Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File:                     MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier:          x95JoBhiiQHLq9YdgM1seUya0nwdhXd6tGGzKsTMIJM=
Subject key identifier:   DB:00:27:B8:CF:44:3E:53:4C:49:B9:48:64:7D:93:0C:2D:4E:4C:C1
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer:       /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial:       0196B258734F784078EAEAF6DBD1F83C1839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number:          153D
Signing time:             Fri 09 May 2025 00:01:03 +0000
Manifest this update:     Fri 09 May 2025 00:01:03 +0000
Manifest next update:     Sat 10 May 2025 00:01:03 +0000
Files and hashes:         1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
                          2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: be9N5YwlrLqNvi7mhPdLmZ45WNYAki/fSHe8/5GdHns=)
                          3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
                          4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
                          5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:58:73:4f:78:40:78:ea:ea:f6:db:d1:f8:3c:18:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
        Validity
            Not Before: May  9 00:01:03 2025 GMT
            Not After : May 10 00:01:03 2025 GMT
        Subject: CN=db0027b8cf443e534c49b948647d930c2d4e4cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:10:6f:8e:b7:8e:f8:7b:16:69:0c:3d:27:
                    8a:a9:16:95:8c:5a:43:b9:c3:9d:15:55:08:cc:60:
                    45:78:a2:3b:14:0a:1c:38:f5:e8:49:93:15:ee:58:
                    29:34:57:2f:ab:45:0d:77:b4:34:f1:b1:56:de:e5:
                    7b:1b:42:71:46:be:63:28:ea:bb:af:c6:f5:7d:6c:
                    3a:d7:cf:a7:80:39:3d:c1:49:db:46:e7:ff:69:4a:
                    5a:d1:45:4c:ef:7f:34:6a:5e:9c:a3:59:32:43:eb:
                    70:4c:5f:95:75:bf:fa:c4:9e:69:aa:d8:0d:e2:9e:
                    8e:48:e5:ee:0b:83:fa:53:ad:ab:77:73:dd:62:7c:
                    b8:ea:7c:36:ae:9d:48:0e:bb:a9:26:ff:f0:b1:5f:
                    41:40:7d:fd:a0:39:ba:dd:c6:e6:8b:30:2d:6e:0f:
                    d6:71:28:6e:27:1d:cd:69:52:d6:d5:66:45:54:22:
                    a3:03:87:85:18:53:97:83:2f:dd:e3:4b:b8:f0:f3:
                    99:be:d5:bd:d0:29:ea:76:f7:4f:21:c7:08:03:1d:
                    34:25:25:97:e6:77:e5:6d:23:3e:53:48:07:21:a8:
                    b3:1a:2c:13:ab:f7:28:a6:6a:8e:a8:e0:ee:90:6c:
                    b6:76:ff:a8:c0:40:bb:36:db:51:7c:6e:5b:fb:4b:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:27:B8:CF:44:3E:53:4C:49:B9:48:64:7D:93:0C:2D:4E:4C:C1
            X509v3 Authority Key Identifier:
                keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:a8:13:61:86:a9:3c:a3:00:83:70:10:23:9b:90:69:b7:
         93:26:6f:d7:c5:97:09:df:fb:77:b7:3a:27:35:90:6f:25:d9:
         cc:17:87:73:a7:cf:6d:f8:b6:5b:20:a9:c6:fb:d5:b5:cc:44:
         4b:e4:cf:34:59:da:18:e0:52:4c:4f:e2:84:b8:bf:87:b9:28:
         1d:33:36:5c:eb:52:53:ac:90:c5:6a:9b:5a:12:b0:f5:4f:cf:
         ef:c8:1d:86:f4:59:6d:e6:19:ed:88:d6:5b:fe:24:13:b6:eb:
         44:22:c6:c7:15:c1:06:e3:03:ad:59:0a:f6:c1:9b:4e:b1:99:
         08:0c:c6:23:05:a8:a4:13:12:20:eb:3b:62:53:d3:57:50:b2:
         11:be:c6:64:25:39:db:82:60:9b:73:e6:55:4a:85:42:d4:8e:
         69:17:57:5c:58:a2:65:d6:1e:6f:62:8c:e8:09:3a:25:8b:bf:
         e3:17:2d:2c:a7:c3:9f:9b:ee:63:e1:e7:9f:98:0e:e7:dd:43:
         3c:b9:c8:d1:ed:e5:d6:40:94:14:20:94:45:43:09:0c:03:85:
         60:1c:15:8a:75:ae:59:6b:a4:38:a8:a7:5f:65:26:1d:64:bd:
         1c:ea:1b:5c:a4:d3:c8:a7:5f:79:cf:fe:be:36:f8:c7:57:e0:
         32:07:02:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayWHNPeEB46ur229H4PBg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWJjZTJlZTgwNmU5MzYyMTExMmRiZDYxODUzNmY3NzVm
NDRmYmEwHhcNMjUwNTA5MDAwMTAzWhcNMjUwNTEwMDAwMTAzWjAzMTEwLwYDVQQD
EyhkYjAwMjdiOGNmNDQzZTUzNGM0OWI5NDg2NDdkOTMwYzJkNGU0Y2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz8Qb463jvh7FmkMPSeKqRaVjFpD
ucOdFVUIzGBFeKI7FAocOPXoSZMV7lgpNFcvq0UNd7Q08bFW3uV7G0JxRr5jKOq7
r8b1fWw618+ngDk9wUnbRuf/aUpa0UVM7380al6co1kyQ+twTF+Vdb/6xJ5pqtgN
4p6OSOXuC4P6U62rd3PdYny46nw2rp1IDrupJv/wsV9BQH39oDm63cbmizAtbg/W
cShuJx3NaVLW1WZFVCKjA4eFGFOXgy/d40u48POZvtW90CnqdvdPIccIAx00JSWX
5nflbSM+U0gHIaizGiwTq/copmqOqODukGy2dv+owEC7NttRfG5b+0vYewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsAJ7jPRD5TTEm5SGR9kwwtTkzBMB8GA1UdIwQY
MBaAFDMbzi7oBuk2IREtvWGFNvd19E+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYt
YWVhYzE2MjI3YzI1LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYtYWVhYzE2MjI3YzI1
LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaOoE2GG
qTyjAINwECObkGm3kyZv18WXCd/7d7c6JzWQbyXZzBeHc6fPbfi2WyCpxvvVtcxE
S+TPNFnaGOBSTE/ihLi/h7koHTM2XOtSU6yQxWqbWhKw9U/P78gdhvRZbeYZ7YjW
W/4kE7brRCLGxxXBBuMDrVkK9sGbTrGZCAzGIwWopBMSIOs7YlPTV1CyEb7GZCU5
24Jgm3PmVUqFQtSOaRdXXFiiZdYeb2KM6Ak6JYu/4xctLKfDn5vuY+Hnn5gO591D
PLnI0e3l1kCUFCCURUMJDAOFYBwVinWuWWukOKinX2UmHWS9HOobXKTTyKdfec/+
vjb4x1fgMgcCfQ==
-----END CERTIFICATE-----
Generated at Fri May 9 02:57:04 2025 by rpki-client