Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File:                     1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier:          jeEa41zMIf1p/xCkpUUpQ43jxAZhSF/Gawxy5CCiOPU=
Subject key identifier:   4B:F3:9E:33:4D:7D:8E:78:ED:8F:31:AA:4C:F9:6C:A6:1E:1A:FC:7C
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer:       /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial:       0196B333DF76A2D3532EBC6F44EAF56AE0A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number:          152E
Signing time:             Fri 09 May 2025 04:00:43 +0000
Manifest this update:     Fri 09 May 2025 04:00:43 +0000
Manifest next update:     Sat 10 May 2025 04:00:43 +0000
Files and hashes:         1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: SRD1HOaTldgdaA0CttqJ9SlJzfSRfpIqvPkBxDk2fNA=)
                          2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:33:df:76:a2:d3:53:2e:bc:6f:44:ea:f5:6a:e0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
        Validity
            Not Before: May  9 04:00:43 2025 GMT
            Not After : May 10 04:00:43 2025 GMT
        Subject: CN=4bf39e334d7d8e78ed8f31aa4cf96ca61e1afc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:58:5d:3a:15:55:59:0b:22:64:ef:43:2e:
                    0a:8e:8c:65:18:fc:b5:0f:ce:e4:e6:57:a0:b1:23:
                    fa:65:12:b1:52:19:40:50:09:04:43:ad:14:dc:5d:
                    99:62:22:bb:70:cf:fd:60:30:ef:ec:e0:9a:f6:ad:
                    84:c0:24:c1:2a:e3:a2:17:b6:30:5e:65:9a:1a:7c:
                    5b:6d:33:15:aa:9e:7e:11:da:20:93:b7:c1:6c:e9:
                    a3:ac:3e:8b:f8:2d:db:1f:ff:9a:f1:aa:15:38:3b:
                    91:8a:8f:62:98:95:67:bd:30:59:55:5d:ce:45:c1:
                    97:be:34:d8:51:c8:ea:7c:a9:eb:d6:1e:b3:50:7c:
                    42:7a:b8:d5:e0:e8:01:ef:e9:56:5d:8c:bb:c4:70:
                    e3:88:f6:0a:3d:dd:62:3c:5d:55:6f:00:a5:1e:c3:
                    65:5c:bd:e2:90:a7:89:e4:1e:d7:27:a0:e6:14:68:
                    65:a3:73:a2:fb:d2:46:0d:aa:75:a1:94:dd:0d:c1:
                    8a:1f:6f:5e:c8:86:0f:48:89:c2:c5:01:b4:ca:b1:
                    82:83:60:e0:b5:eb:12:34:f4:70:34:3c:4c:d7:f7:
                    7a:c1:f4:45:33:ac:c5:99:b9:13:f7:c0:e1:32:83:
                    b0:c9:85:37:94:f4:c2:46:27:e2:28:9f:8c:bb:07:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:9E:33:4D:7D:8E:78:ED:8F:31:AA:4C:F9:6C:A6:1E:1A:FC:7C
            X509v3 Authority Key Identifier:
                keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:1e:87:a1:3a:b9:b9:cc:7a:2f:c1:b1:86:41:a2:93:fd:
         24:6d:18:c7:38:00:90:96:08:a1:55:7c:52:04:1f:e1:77:fe:
         c7:3e:11:b7:71:d3:c9:e2:e6:78:98:80:a8:bc:68:6e:17:8d:
         1c:1c:60:7c:d8:d5:7a:e9:81:76:26:cc:0e:f8:b4:98:11:ef:
         d9:a0:ba:35:02:60:e0:19:d3:c5:36:81:02:8f:dc:20:d8:df:
         86:99:54:57:cf:3f:bd:05:06:6e:09:92:ac:6f:42:ab:5c:c1:
         e3:71:27:5a:fb:f6:d2:5f:7f:4d:1a:1f:2c:5e:66:8f:5f:6e:
         93:4e:12:1e:c7:13:a0:8e:d5:24:8f:45:2f:89:50:9a:1a:d9:
         7a:97:b7:b2:0d:b9:c8:68:1e:c7:b3:bc:a0:94:ce:ad:1b:31:
         ed:0b:b2:57:1a:3d:e2:cb:af:aa:bc:e0:21:99:73:22:a1:18:
         7c:8f:5a:0d:4e:91:d6:c8:89:cd:b7:6d:80:64:5a:71:a8:9d:
         e2:1c:dc:44:f3:dc:e0:68:80:19:a1:f8:1d:76:1a:d8:a6:2a:
         d2:7c:1e:2a:27:4d:8f:a3:b7:77:51:01:63:d4:ba:6c:87:1c:
         d8:66:60:b7:74:3f:a8:2b:53:32:33:ab:ca:70:1f:91:84:47:
         93:00:bc:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZazM992otNTLrxvROr1auChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk
YjU5OGMwHhcNMjUwNTA5MDQwMDQzWhcNMjUwNTEwMDQwMDQzWjAzMTEwLwYDVQQD
Eyg0YmYzOWUzMzRkN2Q4ZTc4ZWQ4ZjMxYWE0Y2Y5NmNhNjFlMWFmYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1tYXToVVVkLImTvQy4KjoxlGPy1
D87k5legsSP6ZRKxUhlAUAkEQ60U3F2ZYiK7cM/9YDDv7OCa9q2EwCTBKuOiF7Yw
XmWaGnxbbTMVqp5+Edogk7fBbOmjrD6L+C3bH/+a8aoVODuRio9imJVnvTBZVV3O
RcGXvjTYUcjqfKnr1h6zUHxCerjV4OgB7+lWXYy7xHDjiPYKPd1iPF1VbwClHsNl
XL3ikKeJ5B7XJ6DmFGhlo3Oi+9JGDap1oZTdDcGKH29eyIYPSInCxQG0yrGCg2Dg
tesSNPRwNDxM1/d6wfRFM6zFmbkT98DhMoOwyYU3lPTCRifiKJ+MuwfJPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEvznjNNfY547Y8xqkz5bKYeGvx8MB8GA1UdIwQY
MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi
LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl
ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqL0e
h6E6ubnMei/BsYZBopP9JG0YxzgAkJYIoVV8UgQf4Xf+xz4Rt3HTyeLmeJiAqLxo
bheNHBxgfNjVeumBdibMDvi0mBHv2aC6NQJg4BnTxTaBAo/cINjfhplUV88/vQUG
bgmSrG9Cq1zB43EnWvv20l9/TRofLF5mj19uk04SHscToI7VJI9FL4lQmhrZepe3
sg25yGgex7O8oJTOrRsx7QuyVxo94suvqrzgIZlzIqEYfI9aDU6R1siJzbdtgGRa
caid4hzcRPPc4GiAGaH4HXYa2KYq0nweKidNj6O3d1EBY9S6bIcc2GZgt3Q/qCtT
MjOrynAfkYRHkwC8zg==
-----END CERTIFICATE-----
Generated at Fri May 9 08:24:20 2025 by rpki-client