Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          3NQor+u07TPxRIIgjVUS0aQqkkZNV3nRrj8wA21dxXE=
Subject key identifier:   7E:96:9E:7D:23:E0:01:A8:49:C7:EE:5C:BB:0C:F3:6C:59:C8:9F:5B
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       0196A2ADA2793CFE7230BD80A4B1E0DA8EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          152B
Signing time:             Mon 05 May 2025 23:00:10 +0000
Manifest this update:     Mon 05 May 2025 23:00:10 +0000
Manifest next update:     Tue 06 May 2025 23:00:10 +0000
Files and hashes:         1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: aHecwr1nQm05QEITspg6mA3MaoinzVXKLYDnOMnPR08=)
                          3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
                          4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:ad:a2:79:3c:fe:72:30:bd:80:a4:b1:e0:da:8e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: May  5 23:00:10 2025 GMT
            Not After : May  6 23:00:10 2025 GMT
        Subject: CN=7e969e7d23e001a849c7ee5cbb0cf36c59c89f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:ec:5c:44:3b:e5:49:18:f7:67:a4:75:86:
                    2b:7f:a0:3d:d0:b9:e4:33:70:0b:d2:b3:cd:dd:a0:
                    c0:fa:f5:0d:32:d4:ee:2b:f0:e9:00:2d:68:88:25:
                    e7:f7:d1:0f:e8:87:ad:64:72:f2:3b:33:9c:c5:0e:
                    40:ce:2a:2e:c8:27:e0:a6:2e:a5:90:bb:6a:0b:36:
                    ba:48:90:ef:dd:28:9c:03:a2:c1:38:56:02:b0:65:
                    6b:7d:2b:93:42:bb:e6:6f:5a:c5:f0:c8:b7:4f:c2:
                    21:14:b3:3b:7e:59:fa:c5:0c:d7:8b:9a:dd:80:b5:
                    e1:90:ae:5f:cf:ce:c5:de:18:6e:7a:4c:21:43:9d:
                    93:39:e9:b4:f8:3f:3e:c7:6b:b8:72:1a:f3:16:78:
                    77:65:ee:ec:b2:db:f4:92:73:50:c6:82:5b:74:b8:
                    f5:b7:0c:a9:6d:13:80:06:73:8c:d4:d0:ee:dc:6e:
                    82:ec:4e:10:f1:62:e7:59:be:f5:99:b3:6f:47:94:
                    1e:67:60:96:00:c9:32:55:2a:9b:97:6c:08:c9:bb:
                    1a:29:66:c4:18:de:8e:ee:49:c9:e0:6f:5e:81:21:
                    df:18:9b:ae:d6:d6:21:d2:61:74:aa:2e:68:59:bd:
                    e8:b1:ec:70:7d:59:d1:4d:0f:62:05:6e:6a:b5:7f:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:96:9E:7D:23:E0:01:A8:49:C7:EE:5C:BB:0C:F3:6C:59:C8:9F:5B
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:30:48:cf:87:f3:a1:04:bf:a6:bb:8d:05:df:65:40:e1:
         bf:dd:55:39:c7:02:f0:07:b8:ad:57:21:e5:eb:fb:16:17:15:
         68:58:0d:b5:e1:ad:cf:68:f3:8d:85:d4:e7:35:93:8e:2b:d2:
         ef:63:a8:e0:74:5d:7e:02:12:d4:65:67:4a:c8:28:78:65:e6:
         3b:f5:ad:b2:25:40:db:72:51:50:b4:cf:c9:b1:98:c6:27:81:
         40:f9:96:53:f0:47:19:58:71:9c:6b:a6:c7:02:3b:b8:c0:4f:
         13:5c:10:f3:f8:2f:e3:ad:71:98:28:0f:8a:a4:99:0c:a2:7f:
         06:d8:9a:d7:a1:e1:02:f0:e4:db:f8:c3:cc:7b:b6:75:84:31:
         af:bc:da:7b:57:c0:ad:20:c5:4c:cd:47:2d:4b:44:0d:f7:41:
         38:bd:ef:b0:85:26:87:c8:0f:38:9d:79:e4:fe:18:a6:3a:73:
         e2:22:87:5c:74:f9:f1:9c:9d:5a:09:23:52:fe:8b:7f:d6:26:
         52:9d:bd:f5:73:0a:7b:42:13:fb:1c:fd:8f:00:30:06:9c:3e:
         c2:01:36:f7:16:3e:1f:4a:11:9d:19:eb:5b:e2:ca:3d:93:d5:
         61:9f:e9:80:ca:fd:c2:ac:08:33:2d:17:a0:b6:90:cb:cd:97:
         af:db:59:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZairaJ5PP5yML2ApLHg2o7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Y2Y5ZDhkNTUyY2RjN2Q4YzBkYzZmNjQ5YjMwMWYyMzUx
NDA5ZWUwHhcNMjUwNTA1MjMwMDEwWhcNMjUwNTA2MjMwMDEwWjAzMTEwLwYDVQQD
Eyg3ZTk2OWU3ZDIzZTAwMWE4NDljN2VlNWNiYjBjZjM2YzU5Yzg5ZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqXsXEQ75UkY92ekdYYrf6A90Lnk
M3AL0rPN3aDA+vUNMtTuK/DpAC1oiCXn99EP6IetZHLyOzOcxQ5AziouyCfgpi6l
kLtqCza6SJDv3SicA6LBOFYCsGVrfSuTQrvmb1rF8Mi3T8IhFLM7fln6xQzXi5rd
gLXhkK5fz87F3hhuekwhQ52TOem0+D8+x2u4chrzFnh3Ze7sstv0knNQxoJbdLj1
twypbROABnOM1NDu3G6C7E4Q8WLnWb71mbNvR5QeZ2CWAMkyVSqbl2wIybsaKWbE
GN6O7knJ4G9egSHfGJuu1tYh0mF0qi5oWb3osexwfVnRTQ9iBW5qtX+WewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6Wnn0j4AGoScfuXLsM82xZyJ9bMB8GA1UdIwQY
MBaAFCXPnY1VLNx9jA3G9kmzAfI1FAnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQt
YTEwNjkwYTc0NGU0LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQtYTEwNjkwYTc0NGU0
LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOYwSM+H
86EEv6a7jQXfZUDhv91VOccC8Ae4rVch5ev7FhcVaFgNteGtz2jzjYXU5zWTjivS
72Oo4HRdfgIS1GVnSsgoeGXmO/WtsiVA23JRULTPybGYxieBQPmWU/BHGVhxnGum
xwI7uMBPE1wQ8/gv461xmCgPiqSZDKJ/Btia16HhAvDk2/jDzHu2dYQxr7zae1fA
rSDFTM1HLUtEDfdBOL3vsIUmh8gPOJ155P4Ypjpz4iKHXHT58ZydWgkjUv6Lf9Ym
Up299XMKe0IT+xz9jwAwBpw+wgE29xY+H0oRnRnrW+LKPZPVYZ/pgMr9wqwIMy0X
oLaQy82Xr9tZ6g==
-----END CERTIFICATE-----
Generated at Tue May 6 01:53:23 2025 by rpki-client