Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          vu+6HcL048V77+7ol6lOXpVHnquCKAVdCd+DGAs5Y4w=
Subject key identifier:   C5:83:6A:9D:C1:71:E8:65:73:76:18:D2:EB:16:0D:1A:B7:A7:AD:0C
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       0197B77C81A7F945B14A017E890545A98F76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          160B
Signing time:             Sat 28 Jun 2025 17:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:19 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: cmr3FjHS2dhlvfjRj7fslqem73NJQbSpRk2RvWzyviw=)
                          2: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          3: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          4: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          5: pNPaH5D4xPmlPFV22uJzIwwP5IE.roa (hash: Pi2NdX9kNLRUHiHGw5FRE4YwS0JXW5XgtjtIrUJ6EM4=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:81:a7:f9:45:b1:4a:01:7e:89:05:45:a9:8f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Jun 28 17:01:19 2025 GMT
            Not After : Jun 29 17:01:19 2025 GMT
        Subject: CN=c5836a9dc171e865737618d2eb160d1ab7a7ad0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:74:00:21:69:8a:31:80:1a:a5:74:3e:6c:
                    28:f2:3a:c3:25:8a:ff:4c:fd:6a:84:f8:43:fc:70:
                    47:1a:86:11:9a:34:24:fa:b1:1d:72:82:1b:8c:e5:
                    ae:bc:6c:d7:df:e5:0e:c5:33:1a:2f:5c:6e:c5:a8:
                    a5:0c:eb:76:ce:cd:a4:70:a1:e4:03:37:6e:da:98:
                    73:ed:8c:96:4a:b8:dd:40:66:fe:cf:a7:38:62:fb:
                    6a:64:8b:f4:a6:71:f4:2f:51:14:3a:55:aa:29:c0:
                    01:22:1b:7f:3c:ef:2b:61:e4:50:0a:01:a9:d8:83:
                    a9:6a:95:d4:7b:9f:9e:92:ec:99:6e:30:11:f4:10:
                    24:75:fd:6b:db:89:3f:2a:71:6c:ce:fb:b7:b1:c1:
                    1b:e3:ab:e6:8e:a3:49:23:e2:26:24:cc:a6:7f:64:
                    d1:6e:93:9a:d2:8b:db:9f:2a:ed:d7:b6:be:46:29:
                    34:93:13:3f:d5:35:14:58:1a:b0:50:cc:a5:cb:fa:
                    85:16:bd:9b:25:5e:db:51:56:bb:8a:5e:41:32:57:
                    0a:1e:06:19:d2:b1:e7:3c:0f:79:3a:98:2e:1a:7f:
                    3c:c2:8f:5c:66:0b:71:58:3f:01:c5:96:8f:2f:fa:
                    a3:0e:0a:9d:df:b2:0c:49:02:3d:98:ab:4e:63:50:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:83:6A:9D:C1:71:E8:65:73:76:18:D2:EB:16:0D:1A:B7:A7:AD:0C
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:97:fd:7a:77:59:0b:60:2a:b0:a0:64:02:9a:76:19:a5:
         d1:04:b1:a6:52:a2:5c:a9:97:f4:94:82:9f:aa:4d:88:69:0f:
         33:d1:9f:56:aa:ba:2d:45:3a:37:d8:32:6f:2d:2c:df:6f:03:
         6a:a9:c0:55:ff:b0:ed:6f:3d:79:16:fd:07:dd:55:ec:2c:d7:
         53:c2:9d:72:d5:45:5a:26:a6:72:3e:fa:30:cd:38:b8:66:e3:
         ef:3a:d8:a9:2a:89:76:fd:9b:f3:84:e3:9b:5a:37:5f:f9:e2:
         5a:dd:5c:b1:dc:e3:67:d6:41:a2:b6:46:54:d7:24:00:02:f1:
         30:d5:e2:ef:1c:96:5d:36:8d:d1:98:71:6e:25:b6:6e:3c:94:
         cf:42:5b:f9:60:bb:e9:20:6f:88:ff:ca:f9:e1:d7:de:0e:2c:
         9d:2c:48:68:51:54:72:96:a6:13:c4:a7:1e:64:0a:c4:5c:a0:
         ff:77:82:c2:1c:26:4d:e2:97:13:7f:dc:2c:6d:9e:8a:be:0f:
         ff:ea:ba:4f:4d:a1:7c:e2:04:2a:c2:4a:e5:5f:49:c7:6a:cd:
         89:6b:36:b6:c6:5a:01:27:fc:59:32:78:79:26:d1:17:18:f3:
         7c:2b:90:62:ec:ab:d4:80:f5:00:7e:82:b1:65:89:54:cc:fe:
         59:a7:a2:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIGn+UWxSgF+iQVFqY92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjUwNjI4MTcwMTE5WhcNMjUwNjI5MTcwMTE5WjAzMTEwLwYDVQQD
EyhjNTgzNmE5ZGMxNzFlODY1NzM3NjE4ZDJlYjE2MGQxYWI3YTdhZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aF0ACFpijGAGqV0Pmwo8jrDJYr/
TP1qhPhD/HBHGoYRmjQk+rEdcoIbjOWuvGzX3+UOxTMaL1xuxailDOt2zs2kcKHk
Azdu2phz7YyWSrjdQGb+z6c4YvtqZIv0pnH0L1EUOlWqKcABIht/PO8rYeRQCgGp
2IOpapXUe5+ekuyZbjAR9BAkdf1r24k/KnFszvu3scEb46vmjqNJI+ImJMymf2TR
bpOa0ovbnyrt17a+Rik0kxM/1TUUWBqwUMyly/qFFr2bJV7bUVa7il5BMlcKHgYZ
0rHnPA95OpguGn88wo9cZgtxWD8BxZaPL/qjDgqd37IMSQI9mKtOY1B5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWDap3Bcehlc3YY0usWDRq3p60MMB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4qX/Xp3
WQtgKrCgZAKadhml0QSxplKiXKmX9JSCn6pNiGkPM9GfVqq6LUU6N9gyby0s328D
aqnAVf+w7W89eRb9B91V7CzXU8KdctVFWiamcj76MM04uGbj7zrYqSqJdv2b84Tj
m1o3X/niWt1csdzjZ9ZBorZGVNckAALxMNXi7xyWXTaN0ZhxbiW2bjyUz0Jb+WC7
6SBviP/K+eHX3g4snSxIaFFUcpamE8SnHmQKxFyg/3eCwhwmTeKXE3/cLG2eir4P
/+q6T02hfOIEKsJK5V9Jx2rNiWs2tsZaASf8WTJ4eSbRFxjzfCuQYuyr1ID1AH6C
sWWJVMz+Waeizw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:52 2025 by rpki-client