Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File:                     E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier:          9hzqJ2IGiTE26ZktUi7IVlx7wM2dt16o44pq0rXBDGk=
Subject key identifier:   3B:17:37:59:A2:25:19:1B:F0:6D:39:9B:66:3D:DC:23:02:D6:F4:A5
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer:       /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial:       0197639682F1AFD9A5AFFAB19C3F1671D391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number:          158B
Signing time:             Thu 12 Jun 2025 10:01:37 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:37 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:37 +0000
Files and hashes:         1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: dEF9/bVRJRwZEFvHsWErwFctDLxec55mBf3rn5HQpYM=)
                          2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:96:82:f1:af:d9:a5:af:fa:b1:9c:3f:16:71:d3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
        Validity
            Not Before: Jun 12 10:01:37 2025 GMT
            Not After : Jun 13 10:01:37 2025 GMT
        Subject: CN=3b173759a225191bf06d399b663ddc2302d6f4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:5e:84:ab:23:23:0c:32:f7:c2:0d:ed:b5:
                    73:72:93:91:46:96:7a:fb:02:04:3f:2d:1a:58:87:
                    8c:d2:da:16:0e:9d:ed:04:87:49:04:ba:68:31:bb:
                    4a:41:cf:f8:f0:12:d7:3f:10:88:58:4f:bb:94:0e:
                    88:f8:4f:9f:18:a4:cb:9b:92:8f:04:b5:4c:84:05:
                    2f:bc:21:58:9e:21:23:db:7c:0e:ca:1d:ce:c3:95:
                    2e:ad:85:4d:01:fe:cc:b9:cf:43:77:8d:ec:0e:98:
                    16:ef:3f:20:60:1d:77:a6:d5:33:3f:fe:1d:08:51:
                    88:46:f6:55:99:6c:34:93:ff:7b:f2:28:a5:40:fc:
                    76:bb:e8:8d:e0:1b:5c:18:f8:f5:06:fa:ab:ae:a4:
                    38:32:e1:32:b2:8b:4c:57:da:fd:e4:ba:25:2c:8b:
                    d0:6d:2e:fa:47:96:ae:57:d1:c3:7e:42:43:8c:a3:
                    5d:a5:0b:6f:1b:cb:2d:1d:0e:d1:82:92:98:e5:f4:
                    1c:59:7c:05:0a:1a:fe:3b:95:0a:6e:c6:3f:7d:e7:
                    a5:52:ca:ee:8c:3e:fe:34:bf:de:e3:6a:75:0a:5f:
                    a9:36:9c:93:91:37:cf:7b:a8:3e:d2:6d:b4:12:54:
                    a1:c7:83:6c:1f:be:a9:9d:d9:1f:7e:91:05:91:e1:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:37:59:A2:25:19:1B:F0:6D:39:9B:66:3D:DC:23:02:D6:F4:A5
            X509v3 Authority Key Identifier:
                keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:d7:8e:33:92:a6:6f:a5:9e:e5:ae:38:b6:24:bb:87:17:
         a5:a6:13:f8:5e:a4:cb:cd:4e:92:60:cd:83:da:2f:f3:15:cd:
         1a:fd:1c:2f:45:24:70:ff:3f:80:a8:ce:78:2c:85:af:7a:9a:
         64:ea:17:4c:8d:78:bc:56:5d:ba:6c:6b:c8:4a:43:04:81:16:
         1d:0f:b9:b5:7b:0e:0b:18:40:3f:22:5c:5e:6c:d0:0b:33:9b:
         75:f0:a8:4c:b0:be:22:3b:16:91:b1:cc:51:71:52:5d:fc:3c:
         fc:45:54:aa:ee:19:07:3f:45:bd:2f:0e:9d:55:50:63:62:75:
         18:f4:86:48:04:3e:ab:16:10:5a:75:b4:f5:63:bd:e2:fc:5b:
         a5:56:dc:87:73:5a:a8:1c:a4:ba:5e:e1:b4:75:92:84:01:87:
         3f:9b:3d:ed:67:22:2f:ef:61:38:fa:83:83:d2:8a:04:da:c2:
         e3:99:43:66:d2:dd:c6:7e:c6:6a:83:a2:51:cf:e3:66:be:0a:
         99:e8:35:aa:da:76:da:40:9e:7e:6a:46:70:64:bc:26:65:42:
         ec:b4:17:17:f0:49:58:44:ea:ec:7a:90:56:f9:99:37:e4:d6:
         55:c2:4b:43:6b:bc:4b:5e:8b:b7:04:a5:80:17:93:06:1e:d4:
         3e:4e:a6:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjloLxr9mlr/qxnD8WcdORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzY2M2MzA5YWMzMGE3ZmMwMTVjMzM0NGNiYzgwODYxYjRj
NTQ3Y2YwHhcNMjUwNjEyMTAwMTM3WhcNMjUwNjEzMTAwMTM3WjAzMTEwLwYDVQQD
EygzYjE3Mzc1OWEyMjUxOTFiZjA2ZDM5OWI2NjNkZGMyMzAyZDZmNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllpehKsjIwwy98IN7bVzcpORRpZ6
+wIEPy0aWIeM0toWDp3tBIdJBLpoMbtKQc/48BLXPxCIWE+7lA6I+E+fGKTLm5KP
BLVMhAUvvCFYniEj23wOyh3Ow5UurYVNAf7Muc9Dd43sDpgW7z8gYB13ptUzP/4d
CFGIRvZVmWw0k/978iilQPx2u+iN4BtcGPj1BvqrrqQ4MuEysotMV9r95LolLIvQ
bS76R5auV9HDfkJDjKNdpQtvG8stHQ7RgpKY5fQcWXwFChr+O5UKbsY/feelUsru
jD7+NL/e42p1Cl+pNpyTkTfPe6g+0m20ElShx4NsH76pndkffpEFkeGq4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsXN1miJRkb8G05m2Y93CMC1vSlMB8GA1UdIwQY
MBaAFBPMYwmsMKf8AVwzRMvICGG0xUfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQt
ZGQzNzY1YzJlZWU0LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQtZGQzNzY1YzJlZWU0
LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALADXjjOS
pm+lnuWuOLYku4cXpaYT+F6ky81OkmDNg9ov8xXNGv0cL0UkcP8/gKjOeCyFr3qa
ZOoXTI14vFZdumxryEpDBIEWHQ+5tXsOCxhAPyJcXmzQCzObdfCoTLC+IjsWkbHM
UXFSXfw8/EVUqu4ZBz9FvS8OnVVQY2J1GPSGSAQ+qxYQWnW09WO94vxbpVbch3Na
qBykul7htHWShAGHP5s97WciL+9hOPqDg9KKBNrC45lDZtLdxn7GaoOiUc/jZr4K
meg1qtp22kCefmpGcGS8JmVC7LQXF/BJWETq7HqQVvmZN+TWVcJLQ2u8S16LtwSl
gBeTBh7UPk6m3A==
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:58:33 2025 by rpki-client