Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
File:                     a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json)
Hash identifier:          fjB/H5lVJNmIMkXbW38Ngtax7n7fh6rbS+37SJBT1tY=
Subject key identifier:   F5:D2:C6:C1:85:69:0D:36:75:9E:B2:CB:3F:0F:BD:5A:09:20:E7:2D
Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
Certificate issuer:       /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Certificate serial:       019763CC9C570BED3060A50A887D094691E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
Manifest number:          158C
Signing time:             Thu 12 Jun 2025 11:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 11:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 11:00:43 +0000
Files and hashes:         1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=)
                          2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: 9IOu6lqtjZ46hFpR39Cc/kg2109N5EYCssekjZWOZTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:cc:9c:57:0b:ed:30:60:a5:0a:88:7d:09:46:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
        Validity
            Not Before: Jun 12 11:00:43 2025 GMT
            Not After : Jun 13 11:00:43 2025 GMT
        Subject: CN=f5d2c6c185690d36759eb2cb3f0fbd5a0920e72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:b9:75:b3:67:4f:b5:b1:20:e7:86:3b:00:
                    bc:4f:32:8e:44:86:e1:f5:ab:d4:be:cd:75:7b:ed:
                    54:75:52:a4:c8:41:8c:28:d3:18:fd:e9:bd:c0:59:
                    87:81:dd:88:37:1e:06:13:58:99:13:10:7e:34:1e:
                    94:64:9a:30:85:ac:1e:e8:af:2b:2f:38:2d:6c:a2:
                    c3:06:c4:f9:10:c1:6c:b9:58:42:8d:3d:8b:9b:e1:
                    e0:be:41:64:43:94:91:31:97:a6:68:80:02:43:e7:
                    be:91:6d:a7:16:5e:26:ef:53:75:cd:cd:37:0f:a6:
                    7f:59:20:9e:df:16:04:06:ca:c0:6b:ad:c6:83:4b:
                    da:ee:d9:8e:f5:29:c1:7f:28:21:ce:6c:d5:91:44:
                    3e:1a:af:02:84:9d:52:ec:96:12:97:e5:81:7f:9c:
                    2c:21:a1:44:5b:28:d7:bd:da:1b:2e:9c:60:d3:9e:
                    ba:47:7e:d3:b6:3a:80:d2:5d:6b:8d:60:5f:5f:b2:
                    3c:e9:be:3f:57:6a:66:31:0e:e3:68:59:0b:36:d8:
                    02:79:52:f5:e7:58:9d:04:85:99:03:6e:51:bc:a3:
                    b7:ce:30:35:1d:0b:35:03:d3:91:b2:7d:85:f9:16:
                    5d:69:eb:6f:52:6c:72:6c:12:80:20:6e:fe:85:c4:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:C6:C1:85:69:0D:36:75:9E:B2:CB:3F:0F:BD:5A:09:20:E7:2D
            X509v3 Authority Key Identifier:
                keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:d7:4d:54:6a:e1:87:a0:36:6e:64:b6:3e:cc:e4:e3:e1:
         fb:87:b4:b9:62:73:52:b8:e8:a7:5b:ab:f5:9a:22:57:7f:c6:
         ea:d4:58:64:92:e3:68:d8:bd:08:70:5a:58:52:93:93:56:bf:
         0c:a9:af:8c:26:e0:0a:f0:74:d3:4e:ae:53:fb:11:99:1f:98:
         c3:8b:1c:db:48:99:11:a1:fc:11:f6:2f:c9:07:be:c8:5b:bd:
         52:7c:c9:b7:91:81:1a:16:19:3e:98:36:52:c6:90:03:8c:3a:
         59:73:3d:25:ec:d3:e5:7e:67:2f:bf:a4:1c:ab:01:08:07:e9:
         59:bd:4d:6f:6c:e9:2f:6f:ef:52:87:ef:48:f0:d2:a3:93:e0:
         98:8d:44:dc:df:97:e8:e2:08:32:ac:95:fa:9b:cd:0f:c7:ab:
         52:6e:ad:80:4c:31:fe:07:bb:50:c9:55:90:48:42:13:d7:ec:
         48:6b:b3:05:d3:c7:00:35:06:3a:58:c4:f9:50:6f:59:4b:62:
         9a:36:18:9c:d2:0f:f9:f8:c2:8a:10:5b:5b:7a:bd:65:a8:be:
         4b:fa:2c:24:c1:bf:7a:c6:8a:43:d7:8e:aa:58:8a:e1:e5:8f:
         e9:99:7b:6f:b8:76:a4:5c:a2:3b:fc:26:ea:97:12:8a:5e:07:
         11:a4:3b:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjzJxXC+0wYKUKiH0JRpHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGNiM2NkMzVlZmJjODRmMmE4OWEyZjVkMmMxNjJjM2Q3
Y2UxNWIwHhcNMjUwNjEyMTEwMDQzWhcNMjUwNjEzMTEwMDQzWjAzMTEwLwYDVQQD
EyhmNWQyYzZjMTg1NjkwZDM2NzU5ZWIyY2IzZjBmYmQ1YTA5MjBlNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyce5dbNnT7WxIOeGOwC8TzKORIbh
9avUvs11e+1UdVKkyEGMKNMY/em9wFmHgd2INx4GE1iZExB+NB6UZJowhawe6K8r
LzgtbKLDBsT5EMFsuVhCjT2Lm+HgvkFkQ5SRMZemaIACQ+e+kW2nFl4m71N1zc03
D6Z/WSCe3xYEBsrAa63Gg0va7tmO9SnBfyghzmzVkUQ+Gq8ChJ1S7JYSl+WBf5ws
IaFEWyjXvdobLpxg0566R37TtjqA0l1rjWBfX7I86b4/V2pmMQ7jaFkLNtgCeVL1
51idBIWZA25RvKO3zjA1HQs1A9ORsn2F+RZdaetvUmxybBKAIG7+hcQaQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXSxsGFaQ02dZ6yyz8PvVoJIOctMB8GA1UdIwQY
MBaAFGtMs80177yE8qiaL10sFiw9fOFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEt
NjNhZTc0YmIyMDNiLzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEtNjNhZTc0YmIyMDNi
LzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPi7XTVRq
4YegNm5ktj7M5OPh+4e0uWJzUrjop1ur9ZoiV3/G6tRYZJLjaNi9CHBaWFKTk1a/
DKmvjCbgCvB0006uU/sRmR+Yw4sc20iZEaH8EfYvyQe+yFu9UnzJt5GBGhYZPpg2
UsaQA4w6WXM9JezT5X5nL7+kHKsBCAfpWb1Nb2zpL2/vUofvSPDSo5PgmI1E3N+X
6OIIMqyV+pvND8erUm6tgEwx/ge7UMlVkEhCE9fsSGuzBdPHADUGOljE+VBvWUti
mjYYnNIP+fjCihBbW3q9Zai+S/osJMG/esaKQ9eOqliK4eWP6Zl7b7h2pFyiO/wm
6pcSil4HEaQ7og==
-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:45 2025 by rpki-client