Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File:                     EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier:          G00C3TbdoyO0PFntD0IU1KOiAvf5uPdSTi5q8y7XmqU=
Subject key identifier:   15:E5:63:19:9D:2E:58:6F:88:6A:53:4C:FF:D5:A3:E1:AF:48:1F:D3
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer:       /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial:       0196A65420A0D80233CCAF9EAB5361777DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number:          152A
Signing time:             Tue 06 May 2025 16:00:53 +0000
Manifest this update:     Tue 06 May 2025 16:00:53 +0000
Manifest next update:     Wed 07 May 2025 16:00:53 +0000
Files and hashes:         1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: MaS34SV83Tv++9Otalfz4gpdH/i7QjN5vh31bU2O57E=)
                          2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:54:20:a0:d8:02:33:cc:af:9e:ab:53:61:77:7d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
        Validity
            Not Before: May  6 16:00:53 2025 GMT
            Not After : May  7 16:00:53 2025 GMT
        Subject: CN=15e563199d2e586f886a534cffd5a3e1af481fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:20:83:5e:19:d2:a7:c3:0c:40:dd:be:65:
                    18:18:51:39:32:98:9c:1c:64:c2:76:fb:2b:d2:69:
                    11:e2:c9:22:6b:14:a5:f2:70:93:dc:bf:0b:54:33:
                    cc:86:fc:d2:f5:5a:79:fd:b9:67:33:af:e6:8f:4b:
                    3a:5c:9b:7b:da:07:1f:6a:06:70:2f:d7:7f:43:e5:
                    ae:68:cb:55:a0:dc:d5:c1:4c:e5:4e:c8:f0:22:9f:
                    9e:72:48:09:5c:0b:46:91:2e:07:dd:4b:3b:3e:bb:
                    3d:29:a5:5e:89:da:d1:d5:7e:9d:15:d9:35:65:08:
                    7b:2f:56:40:77:aa:43:cb:71:c0:97:4d:58:f0:75:
                    3b:cd:58:3d:27:b8:5a:dc:77:22:eb:fa:45:87:f6:
                    15:81:51:cb:2c:e5:60:35:21:84:a0:f3:07:c0:0b:
                    0d:7e:84:4b:30:f9:82:1f:04:11:d8:a0:50:4d:90:
                    0a:44:9c:3a:e0:20:a7:bf:c8:3e:37:f7:2a:b0:79:
                    08:3c:81:57:76:b0:94:9c:eb:81:49:ec:c3:66:8e:
                    5d:2e:2d:03:fd:de:c7:be:44:ed:73:34:6c:ee:51:
                    62:7b:ab:71:ad:be:fa:ff:20:78:7e:21:ec:00:13:
                    e0:08:b7:11:96:bb:18:64:f7:3d:a2:86:96:62:b9:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:63:19:9D:2E:58:6F:88:6A:53:4C:FF:D5:A3:E1:AF:48:1F:D3
            X509v3 Authority Key Identifier:
                keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d2:32:61:dc:88:1f:8d:07:e6:2c:2f:72:34:30:8b:dd:85:
         c8:b4:4d:80:69:08:8a:22:59:47:79:48:b8:49:08:f7:ac:ae:
         98:34:59:97:ec:29:0e:a8:1c:99:ff:2f:6e:04:6c:36:d1:af:
         f2:9f:13:79:ac:01:d4:ad:c4:6f:2e:88:57:66:57:29:10:fb:
         59:df:f6:ca:0a:a1:75:aa:06:b4:7b:40:5c:dd:bd:6a:bb:ce:
         2c:ac:83:77:b9:a6:e4:21:e3:e7:9e:1c:8d:13:7e:aa:95:43:
         67:32:53:ce:37:fb:45:02:ff:e2:39:73:72:98:55:9c:46:ca:
         ea:63:44:12:d3:6b:36:a0:1a:37:cd:c2:f3:e8:b8:f1:50:07:
         1b:5f:bb:85:0f:85:10:d3:81:78:9d:40:4c:e6:63:43:35:4b:
         2d:22:b4:41:51:46:d2:81:8e:8f:5d:17:e0:ab:0c:31:90:a5:
         50:3b:14:c3:23:92:9b:8a:c9:93:7d:71:e4:c8:dd:6c:16:8b:
         16:49:6b:33:4d:c4:3a:93:ff:92:4c:46:ef:ad:bd:bf:54:3b:
         27:8a:7e:87:21:53:91:03:38:99:8a:a5:6c:a8:83:bf:ca:e9:
         12:2f:4a:51:75:cb:a8:13:a8:b3:81:56:19:01:c9:13:ee:e4:
         75:5b:64:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamVCCg2AIzzK+eq1Nhd33xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTE1MDkwZjg1MGUzMzdlYjNiMTE4YTE1N2U0ZTM5MDgz
Yjc3YTYwHhcNMjUwNTA2MTYwMDUzWhcNMjUwNTA3MTYwMDUzWjAzMTEwLwYDVQQD
EygxNWU1NjMxOTlkMmU1ODZmODg2YTUzNGNmZmQ1YTNlMWFmNDgxZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMkgg14Z0qfDDEDdvmUYGFE5Mpic
HGTCdvsr0mkR4skiaxSl8nCT3L8LVDPMhvzS9Vp5/blnM6/mj0s6XJt72gcfagZw
L9d/Q+WuaMtVoNzVwUzlTsjwIp+eckgJXAtGkS4H3Us7Prs9KaVeidrR1X6dFdk1
ZQh7L1ZAd6pDy3HAl01Y8HU7zVg9J7ha3Hci6/pFh/YVgVHLLOVgNSGEoPMHwAsN
foRLMPmCHwQR2KBQTZAKRJw64CCnv8g+N/cqsHkIPIFXdrCUnOuBSezDZo5dLi0D
/d7HvkTtczRs7lFie6txrb76/yB4fiHsABPgCLcRlrsYZPc9ooaWYrlEGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXlYxmdLlhviGpTTP/Vo+GvSB/TMB8GA1UdIwQY
MBaAFBBRUJD4UOM36zsRihV+TjkIO3emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUt
OGYyOWYzZDk4MjE0LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUtOGYyOWYzZDk4MjE0
LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldIyYdyI
H40H5iwvcjQwi92FyLRNgGkIiiJZR3lIuEkI96yumDRZl+wpDqgcmf8vbgRsNtGv
8p8TeawB1K3Eby6IV2ZXKRD7Wd/2ygqhdaoGtHtAXN29arvOLKyDd7mm5CHj554c
jRN+qpVDZzJTzjf7RQL/4jlzcphVnEbK6mNEEtNrNqAaN83C8+i48VAHG1+7hQ+F
ENOBeJ1ATOZjQzVLLSK0QVFG0oGOj10X4KsMMZClUDsUwyOSm4rJk31x5MjdbBaL
FklrM03EOpP/kkxG7629v1Q7J4p+hyFTkQM4mYqlbKiDv8rpEi9KUXXLqBOos4FW
GQHJE+7kdVtkyQ==
-----END CERTIFICATE-----
Generated at Wed May 7 00:32:19 2025 by rpki-client