Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
File:                     F92cI69p7Czbb-K5k260lM_RYh8.mft (raw, json)
Hash identifier:          aGwdtmpz6qBTdt6svdJ4TIiahpyVdftRV8BoILyBvuA=
Subject key identifier:   10:C4:D3:8D:D1:BD:9A:E7:8C:7C:21:7C:20:FD:1B:AF:DE:BD:68:F0
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       0196729DC3D9ACD117B20395A0C9C0048670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
Manifest number:          151B
Signing time:             Sat 26 Apr 2025 15:01:03 +0000
Manifest this update:     Sat 26 Apr 2025 15:01:03 +0000
Manifest next update:     Sun 27 Apr 2025 15:01:03 +0000
Files and hashes:         1: F92cI69p7Czbb-K5k260lM_RYh8.crl (hash: RrIOwCNgQfxvU8rStKq0O+kbijpXLAfgxJc9L1ehHMw=)
                          2: Kj5ZZT_QMGV8ggXHA75R7vnwc-Y.roa (hash: p+eVg1Sb75Egr4y3obi4lrz5P3sy7D8NwnWNwRsHb70=)
                          3: NIDKHm7_cZUNMihpKQDzfd-ZjRA.roa (hash: kaf5wyEDhcWh11clAHcF36F7W+dfPnAjUXKofTGxPck=)
                          4: PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa (hash: RTH/rFrhQw74U5knflYk2x+P7ymGF/LwjJP/pIPOpvM=)
                          5: amXihoIti_1rSNyGXmBzzCK307E.roa (hash: nLmxvSWML2dah+dCWe4SPAyANy3yKBIMLrJwHa4DIEM=)
                          6: cmnKESnx3pYzc_9zB3Nnd1QMDJ8.roa (hash: yO89D9gVpePds41T+w6tzQYVY3S3xzIRop0YPL+B3+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:c3:d9:ac:d1:17:b2:03:95:a0:c9:c0:04:86:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: Apr 26 15:01:03 2025 GMT
            Not After : Apr 27 15:01:03 2025 GMT
        Subject: CN=10c4d38dd1bd9ae78c7c217c20fd1bafdebd68f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:22:cf:7e:61:8c:12:0b:be:7e:20:94:95:
                    80:a1:d9:a4:da:f7:bb:4a:d5:40:82:4d:75:77:90:
                    bd:c7:5b:7c:08:64:bc:71:c2:23:f5:57:a3:b2:35:
                    9c:d4:58:cd:93:d8:50:8f:9f:8c:8a:0b:0e:11:61:
                    7a:ae:60:05:cd:7a:b1:3c:49:ac:98:b8:e0:a0:46:
                    c9:1d:9f:f9:31:91:53:8b:28:6b:71:ce:0b:be:fb:
                    61:c2:dc:47:bb:46:da:e8:65:55:6d:f8:a9:c8:3c:
                    65:d5:ff:2f:7d:9b:34:59:83:7f:df:83:44:8a:f8:
                    31:92:53:ee:a7:c1:83:c4:c7:a3:17:55:0a:98:42:
                    6f:7f:0b:c1:6f:35:2c:e1:94:98:ab:28:d6:0c:48:
                    2a:88:b7:76:7e:9e:76:94:af:ae:30:0a:1d:20:c1:
                    1f:74:66:11:3f:ff:e4:30:76:6f:b7:80:11:db:a9:
                    2e:c6:e6:7d:ff:d7:31:ce:71:19:ed:8a:6a:6d:4c:
                    cb:c9:db:e6:47:c9:04:8c:ae:db:d8:d3:20:33:7f:
