Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
File:                     jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json)
Hash identifier:          T83U/2IqgximDaAjpKSHwkRxlIqqAJ8haY9GrGDeE2M=
Subject key identifier:   E8:CB:F7:54:A8:E2:C9:82:4E:BF:C4:23:B8:C5:DC:5B:37:9E:D1:75
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Certificate issuer:       /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial:       019677FADD678D5B12E090200DD642623048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
Manifest number:          148C
Signing time:             Sun 27 Apr 2025 16:00:51 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:51 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:51 +0000
Files and hashes:         1: hi5ZHldjJLIMs_WwcUjXAobxn_E.roa (hash: K7O/p6BErwsTAP5GquRxOQd6mPGtBXsqXpbnYVE78oE=)
                          2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: 4wHVPKK59z6Z0uJKuyYtGuXUExqJh/BPagYTq0mRXhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:dd:67:8d:5b:12:e0:90:20:0d:d6:42:62:30:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
        Validity
            Not Before: Apr 27 16:00:51 2025 GMT
            Not After : Apr 28 16:00:51 2025 GMT
        Subject: CN=e8cbf754a8e2c9824ebfc423b8c5dc5b379ed175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:78:a9:68:53:35:19:d0:2c:4a:30:0d:9d:
                    1f:a8:94:fb:2b:a5:2c:ba:8d:bc:8c:7e:f4:16:ae:
                    43:bc:11:6d:b5:86:06:3c:12:ca:de:2a:b3:a9:71:
                    58:43:16:5f:4c:d1:f5:90:d3:ec:2f:6c:e9:59:e0:
                    9e:7b:ce:a9:52:99:2e:07:53:02:4e:f8:59:a4:2a:
                    f2:60:32:dd:01:f9:e5:d4:1c:70:48:12:77:20:4a:
                    ac:31:d0:8f:ee:c6:85:82:6b:c0:64:21:72:7a:e6:
                    d2:c4:1a:86:6b:e0:05:2b:64:68:d5:2f:82:ab:23:
                    b2:0c:ef:d8:e7:23:4d:d6:3b:6c:cc:03:13:f1:bc:
                    d0:d0:8c:7c:a3:a3:5c:60:16:0c:a5:52:cb:73:a5:
                    6f:6b:9a:62:00:16:91:be:35:61:36:fe:95:67:38:
                    12:c6:08:e4:1a:75:ef:f7:cd:b7:fe:50:66:d5:29:
                    e1:ef:c5:55:c7:d0:94:32:6a:6f:02:f8:67:f4:cc:
                    d9:88:64:02:a3:7e:34:3f:c4:81:48:6a:47:85:eb:
                    4d:c2:65:36:eb:2e:e6:d0:40:82:e0:5e:8e:09:c9:
                    66:98:02:9f:16:82:35:93:a4:68:0b:46:db:56:ee:
                    ad:8c:e9:1a:20:e2:ba:dd:d5:f9:68:37:e2:1e:a5:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CB:F7:54:A8:E2:C9:82:4E:BF:C4:23:B8:C5:DC:5B:37:9E:D1:75
            X509v3 Authority Key Identifier:
                keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:29:c1:41:9c:a0:ef:d0:60:1f:41:55:27:fa:dd:c5:34:cc:
         d5:8f:fa:2c:31:a2:c3:23:35:fb:ad:b3:b2:cc:ab:db:ad:7d:
         fc:b5:ca:09:16:54:39:97:d5:d8:82:7d:77:b1:2a:69:74:f4:
         56:d9:00:16:c8:6b:84:a4:bd:ca:d6:b7:d5:f5:c7:27:86:00:
         d4:7e:f4:d6:c7:2f:5c:f7:65:c3:b1:9e:8a:f5:a4:96:12:de:
         84:fe:37:47:0c:5c:88:d5:bc:b6:67:f7:44:7a:08:5e:21:b4:
         37:47:5f:91:a5:4c:15:d9:f0:ee:2a:fc:5e:61:3b:cc:50:51:
         d1:df:44:c9:4b:70:11:35:a7:b3:0f:65:55:a5:da:51:78:dd:
         8f:13:60:78:2a:fe:47:eb:c8:c1:75:11:4f:b0:d5:9c:38:55:
         21:5f:b4:8c:36:c5:ee:a1:4e:a8:e3:5a:af:89:c8:dd:a0:d2:
         fa:47:c6:03:1f:2b:90:40:65:4d:d3:5c:cd:63:bb:3d:d7:6e:
         2f:a8:bd:8f:60:71:f4:fd:7e:13:14:34:d9:b7:41:f1:d4:bb:
         20:6a:08:84:c3:0a:e4:ab:cb:8a:f3:a4:a6:28:be:b2:2d:6b:
         48:56:cd:02:2a:5e:de:9a:8e:3b:be:71:4c:7f:39:75:1d:6a:
         da:35:f3:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+t1njVsS4JAgDdZCYjBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2I2ZTE4M2M4ZDUyY2M0NjA1YmE4YjVkYWRkYzY2MzI2
MjkzZWMwHhcNMjUwNDI3MTYwMDUxWhcNMjUwNDI4MTYwMDUxWjAzMTEwLwYDVQQD
EyhlOGNiZjc1NGE4ZTJjOTgyNGViZmM0MjNiOGM1ZGM1YjM3OWVkMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxZ4qWhTNRnQLEowDZ0fqJT7K6Us
uo28jH70Fq5DvBFttYYGPBLK3iqzqXFYQxZfTNH1kNPsL2zpWeCee86pUpkuB1MC
TvhZpCryYDLdAfnl1BxwSBJ3IEqsMdCP7saFgmvAZCFyeubSxBqGa+AFK2Ro1S+C
qyOyDO/Y5yNN1jtszAMT8bzQ0Ix8o6NcYBYMpVLLc6Vva5piABaRvjVhNv6VZzgS
xgjkGnXv9823/lBm1Snh78VVx9CUMmpvAvhn9MzZiGQCo340P8SBSGpHhetNwmU2
6y7m0ECC4F6OCclmmAKfFoI1k6RoC0bbVu6tjOkaIOK63dX5aDfiHqWC/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjL91So4smCTr/EI7jF3Fs3ntF1MB8GA1UdIwQY
MBaAFIx7bhg8jVLMRgW6i12t3GYyYpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUt
YjZlODY3OTQxZjdlLzEvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUtYjZlODY3OTQxZjdl
LzEvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISnBQZyg
79BgH0FVJ/rdxTTM1Y/6LDGiwyM1+62zssyr2619/LXKCRZUOZfV2IJ9d7EqaXT0
VtkAFshrhKS9yta31fXHJ4YA1H701scvXPdlw7GeivWklhLehP43RwxciNW8tmf3
RHoIXiG0N0dfkaVMFdnw7ir8XmE7zFBR0d9EyUtwETWnsw9lVaXaUXjdjxNgeCr+
R+vIwXURT7DVnDhVIV+0jDbF7qFOqONar4nI3aDS+kfGAx8rkEBlTdNczWO7Pddu
L6i9j2Bx9P1+ExQ02bdB8dS7IGoIhMMK5KvLivOkpii+si1rSFbNAipe3pqOO75x
TH85dR1q2jXzvw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:25:18 2025 by rpki-client