Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File:                     awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier:          P9kG/4UB4wWn4nZVXY2laJpY2HcK9cUvgkCsA/TpZRU=
Subject key identifier:   8B:35:B6:D7:54:26:6B:D5:8D:33:4A:0C:A5:DD:5B:32:6D:AB:40:68
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer:       /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial:       01968D01B7C4E8C4CF559FDD106483E080A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number:          151C
Signing time:             Thu 01 May 2025 18:00:22 +0000
Manifest this update:     Thu 01 May 2025 18:00:22 +0000
Manifest next update:     Fri 02 May 2025 18:00:22 +0000
Files and hashes:         1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: FKz2y7bMmi93VuUfxprHfvKU7qAPZVR4cN4YRd/0Pq0=)
                          2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:01:b7:c4:e8:c4:cf:55:9f:dd:10:64:83:e0:80:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
        Validity
            Not Before: May  1 18:00:22 2025 GMT
            Not After : May  2 18:00:22 2025 GMT
        Subject: CN=8b35b6d754266bd58d334a0ca5dd5b326dab4068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:26:7c:e6:c5:b1:30:0e:ba:35:e5:3c:c4:
                    91:09:d7:19:b7:7b:8a:ee:00:87:08:13:21:b3:84:
                    d1:dd:2e:17:a9:05:54:63:43:1e:1d:97:c9:80:b3:
                    2e:17:f7:13:7e:68:58:cd:ef:53:9f:06:36:fc:60:
                    d5:ce:d0:d8:22:b5:05:5f:27:4e:e3:9e:c9:91:19:
                    bb:81:09:a3:a6:bb:57:37:ab:92:2a:8d:e5:fc:ea:
                    4e:e6:de:c0:47:3d:af:d0:a0:0f:2c:1a:56:c9:d9:
                    11:32:7a:ed:1f:8f:27:c1:f9:3b:60:ff:66:e8:24:
                    c8:04:30:2e:53:88:05:43:f5:a4:61:7b:3e:fb:65:
                    6b:b9:69:48:ec:63:21:16:de:cc:c2:22:c0:fd:4d:
                    57:df:48:44:cb:50:c1:63:99:d1:e5:d7:1f:42:7a:
                    3c:e6:c6:23:80:5e:f0:e0:17:b1:1f:01:79:f8:f8:
                    89:c8:f7:86:a6:69:6b:35:e4:63:f1:98:b5:cf:e3:
                    3b:f2:fe:3d:17:bb:d4:6b:7e:52:9f:22:df:ad:ca:
                    04:50:2b:8e:8b:52:bd:88:19:82:cd:8c:87:0a:e0:
                    5e:e6:ba:e4:18:ba:d2:76:c0:79:2d:76:6b:0d:91:
                    fb:1f:e8:fc:3b:29:c0:e3:5d:8e:ca:a0:6c:15:9f:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:35:B6:D7:54:26:6B:D5:8D:33:4A:0C:A5:DD:5B:32:6D:AB:40:68
            X509v3 Authority Key Identifier:
                keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:00:94:21:ab:ee:21:f6:78:0f:5d:92:6f:44:2d:60:c6:2a:
         11:26:dc:69:0f:10:b2:d4:e8:48:15:14:f6:96:42:68:4d:e8:
         df:e0:90:3a:ea:42:7d:b2:34:e6:fc:c8:16:d8:fb:c6:6d:58:
         01:2e:fe:9d:88:02:84:2b:19:76:18:f7:bd:63:f7:99:30:dc:
         d9:ce:30:20:75:67:44:74:13:75:1c:6c:6f:f0:df:b0:24:76:
         a4:a8:13:91:ed:e6:67:6f:ef:20:fb:6a:99:4a:fc:86:f3:11:
         f8:8c:e8:b9:59:08:02:af:a9:18:aa:99:f2:c5:d7:1f:73:10:
         04:fc:42:71:0a:39:28:5f:14:c7:73:71:01:3f:86:80:76:19:
         38:6a:c4:e5:2b:86:49:9f:c9:34:bc:13:03:51:86:59:ed:f2:
         30:e4:96:1a:63:f4:51:96:f4:ed:79:5d:04:a4:3d:10:86:ed:
         9a:b1:c7:0b:58:ab:7a:30:05:2c:21:b0:b3:6b:bd:ef:87:5a:
         19:bf:86:92:9a:8c:bc:c1:a5:f0:a1:f5:df:ff:63:66:e4:dd:
         e0:a7:64:57:0a:c1:f9:4f:78:17:29:cd:83:e2:25:9f:e9:1e:
         cb:55:a7:ae:9b:62:ce:3c:47:4e:86:cf:bf:cf:6e:95:bb:a3:
         c5:1e:4f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNAbfE6MTPVZ/dEGSD4ICkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMDM1ODRiY2U1NDJlNTU0ZTMyMjc5MDk0NDNmNjgyMmMz
ZTRmMDMwHhcNMjUwNTAxMTgwMDIyWhcNMjUwNTAyMTgwMDIyWjAzMTEwLwYDVQQD
Eyg4YjM1YjZkNzU0MjY2YmQ1OGQzMzRhMGNhNWRkNWIzMjZkYWI0MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MYmfObFsTAOujXlPMSRCdcZt3uK
7gCHCBMhs4TR3S4XqQVUY0MeHZfJgLMuF/cTfmhYze9TnwY2/GDVztDYIrUFXydO
457JkRm7gQmjprtXN6uSKo3l/OpO5t7ARz2v0KAPLBpWydkRMnrtH48nwfk7YP9m
6CTIBDAuU4gFQ/WkYXs++2VruWlI7GMhFt7MwiLA/U1X30hEy1DBY5nR5dcfQno8
5sYjgF7w4BexHwF5+PiJyPeGpmlrNeRj8Zi1z+M78v49F7vUa35SnyLfrcoEUCuO
i1K9iBmCzYyHCuBe5rrkGLrSdsB5LXZrDZH7H+j8OynA412OyqBsFZ8sDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs1ttdUJmvVjTNKDKXdWzJtq0BoMB8GA1UdIwQY
MBaAFGsDWEvOVC5VTjInkJRD9oIsPk8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEt
MzViMTljZjkyZGY5LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEtMzViMTljZjkyZGY5
LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQCUIavu
IfZ4D12Sb0QtYMYqESbcaQ8QstToSBUU9pZCaE3o3+CQOupCfbI05vzIFtj7xm1Y
AS7+nYgChCsZdhj3vWP3mTDc2c4wIHVnRHQTdRxsb/DfsCR2pKgTke3mZ2/vIPtq
mUr8hvMR+IzouVkIAq+pGKqZ8sXXH3MQBPxCcQo5KF8Ux3NxAT+GgHYZOGrE5SuG
SZ/JNLwTA1GGWe3yMOSWGmP0UZb07XldBKQ9EIbtmrHHC1irejAFLCGws2u974da
Gb+GkpqMvMGl8KH13/9jZuTd4KdkVwrB+U94FynNg+Iln+key1WnrptizjxHTobP
v89ulbujxR5PQw==
-----END CERTIFICATE-----
Generated at Thu May 1 20:32:34 2025 by rpki-client