Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File:                     tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier:          tSHmcH44uBZqJY8DHeZgADG6K99ZKBO9jusXTj/GlZM=
Subject key identifier:   C0:BD:14:94:D2:30:29:5F:74:FF:B8:B6:AF:5F:70:05:E2:81:FF:AF
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer:       /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial:       01976C2ACE9F5756300FC3ED89E64CB28BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 02:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:34 +0000
Files and hashes:         1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
                          2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: fjkyapaTUk944cst+Uj6M9hVtq5aAqY/QbEzrmCDtwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:ce:9f:57:56:30:0f:c3:ed:89:e6:4c:b2:8b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
        Validity
            Not Before: Jun 14 02:00:34 2025 GMT
            Not After : Jun 15 02:00:34 2025 GMT
        Subject: CN=c0bd1494d230295f74ffb8b6af5f7005e281ffaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:52:79:34:bc:f8:09:d7:5d:dc:82:74:df:
                    26:48:81:b6:25:ca:05:f8:b3:2c:dd:8e:cb:5a:88:
                    23:89:2c:7f:d7:e5:f6:ef:be:b7:6e:64:e0:f4:21:
                    b4:59:40:74:0c:9c:84:a2:42:35:e5:c6:bc:c4:91:
                    16:02:80:5a:78:69:a1:8a:e6:ee:db:a8:24:66:0d:
                    af:cb:49:9a:6d:b1:97:8d:c4:81:0e:ba:f9:b9:7b:
                    d4:dc:3f:db:86:b4:a5:11:ed:84:e4:e0:4e:0f:b0:
                    fe:3c:d6:58:0a:56:35:9e:5b:2f:ec:c2:5d:d6:01:
                    90:18:31:d3:9d:ae:91:90:82:80:ec:55:2a:5b:da:
                    d2:6c:2b:6e:64:7b:2a:7c:c9:90:05:f8:3d:52:03:
                    eb:b5:35:3b:a7:70:9b:9a:e9:e2:f4:43:2d:8d:e2:
                    65:7c:43:29:64:8f:bc:43:43:c7:ca:5b:19:02:9f:
                    0c:b6:d0:38:1b:bc:81:b2:96:7c:13:b4:6e:fa:41:
                    a5:53:63:a4:b7:ef:7a:95:4a:8b:63:da:9a:43:34:
                    03:51:d5:9c:35:fd:ae:a3:99:25:3e:a5:67:27:53:
                    8a:8a:50:1b:8f:cb:b3:17:6e:57:e5:50:06:b9:c2:
                    9a:4a:69:21:05:e0:1b:35:0d:51:8f:11:51:cb:1a:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:14:94:D2:30:29:5F:74:FF:B8:B6:AF:5F:70:05:E2:81:FF:AF
            X509v3 Authority Key Identifier:
                keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:27:66:01:40:45:ac:e3:11:fa:d4:56:a5:88:6e:a8:98:4e:
         13:e5:f3:c8:14:d8:64:68:69:1f:78:4e:32:85:8c:56:97:42:
         e3:8c:12:e9:9f:02:d7:8a:1c:f1:30:6e:5e:dd:17:93:5b:03:
         66:bd:d8:4c:25:91:d9:af:41:fd:ec:05:52:95:80:86:c7:a5:
         9c:3f:4a:65:96:15:b4:bb:18:88:a3:45:87:31:f0:38:2d:02:
         96:b5:78:fd:53:55:90:b2:de:63:32:39:40:57:e9:ba:48:45:
         97:13:1c:b9:53:d9:89:14:57:5a:27:58:ef:dc:51:ee:34:2e:
         a6:9f:66:79:ab:94:c4:4b:b0:63:0e:5c:1c:4e:40:83:53:0c:
         87:b4:75:36:63:7d:86:2d:98:15:a0:8c:b4:96:e3:b0:b9:13:
         a7:bc:c4:ed:70:e7:40:51:fb:11:70:5c:ab:28:a0:9b:9c:72:
         2a:d3:70:52:c5:f5:e5:19:11:f3:a8:de:dc:91:8d:91:16:5b:
         15:14:57:8a:71:ea:86:ef:f2:4b:e0:32:fb:d5:db:12:59:17:
         66:dd:b9:f6:fd:29:c8:15:0d:88:13:ad:e5:27:b9:39:04:aa:
         9d:78:3a:9c:a4:2e:68:c3:8d:27:eb:97:0b:1f:e5:e1:99:43:
         03:3d:f6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKs6fV1YwD8PtieZMsovqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZmU2M2VlOGEyM2Y0OTE2ZTQwNTM1MzFlNjk1MGRiNmMz
MWU4MDUwHhcNMjUwNjE0MDIwMDM0WhcNMjUwNjE1MDIwMDM0WjAzMTEwLwYDVQQD
EyhjMGJkMTQ5NGQyMzAyOTVmNzRmZmI4YjZhZjVmNzAwNWUyODFmZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso5SeTS8+AnXXdyCdN8mSIG2JcoF
+LMs3Y7LWogjiSx/1+X27763bmTg9CG0WUB0DJyEokI15ca8xJEWAoBaeGmhiubu
26gkZg2vy0mabbGXjcSBDrr5uXvU3D/bhrSlEe2E5OBOD7D+PNZYClY1nlsv7MJd
1gGQGDHTna6RkIKA7FUqW9rSbCtuZHsqfMmQBfg9UgPrtTU7p3Cbmuni9EMtjeJl
fEMpZI+8Q0PHylsZAp8MttA4G7yBspZ8E7Ru+kGlU2Okt+96lUqLY9qaQzQDUdWc
Nf2uo5klPqVnJ1OKilAbj8uzF25X5VAGucKaSmkhBeAbNQ1RjxFRyxpQGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC9FJTSMClfdP+4tq9fcAXigf+vMB8GA1UdIwQY
MBaAFLb+Y+6KI/SRbkBTUx5pUNtsMegFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODkt
YTNkMzc3YzZmZWVmLzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODktYTNkMzc3YzZmZWVm
LzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQidmAUBF
rOMR+tRWpYhuqJhOE+XzyBTYZGhpH3hOMoWMVpdC44wS6Z8C14oc8TBuXt0Xk1sD
Zr3YTCWR2a9B/ewFUpWAhselnD9KZZYVtLsYiKNFhzHwOC0ClrV4/VNVkLLeYzI5
QFfpukhFlxMcuVPZiRRXWidY79xR7jQupp9meauUxEuwYw5cHE5Ag1MMh7R1NmN9
hi2YFaCMtJbjsLkTp7zE7XDnQFH7EXBcqyigm5xyKtNwUsX15RkR86je3JGNkRZb
FRRXinHqhu/yS+Ay+9XbElkXZt259v0pyBUNiBOt5Se5OQSqnXg6nKQuaMONJ+uX
Cx/l4ZlDAz32lQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:37 2025 by rpki-client