Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File:                     LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier:          xp0U0J1fmTqrvX/q69Sr8I6khXa9WHoIDOdT1IH1eY8=
Subject key identifier:   17:2B:27:69:5D:5B:78:4F:A5:61:9C:A6:4C:6E:45:BF:51:6C:46:73
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer:       /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial:       01969897F9100D9BCFD9619B2176CD6D9763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number:          0546
Signing time:             Sun 04 May 2025 00:00:18 +0000
Manifest this update:     Sun 04 May 2025 00:00:18 +0000
Manifest next update:     Mon 05 May 2025 00:00:18 +0000
Files and hashes:         1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=)
                          2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: H0FW+hpicqbczNcKoerj5ZGk759Q+kWJkIgLrN2A1Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:98:97:f9:10:0d:9b:cf:d9:61:9b:21:76:cd:6d:97:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
        Validity
            Not Before: May  4 00:00:18 2025 GMT
            Not After : May  5 00:00:18 2025 GMT
        Subject: CN=172b27695d5b784fa5619ca64c6e45bf516c4673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:e3:fb:c8:bd:82:dd:2b:05:81:9d:cb:ef:
                    19:aa:d6:fc:ab:46:81:6e:de:ef:86:07:74:f6:a9:
                    a2:26:d4:4a:6e:07:3c:12:a5:30:ba:99:70:9b:8c:
                    64:e5:2d:62:0c:c8:50:da:da:d9:42:e7:32:7d:f4:
                    c8:62:15:a1:d7:55:ca:8c:7d:14:6a:e8:b6:d4:45:
                    b0:ba:49:d4:3e:56:16:66:bb:76:bb:b4:72:bb:f8:
                    d2:72:3a:84:5e:31:7d:ba:29:31:b9:8f:17:84:94:
                    78:89:8a:e7:7b:f5:27:60:07:37:0a:92:5a:2e:d4:
                    67:d9:ad:15:6d:da:74:be:98:db:1e:4d:03:55:e4:
                    fe:dc:5e:bd:ad:8c:e6:1a:aa:6c:98:5d:2b:26:da:
                    05:83:8a:cc:d4:82:f3:08:a7:af:38:7c:79:58:48:
                    fd:6f:7a:6f:f3:da:b9:03:b7:f2:66:c7:a3:3f:d2:
                    c0:50:1d:d3:a2:21:56:d1:72:14:ed:14:69:2e:ca:
                    59:39:bf:b1:4e:b0:e6:36:9d:15:6d:e0:4c:85:04:
                    88:37:98:8d:7c:4e:c9:57:d1:97:4f:7e:7f:a2:8f:
                    d6:4e:74:0e:c0:3c:28:59:ed:fb:65:b2:d4:72:55:
                    2f:9a:d2:d8:69:bd:71:30:58:1a:14:77:4b:fb:ea:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2B:27:69:5D:5B:78:4F:A5:61:9C:A6:4C:6E:45:BF:51:6C:46:73
            X509v3 Authority Key Identifier:
                keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:46:0c:df:c8:ce:26:2e:cd:62:36:ab:90:99:2e:1f:6b:1f:
         86:24:33:21:43:30:cf:c8:94:97:44:aa:1d:34:15:61:84:e1:
         73:32:29:c4:11:1e:e8:ae:bc:6d:c8:35:c3:1b:c5:b8:34:d1:
         78:f8:94:0b:d7:71:0e:8e:b7:cc:39:f1:fc:32:39:26:5c:ef:
         91:b0:96:26:f2:52:63:90:dd:6e:94:84:2a:9a:ed:83:d8:c3:
         23:f0:82:fd:21:fb:97:98:ef:b8:a5:e5:2b:0b:c9:44:f6:3c:
         b4:ab:c8:71:99:cd:8b:a4:73:d4:e4:9c:d5:03:3c:df:f5:95:
         72:85:50:a7:62:33:0c:49:1f:76:92:15:2b:7b:9f:e2:ec:91:
         73:f2:f9:d8:d2:e0:7c:9f:17:bf:f6:c1:86:be:44:ae:6e:5e:
         5d:f4:b5:ae:d2:32:fc:52:db:3d:85:db:71:e6:44:d5:d9:40:
         68:19:33:e2:12:5d:10:ba:be:78:6d:70:cf:4d:50:da:de:a7:
         8a:29:ca:30:bc:dd:ef:cd:48:44:40:8d:c6:56:22:77:27:95:
         aa:b5:0a:e6:66:87:52:e4:7b:aa:21:92:79:e5:ff:24:25:f5:
         41:0c:a5:85:b5:35:78:8a:2d:3e:a6:db:7e:6f:cf:91:3e:bd:
         eb:e2:bf:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYl/kQDZvP2WGbIXbNbZdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTVkNzhiMjU2ZDI4NDU5Yjg2OWI3MjZmMjMyOTRhYjNm
ZjE3M2YwHhcNMjUwNTA0MDAwMDE4WhcNMjUwNTA1MDAwMDE4WjAzMTEwLwYDVQQD
EygxNzJiMjc2OTVkNWI3ODRmYTU2MTljYTY0YzZlNDViZjUxNmM0NjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Xj+8i9gt0rBYGdy+8Zqtb8q0aB
bt7vhgd09qmiJtRKbgc8EqUwuplwm4xk5S1iDMhQ2trZQucyffTIYhWh11XKjH0U
aui21EWwuknUPlYWZrt2u7Ryu/jScjqEXjF9uikxuY8XhJR4iYrne/UnYAc3CpJa
LtRn2a0Vbdp0vpjbHk0DVeT+3F69rYzmGqpsmF0rJtoFg4rM1ILzCKevOHx5WEj9
b3pv89q5A7fyZsejP9LAUB3ToiFW0XIU7RRpLspZOb+xTrDmNp0VbeBMhQSIN5iN
fE7JV9GXT35/oo/WTnQOwDwoWe37ZbLUclUvmtLYab1xMFgaFHdL++qiVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcrJ2ldW3hPpWGcpkxuRb9RbEZzMB8GA1UdIwQY
MBaAFC8V14slbShFm4abcm8jKUqz/xc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYt
ODNiYzdjYzQ2M2RlLzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYtODNiYzdjYzQ2M2Rl
LzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEYM38jO
Ji7NYjarkJkuH2sfhiQzIUMwz8iUl0SqHTQVYYThczIpxBEe6K68bcg1wxvFuDTR
ePiUC9dxDo63zDnx/DI5JlzvkbCWJvJSY5DdbpSEKprtg9jDI/CC/SH7l5jvuKXl
KwvJRPY8tKvIcZnNi6Rz1OSc1QM83/WVcoVQp2IzDEkfdpIVK3uf4uyRc/L52NLg
fJ8Xv/bBhr5Erm5eXfS1rtIy/FLbPYXbceZE1dlAaBkz4hJdELq+eG1wz01Q2t6n
iinKMLzd781IRECNxlYidyeVqrUK5maHUuR7qiGSeeX/JCX1QQylhbU1eIotPqbb
fm/PkT696+K/Tw==
-----END CERTIFICATE-----
Generated at Sun May 4 09:44:23 2025 by rpki-client