                    ef:fa:a4:ae:bf:bf:ea:6f:c4:b4:b6:ac:4b:84:9c:
                    69:a4:7a:2a:a6:06:b4:09:2e:c2:7e:7b:1b:f6:79:
                    dc:16:96:a5:ed:c6:92:93:84:ab:56:6a:33:2f:18:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C4:D3:8D:D1:BD:9A:E7:8C:7C:21:7C:20:FD:1B:AF:DE:BD:68:F0
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:94:3d:00:3c:d8:4a:a4:1c:1b:b8:9d:81:b1:10:9c:d0:
         83:8a:f7:e2:37:23:9d:dd:8d:2b:9b:86:2e:69:5c:8d:61:50:
         1f:fa:98:e7:56:94:70:ea:02:51:55:de:41:f9:2e:d2:db:7b:
         05:b7:9b:17:d1:b1:ad:db:42:3e:2d:91:45:b2:ba:96:f0:66:
         f4:80:fa:b8:f5:6c:7e:8e:25:1a:e8:e4:04:d9:91:1c:c9:43:
         43:e9:ec:9c:69:e1:fe:9a:fc:ad:45:3e:e1:1f:06:37:67:72:
         fe:c7:23:f2:d9:e4:57:96:7e:b8:40:52:7b:7e:e1:4b:bf:fc:
         d4:90:1b:8a:ff:78:80:4e:82:e0:6b:f8:65:75:9f:10:92:13:
         1c:81:42:fe:f7:08:9b:73:76:19:97:eb:c4:eb:3e:22:3a:54:
         60:65:54:35:47:2e:e1:5f:d7:3c:d2:a4:f2:a3:4c:d7:d4:c7:
         47:47:89:9e:39:cd:13:39:49:7c:00:f1:90:ea:17:46:9b:77:
         90:03:6d:e0:7e:ed:fd:b9:1f:d6:33:29:55:3f:3a:c9:38:96:
         57:af:08:dc:7e:40:5e:06:63:b4:8f:e6:6c:3c:77:a8:4e:33:
         d5:7b:83:15:29:c3:ae:2c:58:94:df:7e:03:be:54:da:56:33:
         40:e4:54:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyncPZrNEXsgOVoMnABIZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk
MTYyMWYwHhcNMjUwNDI2MTUwMTAzWhcNMjUwNDI3MTUwMTAzWjAzMTEwLwYDVQQD
EygxMGM0ZDM4ZGQxYmQ5YWU3OGM3YzIxN2MyMGZkMWJhZmRlYmQ2OGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfMiz35hjBILvn4glJWAodmk2ve7
StVAgk11d5C9x1t8CGS8ccIj9VejsjWc1FjNk9hQj5+MigsOEWF6rmAFzXqxPEms
mLjgoEbJHZ/5MZFTiyhrcc4LvvthwtxHu0ba6GVVbfipyDxl1f8vfZs0WYN/34NE
ivgxklPup8GDxMejF1UKmEJvfwvBbzUs4ZSYqyjWDEgqiLd2fp52lK+uMAodIMEf
dGYRP//kMHZvt4AR26kuxuZ9/9cxznEZ7YpqbUzLydvmR8kEjK7b2NMgM3/v+qSu
v7/qb8S0tqxLhJxppHoqpga0CS7Cfnsb9nncFpal7caSk4SrVmozLxjYQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDE043RvZrnjHwhfCD9G6/evWjwMB8GA1UdIwQY
MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt
OGZhN2I0YzUzMDczLzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz
LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLGUPQA8
2EqkHBu4nYGxEJzQg4r34jcjnd2NK5uGLmlcjWFQH/qY51aUcOoCUVXeQfku0tt7
BbebF9GxrdtCPi2RRbK6lvBm9ID6uPVsfo4lGujkBNmRHMlDQ+nsnGnh/pr8rUU+
4R8GN2dy/scj8tnkV5Z+uEBSe37hS7/81JAbiv94gE6C4Gv4ZXWfEJITHIFC/vcI
m3N2GZfrxOs+IjpUYGVUNUcu4V/XPNKk8qNM19THR0eJnjnNEzlJfADxkOoXRpt3
kANt4H7t/bkf1jMpVT86yTiWV68I3H5AXgZjtI/mbDx3qE4z1XuDFSnDrixYlN9+
A75U2lYzQORUcQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:48:36 2025 by rpki-client