Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          dUKt5+i0L9peKoHKRcllpOzW5dKGX4tPBP4X7xYF21g=
Subject key identifier:   15:31:93:BC:7B:1E:93:10:E0:CB:76:86:E7:7E:2E:AA:03:A5:15:19
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       0196B1B3186CDA1885F15CD40FC70D34D939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          1531
Signing time:             Thu 08 May 2025 21:00:26 +0000
Manifest this update:     Thu 08 May 2025 21:00:26 +0000
Manifest next update:     Fri 09 May 2025 21:00:26 +0000
Files and hashes:         1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=)
                          2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=)
                          3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=)
                          4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: WS/pGzCetPjZ0Y8431Wjakjh03G7mvcmAOzfjVkkjjE=)
                          5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=)
                          6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=)
                          7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:b3:18:6c:da:18:85:f1:5c:d4:0f:c7:0d:34:d9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: May  8 21:00:26 2025 GMT
            Not After : May  9 21:00:26 2025 GMT
        Subject: CN=153193bc7b1e9310e0cb7686e77e2eaa03a51519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:98:2c:7d:6a:9a:55:f8:9d:28:d1:c6:6c:
                    8f:ee:bd:e0:7f:75:b8:79:38:4f:11:f9:be:7f:cb:
                    18:cc:9f:f7:a4:a6:da:d7:51:5a:17:aa:14:9d:e2:
                    2a:a2:45:c4:e7:4a:df:1f:18:e4:82:c0:4b:65:ce:
                    ae:dc:19:22:94:c2:41:23:50:38:35:8a:97:74:0f:
                    e6:ff:69:fc:76:24:e6:40:41:01:d7:f4:e1:52:61:
                    44:0b:9d:57:c9:79:52:36:95:ad:97:35:0c:e0:8f:
                    90:1a:22:8b:13:4d:c4:8c:46:4c:04:a5:2a:77:14:
                    8f:2c:dc:5d:79:8a:bf:d6:bb:cc:87:a2:e4:30:dc:
                    1d:0a:36:3b:ab:9b:3c:f9:20:a4:7c:42:97:98:7f:
                    cc:10:39:94:81:ff:ad:cc:51:9e:d1:19:94:6c:91:
                    f1:2b:fd:ed:96:59:65:d6:e9:2b:ae:97:96:20:dd:
                    f4:0c:59:bb:21:23:13:25:75:ee:2d:ce:bd:ad:f0:
                    32:c5:fc:33:0b:d4:a8:75:e3:4e:db:ed:c7:09:77:
                    47:ef:53:ea:0f:eb:14:b9:03:e8:7c:85:62:9a:df:
                    f0:72:97:bb:34:f7:60:1d:de:f4:03:46:5c:86:9a:
                    c5:a0:6b:11:d6:ea:2e:4e:98:43:66:b3:27:30:66:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:93:BC:7B:1E:93:10:E0:CB:76:86:E7:7E:2E:AA:03:A5:15:19
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:70:7d:b5:a4:26:f0:8a:a1:ec:56:8e:cd:4b:42:05:ff:3e:
         3f:0a:b8:2f:6b:b1:46:a5:e3:fb:c8:d8:23:cd:40:b5:47:2c:
         54:88:d5:24:d6:c9:c9:65:8c:d1:77:52:43:2f:37:c9:9d:fb:
         80:e8:d7:8a:1f:bc:60:1d:18:28:93:35:d0:dd:70:61:8d:a2:
         ce:5e:53:3d:79:bb:76:4b:13:c7:3f:41:cf:6f:27:9f:28:77:
         d7:46:9e:72:fa:3c:13:bb:ec:14:55:c1:70:2d:6b:f8:18:a4:
         ab:f3:ff:b5:33:c3:c4:fc:0e:9b:04:36:fe:2f:12:eb:5f:a1:
         e2:36:9e:9c:5f:ff:bd:bb:f2:33:30:02:37:37:f3:10:af:b4:
         96:ff:8c:f9:25:06:5c:2e:bb:6c:1c:0a:85:58:ce:54:e0:8f:
         66:57:b6:4c:4a:86:52:87:69:bb:13:83:e2:6c:dd:9d:73:60:
         d7:f9:4b:b5:a7:0c:40:f9:a2:b0:13:e1:86:46:ac:43:44:a6:
         9c:41:b6:c3:23:15:ff:7f:37:ea:d2:94:a8:a3:20:36:e0:db:
         93:c1:ce:94:d7:56:c6:e6:9c:2c:aa:7a:e9:f3:e3:08:89:56:
         b8:f2:b0:48:12:62:cd:59:d5:7e:64:09:5c:b9:fb:1d:98:8e:
         4e:65:08:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxsxhs2hiF8VzUD8cNNNk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk
OGE1NmQwHhcNMjUwNTA4MjEwMDI2WhcNMjUwNTA5MjEwMDI2WjAzMTEwLwYDVQQD
EygxNTMxOTNiYzdiMWU5MzEwZTBjYjc2ODZlNzdlMmVhYTAzYTUxNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20GYLH1qmlX4nSjRxmyP7r3gf3W4
eThPEfm+f8sYzJ/3pKba11FaF6oUneIqokXE50rfHxjkgsBLZc6u3BkilMJBI1A4
NYqXdA/m/2n8diTmQEEB1/ThUmFEC51XyXlSNpWtlzUM4I+QGiKLE03EjEZMBKUq
dxSPLNxdeYq/1rvMh6LkMNwdCjY7q5s8+SCkfEKXmH/MEDmUgf+tzFGe0RmUbJHx
K/3tllll1ukrrpeWIN30DFm7ISMTJXXuLc69rfAyxfwzC9SodeNO2+3HCXdH71Pq
D+sUuQPofIVimt/wcpe7NPdgHd70A0ZchprFoGsR1uouTphDZrMnMGbL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUxk7x7HpMQ4Mt2hud+LqoDpRUZMB8GA1UdIwQY
MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt
NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh
LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHB9taQm
8Iqh7FaOzUtCBf8+Pwq4L2uxRqXj+8jYI81AtUcsVIjVJNbJyWWM0XdSQy83yZ37
gOjXih+8YB0YKJM10N1wYY2izl5TPXm7dksTxz9Bz28nnyh310aecvo8E7vsFFXB
cC1r+Bikq/P/tTPDxPwOmwQ2/i8S61+h4jaenF//vbvyMzACNzfzEK+0lv+M+SUG
XC67bBwKhVjOVOCPZle2TEqGUodpuxOD4mzdnXNg1/lLtacMQPmisBPhhkasQ0Sm
nEG2wyMV/3836tKUqKMgNuDbk8HOlNdWxuacLKp66fPjCIlWuPKwSBJizVnVfmQJ
XLn7HZiOTmUIAQ==
-----END CERTIFICATE-----
Generated at Fri May 9 06:14:46 2025 by rpki-client