Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File:                     6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier:          7iYRvhGs4V2wm0TQ2jl6QO39hy5mn4b4fZX/w9K5ZB8=
Subject key identifier:   1F:7E:BA:29:E2:12:36:1C:70:28:45:64:CD:76:02:FE:3C:37:82:9E
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer:       /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial:       01974CD72C3DFBB6614D4A31BECE587FA1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 00:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:59 +0000
Files and hashes:         1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: ld1tyqC9rMkjpIuVodZ7jrtus6xKNVJpOMCivx6ItYc=)
                          2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:2c:3d:fb:b6:61:4d:4a:31:be:ce:58:7f:a1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
        Validity
            Not Before: Jun  8 00:00:59 2025 GMT
            Not After : Jun  9 00:00:59 2025 GMT
        Subject: CN=1f7eba29e212361c70284564cd7602fe3c37829e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:56:62:a5:cc:7b:a6:15:40:0d:6f:3b:06:
                    f9:80:97:6a:22:85:d2:5e:16:4e:42:82:6e:74:f3:
                    f6:ce:11:a1:e9:8f:31:28:3f:da:0e:b6:df:64:cd:
                    1d:13:1f:56:b6:57:cb:35:69:a1:52:a4:e1:5b:45:
                    07:75:e1:50:f9:16:22:4a:8f:20:4c:fe:a8:ee:1f:
                    f5:d1:50:54:54:3e:9c:1a:4a:86:ae:c6:3b:3c:4a:
                    54:af:65:26:f3:9d:49:c7:a8:ca:42:b0:c7:ad:4b:
                    b2:86:cb:43:e4:3b:19:a1:9e:de:a5:77:46:a3:f1:
                    05:1c:e2:e6:63:57:26:50:bf:2d:26:71:4c:c4:76:
                    65:0e:f8:5b:f6:3b:80:8e:3d:e4:c8:fd:4a:c6:0e:
                    7e:b6:4f:82:f8:8c:35:0d:23:dd:67:48:a9:6a:96:
                    b7:86:9b:9f:69:02:3b:b9:4c:9f:06:42:de:ba:9e:
                    e7:8b:37:69:00:79:5f:aa:55:b1:16:62:1a:42:6f:
                    9c:e5:83:4a:4f:9d:5f:ba:55:27:ae:7a:fd:f0:07:
                    ca:74:3f:41:87:3e:44:0c:3f:85:79:a9:05:16:de:
                    03:67:1c:54:61:bd:90:42:ea:84:8d:1a:ec:2b:40:
                    e0:4b:52:ea:42:e1:e2:64:b0:aa:a9:8d:2e:b5:77:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7E:BA:29:E2:12:36:1C:70:28:45:64:CD:76:02:FE:3C:37:82:9E
            X509v3 Authority Key Identifier:
                keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:56:ef:75:26:ff:24:b4:bc:7a:e3:28:f0:ce:3c:57:c8:
         46:41:da:cf:8c:c3:e0:c7:a7:be:30:ef:68:a2:79:d6:3d:b2:
         10:fe:39:da:6a:89:46:f9:22:c4:61:d9:93:0c:c5:d7:ee:f1:
         ee:c5:88:cf:2d:01:d7:a2:6b:5d:8e:24:cd:5f:ac:47:ea:49:
         66:f1:38:05:a4:4b:04:4c:97:7a:5b:c3:85:9c:6a:2b:c5:da:
         ae:1a:48:4d:2f:da:6e:74:31:45:59:0b:3c:2b:d8:18:44:f9:
         d1:95:96:33:b7:3b:be:6f:06:1a:7c:eb:a6:34:ad:d3:a0:d0:
         97:27:b4:a1:5f:4e:8f:8e:d5:06:1e:08:a6:8a:ff:4d:cf:44:
         a3:29:81:ee:cc:7d:a7:50:9d:1d:3d:7b:86:00:0b:65:e4:99:
         e7:5d:57:42:84:b2:8d:84:4b:2d:a2:4a:a4:c0:c4:4e:54:26:
         73:73:13:05:f2:39:d5:24:6d:95:05:d8:f4:af:47:ae:2a:f7:
         81:3e:a2:39:f2:34:d2:f6:7e:cb:fa:55:b3:3b:29:38:e4:31:
         ff:e8:17:51:df:22:cb:70:2e:11:e3:06:5f:21:5e:0f:29:86:
         9c:27:e6:13:6c:ec:6d:65:37:a7:88:8e:59:fe:ba:78:d4:12:
         5a:73:cd:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1yw9+7ZhTUoxvs5Yf6HxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5
MWVhNDAwHhcNMjUwNjA4MDAwMDU5WhcNMjUwNjA5MDAwMDU5WjAzMTEwLwYDVQQD
EygxZjdlYmEyOWUyMTIzNjFjNzAyODQ1NjRjZDc2MDJmZTNjMzc4MjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JJWYqXMe6YVQA1vOwb5gJdqIoXS
XhZOQoJudPP2zhGh6Y8xKD/aDrbfZM0dEx9WtlfLNWmhUqThW0UHdeFQ+RYiSo8g
TP6o7h/10VBUVD6cGkqGrsY7PEpUr2Um851Jx6jKQrDHrUuyhstD5DsZoZ7epXdG
o/EFHOLmY1cmUL8tJnFMxHZlDvhb9juAjj3kyP1Kxg5+tk+C+Iw1DSPdZ0ipapa3
hpufaQI7uUyfBkLeup7nizdpAHlfqlWxFmIaQm+c5YNKT51fulUnrnr98AfKdD9B
hz5EDD+FeakFFt4DZxxUYb2QQuqEjRrsK0DgS1LqQuHiZLCqqY0utXcnrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9+uiniEjYccChFZM12Av48N4KeMB8GA1UdIwQY
MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt
NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh
LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKtW73Um
/yS0vHrjKPDOPFfIRkHaz4zD4MenvjDvaKJ51j2yEP452mqJRvkixGHZkwzF1+7x
7sWIzy0B16JrXY4kzV+sR+pJZvE4BaRLBEyXelvDhZxqK8XarhpITS/abnQxRVkL
PCvYGET50ZWWM7c7vm8GGnzrpjSt06DQlye0oV9Oj47VBh4Ipor/Tc9EoymB7sx9
p1CdHT17hgALZeSZ511XQoSyjYRLLaJKpMDETlQmc3MTBfI51SRtlQXY9K9Hrir3
gT6iOfI00vZ+y/pVszspOOQx/+gXUd8iy3AuEeMGXyFeDymGnCfmE2zsbWU3p4iO
Wf66eNQSWnPN9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:13:15 2025 by rpki-client