Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File:                     Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier:          ThIl7o5IJX+hCSNlN7M2Wu0tYCfsq/nlIhaWxS4eIEc=
Subject key identifier:   75:30:68:69:C1:4A:60:B2:6F:8E:57:A1:2A:33:06:83:51:59:E2:15
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       019692CCFFA753650C41580B2D33212014B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number:          141E
Signing time:             Fri 02 May 2025 21:00:30 +0000
Manifest this update:     Fri 02 May 2025 21:00:30 +0000
Manifest next update:     Sat 03 May 2025 21:00:30 +0000
Files and hashes:         1: 9fqGagQCaL9MHwqiYLgCAlKltnI.roa (hash: BoPMzB3MdLpYYYjTBd+oogzMIYiLuFwZJGpH1bZ5Vr0=)
                          2: GCtomsNTvimtD6w0xyjU2ZUFcjE.roa (hash: XJ7hu4TR2M0+QkNeH26j5olN/g4SK2uhya5ykeMaklA=)
                          3: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: EE8am3vE7/drdzvUxbUKgimPQ5+HkKLsSIdxqKbthJE=)
                          4: LHSJXrq4fzboLah7C-gF4O-Krh4.roa (hash: dXC1M1f4xcsgjz8JdVvS5mt/3DkRXhiljl0W1UwisK8=)
                          5: Qi8od9-5X1sf48lKzwcNnNg6mHM.roa (hash: /syJMd1k0a2wLIgM5pfF31EnkGqqCBO2Z4W2CDpPvuA=)
                          6: Ufr2afGXnfRf4I0gb-jEiflvE4U.roa (hash: M+HA2yRnaGNn/L+MV9quoWf8gGEo+L0udQeBQZgiv0o=)
                          7: VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa (hash: UBuFnXhpXMmhVnBct5Az+Ev2H/iUBQnvBw+Z0vvL/Iw=)
                          8: a-UPHbc06elr_blSu9vS7q86SLw.roa (hash: 5vOUevzZOr+5szST6vxZMIM+U+1SeNXKPgwq9P6XW/E=)
                          9: hBmcTp2jwBhKQHd1_V4COpjCGZE.roa (hash: oguyi/J7KFBmkF5VOhH/4yPV3Css0NdJPTdKuw4u7YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:cc:ff:a7:53:65:0c:41:58:0b:2d:33:21:20:14:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: May  2 21:00:30 2025 GMT
            Not After : May  3 21:00:30 2025 GMT
        Subject: CN=75306869c14a60b26f8e57a12a3306835159e215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:38:b3:77:e0:d2:e6:4d:ca:14:0e:b7:d2:
                    ee:3b:46:63:86:12:f5:66:a8:8c:65:60:54:99:64:
                    02:66:8f:77:e1:71:04:e9:c5:e5:64:0e:17:6c:cc:
                    47:d2:f6:c3:60:85:fd:56:01:c6:4f:cf:a0:de:14:
                    5a:7f:86:4c:c3:ea:63:0d:3e:6c:99:8e:0c:61:d8:
                    fe:48:48:a2:0a:99:2b:94:b0:c7:4d:e0:d6:ce:41:
                    be:f0:29:a2:64:08:6e:d9:cd:8e:0c:05:ee:62:89:
                    9b:83:27:bd:32:47:e8:d6:16:44:26:76:ce:32:33:
                    1f:0c:4a:21:37:c1:da:ad:05:18:55:f4:e7:69:43:
                    fc:13:58:be:ec:ae:25:10:15:7e:ad:fc:f4:cf:74:
