Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File:                     TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier:          ayRAvtbbb8d9Qt2rhXWTZieK152KBVloWfDqSxS1b6g=
Subject key identifier:   0E:E8:10:82:5A:61:EE:44:76:CA:7A:21:0C:F3:CA:15:8C:72:81:0C
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer:       /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial:       0196A24052327058A617F4556CAC29708D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number:          152A
Signing time:             Mon 05 May 2025 21:00:46 +0000
Manifest this update:     Mon 05 May 2025 21:00:46 +0000
Manifest next update:     Tue 06 May 2025 21:00:46 +0000
Files and hashes:         1: GE0QPlemROw8Sbhr36vqfxvh7PA.roa (hash: +MZLj56FBFDLK0DCRu2QzT8kaBrzw0Ux8MFgsr68gZ8=)
                          2: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: jpnXO4nvjqN6Oe8G1WJt+ywqxmXTpxDmapEEI8ai/5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:40:52:32:70:58:a6:17:f4:55:6c:ac:29:70:8d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
        Validity
            Not Before: May  5 21:00:46 2025 GMT
            Not After : May  6 21:00:46 2025 GMT
        Subject: CN=0ee810825a61ee4476ca7a210cf3ca158c72810c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:d2:6b:28:7a:42:6b:27:81:d8:64:8a:b5:
                    27:26:a2:b0:af:86:0d:10:70:28:77:69:30:3d:9c:
                    e9:3e:78:c6:2a:f2:b0:ca:73:da:47:10:c7:56:ae:
                    89:41:3f:4e:f5:b8:e2:e3:8c:18:fa:21:0c:22:39:
                    2a:3b:45:17:fe:5c:a8:b2:65:fe:42:9e:b7:72:f7:
                    43:e0:50:90:2a:80:9a:e1:46:25:58:a5:26:24:6e:
                    d7:34:21:d4:e1:e1:5f:3e:e5:f4:1f:ae:b2:41:55:
                    05:79:1f:d6:76:39:ce:b9:94:f5:d7:a1:4a:6f:6c:
                    17:36:6f:ca:ba:65:64:ce:9b:37:e7:f4:25:da:db:
                    0a:3c:c5:dc:52:09:62:f8:f5:1c:77:71:e2:43:30:
                    b0:e8:b8:f4:fc:41:b5:b7:11:2b:a2:b8:06:36:35:
                    0a:51:ec:46:73:45:f5:96:d4:5c:c8:80:8f:34:72:
                    c5:56:0b:c3:d9:ba:31:ee:aa:a5:a2:08:14:0e:b7:
                    ec:0a:b3:37:59:03:e5:30:89:9f:09:83:46:c7:68:
                    80:33:3f:ef:43:b6:3d:c2:8d:c6:a8:58:c9:7a:9b:
                    22:62:48:10:a9:99:f3:77:01:f1:f3:5a:9d:7d:ec:
                    c1:ff:d2:16:71:c0:13:69:42:ab:15:7a:6a:d8:f9:
                    5b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:10:82:5A:61:EE:44:76:CA:7A:21:0C:F3:CA:15:8C:72:81:0C
            X509v3 Authority Key Identifier:
                keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:16:19:91:95:24:92:4f:b0:9e:3c:44:c2:7b:1a:3e:d7:7d:
         63:e4:f8:36:40:11:b2:ec:18:61:06:7e:39:84:23:c5:0a:a8:
         68:4a:9c:60:8d:5f:99:56:2b:dc:2a:d8:a9:18:08:99:ec:8a:
         20:f6:21:41:f6:86:cc:2c:fd:ff:ea:54:ab:20:c6:cd:f2:cb:
         a0:bd:7f:8f:b9:13:93:9d:dc:cf:9f:c0:9c:58:5a:cd:2c:7d:
         69:71:e7:73:05:e1:70:21:cc:0d:cd:7d:28:67:fd:ef:9e:92:
         f1:5b:f4:a2:97:74:c4:ed:4d:80:5e:e1:00:4b:68:8d:f2:3e:
         00:21:fd:4d:f5:51:92:73:d3:2a:ad:84:f6:a4:d5:ae:d8:f4:
         f8:47:f7:48:2a:1e:0a:88:d6:08:48:02:46:72:62:5d:3b:e7:
         2c:b0:99:94:6d:20:a3:da:c0:b9:2b:74:17:06:16:f2:04:8e:
         25:e3:29:fa:82:07:8e:21:c1:70:dc:70:a8:c8:ea:15:e4:88:
         46:1c:0d:b5:23:3d:e7:e2:00:5b:3b:ec:cd:05:aa:15:b8:7c:
         8c:73:ef:a7:e2:e3:63:b0:55:d0:22:27:04:df:ff:d3:23:52:
         59:ac:66:80:4b:76:3d:5d:59:ce:ee:a9:d1:15:08:5e:93:f3:
         27:77:f9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiQFIycFimF/RVbKwpcI0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWFhMzhlZWEzMjRlMmJkN2FiNjQyN2U3NTk2YTlmYTQx
ZGIwZTMwHhcNMjUwNTA1MjEwMDQ2WhcNMjUwNTA2MjEwMDQ2WjAzMTEwLwYDVQQD
EygwZWU4MTA4MjVhNjFlZTQ0NzZjYTdhMjEwY2YzY2ExNThjNzI4MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupTSayh6QmsngdhkirUnJqKwr4YN
EHAod2kwPZzpPnjGKvKwynPaRxDHVq6JQT9O9bji44wY+iEMIjkqO0UX/lyosmX+
Qp63cvdD4FCQKoCa4UYlWKUmJG7XNCHU4eFfPuX0H66yQVUFeR/WdjnOuZT116FK
b2wXNm/KumVkzps35/Ql2tsKPMXcUgli+PUcd3HiQzCw6Lj0/EG1txErorgGNjUK
UexGc0X1ltRcyICPNHLFVgvD2box7qqloggUDrfsCrM3WQPlMImfCYNGx2iAMz/v
Q7Y9wo3GqFjJepsiYkgQqZnzdwHx81qdfezB/9IWccATaUKrFXpq2PlbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7oEIJaYe5Edsp6IQzzyhWMcoEMMB8GA1UdIwQY
MBaAFE5ao47qMk4r16tkJ+dZap+kHbDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEt
NGVlZWQ4YTQzMDhiLzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEtNGVlZWQ4YTQzMDhi
LzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBYZkZUk
kk+wnjxEwnsaPtd9Y+T4NkARsuwYYQZ+OYQjxQqoaEqcYI1fmVYr3CrYqRgImeyK
IPYhQfaGzCz9/+pUqyDGzfLLoL1/j7kTk53cz5/AnFhazSx9aXHncwXhcCHMDc19
KGf9756S8Vv0opd0xO1NgF7hAEtojfI+ACH9TfVRknPTKq2E9qTVrtj0+Ef3SCoe
CojWCEgCRnJiXTvnLLCZlG0go9rAuSt0FwYW8gSOJeMp+oIHjiHBcNxwqMjqFeSI
RhwNtSM95+IAWzvszQWqFbh8jHPvp+LjY7BV0CInBN//0yNSWaxmgEt2PV1Zzu6p
0RUIXpPzJ3f5aQ==
-----END CERTIFICATE-----
Generated at Tue May 6 06:36:15 2025 by rpki-client