Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
File:                     XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json)
Hash identifier:          UPf0JgAOx/IQS7btg0ArUa/FgPcwCXGWklHtMQ8tsVA=
Subject key identifier:   F6:C4:1A:75:40:F7:E5:2A:51:7C:6D:25:25:C1:20:BD:8A:AF:FC:F6
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Certificate issuer:       /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial:       0196760CE0D7AFD1FB85DEE7FDD34AB97FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:17 +0000
Files and hashes:         1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: cGDJn3SKf16synLvHGh37AN/9+6uIrRWr6uPeR73jeY=)
                          2: kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa (hash: Ige6JVtN5a8l5mz2oj2KpBc2hcWUaNAOe9GreksnHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:e0:d7:af:d1:fb:85:de:e7:fd:d3:4a:b9:7f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
        Validity
            Not Before: Apr 27 07:01:17 2025 GMT
            Not After : Apr 28 07:01:17 2025 GMT
        Subject: CN=f6c41a7540f7e52a517c6d2525c120bd8aaffcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:b4:42:52:50:cf:be:99:e9:5e:36:ac:e7:
                    25:9f:15:41:06:a7:3e:4a:95:11:19:90:36:c4:59:
                    56:79:3c:e3:2e:78:1e:be:d1:29:0a:cc:64:1d:f3:
                    56:72:06:94:45:e2:42:ab:c1:ca:2c:1e:64:e9:e1:
                    48:bc:6d:2d:09:e0:d0:b7:e1:38:d9:af:57:1e:11:
                    34:9e:1b:73:73:5a:87:a5:ab:e8:9e:47:b4:83:a4:
                    ac:08:23:58:a5:51:f3:a0:44:2c:df:d8:5b:01:e6:
                    68:8b:25:85:08:75:ce:9b:0a:ef:86:c2:1b:08:ea:
                    5d:b6:b0:56:90:b3:69:cf:e3:67:a2:53:c6:b4:cc:
                    4d:b8:e4:41:4c:f9:22:53:f6:43:dc:cd:67:8c:cc:
                    32:13:89:3e:36:21:87:f7:59:0d:c8:aa:48:9e:69:
                    90:fe:a4:09:7b:77:5b:1b:fe:06:12:4f:d3:ec:8f:
                    e1:c8:e4:7c:4f:c6:84:f2:6c:9b:68:67:02:fb:6e:
                    cc:cc:59:f4:04:5d:10:5f:89:0a:d2:96:fc:24:bb:
                    29:99:d4:66:ed:b2:8c:19:b2:21:f8:5d:d6:c8:72:
                    1d:f7:c2:e3:64:a9:91:ac:4a:78:c6:0c:a2:d0:e1:
                    ce:94:c6:62:86:e0:fd:6a:af:92:27:66:83:2c:cc:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C4:1A:75:40:F7:E5:2A:51:7C:6D:25:25:C1:20:BD:8A:AF:FC:F6
            X509v3 Authority Key Identifier:
                keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6d:df:3f:05:8d:ea:13:26:3a:22:3f:78:67:31:04:f1:a3:
         5b:d5:f0:0f:e6:f2:1d:52:62:de:07:72:b0:42:38:6c:35:09:
         4d:80:1f:3d:82:25:3c:11:d8:d4:46:14:41:9f:6a:6e:f6:a0:
         ef:9e:ea:7b:57:d9:63:4c:7c:47:0c:76:79:32:7a:83:c9:9a:
         2c:ef:ac:25:1c:b1:6f:c4:c8:28:9e:57:94:e8:59:ca:0a:e7:
         5d:ee:32:3b:88:f8:6c:4d:05:98:85:84:80:71:56:40:b7:0b:
         e0:1e:59:98:45:6d:83:37:01:6c:c5:cd:95:78:5f:db:3c:ea:
         b9:bd:4b:ea:8c:c2:15:16:97:47:c1:27:e3:2a:6b:23:25:cb:
         bd:3d:dc:e8:24:7a:89:e9:3d:43:f8:ef:5a:de:1a:25:42:6b:
         78:09:4f:31:06:e2:ce:51:88:0c:82:00:c1:7e:da:07:b9:56:
         da:df:8d:ac:f9:c8:cc:67:e5:c9:66:b4:88:70:fd:81:0c:e7:
         b7:ae:62:7b:02:eb:cc:52:a1:58:2c:d4:1d:97:cd:ab:66:64:
         b8:cb:78:74:b6:36:f1:fc:1f:ec:79:a5:62:ff:0f:24:8b:cc:
         68:74:cd:dc:65:53:8a:df:f9:3c:c9:cc:c2:f3:88:63:32:b2:
         f1:71:f5:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DODXr9H7hd7n/dNKuX/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2JiMTNhZTE3YzllNTU0ZTljZWFmY2ZlYjQ4YjQxNDE3
ZGE3ZWEwHhcNMjUwNDI3MDcwMTE3WhcNMjUwNDI4MDcwMTE3WjAzMTEwLwYDVQQD
EyhmNmM0MWE3NTQwZjdlNTJhNTE3YzZkMjUyNWMxMjBiZDhhYWZmY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSu0QlJQz76Z6V42rOclnxVBBqc+
SpURGZA2xFlWeTzjLngevtEpCsxkHfNWcgaUReJCq8HKLB5k6eFIvG0tCeDQt+E4
2a9XHhE0nhtzc1qHpavonke0g6SsCCNYpVHzoEQs39hbAeZoiyWFCHXOmwrvhsIb
COpdtrBWkLNpz+NnolPGtMxNuORBTPkiU/ZD3M1njMwyE4k+NiGH91kNyKpInmmQ
/qQJe3dbG/4GEk/T7I/hyOR8T8aE8mybaGcC+27MzFn0BF0QX4kK0pb8JLspmdRm
7bKMGbIh+F3WyHId98LjZKmRrEp4xgyi0OHOlMZihuD9aq+SJ2aDLMyX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbEGnVA9+UqUXxtJSXBIL2Kr/z2MB8GA1UdIwQY
MBaAFF47sTrhfJ5VTpzq/P60i0FBfafqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2Yt
MzUyMDA0YmMyMjgyLzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2YtMzUyMDA0YmMyMjgy
LzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN23fPwWN
6hMmOiI/eGcxBPGjW9XwD+byHVJi3gdysEI4bDUJTYAfPYIlPBHY1EYUQZ9qbvag
757qe1fZY0x8Rwx2eTJ6g8maLO+sJRyxb8TIKJ5XlOhZygrnXe4yO4j4bE0FmIWE
gHFWQLcL4B5ZmEVtgzcBbMXNlXhf2zzqub1L6ozCFRaXR8En4yprIyXLvT3c6CR6
iek9Q/jvWt4aJUJreAlPMQbizlGIDIIAwX7aB7lW2t+NrPnIzGflyWa0iHD9gQzn
t65iewLrzFKhWCzUHZfNq2ZkuMt4dLY28fwf7HmlYv8PJIvMaHTN3GVTit/5PMnM
wvOIYzKy8XH1gw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:26:19 2025 by rpki-client