Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File:                     y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier:          heMv/BpmN/nDx1RZnza0s7Y+0hrJcz26EVXew4eWGg0=
Subject key identifier:   7C:79:74:FC:AA:13:C6:36:27:F2:CC:C6:E6:32:5F:FF:1B:B3:C0:F2
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer:       /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial:       019671F89302DFBB34A901338D949346A310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number:          150D
Signing time:             Sat 26 Apr 2025 12:00:38 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:38 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:38 +0000
Files and hashes:         1: 2wV8eUCUu5RGsjYa7-OlHblwpFo.roa (hash: 7BqtxHk5pTQN6TSTs893yWqV/YVjq+6kshvNaK8vqGo=)
                          2: 8qU7PW-1jRTW26c9BxYT5_0Bc9U.roa (hash: HOmxtNFCl//oq/U3tRw6KwgqtgI+NdJR6gPDxjaAFLQ=)
                          3: b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa (hash: kqwOewNHVrTW/kfVyBv01vxgKvixRF0yFyDls6uT/Uo=)
                          4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: Oo5rsNz50NNFqB2+fWijGdtYpjQHg0heLNpBNbLsD+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:93:02:df:bb:34:a9:01:33:8d:94:93:46:a3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
        Validity
            Not Before: Apr 26 12:00:38 2025 GMT
            Not After : Apr 27 12:00:38 2025 GMT
        Subject: CN=7c7974fcaa13c63627f2ccc6e6325fff1bb3c0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:01:bd:73:c4:07:01:f0:4a:51:ec:0f:3b:
                    fd:93:ac:51:49:bd:d1:3a:17:25:fc:e3:ae:f4:58:
                    a0:fb:8f:49:6d:5a:07:8f:f3:79:e5:e4:a1:32:af:
                    f4:b3:e4:68:a5:51:5a:b3:37:2b:9c:91:7f:d5:99:
                    73:17:b2:18:0a:1d:d4:33:43:5c:72:7e:49:9f:b7:
                    6c:c3:90:43:de:eb:25:ab:1d:c6:1e:9a:4d:76:40:
                    c6:78:04:6b:b5:14:6b:c8:66:c6:30:b0:32:33:2b:
                    c7:9b:5a:8b:1b:94:1f:c9:59:a4:da:5d:e6:f4:13:
                    6b:6b:eb:99:c8:7c:d9:94:16:da:44:7a:47:be:84:
                    4c:54:a0:b3:e5:31:95:16:28:e1:6d:5e:8a:15:1f:
                    83:f2:c0:a5:34:52:3a:fa:73:72:a3:4c:24:07:67:
                    54:07:f9:34:c7:24:81:d0:ab:e2:cf:ea:51:c8:c7:
                    8d:71:d6:b8:73:7f:9c:9b:ee:95:70:f8:28:c3:d4:
                    d1:f7:88:61:f3:41:d7:07:6d:ef:eb:e3:24:27:05:
                    5d:ba:c7:5d:fb:a9:06:7f:c2:ee:b5:e6:67:b6:48:
                    9a:6b:65:85:03:7b:52:14:8d:cc:18:2f:8e:0b:1e:
                    96:08:a9:6b:7a:1b:85:d0:e7:ec:0b:c8:c1:25:50:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:79:74:FC:AA:13:C6:36:27:F2:CC:C6:E6:32:5F:FF:1B:B3:C0:F2
            X509v3 Authority Key Identifier:
                keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:97:ae:ec:e0:ce:69:2f:d7:b4:d6:dc:42:28:e5:a1:e1:
         3b:3a:4b:87:1f:17:06:68:f7:3a:c3:0e:28:1a:40:80:71:19:
         fd:e1:84:ea:0a:d4:f5:e5:f3:ed:80:58:37:58:e7:6f:93:dc:
         99:b2:8e:4a:e9:a5:8f:ec:65:fe:a5:cc:20:e0:85:4e:f2:36:
         78:39:10:e5:84:19:f3:f6:c5:c7:25:c5:e6:b2:06:ce:a8:61:
         b7:1a:46:05:38:9e:21:9d:eb:43:e2:f4:60:9d:90:50:37:c4:
         9e:2e:43:6a:d1:02:2e:60:25:f3:e0:88:38:3a:51:76:a9:b6:
         d3:c2:ab:ea:56:78:52:5c:11:34:93:90:2f:97:8c:4a:bf:32:
         3f:6b:6d:63:19:02:7a:8c:de:aa:8e:e6:b8:c0:38:7f:33:84:
         a9:c6:6f:b8:26:3a:ea:23:e0:a7:d1:23:9f:08:7e:24:28:8f:
         c8:a8:fb:96:dd:38:9f:13:f2:9c:b4:dd:5a:49:ca:59:d5:25:
         b8:13:7c:dc:8a:6e:22:14:a9:30:66:7e:35:7b:ed:e6:f4:4b:
         2f:df:b3:27:80:db:c3:bd:bc:98:f7:a5:6a:8b:4a:7e:4f:dd:
         f7:dd:86:e7:7a:d3:bb:a1:1f:01:ad:ca:75:68:da:86:49:0a:
         20:2b:82:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZx+JMC37s0qQEzjZSTRqMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjIzYmUxMTE1ZjAyMmFhMjY5ZDljZWE0MzliYjhiNDky
MzA3ZTIwHhcNMjUwNDI2MTIwMDM4WhcNMjUwNDI3MTIwMDM4WjAzMTEwLwYDVQQD
Eyg3Yzc5NzRmY2FhMTNjNjM2MjdmMmNjYzZlNjMyNWZmZjFiYjNjMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM0BvXPEBwHwSlHsDzv9k6xRSb3R
Ohcl/OOu9Fig+49JbVoHj/N55eShMq/0s+RopVFaszcrnJF/1ZlzF7IYCh3UM0Nc
cn5Jn7dsw5BD3uslqx3GHppNdkDGeARrtRRryGbGMLAyMyvHm1qLG5QfyVmk2l3m
9BNra+uZyHzZlBbaRHpHvoRMVKCz5TGVFijhbV6KFR+D8sClNFI6+nNyo0wkB2dU
B/k0xySB0Kviz+pRyMeNcda4c3+cm+6VcPgow9TR94hh80HXB23v6+MkJwVdusdd
+6kGf8LuteZntkiaa2WFA3tSFI3MGC+OCx6WCKlrehuF0OfsC8jBJVAGdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx5dPyqE8Y2J/LMxuYyX/8bs8DyMB8GA1UdIwQY
MBaAFMvyO+ERXwIqomnZzqQ5u4tJIwfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgt
YmUzMjUyYWM0OTgwLzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgtYmUzMjUyYWM0OTgw
LzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJiXruzg
zmkv17TW3EIo5aHhOzpLhx8XBmj3OsMOKBpAgHEZ/eGE6grU9eXz7YBYN1jnb5Pc
mbKOSumlj+xl/qXMIOCFTvI2eDkQ5YQZ8/bFxyXF5rIGzqhhtxpGBTieIZ3rQ+L0
YJ2QUDfEni5DatECLmAl8+CIODpRdqm208Kr6lZ4UlwRNJOQL5eMSr8yP2ttYxkC
eozeqo7muMA4fzOEqcZvuCY66iPgp9Ejnwh+JCiPyKj7lt04nxPynLTdWknKWdUl
uBN83IpuIhSpMGZ+NXvt5vRLL9+zJ4Dbw728mPelaotKfk/d992G53rTu6EfAa3K
dWjahkkKICuCxw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:41:26 2025 by rpki-client