Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File:                     0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier:          EBFkwgTlKkmWP5J8qEcv9/SI5dG9zKRLYFvh9pUF3dQ=
Subject key identifier:   2D:2D:A2:0D:38:82:C9:83:4A:F7:C9:A7:11:F1:6C:83:DB:74:CF:7B
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer:       /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial:       0196B58FA0DD4B686464D154AAF9033EB149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number:          152E
Signing time:             Fri 09 May 2025 15:00:10 +0000
Manifest this update:     Fri 09 May 2025 15:00:10 +0000
Manifest next update:     Sat 10 May 2025 15:00:10 +0000
Files and hashes:         1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: VhsYhnNBZ2sydxz7jTbR9+yBkBrxo3NdKIyaqqd4O0E=)
                          2: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (hash: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:8f:a0:dd:4b:68:64:64:d1:54:aa:f9:03:3e:b1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
        Validity
            Not Before: May  9 15:00:10 2025 GMT
            Not After : May 10 15:00:10 2025 GMT
        Subject: CN=2d2da20d3882c9834af7c9a711f16c83db74cf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:bf:7b:0d:a4:97:c3:8c:35:e5:8c:ec:13:
                    0d:50:27:da:4d:74:37:05:c1:4b:2d:f6:6d:56:32:
                    ca:83:90:a9:0d:c6:7c:c2:ac:57:db:03:7f:b1:74:
                    f6:62:03:8c:24:45:31:e1:5a:27:45:8b:62:db:ed:
                    8a:9f:1f:c6:09:55:9c:c7:71:72:5f:ff:41:39:6d:
                    97:2b:e5:81:cc:57:df:75:e9:82:59:67:c1:9c:94:
                    3f:70:5f:80:ac:aa:de:98:6f:52:3d:85:5e:58:04:
                    12:39:8d:a1:00:a3:08:db:2c:3f:9a:3b:eb:f1:60:
                    c8:35:d3:73:cc:f5:a5:db:cc:a4:46:f0:35:49:fb:
                    78:1d:e6:6d:ef:c4:d4:3c:d9:80:4f:07:e9:89:8c:
                    46:84:a7:49:13:2b:ed:10:df:9c:01:a0:67:5d:54:
                    bc:c9:3e:00:f1:5f:31:e5:7c:87:cb:b2:7e:d7:b2:
                    66:75:e0:d1:20:99:55:db:cd:8c:56:b0:bf:fb:c9:
                    7d:20:96:99:95:ef:62:a3:04:fa:5f:e0:d3:58:d8:
                    f3:a3:a0:f2:2c:a7:c6:1b:57:cb:15:77:24:53:20:
                    c5:ea:a5:55:97:13:17:5f:18:e4:a1:6f:05:e5:12:
                    c9:5a:a8:ba:20:84:f1:60:74:83:55:5e:41:f1:da:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2D:A2:0D:38:82:C9:83:4A:F7:C9:A7:11:F1:6C:83:DB:74:CF:7B
            X509v3 Authority Key Identifier:
                keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:09:1f:ba:ba:d8:b2:6f:d6:d6:5c:48:b2:b2:ed:fe:77:7c:
         d7:13:98:0b:07:76:25:c9:e1:e7:0c:8c:63:58:c1:57:73:b1:
         aa:3e:97:11:5c:62:01:5e:e6:d0:ae:14:0a:af:9c:19:2c:f6:
         2b:f5:6c:32:ee:0e:41:a5:f7:cf:14:26:0d:05:71:78:83:c5:
         ca:04:cb:22:1d:01:dd:a0:34:96:7c:47:ca:5e:73:62:8d:d2:
         ec:05:80:72:00:a3:df:31:6c:4e:77:e9:ab:33:cc:77:db:fb:
         ee:fa:e4:d3:06:93:25:47:45:cd:a3:97:d9:ce:7e:96:f2:a3:
         ff:2a:d7:22:be:4e:44:32:bc:3f:f8:2b:98:af:e9:d9:7b:81:
         df:22:2b:27:ff:89:02:ef:3c:eb:53:78:cd:23:18:94:2f:06:
         bc:d5:c3:17:4a:67:0d:bc:3a:a8:27:08:c4:4c:78:8c:a4:cf:
         06:6f:78:0a:0f:8c:5a:37:4d:87:b6:f9:b2:5f:20:7a:7d:66:
         38:6e:62:18:0a:09:c8:3d:62:e6:1d:2e:8f:9e:f3:96:2a:b8:
         cb:cc:65:fe:f8:88:c7:10:63:bc:4f:01:ae:e3:87:a3:72:1e:
         c5:6b:6b:e7:0c:82:6e:d5:0c:b9:d6:09:33:9f:7b:d6:ad:16:
         88:7c:2c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1j6DdS2hkZNFUqvkDPrFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTY1YmVjNWM3NjVjODUwZWU4ZmY5N2NjNDFiMzgwMzFk
MWQ4M2EwHhcNMjUwNTA5MTUwMDEwWhcNMjUwNTEwMTUwMDEwWjAzMTEwLwYDVQQD
EygyZDJkYTIwZDM4ODJjOTgzNGFmN2M5YTcxMWYxNmM4M2RiNzRjZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14C/ew2kl8OMNeWM7BMNUCfaTXQ3
BcFLLfZtVjLKg5CpDcZ8wqxX2wN/sXT2YgOMJEUx4VonRYti2+2Knx/GCVWcx3Fy
X/9BOW2XK+WBzFffdemCWWfBnJQ/cF+ArKremG9SPYVeWAQSOY2hAKMI2yw/mjvr
8WDINdNzzPWl28ykRvA1Sft4HeZt78TUPNmATwfpiYxGhKdJEyvtEN+cAaBnXVS8
yT4A8V8x5XyHy7J+17JmdeDRIJlV282MVrC/+8l9IJaZle9iowT6X+DTWNjzo6Dy
LKfGG1fLFXckUyDF6qVVlxMXXxjkoW8F5RLJWqi6IITxYHSDVV5B8doYDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0tog04gsmDSvfJpxHxbIPbdM97MB8GA1UdIwQY
MBaAFNDmW+xcdlyFDuj/l8xBs4Ax0dg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEt
MjdhNDc0NTA1NDk5LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEtMjdhNDc0NTA1NDk5
LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswkfurrY
sm/W1lxIsrLt/nd81xOYCwd2Jcnh5wyMY1jBV3Oxqj6XEVxiAV7m0K4UCq+cGSz2
K/VsMu4OQaX3zxQmDQVxeIPFygTLIh0B3aA0lnxHyl5zYo3S7AWAcgCj3zFsTnfp
qzPMd9v77vrk0waTJUdFzaOX2c5+lvKj/yrXIr5ORDK8P/grmK/p2XuB3yIrJ/+J
Au8861N4zSMYlC8GvNXDF0pnDbw6qCcIxEx4jKTPBm94Cg+MWjdNh7b5sl8gen1m
OG5iGAoJyD1i5h0uj57zliq4y8xl/viIxxBjvE8BruOHo3IexWtr5wyCbtUMudYJ
M5971q0WiHwssg==
-----END CERTIFICATE-----
Generated at Fri May 9 21:41:29 2025 by rpki-client