Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File:                     1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier:          zkb1bjgKaAb/XYuADuGe7elZNUAX3YUVyGCYMbTFZh0=
Subject key identifier:   91:64:D6:67:5C:A5:F6:05:A5:40:07:F2:09:F1:CF:F8:12:D0:EC:19
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer:       /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial:       0196C4273759D0DCF366CF6A8D5C08F51EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number:          153A
Signing time:             Mon 12 May 2025 11:00:26 +0000
Manifest this update:     Mon 12 May 2025 11:00:26 +0000
Manifest next update:     Tue 13 May 2025 11:00:26 +0000
Files and hashes:         1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: 970Xy8gt2Kk3OoSSt5cK82Fkqcl83vYNCLbJWTBImBY=)
                          2: GBHgZs5smXIHM4FYLqRTdebAY54.roa (hash: 8eoGRtWR94CvV+AUeQO0MQrawByEe9oxj8H6brsnZqU=)
                          3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:37:59:d0:dc:f3:66:cf:6a:8d:5c:08:f5:1e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
        Validity
            Not Before: May 12 11:00:26 2025 GMT
            Not After : May 13 11:00:26 2025 GMT
        Subject: CN=9164d6675ca5f605a54007f209f1cff812d0ec19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:f2:09:ab:32:f0:22:78:98:e2:9d:58:a6:
                    04:86:8e:44:9f:49:a8:56:06:16:b6:d9:bd:b4:d4:
                    8c:ff:ab:de:bf:43:e3:7d:73:98:6d:86:98:2f:0a:
                    3e:bb:0c:0a:d4:c9:06:5d:65:20:4b:6c:c6:c0:8f:
                    13:73:c8:3d:1e:f6:28:0d:4f:4f:5c:32:af:58:af:
                    9f:a4:87:82:b6:68:de:8e:c2:2e:9d:82:c6:86:f8:
                    f6:73:f7:a6:07:95:c5:39:2e:a2:bd:35:66:74:ad:
                    17:49:7f:92:8e:6b:0b:51:c6:ca:3b:20:cb:a9:15:
                    fb:f4:d4:00:7a:c6:97:4b:20:12:f4:43:62:5e:80:
                    80:49:36:e3:de:7d:94:39:49:ce:1b:96:5d:3e:1a:
                    9e:eb:df:bd:9e:23:cc:49:09:6b:fc:d5:df:1d:e7:
                    b6:1c:d8:1a:15:63:fb:d3:a1:67:a5:88:81:e2:3b:
                    4f:51:9e:b1:fd:af:70:02:c7:57:44:fd:a7:6c:68:
                    fb:70:27:cc:75:ba:81:a4:42:52:4b:f5:56:3e:11:
                    41:26:b6:64:4d:1f:c3:ed:49:5f:6a:ae:ad:70:e8:
                    1a:7c:76:b9:c5:a0:bf:bf:99:52:04:4a:a5:3a:d0:
                    47:f8:ce:9a:42:c5:6a:80:fb:ed:8c:e2:84:e1:4c:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:64:D6:67:5C:A5:F6:05:A5:40:07:F2:09:F1:CF:F8:12:D0:EC:19
            X509v3 Authority Key Identifier:
                keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:0b:1d:09:ad:d7:3d:bb:d8:f7:93:10:73:52:d6:94:4f:
         c8:81:78:36:f7:96:fd:96:67:15:4f:99:65:f8:b2:62:ba:fb:
         f9:02:cd:bd:ff:c1:d1:ca:58:1c:61:f1:f0:53:2b:26:27:4b:
         1f:ad:d4:8d:66:24:65:89:c4:25:b7:e2:73:3f:de:b1:b0:91:
         b5:8c:29:45:21:dc:63:74:d7:ab:63:65:b8:8b:58:aa:a2:94:
         d6:c2:2e:a7:90:83:6e:e4:14:1f:4b:f2:bb:cd:3a:8d:af:79:
         3d:ce:7d:03:e0:69:c2:6f:ea:49:8d:a8:d4:eb:bd:e3:dd:af:
         d1:11:a5:a1:00:41:fa:79:41:ef:72:f2:81:2f:74:53:5d:f7:
         5b:3c:27:11:68:76:5c:ad:b4:71:b1:95:6f:d2:29:fc:b9:03:
         40:c1:57:ee:8e:a4:ce:79:ff:9f:8b:ae:b1:27:ec:96:84:15:
         21:0d:2f:97:b2:d7:f7:de:ce:2a:71:21:35:52:8b:15:aa:cd:
         d2:d4:97:d8:e1:7e:78:ed:26:96:c2:e1:0b:8f:42:d6:a5:b1:
         59:bc:61:23:8f:b8:19:1c:3b:e2:36:b2:19:e7:24:89:14:39:
         2d:dc:3b:9a:95:da:9f:6b:1c:bb:d5:73:0b:38:e3:54:a8:9f:
         be:4c:cd:42
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbEJzdZ0NzzZs9qjVwI9R7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTlhZWE1NmY1MGZmOGY0MzQyY2JlZTJhZjJmMjg4YTE2
OGM5MzAwHhcNMjUwNTEyMTEwMDI2WhcNMjUwNTEzMTEwMDI2WjAzMTEwLwYDVQQD
Eyg5MTY0ZDY2NzVjYTVmNjA1YTU0MDA3ZjIwOWYxY2ZmODEyZDBlYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/TyCasy8CJ4mOKdWKYEho5En0mo
VgYWttm9tNSM/6vev0PjfXOYbYaYLwo+uwwK1MkGXWUgS2zGwI8Tc8g9HvYoDU9P
XDKvWK+fpIeCtmjejsIunYLGhvj2c/emB5XFOS6ivTVmdK0XSX+SjmsLUcbKOyDL
qRX79NQAesaXSyAS9ENiXoCASTbj3n2UOUnOG5ZdPhqe69+9niPMSQlr/NXfHee2
HNgaFWP706FnpYiB4jtPUZ6x/a9wAsdXRP2nbGj7cCfMdbqBpEJSS/VWPhFBJrZk
TR/D7Ulfaq6tcOgafHa5xaC/v5lSBEqlOtBH+M6aQsVqgPvtjOKE4Uxo6QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJFk1mdcpfYFpUAH8gnxz/gS0OwZMB8GA1UdIwQY
MBaAFPiZrqVvUP+PQ0LL7iry8oihaMkwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KbXVwVzlRXzQ5RFFzdnVLdkx5aUtGb3lUQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1
LTliZjE5ZDg0MjIwZi8xLzEtSm11cFc5UV80OURRc3Z1S3ZMeWlLRm95VEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ2LzJjMmU2MS03Mjc5LTQ4M2MtODQ3NS05YmYxOWQ4NDIy
MGYvMS8xLUptdXBXOVFfNDlEUXN2dUt2THlpS0ZveVRBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbT0L
HQmt1z272PeTEHNS1pRPyIF4NveW/ZZnFU+ZZfiyYrr7+QLNvf/B0cpYHGHx8FMr
JidLH63UjWYkZYnEJbficz/esbCRtYwpRSHcY3TXq2NluItYqqKU1sIup5CDbuQU
H0vyu806ja95Pc59A+Bpwm/qSY2o1Ou9492v0RGloQBB+nlB73LygS90U133Wzwn
EWh2XK20cbGVb9Ip/LkDQMFX7o6kznn/n4uusSfsloQVIQ0vl7LX997OKnEhNVKL
FarN0tSX2OF+eO0mlsLhC49C1qWxWbxhI4+4GRw74jayGeckiRQ5Ldw7mpXan2sc
u9VzCzjjVKifvkzNQg==
-----END CERTIFICATE-----
Generated at Mon May 12 16:11:01 2025 by rpki-client