Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
File:                     dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft (raw, json)
Hash identifier:          gNCcbd48fIi9SO2G4XNByBOYfib8itjuLCxLF1/zE2g=
Subject key identifier:   48:9C:AA:89:9C:D3:49:FA:82:36:FC:7A:2A:53:81:6F:E6:5A:84:26
Authority key identifier: 76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
Certificate issuer:       /CN=7668fe49ae9747257150015be43e29628c6316c4
Certificate serial:       0196922871D51D4927A94C397CFC9C049078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
Manifest number:          151D
Signing time:             Fri 02 May 2025 18:00:46 +0000
Manifest this update:     Fri 02 May 2025 18:00:46 +0000
Manifest next update:     Sat 03 May 2025 18:00:46 +0000
Files and hashes:         1: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl (hash: y63ZAjq7mCeau5x0mWtJeWvJC3xEVv/YiNKMfDD7PM8=)
                          2: tTUbMusnQYjR8dloqUBDH5RJbJY.roa (hash: x4a6yPSN4IfbK/Lgl6LTelrziLDZIshNFyvd6MyXqsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:28:71:d5:1d:49:27:a9:4c:39:7c:fc:9c:04:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7668fe49ae9747257150015be43e29628c6316c4
        Validity
            Not Before: May  2 18:00:46 2025 GMT
            Not After : May  3 18:00:46 2025 GMT
        Subject: CN=489caa899cd349fa8236fc7a2a53816fe65a8426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:45:65:21:6a:bc:b0:b7:f9:5b:77:d9:9d:
                    02:79:c9:1f:6f:fe:8f:9b:4c:85:69:32:28:ce:22:
                    61:0f:19:c0:f3:b9:77:68:da:41:39:25:33:fb:f4:
                    32:47:82:d1:8d:d1:9c:50:f7:02:58:4d:19:7a:08:
                    5f:e9:06:a6:00:e1:82:0a:4f:d3:d9:6c:74:24:53:
                    11:43:bd:f6:dc:f1:70:69:36:af:88:f2:ce:22:01:
                    08:59:33:a9:be:9c:46:4e:9c:91:45:47:96:8b:cc:
                    38:28:b8:09:6c:f5:05:b7:91:ef:21:c6:36:42:cd:
                    0b:c7:89:5e:d3:05:55:f1:1b:e1:c1:47:0e:bc:62:
                    f7:8a:a2:dd:e7:d4:89:6a:be:e4:57:81:75:b3:c8:
                    84:76:12:e9:13:80:e0:0c:12:6e:3e:01:f6:5a:63:
                    8f:73:d5:3e:af:d9:62:29:56:45:f7:92:4d:39:57:
                    6e:ce:4b:f1:35:24:4e:fd:3c:e7:3b:2a:49:91:4a:
                    46:d0:72:9d:ac:85:56:ad:75:83:ab:82:2f:45:86:
                    9d:be:ec:fe:fe:24:a7:46:7f:cb:10:0f:54:c9:88:
                    fb:49:4e:7e:06:a0:40:e3:24:29:36:41:27:01:e9:
                    8d:7c:e3:14:bb:c3:99:7a:1e:83:d1:79:03:30:67:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9C:AA:89:9C:D3:49:FA:82:36:FC:7A:2A:53:81:6F:E6:5A:84:26
