Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File:                     sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier:          /ytvMawhGWJA6nywcfPUoPr1j3ldd9AM+XzzjbM5pbA=
Subject key identifier:   2B:63:DD:F1:C2:5C:62:2E:76:44:95:46:92:BA:A8:95:B8:1C:89:82
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer:       /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial:       0196824785D3CD9BC1E5BB20B50AC79121CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number:          1519
Signing time:             Tue 29 Apr 2025 16:00:47 +0000
Manifest this update:     Tue 29 Apr 2025 16:00:47 +0000
Manifest next update:     Wed 30 Apr 2025 16:00:47 +0000
Files and hashes:         1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
                          2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
                          3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
                          4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: sTwcM7qpD2OBVrh3fPN+FvdzkO4vu/5OFoaMtntSQQo=)
                          5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:47:85:d3:cd:9b:c1:e5:bb:20:b5:0a:c7:91:21:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
        Validity
            Not Before: Apr 29 16:00:47 2025 GMT
            Not After : Apr 30 16:00:47 2025 GMT
        Subject: CN=2b63ddf1c25c622e7644954692baa895b81c8982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:d6:64:16:e5:d7:fd:25:c7:d6:cf:ed:b2:
                    d7:e3:18:5b:c5:5f:a2:25:e7:22:67:33:93:3a:1a:
                    ab:11:ef:8a:f2:02:c8:c4:1e:70:08:b5:52:5d:45:
                    af:88:3c:97:30:b6:7b:24:a5:02:01:be:91:4f:22:
                    22:fd:cd:44:17:86:60:84:79:50:49:61:5a:c7:52:
                    71:9d:d1:7d:b9:ed:dd:b1:05:87:ea:dc:51:7f:15:
                    c6:a2:83:8b:2c:8e:61:17:1e:3a:17:9b:f7:b4:aa:
                    53:21:52:e1:15:2b:e8:5a:bc:33:ee:c5:b0:16:26:
                    33:32:f9:f4:fc:d0:55:a8:5a:f0:d7:dc:38:c3:ba:
                    06:85:db:33:73:39:d0:e0:73:1b:2b:a3:1c:2c:14:
                    39:fc:94:a3:ba:7f:c0:47:c2:74:a2:bb:66:a0:f8:
                    ab:16:be:9e:00:38:96:23:97:fd:e6:5a:f2:53:60:
                    50:e8:78:8a:31:6a:47:4e:8d:f4:73:5e:aa:46:6a:
                    f6:ef:e1:98:44:81:e0:5b:65:62:cb:11:15:fa:9b:
                    ad:db:79:e0:61:50:b5:51:b9:df:23:31:8f:9a:df:
                    81:d5:2d:0d:5f:d6:45:f8:e4:35:f5:8a:7c:38:a3:
                    7f:31:a1:bd:8d:ed:55:91:18:dc:fb:b4:0a:6e:43:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:63:DD:F1:C2:5C:62:2E:76:44:95:46:92:BA:A8:95:B8:1C:89:82
            X509v3 Authority Key Identifier:
                keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:b3:ae:ec:91:96:61:fb:29:33:54:4e:ce:73:84:7a:04:
         46:d0:6f:12:9d:5d:ac:0d:e2:2f:47:1b:29:00:6e:18:b2:40:
         21:17:ab:bd:71:87:05:4e:c4:86:3f:27:13:4e:09:b7:09:87:
         3a:ba:eb:b0:da:0e:7e:82:62:3b:4c:8c:35:7f:37:d9:cc:10:
         a9:f4:66:83:fe:36:98:f0:f3:be:82:cb:7e:84:34:47:c4:d3:
         13:77:4b:aa:5b:d5:97:2d:a8:a1:21:32:b2:09:4d:09:69:b8:
         4e:45:4c:35:5f:7b:ae:cf:2e:3d:e3:98:d9:c1:0e:75:f4:88:
         d0:90:78:30:db:a4:95:ee:fa:1d:6f:bc:d4:0b:62:77:f8:2a:
         81:89:18:7e:c6:4e:91:4e:e3:aa:97:97:36:95:40:3d:38:41:
         d2:bb:f5:3d:0d:93:4c:ca:20:65:b2:49:64:b0:f3:86:b8:0d:
         c7:21:8f:08:65:3f:f7:b7:d3:f0:0e:e4:18:72:1f:f2:28:e9:
         b1:73:6c:86:e1:b5:ba:15:43:ce:32:0b:bb:f5:13:4c:f3:1e:
         b8:e8:f6:70:eb:6f:9f:eb:7f:a1:dc:c1:7d:1e:ed:15:c8:fa:
         db:e2:99:73:78:cd:9f:97:45:c1:49:31:d9:51:d4:1e:7b:f2:
         91:7f:38:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR4XTzZvB5bsgtQrHkSHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4
ZTU1YWEwHhcNMjUwNDI5MTYwMDQ3WhcNMjUwNDMwMTYwMDQ3WjAzMTEwLwYDVQQD
EygyYjYzZGRmMWMyNWM2MjJlNzY0NDk1NDY5MmJhYTg5NWI4MWM4OTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/WZBbl1/0lx9bP7bLX4xhbxV+i
JeciZzOTOhqrEe+K8gLIxB5wCLVSXUWviDyXMLZ7JKUCAb6RTyIi/c1EF4ZghHlQ
SWFax1JxndF9ue3dsQWH6txRfxXGooOLLI5hFx46F5v3tKpTIVLhFSvoWrwz7sWw
FiYzMvn0/NBVqFrw19w4w7oGhdszcznQ4HMbK6McLBQ5/JSjun/AR8J0ortmoPir
Fr6eADiWI5f95lryU2BQ6HiKMWpHTo30c16qRmr27+GYRIHgW2ViyxEV+put23ng
YVC1UbnfIzGPmt+B1S0NX9ZF+OQ19Yp8OKN/MaG9je1VkRjc+7QKbkPUtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtj3fHCXGIudkSVRpK6qJW4HImCMB8GA1UdIwQY
MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt
MDBkMWU3YTE3MGEyLzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy
LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+GzruyR
lmH7KTNUTs5zhHoERtBvEp1drA3iL0cbKQBuGLJAIRervXGHBU7Ehj8nE04JtwmH
OrrrsNoOfoJiO0yMNX832cwQqfRmg/42mPDzvoLLfoQ0R8TTE3dLqlvVly2ooSEy
sglNCWm4TkVMNV97rs8uPeOY2cEOdfSI0JB4MNukle76HW+81Atid/gqgYkYfsZO
kU7jqpeXNpVAPThB0rv1PQ2TTMogZbJJZLDzhrgNxyGPCGU/97fT8A7kGHIf8ijp
sXNshuG1uhVDzjILu/UTTPMeuOj2cOtvn+t/odzBfR7tFcj62+KZc3jNn5dFwUkx
2VHUHnvykX84+g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:51:04 2025 by rpki-client