Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File:                     SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier:          dB1QeAmrImEVzLwZfVRRF6pJdkqt8gMkoh/tQCEWKiM=
Subject key identifier:   3F:BD:64:82:E8:2F:89:DF:7E:07:34:C1:95:3F:D1:79:91:80:0A:4F
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer:       /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial:       0196D2F5B5E09D398113E682FB4E79091593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number:          145C
Signing time:             Thu 15 May 2025 08:00:40 +0000
Manifest this update:     Thu 15 May 2025 08:00:40 +0000
Manifest next update:     Fri 16 May 2025 08:00:40 +0000
Files and hashes:         1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: l8MmQ2Y1yr1GCVMFLj8Fag6ItG2siSNO7BH+mzgMemg=)
                          2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:f5:b5:e0:9d:39:81:13:e6:82:fb:4e:79:09:15:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
        Validity
            Not Before: May 15 08:00:40 2025 GMT
            Not After : May 16 08:00:40 2025 GMT
        Subject: CN=3fbd6482e82f89df7e0734c1953fd17991800a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:a7:c4:ff:83:d0:dc:64:78:e9:62:41:d7:
                    e5:16:98:17:90:8c:da:78:9a:a8:42:9c:54:0d:0d:
                    68:60:9d:24:5b:3f:b9:2d:1d:d4:f2:cd:10:a8:b8:
                    f6:c6:02:9c:54:c4:8a:dc:ea:03:e9:9f:fe:bf:a8:
                    0e:a6:b0:bc:bf:ca:cd:f3:22:98:3d:79:ff:43:e7:
                    7e:15:09:66:d1:73:d9:3f:c6:67:08:86:d7:da:08:
                    53:08:08:57:2b:d5:fa:9d:fc:53:e5:33:45:3b:9a:
                    33:7b:c7:36:66:9e:24:f4:77:9c:65:55:d4:0c:f1:
                    a8:58:50:1b:44:09:7d:63:ff:7e:38:e6:ae:88:d9:
                    a3:3e:1a:22:3a:3c:75:5b:ee:4d:26:96:97:ab:ee:
                    f4:06:2f:ff:e3:b6:0a:0e:cd:23:34:b9:dc:22:ad:
                    f3:0c:62:b6:a1:3f:01:5e:fc:c0:0b:ed:e7:08:36:
                    08:b1:5b:5b:7f:01:d9:2a:5e:7e:0b:b0:56:76:1c:
                    95:b3:35:19:b9:cd:eb:58:62:6c:3d:1d:96:c7:fc:
                    32:68:a5:8a:33:8b:1e:fd:52:b2:f3:1f:05:1e:39:
                    65:a5:3c:c3:1c:ec:a2:16:b0:af:23:d3:09:29:88:
                    2d:37:c5:35:b1:a8:60:18:dd:93:96:fd:4b:08:4c:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:64:82:E8:2F:89:DF:7E:07:34:C1:95:3F:D1:79:91:80:0A:4F
            X509v3 Authority Key Identifier:
                keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:ee:c1:61:26:ae:8c:29:96:5d:8d:6d:21:06:3c:94:ca:
         77:4b:03:ff:f5:90:39:c6:61:91:82:92:ac:e3:97:2b:ba:de:
         64:f5:56:3d:c0:8a:00:79:fd:25:e1:04:2a:c8:8a:cc:0f:7f:
         6d:78:7e:b6:ae:06:c9:42:46:14:48:42:d3:e8:5b:30:fe:dd:
         72:72:b5:44:cc:7b:2d:28:fe:19:c5:6f:2f:9e:22:02:5b:36:
         f2:c6:8b:71:77:05:14:27:88:1b:a4:7c:66:86:e6:89:07:5a:
         eb:20:30:7d:33:40:2c:f0:0e:ee:57:e9:f4:57:44:e6:8c:7c:
         65:56:ca:4c:cf:89:41:cf:b2:b5:c1:e0:67:ee:b3:86:6f:b6:
         6e:29:8a:59:1f:69:af:4b:43:ce:cb:83:92:91:3e:15:ea:b2:
         02:c3:76:8d:2c:ed:c6:f9:ff:af:bb:4f:3f:f9:d7:67:70:fb:
         18:24:ed:a6:69:4f:ae:e1:f6:9b:d5:bf:f9:ca:cb:ad:6b:fc:
         ed:d5:20:cc:06:6b:1b:2c:80:c2:16:ae:53:e7:6c:30:5e:5f:
         cb:31:7c:90:16:e3:56:08:cf:cf:c4:ef:7f:88:0c:e1:70:3f:
         82:96:66:f1:68:2e:93:00:09:ba:30:df:35:46:dc:6c:04:bf:
         6f:90:ef:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbS9bXgnTmBE+aC+055CRWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGIxN2QwMzJiOWZiNWY3ZTViYzlmZDI2OGRmYjgwZWRl
ZWQyMWQwHhcNMjUwNTE1MDgwMDQwWhcNMjUwNTE2MDgwMDQwWjAzMTEwLwYDVQQD
EygzZmJkNjQ4MmU4MmY4OWRmN2UwNzM0YzE5NTNmZDE3OTkxODAwYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKunxP+D0NxkeOliQdflFpgXkIza
eJqoQpxUDQ1oYJ0kWz+5LR3U8s0QqLj2xgKcVMSK3OoD6Z/+v6gOprC8v8rN8yKY
PXn/Q+d+FQlm0XPZP8ZnCIbX2ghTCAhXK9X6nfxT5TNFO5oze8c2Zp4k9HecZVXU
DPGoWFAbRAl9Y/9+OOauiNmjPhoiOjx1W+5NJpaXq+70Bi//47YKDs0jNLncIq3z
DGK2oT8BXvzAC+3nCDYIsVtbfwHZKl5+C7BWdhyVszUZuc3rWGJsPR2Wx/wyaKWK
M4se/VKy8x8FHjllpTzDHOyiFrCvI9MJKYgtN8U1sahgGN2Tlv1LCEx1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+9ZILoL4nffgc0wZU/0XmRgApPMB8GA1UdIwQY
MBaAFEpLF9AyuftfflvJ/SaN+4Dt7tIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYt
NzU5YWM1MDQxNGRlLzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYtNzU5YWM1MDQxNGRl
LzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMLuwWEm
rowpll2NbSEGPJTKd0sD//WQOcZhkYKSrOOXK7reZPVWPcCKAHn9JeEEKsiKzA9/
bXh+tq4GyUJGFEhC0+hbMP7dcnK1RMx7LSj+GcVvL54iAls28saLcXcFFCeIG6R8
ZobmiQda6yAwfTNALPAO7lfp9FdE5ox8ZVbKTM+JQc+ytcHgZ+6zhm+2bimKWR9p
r0tDzsuDkpE+FeqyAsN2jSztxvn/r7tPP/nXZ3D7GCTtpmlPruH2m9W/+crLrWv8
7dUgzAZrGyyAwhauU+dsMF5fyzF8kBbjVgjPz8Tvf4gM4XA/gpZm8WgukwAJujDf
NUbcbAS/b5DvfQ==
-----END CERTIFICATE-----
Generated at Thu May 15 15:54:59 2025 by rpki-client