Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File:                     htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier:          BFQuTRRJlWnmX2xf7b9rhFP61Z5UIi4CgO2cMNyJH6g=
Subject key identifier:   67:18:C0:EB:B2:95:32:38:A3:2B:B4:81:B7:B1:40:12:0C:94:27:F6
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer:       /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial:       019673E6D41317C7ED6A25A5A58A0968D4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number:          150F
Signing time:             Sat 26 Apr 2025 21:00:29 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:29 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:29 +0000
Files and hashes:         1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: BV1ZbSmRdVmPbalgYTJe1WJ2iEFtd6rVQQS3xnfUbGU=)
                          2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:d4:13:17:c7:ed:6a:25:a5:a5:8a:09:68:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
        Validity
            Not Before: Apr 26 21:00:29 2025 GMT
            Not After : Apr 27 21:00:29 2025 GMT
        Subject: CN=6718c0ebb2953238a32bb481b7b140120c9427f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:85:fe:2b:7d:22:dd:5b:0e:06:b0:fa:e7:
                    b4:b9:6d:ac:1c:aa:e1:a3:16:be:9d:2a:cf:2a:09:
                    a4:c9:8e:84:fd:41:a2:7a:e5:8c:49:86:13:c5:65:
                    b5:7f:93:05:75:9f:5c:e5:b1:18:0b:e8:31:6a:f0:
                    b6:19:98:bc:d2:3d:93:a1:e0:b0:22:bc:4d:2e:7c:
                    f6:eb:7e:36:12:af:16:d6:89:8f:d0:1b:21:2d:80:
                    b0:2d:ab:bb:84:f6:e3:48:1f:6a:af:10:b8:10:d1:
                    fb:21:f5:23:71:3d:6e:18:67:df:2e:4a:a7:b1:c3:
                    24:d2:6e:9f:79:38:3b:ce:eb:48:6e:a0:7f:d8:73:
                    4f:a1:e8:f4:ce:77:ff:7e:12:8b:48:b1:cf:d5:e8:
                    90:d8:6b:08:95:a0:7c:d5:3f:db:bb:b2:f2:d5:25:
                    94:7e:c6:9a:32:ef:e8:47:49:fd:e6:c1:cb:4a:a2:
                    0b:14:0d:8a:31:b9:d6:85:13:80:c9:77:e4:ff:5b:
                    a2:29:79:05:4c:b2:e3:4f:b8:f2:bd:e7:93:3e:2f:
                    bb:ff:ca:28:11:50:bd:b2:a9:37:c5:5e:4d:d2:00:
                    bb:02:10:d8:7c:ff:a7:1d:4e:af:4b:8e:4c:32:09:
                    6a:27:a5:b5:0a:0b:ea:1e:48:fb:2c:b2:00:2d:21:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:18:C0:EB:B2:95:32:38:A3:2B:B4:81:B7:B1:40:12:0C:94:27:F6
            X509v3 Authority Key Identifier:
                keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:86:7b:50:00:e6:aa:40:51:e1:60:99:ad:af:24:7a:ad:d6:
         39:cf:68:03:84:58:f1:09:75:dd:74:35:38:fa:70:8f:74:8e:
         3a:23:d5:78:59:48:ff:d1:ff:92:ee:e3:54:fb:2a:aa:2e:7a:
         28:ef:02:2b:cf:27:43:4a:82:e3:b7:2a:3f:9a:14:ca:55:80:
         31:e7:cf:a7:fc:5e:9d:58:4f:9d:b1:ec:82:0b:8e:2c:a8:28:
         24:89:91:53:24:c2:05:30:02:17:5d:77:2c:45:e8:d6:4c:62:
         93:c3:15:57:65:5a:b8:4a:85:77:ff:d5:b9:26:a0:24:d5:9d:
         9e:1b:24:f6:07:f7:93:64:39:44:46:cc:9f:48:9f:3c:42:0e:
         92:70:97:55:ef:d2:cd:4a:a4:bd:f9:d9:7c:be:98:9a:75:ba:
         07:b0:b4:de:35:37:2d:6b:ca:06:56:cf:77:95:31:6f:14:c2:
         c0:ac:10:7d:af:c5:3d:26:17:4a:f7:4e:1d:5d:a8:9a:84:bf:
         58:00:18:a1:40:56:7b:e9:06:99:9e:d5:67:5f:9e:d4:ae:f5:
         5c:37:32:22:30:e2:41:5c:c4:64:ac:c8:74:bd:24:76:16:40:
         54:5a:62:2f:36:12:5a:7a:d7:7b:8e:e5:a6:d6:16:34:1f:91:
         cb:0e:99:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5tQTF8ftaiWlpYoJaNTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2
Y2YwMDMwHhcNMjUwNDI2MjEwMDI5WhcNMjUwNDI3MjEwMDI5WjAzMTEwLwYDVQQD
Eyg2NzE4YzBlYmIyOTUzMjM4YTMyYmI0ODFiN2IxNDAxMjBjOTQyN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCiF/it9It1bDgaw+ue0uW2sHKrh
oxa+nSrPKgmkyY6E/UGieuWMSYYTxWW1f5MFdZ9c5bEYC+gxavC2GZi80j2ToeCw
IrxNLnz26342Eq8W1omP0BshLYCwLau7hPbjSB9qrxC4ENH7IfUjcT1uGGffLkqn
scMk0m6feTg7zutIbqB/2HNPoej0znf/fhKLSLHP1eiQ2GsIlaB81T/bu7Ly1SWU
fsaaMu/oR0n95sHLSqILFA2KMbnWhROAyXfk/1uiKXkFTLLjT7jyveeTPi+7/8oo
EVC9sqk3xV5N0gC7AhDYfP+nHU6vS45MMglqJ6W1CgvqHkj7LLIALSHr8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcYwOuylTI4oyu0gbexQBIMlCf2MB8GA1UdIwQY
MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt
NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh
LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoZ7UADm
qkBR4WCZra8keq3WOc9oA4RY8Ql13XQ1OPpwj3SOOiPVeFlI/9H/ku7jVPsqqi56
KO8CK88nQ0qC47cqP5oUylWAMefPp/xenVhPnbHsgguOLKgoJImRUyTCBTACF113
LEXo1kxik8MVV2VauEqFd//VuSagJNWdnhsk9gf3k2Q5REbMn0ifPEIOknCXVe/S
zUqkvfnZfL6YmnW6B7C03jU3LWvKBlbPd5UxbxTCwKwQfa/FPSYXSvdOHV2omoS/
WAAYoUBWe+kGmZ7VZ1+e1K71XDcyIjDiQVzEZKzIdL0kdhZAVFpiLzYSWnrXe47l
ptYWNB+Ryw6ZrQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:32 2025 by rpki-client