Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File:                     sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier:          CTj5NzPrDEfUkMbKFkZplYb2g/WvigpBWvi2CwlzH+Q=
Subject key identifier:   FB:0F:12:77:99:2A:73:6D:F7:C5:4D:C5:77:3E:D7:F0:7D:B6:C8:67
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       0196B9A3649084BE05088F555E0E4D8F8A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number:          1540
Signing time:             Sat 10 May 2025 10:00:15 +0000
Manifest this update:     Sat 10 May 2025 10:00:15 +0000
Manifest next update:     Sun 11 May 2025 10:00:15 +0000
Files and hashes:         1: AtRByS0zJPDiOgR2GmP-us653x0.roa (hash: FxQtASMxynUngBeMPqWpgsQ0Eb/Ckc7wV64mAxHzC3U=)
                          2: COiOJlNhkw7oyE7_CjG4wzI_Has.roa (hash: 8/lIfM84EcdzcDMM/2GUz4VN/PyuQhy9fYkjMmQOIDI=)
                          3: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (hash: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=)
                          4: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=)
                          5: hsH-e4sppViS3iNq4F4kEU0ep0g.roa (hash: dqKnOJjGSqIH7LzL8ZBxcWScroq9fSiiauAsWgvwoYw=)
                          6: lAQuczRYGnewQpXm-9DH2Aa2FJM.roa (hash: cpxHeGSggctdEQY5QxkgjLkTiuh9nHgtIGZfv1ijkMo=)
                          7: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: 58mNix79u2+8UmuwY64lVrPPVxCM+mplX0wdzbnBMog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:64:90:84:be:05:08:8f:55:5e:0e:4d:8f:8a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: May 10 10:00:15 2025 GMT
            Not After : May 11 10:00:15 2025 GMT
        Subject: CN=fb0f1277992a736df7c54dc5773ed7f07db6c867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:b1:b4:f0:97:08:a2:5e:d9:ae:d2:9b:7a:
                    fb:a1:47:60:ee:a2:42:90:54:ef:14:67:69:7b:4a:
                    2e:a3:e0:c5:2b:f1:62:9a:c6:63:27:53:06:d8:29:
                    e4:d3:a4:1d:d6:b0:74:ae:37:3b:b0:79:10:0d:21:
                    f7:ce:ab:12:38:40:5e:ec:eb:55:b0:ca:08:c7:61:
                    94:ed:cc:fc:0d:d8:e8:f5:f3:4f:0c:18:b7:b9:7c:
                    4e:c3:d7:63:45:fe:16:f6:ee:7f:b1:aa:c1:d8:4c:
                    5e:47:79:9d:82:f1:eb:1a:c2:2a:24:ca:7e:16:55:
                    83:b2:4c:15:c5:c9:9e:54:af:2f:d4:c6:ee:85:97:
                    bd:c8:84:3c:08:88:3e:e8:1f:37:a9:28:84:c7:92:
                    2f:f2:df:b9:af:31:c0:af:9d:e5:51:06:d9:a9:d1:
                    49:00:bb:e9:52:6e:36:13:51:21:c0:65:44:24:ad:
                    42:fd:d7:9b:34:a7:e8:3e:6e:6e:b6:3b:66:31:61:
                    2c:35:b0:c2:55:92:25:13:d1:54:32:4a:92:fd:f2:
