Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          68e1qJoVIeW9NLcurOAatzyQagzUxkG/px76hyjgSBk=
Subject key identifier:   65:E3:E1:0F:E5:80:FC:79:E3:A2:A0:19:6C:D9:CA:A5:C7:52:1C:82
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       01968736826D2A18CC6075FA21E6682D0A4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          151D
Signing time:             Wed 30 Apr 2025 15:00:18 +0000
Manifest this update:     Wed 30 Apr 2025 15:00:18 +0000
Manifest next update:     Thu 01 May 2025 15:00:18 +0000
Files and hashes:         1: KHPRuQDdd-kWMT7LTpUd4Jl5CLc.roa (hash: HHEh/ZmjNau8OqCWaktRrOiEVjCo5faN7oV96b1l4Q8=)
                          2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
                          3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: J+C2uxBGYGLY1JlMwlXsowZnml3lB6/adCDSCL3T2MY=)
                          4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:36:82:6d:2a:18:cc:60:75:fa:21:e6:68:2d:0a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Apr 30 15:00:18 2025 GMT
            Not After : May  1 15:00:18 2025 GMT
        Subject: CN=65e3e10fe580fc79e3a2a0196cd9caa5c7521c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:6a:a7:54:3e:78:59:68:d9:7b:3e:56:78:
                    ae:ae:3c:6a:b8:fd:30:ad:93:c7:1d:a2:14:fb:c2:
                    2d:fd:82:ff:fa:1d:1d:61:57:27:ce:f0:3a:31:6c:
                    3d:d8:0e:01:f7:18:2c:a8:6c:8f:0a:1c:8d:3d:7c:
                    1b:27:88:dd:c9:79:85:8e:ad:ef:90:a7:aa:40:46:
                    93:63:83:41:d2:eb:0a:a1:87:1b:c8:2e:93:53:e9:
                    59:f1:c0:61:2a:47:d0:fe:fe:01:cc:26:10:66:ac:
                    23:93:a8:ea:8b:83:c3:8b:d0:98:e6:bb:a0:02:96:
                    fc:b7:3e:d9:fc:da:2b:87:f2:cc:77:05:87:a4:b5:
                    8a:ed:0a:90:b2:01:f8:d3:5a:1f:90:4d:c0:43:1a:
                    d2:76:82:3b:bd:da:93:7f:10:a4:c4:3f:e6:72:7c:
                    50:fd:d6:b9:67:c5:96:c2:15:ac:e8:e5:41:00:85:
                    e1:0c:15:f9:78:3f:87:a6:91:e9:a3:e2:6e:00:3a:
                    65:08:97:a0:aa:23:61:6a:ae:ac:b3:d4:9b:bf:e1:
                    ed:10:71:64:30:c4:95:e1:a0:52:06:8f:01:26:50:
                    30:b1:05:97:f3:52:aa:6f:d3:6a:ef:17:6c:40:8c:
                    ea:06:3d:01:86:eb:64:bd:ab:48:1c:ed:03:bd:3b:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E3:E1:0F:E5:80:FC:79:E3:A2:A0:19:6C:D9:CA:A5:C7:52:1C:82
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:67:31:b5:be:14:9c:1e:c4:ce:4d:d1:e5:49:e4:d5:f7:
         97:97:76:06:ab:80:86:81:32:ed:c6:70:ae:61:0f:ea:88:c3:
         a7:0b:09:4a:3a:88:d9:d3:3a:28:af:32:0d:e7:f7:f9:25:16:
         89:02:81:8a:8b:17:1f:db:6f:d0:08:28:17:d1:ec:ab:e9:3a:
         9b:ae:fa:79:3b:43:dd:31:b1:31:7a:22:35:3a:32:0c:d9:ac:
         1a:b8:d3:f6:e4:d3:b8:9b:12:c9:85:5b:00:a8:41:ae:1b:66:
         3b:f3:c9:a8:d3:19:5b:1f:5a:3c:60:4d:04:3b:2b:ed:5b:67:
         ea:5b:6f:e1:db:4c:13:8e:6f:0a:a4:5d:ad:37:c3:e6:ec:e4:
         1e:c3:fd:4e:3e:2a:c5:1e:15:9d:64:d1:87:b1:9b:53:18:30:
         7d:9c:c1:ac:00:6c:02:98:a5:c6:7c:36:72:e5:43:5d:db:d8:
         0a:51:ec:f4:b0:ce:eb:9b:fc:51:71:4b:79:88:a2:52:d2:0a:
         00:62:31:2f:ee:18:ff:0e:fa:c5:d0:e5:fd:a6:94:94:0e:05:
         c4:bf:3d:80:50:83:5e:52:9f:84:ef:dd:fa:0b:6c:a6:43:97:
         02:94:e8:96:a3:56:e6:55:bc:59:70:2b:48:62:d1:40:8c:03:
         e0:ff:b5:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHNoJtKhjMYHX6IeZoLQpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjUwNDMwMTUwMDE4WhcNMjUwNTAxMTUwMDE4WjAzMTEwLwYDVQQD
Eyg2NWUzZTEwZmU1ODBmYzc5ZTNhMmEwMTk2Y2Q5Y2FhNWM3NTIxYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qVqp1Q+eFlo2Xs+VniurjxquP0w
rZPHHaIU+8It/YL/+h0dYVcnzvA6MWw92A4B9xgsqGyPChyNPXwbJ4jdyXmFjq3v
kKeqQEaTY4NB0usKoYcbyC6TU+lZ8cBhKkfQ/v4BzCYQZqwjk6jqi4PDi9CY5rug
Apb8tz7Z/Norh/LMdwWHpLWK7QqQsgH401ofkE3AQxrSdoI7vdqTfxCkxD/mcnxQ
/da5Z8WWwhWs6OVBAIXhDBX5eD+HppHpo+JuADplCJegqiNhaq6ss9Sbv+HtEHFk
MMSV4aBSBo8BJlAwsQWX81Kqb9Nq7xdsQIzqBj0BhutkvatIHO0DvTvv+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXj4Q/lgPx546KgGWzZyqXHUhyCMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXdnMbW+
FJwexM5N0eVJ5NX3l5d2BquAhoEy7cZwrmEP6ojDpwsJSjqI2dM6KK8yDef3+SUW
iQKBiosXH9tv0AgoF9Hsq+k6m676eTtD3TGxMXoiNToyDNmsGrjT9uTTuJsSyYVb
AKhBrhtmO/PJqNMZWx9aPGBNBDsr7Vtn6ltv4dtME45vCqRdrTfD5uzkHsP9Tj4q
xR4VnWTRh7GbUxgwfZzBrABsApilxnw2cuVDXdvYClHs9LDO65v8UXFLeYiiUtIK
AGIxL+4Y/w76xdDl/aaUlA4FxL89gFCDXlKfhO/d+gtspkOXApTolqNW5lW8WXAr
SGLRQIwD4P+1ZQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:58:11 2025 by rpki-client