Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File:                     UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier:          Xha/NExI/HMPfcOmIJb1UgNi7/t1SOsApvsYbLwOW2A=
Subject key identifier:   E9:F3:DB:E4:2F:A3:97:BE:E3:92:29:D0:1A:C1:AE:0D:B7:10:C0:71
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer:       /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial:       0196AD68ED648B9C397A99F4064B50202C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number:          152D
Signing time:             Thu 08 May 2025 01:00:56 +0000
Manifest this update:     Thu 08 May 2025 01:00:56 +0000
Manifest next update:     Fri 09 May 2025 01:00:56 +0000
Files and hashes:         1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=)
                          2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: WoaR20BNJjzhIrOc/7tIZO9gJMvY+WQIWGAkf741RuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:ed:64:8b:9c:39:7a:99:f4:06:4b:50:20:2c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51626068942586ce95702103bac899d23fcf7242
        Validity
            Not Before: May  8 01:00:56 2025 GMT
            Not After : May  9 01:00:56 2025 GMT
        Subject: CN=e9f3dbe42fa397bee39229d01ac1ae0db710c071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b3:c9:f9:5e:fa:44:48:e9:7f:7d:66:9a:f0:
                    43:ee:ad:95:3c:c5:d3:01:a8:9f:c0:df:57:6c:3d:
                    fb:28:c8:0b:2b:ae:9f:1e:f6:d6:73:8c:c1:dc:50:
                    86:0e:08:fe:f0:5f:85:55:73:1d:68:dd:b6:d4:6a:
                    08:2f:99:3a:82:94:df:64:9a:e5:26:ac:87:bd:03:
                    60:84:61:45:00:6d:49:91:e8:69:5f:a3:40:51:50:
                    10:24:b6:76:ce:dd:5d:5c:17:4d:cd:6e:66:ec:b1:
                    2f:8a:ed:0b:02:60:fb:d6:cb:55:22:9b:fa:6e:35:
                    aa:32:8a:4c:68:e7:d6:95:d2:65:51:f0:87:b8:f1:
                    27:be:41:73:06:6b:bc:80:db:9f:cf:2f:9a:2d:63:
                    b8:2f:14:8f:4c:e1:9c:36:01:88:c0:50:99:a0:0c:
                    cd:b6:ab:ed:2a:b4:bb:55:29:7f:46:9f:11:46:85:
                    7b:29:8d:d7:80:17:5d:4b:cd:60:39:8c:72:09:48:
                    ce:54:ba:10:1c:db:c2:ac:bc:0a:15:d5:26:87:e5:
                    d4:c3:cf:0c:b8:23:27:34:fd:68:d9:e7:81:d5:cc:
                    cd:7c:24:a0:69:fd:8f:ec:df:bf:e1:03:19:bf:ce:
                    45:e4:20:ae:08:e2:21:cb:ab:a8:39:05:81:07:c2:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:DB:E4:2F:A3:97:BE:E3:92:29:D0:1A:C1:AE:0D:B7:10:C0:71
            X509v3 Authority Key Identifier:
                keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:10:a7:73:93:68:65:f2:29:82:fe:06:6a:79:17:3d:8b:40:
         30:58:d7:23:26:05:c3:ff:ea:0b:19:54:84:6f:f2:3b:7b:3f:
         37:f9:4d:57:a4:aa:6b:b2:8d:ab:f2:ce:ab:cc:4a:0d:69:d4:
         ea:4d:7d:32:28:09:da:a3:ed:ca:d0:38:97:35:cf:72:ba:c3:
         02:e4:9e:ce:e3:52:a5:b3:f5:3c:3a:d2:14:19:cc:b8:78:c3:
         3c:86:67:39:52:81:5e:f6:75:16:96:68:c9:4c:da:db:6f:ab:
         3c:ac:07:3b:59:85:06:f9:3a:a3:f9:c0:84:99:ee:85:65:e7:
         a4:79:75:43:4d:02:9d:bb:cb:e0:3e:ca:43:dd:ad:20:79:ea:
         e5:da:cf:3d:11:4d:be:00:bc:9c:e2:d4:dc:79:e6:aa:0e:6d:
         f7:3d:0b:f0:e9:c3:01:2a:7c:04:41:d0:e9:a6:a6:87:a8:eb:
         5a:7c:07:a8:69:e3:9f:eb:0b:6c:0b:6f:fb:0a:bb:01:f4:75:
         48:33:8e:1f:19:e0:52:0c:62:ec:03:6e:ed:9f:d0:4e:c9:3d:
         05:a8:ee:09:26:3a:ce:ff:31:f8:30:11:9b:34:2a:60:c2:17:
         d3:bd:74:ab:91:90:b7:86:f9:93:7d:13:99:93:d1:a5:d9:3c:
         fd:26:e8:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZataO1ki5w5epn0BktQICweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjI2MDY4OTQyNTg2Y2U5NTcwMjEwM2JhYzg5OWQyM2Zj
ZjcyNDIwHhcNMjUwNTA4MDEwMDU2WhcNMjUwNTA5MDEwMDU2WjAzMTEwLwYDVQQD
EyhlOWYzZGJlNDJmYTM5N2JlZTM5MjI5ZDAxYWMxYWUwZGI3MTBjMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7PJ+V76REjpf31mmvBD7q2VPMXT
AaifwN9XbD37KMgLK66fHvbWc4zB3FCGDgj+8F+FVXMdaN221GoIL5k6gpTfZJrl
JqyHvQNghGFFAG1JkehpX6NAUVAQJLZ2zt1dXBdNzW5m7LEviu0LAmD71stVIpv6
bjWqMopMaOfWldJlUfCHuPEnvkFzBmu8gNufzy+aLWO4LxSPTOGcNgGIwFCZoAzN
tqvtKrS7VSl/Rp8RRoV7KY3XgBddS81gOYxyCUjOVLoQHNvCrLwKFdUmh+XUw88M
uCMnNP1o2eeB1czNfCSgaf2P7N+/4QMZv85F5CCuCOIhy6uoOQWBB8KlVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnz2+Qvo5e+45Ip0BrBrg23EMBxMB8GA1UdIwQY
MBaAFFFiYGiUJYbOlXAhA7rImdI/z3JCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQt
N2JkOWU1ZjQ2N2FkLzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQtN2JkOWU1ZjQ2N2Fk
LzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRCnc5No
ZfIpgv4GankXPYtAMFjXIyYFw//qCxlUhG/yO3s/N/lNV6Sqa7KNq/LOq8xKDWnU
6k19MigJ2qPtytA4lzXPcrrDAuSezuNSpbP1PDrSFBnMuHjDPIZnOVKBXvZ1FpZo
yUza22+rPKwHO1mFBvk6o/nAhJnuhWXnpHl1Q00CnbvL4D7KQ92tIHnq5drPPRFN
vgC8nOLU3Hnmqg5t9z0L8OnDASp8BEHQ6aamh6jrWnwHqGnjn+sLbAtv+wq7AfR1
SDOOHxngUgxi7ANu7Z/QTsk9BajuCSY6zv8x+DARmzQqYMIX0710q5GQt4b5k30T
mZPRpdk8/Sbo4w==
-----END CERTIFICATE-----
Generated at Thu May 8 03:30:26 2025 by rpki-client