Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File:                     _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier:          DTbmueJsCCxd4/YUfjlfII5iNS83MfW0es6kc8QfzFE=
Subject key identifier:   B0:3E:AF:7C:AB:FB:38:00:62:64:87:34:3A:15:37:CB:91:1F:70:42
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer:       /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial:       0196B069D394129591863146FCA435B661A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number:          152A
Signing time:             Thu 08 May 2025 15:00:47 +0000
Manifest this update:     Thu 08 May 2025 15:00:47 +0000
Manifest next update:     Fri 09 May 2025 15:00:47 +0000
Files and hashes:         1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: rBAejJWcBeHDAoOeCCT8kiGgnftwzuBgAY77yvy+dKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:d3:94:12:95:91:86:31:46:fc:a4:35:b6:61:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
        Validity
            Not Before: May  8 15:00:47 2025 GMT
            Not After : May  9 15:00:47 2025 GMT
        Subject: CN=b03eaf7cabfb3800626487343a1537cb911f7042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:69:be:ba:6e:98:52:56:66:30:26:01:34:
                    32:09:d4:47:1b:a5:02:62:a3:a2:88:67:0b:8b:c6:
                    5a:0a:0a:73:e3:51:5d:1b:f3:5c:27:0d:49:6a:fa:
                    8e:ad:a0:e8:8f:ce:e6:e5:22:14:ae:8f:87:9c:10:
                    36:e5:fc:8f:ca:07:4f:3b:6c:c3:da:51:93:f8:cb:
                    fa:85:d4:0d:1e:27:62:08:32:a7:3e:6f:cd:bd:34:
                    61:ee:83:e4:0b:b7:05:7a:40:8b:3c:b5:0b:b3:04:
                    8e:3f:92:85:2b:99:cf:ad:12:b9:a9:60:38:aa:b5:
                    60:0f:6d:20:b2:4b:48:17:41:b9:87:57:00:c8:ae:
                    1a:db:86:74:aa:6b:70:49:24:47:17:32:1e:a8:6b:
                    01:5f:e1:cf:4a:48:b5:da:29:06:36:e9:3d:e5:53:
                    0a:d1:cf:69:69:20:4d:4b:2b:ca:99:18:71:8a:2c:
                    b3:c4:bf:ba:de:5d:5e:31:67:2f:d5:89:4c:42:f9:
                    4b:a0:4e:c6:78:1c:41:08:47:fa:c8:43:4e:d7:36:
                    fe:78:20:9d:a6:39:78:60:29:48:5f:50:31:04:96:
                    4c:02:05:0f:fd:70:a0:70:b5:90:08:41:77:1c:25:
                    16:03:4a:6b:82:07:fa:0f:3c:9f:22:a6:2f:59:ee:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3E:AF:7C:AB:FB:38:00:62:64:87:34:3A:15:37:CB:91:1F:70:42
            X509v3 Authority Key Identifier:
                keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:db:42:81:5c:6f:45:69:eb:53:39:e7:dc:08:0c:ad:d1:88:
         09:69:e7:70:58:db:f9:ff:9f:5e:1d:38:31:df:ca:31:36:be:
         34:53:2c:a9:33:5f:da:b7:1a:41:9a:63:71:e7:56:d1:85:c1:
         14:8c:62:69:10:31:3c:77:a0:8d:eb:3e:2d:c9:3d:47:4d:df:
         e9:65:d3:27:0e:3f:4b:b9:fb:5f:de:49:11:b3:5d:0c:f2:fd:
         19:5f:f5:46:28:b3:5c:60:49:95:a1:df:66:d2:e7:1e:b6:8b:
         22:09:16:c9:02:3d:ab:77:00:5c:86:fa:40:01:53:86:d1:b3:
         b4:3a:ef:9b:4c:c9:4b:54:8f:f8:b1:57:20:a2:72:31:f9:4e:
         51:a8:56:86:41:2d:c8:3b:13:70:42:07:92:e8:b2:48:1a:36:
         7f:7a:9c:15:84:4e:92:1f:46:d1:c5:d9:f8:0e:87:ea:ca:75:
         58:cf:1c:f7:ba:a7:b4:79:a0:ca:7b:b4:da:02:96:03:e0:07:
         ca:86:56:0c:b6:a3:54:21:e1:7e:31:62:f4:13:21:49:c9:65:
         71:04:8f:23:2f:ab:8c:84:0a:09:8c:37:a1:59:15:41:cc:ab:
         34:bb:72:8b:6a:ad:45:5b:f8:bb:0d:e3:8a:ea:1e:8b:cf:43:
         f9:31:62:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawadOUEpWRhjFG/KQ1tmGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2YyNmI1NDFmMGJiYThhNWNlNzFlYTUzODExYjQ2YzE2
NTdhYjMwHhcNMjUwNTA4MTUwMDQ3WhcNMjUwNTA5MTUwMDQ3WjAzMTEwLwYDVQQD
EyhiMDNlYWY3Y2FiZmIzODAwNjI2NDg3MzQzYTE1MzdjYjkxMWY3MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3lpvrpumFJWZjAmATQyCdRHG6UC
YqOiiGcLi8ZaCgpz41FdG/NcJw1JavqOraDoj87m5SIUro+HnBA25fyPygdPO2zD
2lGT+Mv6hdQNHidiCDKnPm/NvTRh7oPkC7cFekCLPLULswSOP5KFK5nPrRK5qWA4
qrVgD20gsktIF0G5h1cAyK4a24Z0qmtwSSRHFzIeqGsBX+HPSki12ikGNuk95VMK
0c9paSBNSyvKmRhxiiyzxL+63l1eMWcv1YlMQvlLoE7GeBxBCEf6yENO1zb+eCCd
pjl4YClIX1AxBJZMAgUP/XCgcLWQCEF3HCUWA0prggf6DzyfIqYvWe4KYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA+r3yr+zgAYmSHNDoVN8uRH3BCMB8GA1UdIwQY
MBaAFP8/JrVB8Luopc5x6lOBG0bBZXqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYt
MWMyNjBiMWUyOGQxLzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYtMWMyNjBiMWUyOGQx
LzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARttCgVxv
RWnrUznn3AgMrdGICWnncFjb+f+fXh04Md/KMTa+NFMsqTNf2rcaQZpjcedW0YXB
FIxiaRAxPHegjes+Lck9R03f6WXTJw4/S7n7X95JEbNdDPL9GV/1RiizXGBJlaHf
ZtLnHraLIgkWyQI9q3cAXIb6QAFThtGztDrvm0zJS1SP+LFXIKJyMflOUahWhkEt
yDsTcEIHkuiySBo2f3qcFYROkh9G0cXZ+A6H6sp1WM8c97qntHmgynu02gKWA+AH
yoZWDLajVCHhfjFi9BMhScllcQSPIy+rjIQKCYw3oVkVQcyrNLtyi2qtRVv4uw3j
iuoei89D+TFi3Q==
-----END CERTIFICATE-----
Generated at Thu May 8 21:53:25 2025 by rpki-client