Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          YHLxtgAlCpFW2i4d5dV05LH9oO1WDNRy+4cHh+zVzTY=
Subject key identifier:   48:9C:FA:CE:8A:8E:F1:9D:EE:A7:FA:CA:A1:64:D7:B8:2A:0C:EF:69
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       0196BB928B5F1F9A30534F6506A79AE35515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          153B
Signing time:             Sat 10 May 2025 19:01:05 +0000
Manifest this update:     Sat 10 May 2025 19:01:05 +0000
Manifest next update:     Sun 11 May 2025 19:01:05 +0000
Files and hashes:         1: 4y-HwXvA0OxK3vVdPd5A33rGg9Q.roa (hash: gzORbcgXYU+qNBe8rAH5Phv3POsitSIbAnxxOJbLq5U=)
                          2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: 0bhcUXE8/YpcfQBnX1fjcXQAtrhEja1z+khY5eAgTx0=)
                          3: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (hash: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=)
                          4: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (hash: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=)
                          5: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (hash: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=)
                          6: ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa (hash: D+kp5S3EtYZJrj3NV0J9bAjz4ni5Vdza3meqOp3xMyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:8b:5f:1f:9a:30:53:4f:65:06:a7:9a:e3:55:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: May 10 19:01:05 2025 GMT
            Not After : May 11 19:01:05 2025 GMT
        Subject: CN=489cface8a8ef19deea7facaa164d7b82a0cef69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:30:13:e7:b4:77:1c:15:cd:b6:92:19:1a:
                    84:bb:bf:77:f0:e0:7a:33:6a:46:a9:9f:fc:2a:4e:
                    aa:cd:8d:e7:76:ac:d1:8e:90:48:c2:bd:44:80:e1:
                    bb:25:b0:60:68:c1:70:b4:f4:78:bd:0b:87:e6:a2:
                    6d:09:f8:df:26:99:7e:02:51:a8:db:b8:5c:57:c6:
                    f7:eb:b4:70:fb:aa:d5:fd:5b:78:97:1d:79:cf:d5:
                    e2:1c:ab:28:c6:3e:34:2b:b0:5a:64:47:07:57:cd:
                    49:4c:02:36:a1:e1:60:ef:4e:b7:41:57:9b:b2:b4:
                    cb:ef:8b:fb:24:74:b3:7e:80:c1:d0:bf:3c:81:57:
                    6f:88:0a:fb:19:1c:52:54:23:89:b3:73:7a:a1:08:
                    1c:ff:f1:e8:68:ea:3f:8c:4e:b3:1d:c9:a8:97:69:
                    a8:a2:5c:d7:0e:2e:15:41:00:80:ba:c4:8b:f5:c5:
                    5c:a2:9c:32:db:91:47:4d:12:d1:54:f7:e8:a9:f1:
                    4d:fd:50:22:92:8a:5c:1c:c4:04:72:cf:f1:76:11:
                    0e:35:c7:ee:af:89:50:d9:63:77:dc:48:b2:08:56:
                    38:99:1b:a7:d7:b5:af:23:18:60:31:e7:df:73:ff:
                    59:4f:86:57:10:75:f4:40:d1:96:fe:19:59:d7:97:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9C:FA:CE:8A:8E:F1:9D:EE:A7:FA:CA:A1:64:D7:B8:2A:0C:EF:69
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:61:40:3e:2c:61:ea:bd:36:be:dc:de:9e:3c:b5:c1:59:
         d7:a0:54:a3:5b:ca:cd:e1:e8:f4:2d:c3:46:7e:15:c0:5c:d5:
         2c:78:b6:b6:d1:d9:d3:4d:b0:af:5c:e6:d8:db:18:0c:ad:e0:
         c8:12:a6:fd:7f:5f:af:57:8c:07:22:e2:53:eb:08:37:0d:2e:
         81:09:90:01:69:f4:cb:8a:53:33:ee:52:e2:cf:a0:e0:2d:8f:
         c4:d9:83:c3:08:df:a2:aa:bd:02:17:6f:1d:cd:92:77:ff:6e:
         43:96:08:cf:a1:74:72:da:da:8d:d4:50:84:b0:77:ca:f0:28:
         a3:a8:28:d5:c3:56:ad:a3:76:49:27:3e:e0:9f:0e:f3:b4:70:
         e1:44:09:71:fa:bf:49:fb:37:94:9b:2d:46:0b:8d:e0:9e:30:
         c0:31:83:da:89:38:7d:91:20:31:fa:5f:a8:35:6a:c0:9a:4b:
         68:e3:bf:15:93:9f:9f:77:89:b8:d0:37:d9:dc:25:fe:8d:a2:
         de:2f:f3:47:0b:54:a7:6a:04:73:34:a4:2c:a4:e5:ee:f3:23:
         12:df:bd:b1:3b:e7:1b:40:ab:96:5e:af:d1:42:40:63:97:99:
         d1:a0:51:f4:b0:de:31:67:1c:26:1e:91:07:99:17:ba:46:fd:
         47:95:ed:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kotfH5owU09lBqea41UVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk
OWJlMWQwHhcNMjUwNTEwMTkwMTA1WhcNMjUwNTExMTkwMTA1WjAzMTEwLwYDVQQD
Eyg0ODljZmFjZThhOGVmMTlkZWVhN2ZhY2FhMTY0ZDdiODJhMGNlZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktIwE+e0dxwVzbaSGRqEu7938OB6
M2pGqZ/8Kk6qzY3ndqzRjpBIwr1EgOG7JbBgaMFwtPR4vQuH5qJtCfjfJpl+AlGo
27hcV8b367Rw+6rV/Vt4lx15z9XiHKsoxj40K7BaZEcHV81JTAI2oeFg7063QVeb
srTL74v7JHSzfoDB0L88gVdviAr7GRxSVCOJs3N6oQgc//HoaOo/jE6zHcmol2mo
olzXDi4VQQCAusSL9cVcopwy25FHTRLRVPfoqfFN/VAikopcHMQEcs/xdhEONcfu
r4lQ2WN33EiyCFY4mRun17WvIxhgMeffc/9ZT4ZXEHX0QNGW/hlZ15dJsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEic+s6KjvGd7qf6yqFk17gqDO9pMB8GA1UdIwQY
MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct
N2EwMzRkMTcwYjg1LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1
LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarNhQD4s
Yeq9Nr7c3p48tcFZ16BUo1vKzeHo9C3DRn4VwFzVLHi2ttHZ002wr1zm2NsYDK3g
yBKm/X9fr1eMByLiU+sINw0ugQmQAWn0y4pTM+5S4s+g4C2PxNmDwwjfoqq9Ahdv
Hc2Sd/9uQ5YIz6F0ctrajdRQhLB3yvAoo6go1cNWraN2SSc+4J8O87Rw4UQJcfq/
Sfs3lJstRguN4J4wwDGD2ok4fZEgMfpfqDVqwJpLaOO/FZOfn3eJuNA32dwl/o2i
3i/zRwtUp2oEczSkLKTl7vMjEt+9sTvnG0Crll6v0UJAY5eZ0aBR9LDeMWccJh6R
B5kXukb9R5XtUA==
-----END CERTIFICATE-----
Generated at Sun May 11 00:44:02 2025 by rpki-client