                    6c:26:69:18:73:e0:9c:d2:5e:85:6d:d0:d1:f0:46:
                    ac:59:39:c1:dc:8c:c9:53:62:91:9f:bb:b7:b9:2f:
                    47:df:ab:13:45:71:50:cc:01:fa:71:65:25:95:49:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:12:77:99:2A:73:6D:F7:C5:4D:C5:77:3E:D7:F0:7D:B6:C8:67
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:97:14:9b:77:de:4f:d5:0c:f6:2d:fc:c7:a5:94:b4:24:50:
         36:98:a9:a9:57:ce:55:30:06:e8:e4:d9:47:34:58:e2:93:e9:
         56:5b:2f:31:cd:9b:9f:14:89:78:95:07:c4:80:3e:1c:29:b0:
         17:b5:f3:22:fc:95:49:e6:74:56:a2:9f:0b:a8:40:73:67:fa:
         3f:23:83:55:ac:09:57:a0:02:13:69:19:99:ed:3a:04:a5:b8:
         a5:7e:0a:a5:40:fe:68:0e:c9:9c:ef:85:e2:e9:30:95:88:99:
         4b:8c:56:bb:b2:e7:c9:9e:64:14:37:89:6e:17:6e:4c:f3:8d:
         72:97:38:ba:37:d5:84:27:ad:a8:52:f1:da:c8:37:a1:8a:99:
         5d:cb:9d:70:63:69:80:e2:83:e6:7d:28:97:45:cb:24:0e:ee:
         1f:25:a3:28:94:d4:6b:97:22:60:bb:9d:b7:ad:1f:6e:18:1b:
         31:50:3b:06:b9:dd:31:00:7f:2a:da:6b:fd:4c:e0:09:d3:ed:
         e6:2b:61:76:b0:89:fb:9c:9b:55:64:a3:80:5a:4f:cb:bb:dc:
         77:8c:ee:88:92:7e:eb:5a:53:49:16:44:ba:a0:4a:a2:44:24:
         e5:82:03:15:90:67:1e:cd:b5:e4:38:cf:84:5b:12:bf:02:1b:
         7f:40:b2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5o2SQhL4FCI9VXg5Nj4qEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx
NTZmODkwHhcNMjUwNTEwMTAwMDE1WhcNMjUwNTExMTAwMDE1WjAzMTEwLwYDVQQD
EyhmYjBmMTI3Nzk5MmE3MzZkZjdjNTRkYzU3NzNlZDdmMDdkYjZjODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8qxtPCXCKJe2a7Sm3r7oUdg7qJC
kFTvFGdpe0ouo+DFK/FimsZjJ1MG2Cnk06Qd1rB0rjc7sHkQDSH3zqsSOEBe7OtV
sMoIx2GU7cz8Ddjo9fNPDBi3uXxOw9djRf4W9u5/sarB2ExeR3mdgvHrGsIqJMp+
FlWDskwVxcmeVK8v1MbuhZe9yIQ8CIg+6B83qSiEx5Iv8t+5rzHAr53lUQbZqdFJ
ALvpUm42E1EhwGVEJK1C/debNKfoPm5utjtmMWEsNbDCVZIlE9FUMkqS/fJsJmkY
c+Cc0l6FbdDR8EasWTnB3IzJU2KRn7u3uS9H36sTRXFQzAH6cWUllUkpBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsPEneZKnNt98VNxXc+1/B9tshnMB8GA1UdIwQY
MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt
Y2Y2YzMwNTIxMmViLzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi
LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5cUm3fe
T9UM9i38x6WUtCRQNpipqVfOVTAG6OTZRzRY4pPpVlsvMc2bnxSJeJUHxIA+HCmw
F7XzIvyVSeZ0VqKfC6hAc2f6PyODVawJV6ACE2kZme06BKW4pX4KpUD+aA7JnO+F
4ukwlYiZS4xWu7LnyZ5kFDeJbhduTPONcpc4ujfVhCetqFLx2sg3oYqZXcudcGNp
gOKD5n0ol0XLJA7uHyWjKJTUa5ciYLudt60fbhgbMVA7BrndMQB/Ktpr/UzgCdPt
5ithdrCJ+5ybVWSjgFpPy7vcd4zuiJJ+61pTSRZEuqBKokQk5YIDFZBnHs215DjP
hFsSvwIbf0CyvQ==
-----END CERTIFICATE-----
Generated at Sat May 10 13:30:52 2025 by rpki-client