Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          VfA4vyyaXMdgBLAl6VAFDYdj5q91vkEwQS15S91zFCg=
Subject key identifier:   87:F4:69:6B:8C:22:DF:E6:73:61:7D:7B:15:06:24:93:AA:23:81:15
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       0196730B0BA733FA2FA87760669EDE059D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          150F
Signing time:             Sat 26 Apr 2025 17:00:25 +0000
Manifest this update:     Sat 26 Apr 2025 17:00:25 +0000
Manifest next update:     Sun 27 Apr 2025 17:00:25 +0000
Files and hashes:         1: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (hash: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=)
                          2: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (hash: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=)
                          3: LHiOtk6tL1CXrv20IpGcmi0303Q.roa (hash: V/XoU0KL7XbTl000bnNR3hPbksWkdzPpz1xOimffKQc=)
                          4: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: sL8BObFVe90tppU8FMIJEs3jJIrgVivPkqhwml5XVdY=)
                          5: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (hash: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=)
                          6: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (hash: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0b:0b:a7:33:fa:2f:a8:77:60:66:9e:de:05:9d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Apr 26 17:00:25 2025 GMT
            Not After : Apr 27 17:00:25 2025 GMT
        Subject: CN=87f4696b8c22dfe673617d7b15062493aa238115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:58:ae:d4:54:bb:2b:34:7f:03:1d:e3:60:
                    ce:b0:8a:02:71:ec:40:00:ba:a6:44:0e:4d:41:6a:
                    76:df:48:23:22:12:e9:09:17:b2:21:d3:fd:72:02:
                    3f:63:5e:f8:c8:b4:47:b6:4e:66:ae:01:4a:71:a0:
                    64:9e:96:1f:62:83:e8:b6:0e:8a:63:2e:56:97:40:
                    0f:2a:16:37:cc:9c:7d:49:70:a5:3a:88:b1:99:f4:
                    d6:ad:ca:55:e9:35:e2:07:1c:42:10:05:cb:01:11:
                    23:b9:e0:b0:b5:80:e8:75:03:51:16:e9:4c:1e:54:
                    9a:0d:ab:d6:05:5e:fc:ca:c1:5d:a1:59:db:d2:f5:
                    6a:8e:f5:84:98:55:4e:fd:b6:9a:2f:20:6d:75:bc:
                    43:dd:b8:45:65:c0:99:9d:95:16:ab:7f:af:cd:6c:
                    9f:0f:f4:bf:67:5f:20:4f:cc:35:f8:68:50:98:34:
                    5a:31:5c:c8:1f:57:4f:07:d6:0b:e0:d2:63:21:79:
                    62:9d:5f:39:2b:1d:e1:cc:f0:2f:7e:d3:7b:54:3d:
                    6b:28:93:56:06:d9:b0:1e:ad:b1:08:c1:42:b0:8e:
                    df:f5:52:ae:e2:ca:10:3a:b8:e5:f7:7f:a4:8b:0f:
                    7c:d7:d9:72:cf:0e:e4:53:06:8b:3e:5a:4b:79:48:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:69:6B:8C:22:DF:E6:73:61:7D:7B:15:06:24:93:AA:23:81:15
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:07:89:ba:1f:39:7f:97:09:96:50:fe:a7:eb:b5:1c:78:36:
         a5:dc:7b:41:bd:b8:ea:8d:43:39:a5:61:73:6b:15:4c:bc:ed:
         06:0e:9f:62:81:22:37:e7:39:d0:9a:4b:3d:f6:21:d5:8b:18:
         fc:70:32:f9:89:78:53:aa:5e:99:23:a0:53:fd:7e:67:92:85:
         f9:55:36:b0:4b:f5:3e:97:8f:b1:47:a0:36:ef:25:78:9a:f5:
         7b:6e:56:42:ad:66:c5:ca:65:f4:4c:c8:70:eb:42:5c:59:74:
         01:68:7b:7c:76:00:fb:0e:37:04:da:25:78:76:10:e3:9c:07:
         98:91:61:ef:7c:fa:bb:0f:ed:09:af:08:f9:a3:a6:41:9c:7e:
         9f:47:a4:0d:ab:a5:b0:45:dc:03:8b:a6:e5:2b:db:4c:78:72:
         72:fb:27:39:f5:5f:82:4a:41:5b:77:95:d0:4b:52:a8:82:db:
         2d:53:06:71:7d:23:27:a9:3b:d7:22:52:49:12:9d:5b:30:0b:
         62:4c:61:83:15:d6:37:71:62:f4:f8:09:68:1a:78:c1:cf:d9:
         84:76:1c:e2:22:5b:fd:63:e1:62:d9:8b:78:32:ba:8a:7c:a3:
         36:55:f3:37:76:12:a6:f6:99:60:ec:d7:21:2d:17:4a:9b:7d:
         a5:87:8b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzCwunM/ovqHdgZp7eBZ0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjUwNDI2MTcwMDI1WhcNMjUwNDI3MTcwMDI1WjAzMTEwLwYDVQQD
Eyg4N2Y0Njk2YjhjMjJkZmU2NzM2MTdkN2IxNTA2MjQ5M2FhMjM4MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F5YrtRUuys0fwMd42DOsIoCcexA
ALqmRA5NQWp230gjIhLpCReyIdP9cgI/Y174yLRHtk5mrgFKcaBknpYfYoPotg6K
Yy5Wl0APKhY3zJx9SXClOoixmfTWrcpV6TXiBxxCEAXLAREjueCwtYDodQNRFulM
HlSaDavWBV78ysFdoVnb0vVqjvWEmFVO/baaLyBtdbxD3bhFZcCZnZUWq3+vzWyf
D/S/Z18gT8w1+GhQmDRaMVzIH1dPB9YL4NJjIXlinV85Kx3hzPAvftN7VD1rKJNW
BtmwHq2xCMFCsI7f9VKu4soQOrjl93+kiw9819lyzw7kUwaLPlpLeUhgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf0aWuMIt/mc2F9exUGJJOqI4EVMB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgeJuh85
f5cJllD+p+u1HHg2pdx7Qb246o1DOaVhc2sVTLztBg6fYoEiN+c50JpLPfYh1YsY
/HAy+Yl4U6pemSOgU/1+Z5KF+VU2sEv1PpePsUegNu8leJr1e25WQq1mxcpl9EzI
cOtCXFl0AWh7fHYA+w43BNoleHYQ45wHmJFh73z6uw/tCa8I+aOmQZx+n0ekDaul
sEXcA4um5SvbTHhycvsnOfVfgkpBW3eV0EtSqILbLVMGcX0jJ6k71yJSSRKdWzAL
YkxhgxXWN3Fi9PgJaBp4wc/ZhHYc4iJb/WPhYtmLeDK6inyjNlXzN3YSpvaZYOzX
IS0XSpt9pYeLtg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:29:20 2025 by rpki-client