            X509v3 Authority Key Identifier:
                keyid:76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:29:7c:b0:e6:b9:6a:c8:92:ed:bf:3c:7e:b3:18:f8:f6:97:
         47:9c:8b:2f:0d:d9:66:d8:07:db:bd:72:ee:c7:81:d2:09:b1:
         86:cf:0c:e9:96:eb:61:4f:1e:60:22:64:27:3b:d4:ba:7f:92:
         82:03:6f:f2:fa:a3:4a:e2:3c:8a:cc:0c:04:68:15:21:2a:29:
         be:0c:65:68:0f:15:fb:cc:02:7b:c9:3a:6c:1a:d1:50:5f:78:
         9b:b9:96:46:c2:34:17:83:aa:a4:ca:4e:79:fd:9a:90:93:5f:
         91:af:b2:a0:5f:9e:e8:d4:75:a3:fa:c2:60:95:96:fa:77:b8:
         09:9f:8f:85:21:bc:47:d1:ae:53:8f:81:ce:75:f4:8a:82:f0:
         72:3e:fe:7b:4a:6a:7e:0a:df:8b:2b:1f:d0:f8:d7:5e:5e:9e:
         58:ed:96:47:55:cb:2d:53:76:ee:65:97:3d:ac:cc:1e:fb:31:
         45:82:cf:49:4c:7a:d4:f1:64:48:07:3b:53:8f:78:aa:da:cf:
         c9:11:cd:27:ae:53:20:44:d6:d6:06:74:28:08:94:51:1b:63:
         0a:05:a9:41:b2:d8:fb:ac:ed:df:3c:3e:4e:72:fc:52:45:d9:
         32:16:91:7a:c9:18:c5:e1:06:ea:e1:45:54:70:84:fe:94:3a:
         bb:8e:7f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaSKHHVHUknqUw5fPycBJB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjhmZTQ5YWU5NzQ3MjU3MTUwMDE1YmU0M2UyOTYyOGM2
MzE2YzQwHhcNMjUwNTAyMTgwMDQ2WhcNMjUwNTAzMTgwMDQ2WjAzMTEwLwYDVQQD
Eyg0ODljYWE4OTljZDM0OWZhODIzNmZjN2EyYTUzODE2ZmU2NWE4NDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CNFZSFqvLC3+Vt32Z0Ceckfb/6P
m0yFaTIoziJhDxnA87l3aNpBOSUz+/QyR4LRjdGcUPcCWE0Zeghf6QamAOGCCk/T
2Wx0JFMRQ7323PFwaTaviPLOIgEIWTOpvpxGTpyRRUeWi8w4KLgJbPUFt5HvIcY2
Qs0Lx4le0wVV8RvhwUcOvGL3iqLd59SJar7kV4F1s8iEdhLpE4DgDBJuPgH2WmOP
c9U+r9liKVZF95JNOVduzkvxNSRO/TznOypJkUpG0HKdrIVWrXWDq4IvRYadvuz+
/iSnRn/LEA9UyYj7SU5+BqBA4yQpNkEnAemNfOMUu8OZeh6D0XkDMGeh0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEicqomc00n6gjb8eipTgW/mWoQmMB8GA1UdIwQY
MBaAFHZo/kmul0clcVABW+Q+KWKMYxbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1qLVNhNlhSeVZ4VUFGYjVENHBZb3hqRnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xNjAxZTYtYzViOS00MzIyLTg5Zjkt
NGJkMTRlN2E4NWNmLzEvZG1qLVNhNlhSeVZ4VUFGYjVENHBZb3hqRnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xNjAxZTYtYzViOS00MzIyLTg5ZjktNGJkMTRlN2E4NWNm
LzEvZG1qLVNhNlhSeVZ4VUFGYjVENHBZb3hqRnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyl8sOa5
asiS7b88frMY+PaXR5yLLw3ZZtgH271y7seB0gmxhs8M6ZbrYU8eYCJkJzvUun+S
ggNv8vqjSuI8iswMBGgVISopvgxlaA8V+8wCe8k6bBrRUF94m7mWRsI0F4OqpMpO
ef2akJNfka+yoF+e6NR1o/rCYJWW+ne4CZ+PhSG8R9GuU4+BznX0ioLwcj7+e0pq
fgrfiysf0PjXXl6eWO2WR1XLLVN27mWXPazMHvsxRYLPSUx61PFkSAc7U494qtrP
yRHNJ65TIETW1gZ0KAiUURtjCgWpQbLY+6zt3zw+TnL8UkXZMhaReskYxeEG6uFF
VHCE/pQ6u45/Mw==
-----END CERTIFICATE-----
Generated at Fri May 2 23:27:51 2025 by rpki-client