Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File:                     FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier:          01EmUnatn2RMDa1b0wNOZHdJGJkeZLTbakgqSMKRtYk=
Subject key identifier:   E2:15:67:56:6D:09:1B:77:85:2C:74:10:4D:1F:02:78:B7:67:CF:1B
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer:       /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial:       0196C4CBEDBF0DA427607DEBEE0D10015404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 14:00:21 +0000
Manifest this update:     Mon 12 May 2025 14:00:21 +0000
Manifest next update:     Tue 13 May 2025 14:00:21 +0000
Files and hashes:         1: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (hash: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=)
                          2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: jc4nkJ7fY7cpr6xBB1jGrWbxScCm+w/6aT8etBcBJiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cb:ed:bf:0d:a4:27:60:7d:eb:ee:0d:10:01:54:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
        Validity
            Not Before: May 12 14:00:21 2025 GMT
            Not After : May 13 14:00:21 2025 GMT
        Subject: CN=e21567566d091b77852c74104d1f0278b767cf1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bd:47:fa:3c:0f:a0:7e:a9:5a:a6:bc:d1:eb:
                    86:68:ac:37:6a:e5:6a:6c:55:1c:7b:a2:02:65:71:
                    09:64:a3:a6:38:84:8b:70:62:ba:b9:6a:7c:5a:5b:
                    eb:61:51:cd:1c:56:54:28:1e:94:59:b8:ab:be:d5:
                    2c:4b:4d:f4:e6:43:3d:13:7c:f3:40:58:c9:3c:7a:
                    3d:01:7d:01:81:fa:fe:ca:0a:a1:68:54:9d:f2:32:
                    ad:df:35:4b:17:41:8f:ae:fe:35:ec:62:10:6e:ea:
                    65:97:d0:64:37:82:f9:bd:f1:ad:52:5c:45:b4:40:
                    3a:8e:ba:d5:10:43:e6:81:72:83:89:f9:b1:e2:07:
                    a1:fb:27:7a:db:96:b3:dc:d3:80:9a:d6:4c:15:62:
                    4f:6a:b1:40:a7:91:1d:43:04:17:20:dc:b7:5c:2e:
                    96:c1:74:cd:98:f4:4b:ab:ab:12:3e:da:79:66:af:
                    bb:f0:5c:99:ae:ba:c4:66:be:27:56:e4:ff:20:49:
                    42:63:45:01:17:64:b5:b9:a0:11:c1:14:27:d3:f5:
                    d0:05:0a:b7:44:9f:5c:07:ca:2d:73:34:0e:2c:a2:
                    51:2f:78:66:ae:0e:3b:08:7a:cc:b5:92:3d:91:ae:
                    f5:4a:e4:83:74:e8:1b:c4:c5:88:b3:97:be:97:5d:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:67:56:6D:09:1B:77:85:2C:74:10:4D:1F:02:78:B7:67:CF:1B
            X509v3 Authority Key Identifier:
                keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:61:1b:66:54:3e:ce:ff:2c:01:d8:c5:c1:c4:e2:0e:85:34:
         3e:2f:2e:f1:77:99:2f:bc:62:f4:13:d4:65:2c:fa:e4:2b:4c:
         7d:bc:87:61:4d:f3:49:bf:9e:ea:9b:4d:78:64:75:08:47:9c:
         8f:a2:02:a5:98:8f:b3:56:8f:00:ea:54:a3:ab:8a:96:c3:16:
         06:85:e1:e5:7b:e1:74:e1:95:9b:28:da:c8:fd:4d:49:02:da:
         55:f4:12:c4:6c:a4:20:11:11:bd:8f:e1:ff:24:45:c3:43:4b:
         76:e3:ed:50:41:2f:55:ff:ce:23:fa:f3:cc:28:9a:64:00:4f:
         f5:75:17:3f:09:26:c9:2d:ce:a2:06:db:5d:27:d1:f3:81:32:
         d9:7a:b8:6c:19:1d:b0:00:e0:b2:02:d6:fd:24:71:af:6f:2a:
         85:9f:99:4d:10:f4:7f:54:3b:88:ff:14:8f:ad:10:e3:44:1b:
         26:aa:df:26:08:61:00:49:7a:21:a1:3d:e6:92:c3:3b:72:48:
         21:81:10:db:24:d1:65:71:02:31:4a:e6:dd:01:2d:83:8d:34:
         43:bc:ef:0e:4a:5e:08:76:d1:d1:07:e4:7f:dc:42:d5:32:86:
         52:cb:f3:23:16:6b:34:8a:7e:cb:64:af:e3:36:99:0d:46:53:
         22:c5:68:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEy+2/DaQnYH3r7g0QAVQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2I0NjcwMjgzOWE3OTViYWJhOGQ4ZDE1ZWNkY2NhNjM3
ZTMzNmMwHhcNMjUwNTEyMTQwMDIxWhcNMjUwNTEzMTQwMDIxWjAzMTEwLwYDVQQD
EyhlMjE1Njc1NjZkMDkxYjc3ODUyYzc0MTA0ZDFmMDI3OGI3NjdjZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r1H+jwPoH6pWqa80euGaKw3auVq
bFUce6ICZXEJZKOmOISLcGK6uWp8WlvrYVHNHFZUKB6UWbirvtUsS0305kM9E3zz
QFjJPHo9AX0Bgfr+ygqhaFSd8jKt3zVLF0GPrv417GIQbupll9BkN4L5vfGtUlxF
tEA6jrrVEEPmgXKDifmx4geh+yd625az3NOAmtZMFWJParFAp5EdQwQXINy3XC6W
wXTNmPRLq6sSPtp5Zq+78FyZrrrEZr4nVuT/IElCY0UBF2S1uaARwRQn0/XQBQq3
RJ9cB8otczQOLKJRL3hmrg47CHrMtZI9ka71SuSDdOgbxMWIs5e+l11bSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIVZ1ZtCRt3hSx0EE0fAni3Z88bMB8GA1UdIwQY
MBaAFBU7RnAoOaeVurqNjRXs3MpjfjNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTct
YmE1NjM3OGE2NDc2LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTctYmE1NjM3OGE2NDc2
LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWEbZlQ+
zv8sAdjFwcTiDoU0Pi8u8XeZL7xi9BPUZSz65CtMfbyHYU3zSb+e6ptNeGR1CEec
j6ICpZiPs1aPAOpUo6uKlsMWBoXh5XvhdOGVmyjayP1NSQLaVfQSxGykIBERvY/h
/yRFw0NLduPtUEEvVf/OI/rzzCiaZABP9XUXPwkmyS3OogbbXSfR84Ey2Xq4bBkd
sADgsgLW/SRxr28qhZ+ZTRD0f1Q7iP8Uj60Q40QbJqrfJghhAEl6IaE95pLDO3JI
IYEQ2yTRZXECMUrm3QEtg400Q7zvDkpeCHbR0Qfkf9xC1TKGUsvzIxZrNIp+y2Sv
4zaZDUZTIsVoDg==
-----END CERTIFICATE-----
Generated at Mon May 12 18:09:03 2025 by rpki-client