Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File:                     sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier:          dW9QpQVnwscOPKPZb/1XZ6bQb1nK1iOz2rGjIcnwp+k=
Subject key identifier:   24:E2:73:51:4C:92:43:98:17:13:35:F5:98:4F:E4:0D:B4:1C:39:F5
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       0196760D1479FB9D0C53951379A17D952EE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number:          151D
Signing time:             Sun 27 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:30 +0000
Files and hashes:         1: AtRByS0zJPDiOgR2GmP-us653x0.roa (hash: FxQtASMxynUngBeMPqWpgsQ0Eb/Ckc7wV64mAxHzC3U=)
                          2: COiOJlNhkw7oyE7_CjG4wzI_Has.roa (hash: 8/lIfM84EcdzcDMM/2GUz4VN/PyuQhy9fYkjMmQOIDI=)
                          3: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (hash: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=)
                          4: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=)
                          5: hsH-e4sppViS3iNq4F4kEU0ep0g.roa (hash: dqKnOJjGSqIH7LzL8ZBxcWScroq9fSiiauAsWgvwoYw=)
                          6: lAQuczRYGnewQpXm-9DH2Aa2FJM.roa (hash: cpxHeGSggctdEQY5QxkgjLkTiuh9nHgtIGZfv1ijkMo=)
                          7: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: v+ncrElRZquKCQWo5DjNbTUO0aVuRpLMDEBlvaXz6i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0d:14:79:fb:9d:0c:53:95:13:79:a1:7d:95:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Apr 27 07:01:30 2025 GMT
            Not After : Apr 28 07:01:30 2025 GMT
        Subject: CN=24e273514c924398171335f5984fe40db41c39f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:a4:e2:77:2b:a4:7d:e2:9b:1f:86:d0:86:
                    ef:6b:ba:38:dc:84:46:3c:0f:62:a0:df:c0:4d:87:
                    3a:11:8f:17:b5:f6:6b:b1:5d:36:4d:e2:a7:bb:f9:
                    ae:e0:76:12:9f:c0:34:ca:4b:7a:f5:87:cf:70:29:
                    94:0c:41:2a:37:24:eb:da:2e:17:86:1b:09:d1:c7:
                    eb:d7:3f:29:c4:0d:9f:4c:16:4b:5f:92:4b:8c:48:
                    48:53:e6:34:93:78:0c:cf:ce:77:fe:9a:c4:46:4d:
                    f7:d2:35:2a:79:96:a6:a4:72:4b:af:01:18:c3:ff:
                    8d:94:be:95:02:1e:12:09:81:9d:b0:c3:3b:03:5f:
                    5a:97:27:a6:ae:af:ff:d0:8a:b7:5d:4d:22:46:2b:
                    ab:a8:fe:58:91:05:22:00:b4:06:2f:8b:ec:71:b4:
                    a3:8c:96:82:12:8f:4c:43:f0:2c:34:0f:2e:5c:b0:
                    af:5b:f3:a7:75:33:51:c3:41:2a:f7:f6:46:2b:88:
                    66:c2:68:90:fb:1a:52:89:81:50:7f:75:2e:e9:d7:
                    8f:50:35:ab:b8:72:e2:c0:71:f1:5e:b3:51:c9:6d:
                    ef:97:17:51:59:e0:41:55:6f:57:d0:98:af:31:ea:
                    3f:57:ad:0e:ac:47:8a:82:34:23:83:11:84:09:84:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E2:73:51:4C:92:43:98:17:13:35:F5:98:4F:E4:0D:B4:1C:39:F5
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:50:29:fa:8b:d6:88:ab:d4:ee:ff:be:e9:92:f3:d3:e8:21:
         66:22:40:3c:15:19:60:a1:ff:91:ca:98:b4:73:20:c1:62:96:
         45:ac:39:71:06:84:29:fa:f1:c0:dc:13:f4:1c:5a:bc:ca:f8:
         a3:d6:f7:36:3f:86:2e:e9:f9:d6:4d:33:22:16:20:10:9d:89:
         84:8b:d8:ad:c3:01:f4:19:6b:c0:93:3d:dd:34:28:59:d8:ac:
         b8:cd:59:23:fa:f9:a1:4a:3e:b3:f7:94:f6:91:5c:71:c6:81:
         b1:43:04:81:9c:6b:c4:d7:e8:4d:e3:64:f4:3f:11:8c:b7:49:
         22:61:64:8b:9d:2b:ea:f1:d8:02:d2:42:df:21:43:56:3f:51:
         45:ec:7a:12:14:57:86:fc:0f:ae:36:ec:9e:09:ed:3d:6d:6b:
         92:3c:e4:63:35:e0:b8:b3:bd:0a:b4:9c:2e:23:7b:94:ab:c3:
         cd:32:05:21:e3:5d:f5:fc:87:8d:52:15:ca:72:17:96:0b:3f:
         bf:30:65:59:e6:03:2a:22:5d:82:34:76:4f:a7:77:67:bd:e4:
         88:37:8d:d9:9f:a1:c6:41:cc:70:ed:07:6b:aa:98:ff:8e:47:
         62:af:88:b4:f7:ec:25:4d:2a:0d:09:4c:e6:70:23:73:1b:e2:
         43:4e:6a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DRR5+50MU5UTeaF9lS7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx
NTZmODkwHhcNMjUwNDI3MDcwMTMwWhcNMjUwNDI4MDcwMTMwWjAzMTEwLwYDVQQD
EygyNGUyNzM1MTRjOTI0Mzk4MTcxMzM1ZjU5ODRmZTQwZGI0MWMzOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn2k4ncrpH3imx+G0Ibva7o43IRG
PA9ioN/ATYc6EY8XtfZrsV02TeKnu/mu4HYSn8A0ykt69YfPcCmUDEEqNyTr2i4X
hhsJ0cfr1z8pxA2fTBZLX5JLjEhIU+Y0k3gMz853/prERk330jUqeZampHJLrwEY
w/+NlL6VAh4SCYGdsMM7A19alyemrq//0Iq3XU0iRiurqP5YkQUiALQGL4vscbSj
jJaCEo9MQ/AsNA8uXLCvW/OndTNRw0Eq9/ZGK4hmwmiQ+xpSiYFQf3Uu6dePUDWr
uHLiwHHxXrNRyW3vlxdRWeBBVW9X0JivMeo/V60OrEeKgjQjgxGECYTOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTic1FMkkOYFxM19ZhP5A20HDn1MB8GA1UdIwQY
MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt
Y2Y2YzMwNTIxMmViLzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi
LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFAp+ovW
iKvU7v++6ZLz0+ghZiJAPBUZYKH/kcqYtHMgwWKWRaw5cQaEKfrxwNwT9BxavMr4
o9b3Nj+GLun51k0zIhYgEJ2JhIvYrcMB9BlrwJM93TQoWdisuM1ZI/r5oUo+s/eU
9pFcccaBsUMEgZxrxNfoTeNk9D8RjLdJImFki50r6vHYAtJC3yFDVj9RRex6EhRX
hvwPrjbsngntPW1rkjzkYzXguLO9CrScLiN7lKvDzTIFIeNd9fyHjVIVynIXlgs/
vzBlWeYDKiJdgjR2T6d3Z73kiDeN2Z+hxkHMcO0Ha6qY/45HYq+ItPfsJU0qDQlM
5nAjcxviQ05q7A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:01 2025 by rpki-client