:c4:cb:8c:90:ec:
         e9:2c:03:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrGCXaotuDkUQzoDbY6cSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi
MWE5OGEwHhcNMjUwNjEzMjEwMDMzWhcNMjUwNjE0MjEwMDMzWjAzMTEwLwYDVQQD
Eyg4N2Q3Nzk0NmI3Y2UwMWUwYTJmOWMxYzJkMGVkMWRhZmIwYWVhYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIyL+hYF6F0fGIx9bWSdzZgy76Qt
gxmX4baiWUXpmfhJFTdqX0bDDs6aD22n74N7UuKK/nBBHpIzescw/crgts3Sgpj1
ISUzu0vFU1iX8Da3dX86V6CxktRF5YTEq+ef+ELSXcZu4VxbJ81eovJfVka8fmVF
+fY8QMZQLuqERuKaSM+/jJUFyT8m9LAYLDFBJ+zXXbnOrrUpCqBmjCEJQtmXqS6d
79qxoQGc46OMdikIFYNpSLIm9sS/JgsgPUtrTTldPWGw24Vx3omh68PAREji2Gez
KjEyy9Bkaz/oLLRP/JV29sqLPWj3csVAZ6ou+6oKpN3IJQx9Oxw8uaBQaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfXeUa3zgHgovnBwtDtHa+wrqpDMB8GA1UdIwQY
MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt
NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl
LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6vLKpgI
kKR/bzxN020hrs7Fcxhd7E4DaTDyYaegVjP3+Pk6NrJuXILfGLop6BRfF2/ryrd7
ImO5YnjcMPHx0hEcOCfPOGX/3TCwAxWt5MjElubgqEM73XrctU0nUcAyAKJTNvDQ
vGcTlgKx9Kp1wikyJUFm9E6MDbKzvpqgIb2pdvXuboukwTSOolUMfQj2xv/+5L0D
S4VUd9b9ts2GFKdvC6SfQt9KHQ4eNFrsLHZ/OatGzpZ50hDrp6UPcmpN3RQrNQOf
BKoTfI9n7UeFqOcOpSRgOPtH4hA4wQgeq5XrsH4n2SFD1SVoz+BoAydDsx4HDXnE
scTLjJDs6SwD4w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 03:58:25 2025 by rpki-client