Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File:                     7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier:          avEfW5W2d8Jto/OklPRRaU7gJoyvlW58iG4ju48VGlg=
Subject key identifier:   8E:99:3A:08:32:FC:19:A1:80:AC:D7:0C:78:82:B2:54:E2:12:10:1B
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer:       /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial:       019674549DC0BFC4314EB3564E03D43664CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number:          150C
Signing time:             Sat 26 Apr 2025 23:00:24 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:24 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:24 +0000
Files and hashes:         1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: 4Ntz+de7I2imD1iUdeBYeEj+DKFO2wxPLP2oVgeuZDI=)
                          2: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (hash: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=)
                          3: MBu8VTmpr04x0tshZWj7vlWVLfA.roa (hash: ulHARLad6WzWUuYeIJe/P7G2yuuz8lPKXAfu9iAhsvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:9d:c0:bf:c4:31:4e:b3:56:4e:03:d4:36:64:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
        Validity
            Not Before: Apr 26 23:00:24 2025 GMT
            Not After : Apr 27 23:00:24 2025 GMT
        Subject: CN=8e993a0832fc19a180acd70c7882b254e212101b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:1c:9a:d8:3f:a2:3a:ab:84:1c:1b:ea:c9:
                    a1:73:4c:f8:83:10:f8:6b:c6:41:72:85:a8:a5:9d:
                    b5:94:07:3c:d8:3d:3d:38:24:7c:aa:98:d6:9b:e8:
                    95:a0:7f:bd:8e:80:9f:64:44:0a:f2:ac:80:b8:58:
                    f3:d5:a0:ba:97:b9:d6:39:f9:07:41:96:02:36:e6:
                    b9:a7:84:db:62:a5:74:df:40:ad:d9:ca:c7:29:80:
                    90:11:13:44:dc:ba:ee:b4:f5:10:54:88:48:ae:72:
                    65:b3:d7:7e:bd:53:13:ce:4f:57:a7:49:f8:4d:54:
                    bd:43:f0:56:04:ef:0f:bc:d4:f5:e6:a8:bf:20:2d:
                    4c:f6:63:7e:89:3f:df:77:7b:f5:a1:28:0d:37:74:
                    22:a6:bf:7e:04:78:f3:88:90:99:6d:68:41:e1:35:
                    8b:6c:96:98:bb:b5:19:48:e7:2d:5c:25:af:a3:f8:
                    81:2d:7c:d4:87:82:dc:4e:a6:00:e5:bb:18:94:3f:
                    df:45:0d:e4:3c:30:e9:17:a9:e2:43:9e:79:89:27:
                    1f:9c:dc:dd:f0:c2:f4:da:38:55:e6:dd:a7:a2:ab:
                    b5:f2:99:47:3b:d2:bf:67:10:18:61:7f:e2:76:83:
                    41:30:54:24:3b:26:69:ab:59:69:b7:f4:2a:a9:8f:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:99:3A:08:32:FC:19:A1:80:AC:D7:0C:78:82:B2:54:E2:12:10:1B
            X509v3 Authority Key Identifier:
                keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b2:c8:55:57:e8:9b:d6:c7:a8:b6:6a:29:c0:c4:5a:4e:c1:
         f9:88:83:ba:21:a0:a9:5b:1d:64:4b:e7:6c:f1:59:cf:c0:1a:
         99:06:df:32:7e:7f:08:a6:89:1b:17:01:e2:25:db:d0:b7:3d:
         d3:12:25:59:e8:f0:86:db:bf:84:9d:6d:1b:f2:85:bb:3d:87:
         91:4c:a1:e1:0c:a3:75:7c:2d:79:7c:05:91:21:c9:cb:2d:62:
         d4:46:25:ef:f6:b5:8f:f7:5b:cc:b5:56:52:aa:63:da:f1:63:
         73:80:ad:c6:ca:6e:d5:f5:a2:0d:3b:d3:8c:00:b4:5d:8e:e6:
         db:fb:cb:6b:28:91:0c:59:f6:7c:27:f1:95:a2:9a:e5:ef:03:
         26:7b:bb:cb:ca:ac:91:de:78:6e:df:b7:e8:1f:25:51:41:94:
         6c:c3:81:a9:1f:26:37:63:7b:18:12:12:d3:a8:71:6f:ec:0a:
         e9:87:0e:65:db:78:a0:8a:29:52:8f:99:6d:bb:e0:22:50:dd:
         a5:c2:bc:d8:af:44:a1:fd:a8:45:5d:f7:71:b9:a0:6a:5c:14:
         eb:df:81:88:87:af:9c:2d:7d:85:e5:e9:fc:bb:d6:0c:67:6f:
         06:27:3b:74:03:39:b7:ca:84:35:77:8c:21:eb:4f:6d:ad:b9:
         b9:fa:05:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VJ3Av8QxTrNWTgPUNmTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0
ZTEzNDEwHhcNMjUwNDI2MjMwMDI0WhcNMjUwNDI3MjMwMDI0WjAzMTEwLwYDVQQD
Eyg4ZTk5M2EwODMyZmMxOWExODBhY2Q3MGM3ODgyYjI1NGUyMTIxMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvwcmtg/ojqrhBwb6smhc0z4gxD4
a8ZBcoWopZ21lAc82D09OCR8qpjWm+iVoH+9joCfZEQK8qyAuFjz1aC6l7nWOfkH
QZYCNua5p4TbYqV030Ct2crHKYCQERNE3LrutPUQVIhIrnJls9d+vVMTzk9Xp0n4
TVS9Q/BWBO8PvNT15qi/IC1M9mN+iT/fd3v1oSgNN3Qipr9+BHjziJCZbWhB4TWL
bJaYu7UZSOctXCWvo/iBLXzUh4LcTqYA5bsYlD/fRQ3kPDDpF6niQ555iScfnNzd
8ML02jhV5t2noqu18plHO9K/ZxAYYX/idoNBMFQkOyZpq1lpt/QqqY/eLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6ZOggy/BmhgKzXDHiCslTiEhAbMB8GA1UdIwQY
MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt
ZDNmNmNkOGU0NDQ0LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0
LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7LIVVfo
m9bHqLZqKcDEWk7B+YiDuiGgqVsdZEvnbPFZz8AamQbfMn5/CKaJGxcB4iXb0Lc9
0xIlWejwhtu/hJ1tG/KFuz2HkUyh4QyjdXwteXwFkSHJyy1i1EYl7/a1j/dbzLVW
Uqpj2vFjc4Ctxspu1fWiDTvTjAC0XY7m2/vLayiRDFn2fCfxlaKa5e8DJnu7y8qs
kd54bt+36B8lUUGUbMOBqR8mN2N7GBIS06hxb+wK6YcOZdt4oIopUo+ZbbvgIlDd
pcK82K9Eof2oRV33cbmgalwU69+BiIevnC19heXp/LvWDGdvBic7dAM5t8qENXeM
IetPba25ufoF0w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:21:54 2025 by rpki-client