                    31:04:0e:f6:75:38:2c:f2:f2:e2:b6:01:25:e9:cb:
                    f1:da:7c:bc:4a:24:52:2d:d3:31:e5:2d:7a:c2:40:
                    80:b9:70:13:97:9b:91:e0:99:fe:a7:95:27:33:b0:
                    6f:e1:f7:35:7f:cf:c5:6f:9d:8c:ab:d1:6a:a9:5f:
                    bc:03:24:f2:1f:e9:10:9a:91:7f:0e:9d:37:31:97:
                    86:23:c5:bd:1c:fb:2a:a6:a1:8b:4a:57:d7:72:17:
                    1d:70:22:0e:98:ca:54:2a:c4:ca:ba:44:eb:78:25:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:68:69:C1:4A:60:B2:6F:8E:57:A1:2A:33:06:83:51:59:E2:15
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:23:48:d8:09:3c:fc:df:da:ae:21:1c:7b:94:69:ec:5a:
         71:24:5a:51:e6:25:4b:05:ea:36:38:2c:11:4d:32:1b:5c:df:
         37:1f:6c:c1:6b:f3:f7:20:dd:25:87:12:f9:fe:a5:75:ab:7a:
         ea:60:2f:5c:f1:26:bd:90:25:29:64:52:d8:db:be:5b:85:30:
         2e:40:1c:f8:c9:26:a7:2e:2c:e7:1d:ac:ac:36:da:29:b7:52:
         c6:94:e3:4f:1b:3e:7e:fb:c3:df:f7:21:44:b5:ed:0b:6c:a3:
         c1:ab:1d:f2:2d:85:44:e2:10:75:71:3a:dc:02:12:ad:85:1e:
         75:ad:9e:55:3e:d9:26:15:14:00:36:90:86:81:98:0a:db:8c:
         81:fd:7d:ec:3d:f4:4b:ed:9a:9a:e4:00:3a:61:e0:5a:17:8b:
         55:b3:94:01:5c:f5:02:45:31:92:fe:ea:98:29:73:6d:47:f2:
         3a:67:4b:d0:e1:e2:e1:3c:78:48:9a:71:f8:85:04:58:7d:ae:
         c2:c4:30:b6:4d:93:3a:c4:92:93:9d:b4:86:08:39:ca:03:1c:
         d0:86:27:4a:f7:2f:c4:74:7b:8e:96:5e:d5:9f:82:81:49:99:
         a9:c8:01:a8:24:38:81:67:3a:34:d8:be:2f:8a:37:97:df:5f:
         79:23:31:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaSzP+nU2UMQVgLLTMhIBS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjUwNTAyMjEwMDMwWhcNMjUwNTAzMjEwMDMwWjAzMTEwLwYDVQQD
Eyg3NTMwNjg2OWMxNGE2MGIyNmY4ZTU3YTEyYTMzMDY4MzUxNTllMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthw4s3fg0uZNyhQOt9LuO0ZjhhL1
ZqiMZWBUmWQCZo934XEE6cXlZA4XbMxH0vbDYIX9VgHGT8+g3hRaf4ZMw+pjDT5s
mY4MYdj+SEiiCpkrlLDHTeDWzkG+8CmiZAhu2c2ODAXuYombgye9Mkfo1hZEJnbO
MjMfDEohN8HarQUYVfTnaUP8E1i+7K4lEBV+rfz0z3QxBA72dTgs8vLitgEl6cvx
2ny8SiRSLdMx5S16wkCAuXATl5uR4Jn+p5UnM7Bv4fc1f8/Fb52Mq9FqqV+8AyTy
H+kQmpF/Dp03MZeGI8W9HPsqpqGLSlfXchcdcCIOmMpUKsTKukTreCVtvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUwaGnBSmCyb45XoSozBoNRWeIVMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb8jSNgJ
PPzf2q4hHHuUaexacSRaUeYlSwXqNjgsEU0yG1zfNx9swWvz9yDdJYcS+f6ldat6
6mAvXPEmvZAlKWRS2Nu+W4UwLkAc+Mkmpy4s5x2srDbaKbdSxpTjTxs+fvvD3/ch
RLXtC2yjwasd8i2FROIQdXE63AISrYUeda2eVT7ZJhUUADaQhoGYCtuMgf197D30
S+2amuQAOmHgWheLVbOUAVz1AkUxkv7qmClzbUfyOmdL0OHi4Tx4SJpx+IUEWH2u
wsQwtk2TOsSSk520hgg5ygMc0IYnSvcvxHR7jpZe1Z+CgUmZqcgBqCQ4gWc6NNi+
L4o3l99feSMxoA==
-----END CERTIFICATE-----
Generated at Sat May 3 00:06:20 2025 by rpki-client