Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File:                     3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier:          faBLkqri63/+bu61ApEiKbIt99UHGDNCW35bVY3jYio=
Subject key identifier:   E6:39:4E:81:56:8E:36:AF:16:AE:6D:C7:60:8A:B0:74:17:D4:19:82
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer:       /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial:       0197493120F20523C60A23FFB36C62D35AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 07:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:45 +0000
Files and hashes:         1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: 48/QnyOGkaQty0MaqYWWuIiUTfs/71kaK/pqpDso2+E=)
                          2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:20:f2:05:23:c6:0a:23:ff:b3:6c:62:d3:5a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
        Validity
            Not Before: Jun  7 07:00:45 2025 GMT
            Not After : Jun  8 07:00:45 2025 GMT
        Subject: CN=e6394e81568e36af16ae6dc7608ab07417d41982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:8f:1b:90:64:26:29:19:6e:09:b1:dd:48:
                    03:76:6e:e6:4a:2d:4a:a8:32:6c:13:d8:15:73:f7:
                    f6:ca:58:6f:26:c0:93:e4:e1:71:0c:3b:89:8e:ff:
                    18:9a:43:55:4e:8e:86:01:7b:67:8c:49:60:55:49:
                    3b:57:9d:01:fe:c5:8e:b7:01:00:47:e0:69:70:bc:
                    5f:c5:c7:6c:8e:ac:6e:1f:35:88:2e:dc:62:bf:d3:
                    1c:88:49:b6:39:aa:31:0f:c2:0f:33:1d:e6:db:e6:
                    a4:96:ce:09:99:6e:93:07:00:ce:49:ae:a9:9e:28:
                    b3:71:97:c7:c0:2c:fa:6f:5e:b4:4f:80:ae:c6:39:
                    de:d0:6b:88:a8:ba:c1:e8:ff:2e:98:3f:13:7f:92:
                    a4:ba:58:cf:08:84:8a:22:59:71:2e:a8:0a:54:4f:
                    be:ce:a6:0f:d8:6d:b8:ea:d5:98:f7:b9:bd:94:33:
                    10:fb:79:a7:49:da:02:fe:fe:40:35:c5:a6:62:ee:
                    bb:e2:00:f5:81:99:03:96:5d:4d:de:93:70:46:94:
                    19:aa:f5:cf:ea:18:c4:34:57:93:92:83:65:36:aa:
                    ed:ed:5b:75:d2:7b:be:88:50:4c:5b:84:82:85:6e:
                    38:2c:78:3a:10:30:f8:78:6e:53:a4:3a:8c:5c:42:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:4E:81:56:8E:36:AF:16:AE:6D:C7:60:8A:B0:74:17:D4:19:82
            X509v3 Authority Key Identifier:
                keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:07:28:1e:c0:cb:93:14:b1:c6:87:e8:53:d6:03:60:83:4b:
         3e:c2:ce:3b:a3:89:ee:8b:93:e5:11:2b:49:75:84:4f:51:5d:
         42:05:6e:cb:48:12:53:2d:d0:6f:d2:d1:c6:18:eb:6c:1e:78:
         01:15:c0:7e:19:c1:09:f0:e8:77:1d:ec:d7:fb:5b:47:6c:e4:
         06:ff:57:af:b0:f8:94:5f:04:23:d8:fc:fe:64:78:be:e7:3e:
         66:6d:1c:fe:24:c5:e4:91:db:0b:28:0d:4f:78:9f:6a:9f:1c:
         af:ca:bc:56:66:b4:22:61:9f:b2:21:00:6c:ed:cd:ac:a4:b4:
         f7:f8:64:90:f2:4b:a3:3e:b8:1c:21:0c:56:66:17:46:42:25:
         74:e4:fc:69:ce:e1:b3:c7:64:5e:f8:50:9d:32:98:f0:0d:9d:
         f8:72:4e:2e:a5:be:16:90:d2:f7:97:f3:24:de:b1:9a:08:34:
         0b:76:b6:d0:9c:14:ca:25:d0:d8:71:d3:ef:fc:15:fb:8a:ad:
         e3:f0:39:4d:e9:82:cc:a5:a6:02:77:7c:a8:dd:ab:92:74:e5:
         6b:1d:cc:59:cb:cf:d4:1b:18:27:6c:1b:85:b9:99:1b:4f:b2:
         7a:97:eb:c5:91:1f:71:9e:33:ad:53:0b:6f:67:20:4b:57:62:
         3b:fd:2f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMSDyBSPGCiP/s2xi01qpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDU3MDhmNDI5YWRhZGJhMWI0YTM4Yzk0ZGQ3NzY1NGFm
YWY5N2QwHhcNMjUwNjA3MDcwMDQ1WhcNMjUwNjA4MDcwMDQ1WjAzMTEwLwYDVQQD
EyhlNjM5NGU4MTU2OGUzNmFmMTZhZTZkYzc2MDhhYjA3NDE3ZDQxOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20CPG5BkJikZbgmx3UgDdm7mSi1K
qDJsE9gVc/f2ylhvJsCT5OFxDDuJjv8YmkNVTo6GAXtnjElgVUk7V50B/sWOtwEA
R+BpcLxfxcdsjqxuHzWILtxiv9MciEm2OaoxD8IPMx3m2+akls4JmW6TBwDOSa6p
niizcZfHwCz6b160T4Cuxjne0GuIqLrB6P8umD8Tf5KkuljPCISKIllxLqgKVE++
zqYP2G246tWY97m9lDMQ+3mnSdoC/v5ANcWmYu674gD1gZkDll1N3pNwRpQZqvXP
6hjENFeTkoNlNqrt7Vt10nu+iFBMW4SChW44LHg6EDD4eG5TpDqMXELSkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY5ToFWjjavFq5tx2CKsHQX1BmCMB8GA1UdIwQY
MBaAFN3VcI9CmtrbobSjjJTdd2VK+vl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEt
MjBlMWMzZTNmOGUyLzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEtMjBlMWMzZTNmOGUy
LzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAcoHsDL
kxSxxofoU9YDYINLPsLOO6OJ7ouT5RErSXWET1FdQgVuy0gSUy3Qb9LRxhjrbB54
ARXAfhnBCfDodx3s1/tbR2zkBv9Xr7D4lF8EI9j8/mR4vuc+Zm0c/iTF5JHbCygN
T3ifap8cr8q8Vma0ImGfsiEAbO3NrKS09/hkkPJLoz64HCEMVmYXRkIldOT8ac7h
s8dkXvhQnTKY8A2d+HJOLqW+FpDS95fzJN6xmgg0C3a20JwUyiXQ2HHT7/wV+4qt
4/A5TemCzKWmAnd8qN2rknTlax3MWcvP1BsYJ2wbhbmZG0+yepfrxZEfcZ4zrVML
b2cgS1diO/0vBw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:32 2025 by rpki-client