Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File:                     flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier:          AO84KI7f3XKtx4w2qnz1KCfIuE74nF3yjRZe6od1EDI=
Subject key identifier:   CE:50:F0:92:9F:49:CC:64:6E:0F:A4:B8:ED:62:91:2C:AC:9E:9F:B4
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer:       /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial:       0196B66BE46CFE70923C38ED21355A923E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number:          152F
Signing time:             Fri 09 May 2025 19:00:46 +0000
Manifest this update:     Fri 09 May 2025 19:00:46 +0000
Manifest next update:     Sat 10 May 2025 19:00:46 +0000
Files and hashes:         1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: muPNKFns46FmDqhsu5dxCB56kzlxfWJ/AI2Jcuypc5o=)
                          2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:6b:e4:6c:fe:70:92:3c:38:ed:21:35:5a:92:3e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
        Validity
            Not Before: May  9 19:00:46 2025 GMT
            Not After : May 10 19:00:46 2025 GMT
        Subject: CN=ce50f0929f49cc646e0fa4b8ed62912cac9e9fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:51:cd:01:9f:a3:8a:16:1f:a6:8b:c5:12:
                    51:40:ff:3c:a4:1a:8b:99:68:35:fe:f1:37:d9:f3:
                    fc:de:c7:4a:97:03:5a:ee:14:bc:05:fb:d2:63:c4:
                    21:b3:63:87:51:79:dc:2e:4f:a5:d7:3d:67:2e:d4:
                    11:50:a0:14:29:db:e2:70:b4:fd:d7:c2:83:80:7b:
                    a8:c6:d5:dd:52:18:2a:24:d7:d7:35:17:da:ac:c5:
                    ad:bf:41:ee:bb:77:07:d3:c7:b7:eb:cf:0d:ac:a2:
                    2a:f0:7d:4f:cf:6a:7f:92:25:12:3d:ec:e2:84:77:
                    c6:79:33:f1:21:88:02:69:87:6f:ab:32:5f:f9:a5:
                    25:8c:fd:9f:dd:2d:cd:a2:c9:b4:46:cb:ce:53:4a:
                    51:47:18:7b:d3:0c:59:76:8e:a8:50:e3:f0:7d:c5:
                    d8:79:30:82:26:13:a0:4c:3d:75:1a:a8:4c:b7:60:
                    f1:cd:51:de:5c:cf:c3:7e:aa:0e:68:d6:c6:f8:6e:
                    4c:c8:87:8b:90:91:fd:b7:db:34:12:a3:fc:56:c8:
                    07:60:ed:44:11:25:39:36:61:ce:37:e9:66:26:8b:
                    71:83:05:e0:fe:24:6a:86:ad:47:0e:19:1f:64:91:
                    c5:92:88:e0:1f:31:24:68:c8:f2:89:3a:63:46:ac:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:50:F0:92:9F:49:CC:64:6E:0F:A4:B8:ED:62:91:2C:AC:9E:9F:B4
            X509v3 Authority Key Identifier:
                keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:b2:10:d5:1a:e9:9c:dd:69:f5:14:26:3e:ff:fd:ef:ba:
         6d:30:fe:e9:c3:57:ae:1b:55:88:79:7c:c1:27:8f:5c:87:74:
         69:7b:d7:a1:ee:33:b6:2a:a7:8b:2d:71:76:2a:e8:65:7e:8f:
         40:a5:4c:68:52:bd:b7:b4:e6:f2:86:6c:f1:12:23:5e:85:29:
         12:7f:74:82:1f:2d:c8:05:ff:52:42:10:26:fc:48:ed:c5:83:
         64:a7:56:d0:c7:ac:0d:7f:a9:57:df:3d:3d:6c:e0:88:a4:00:
         01:65:b3:7b:72:31:b0:6b:05:7f:1e:80:1d:88:fe:d7:0d:f2:
         e3:46:e4:8a:e6:16:2b:99:7f:1c:8a:4c:ba:5e:97:62:3b:68:
         bb:a8:b0:d6:dd:c3:00:35:f8:a3:0b:63:72:70:c3:5c:ba:19:
         09:0c:b6:3d:5d:09:aa:1b:69:4c:e9:b7:35:81:68:d6:8b:5f:
         37:f9:0f:fa:ef:cf:7f:11:55:b9:78:5e:90:4f:ef:07:1c:90:
         ed:20:1e:3d:97:8d:43:d1:cb:5e:5e:e3:ce:21:bf:e5:5d:fb:
         ae:83:ec:fe:37:04:89:a4:ff:07:97:9b:45:28:c8:2c:07:7a:
         10:47:53:64:ed:44:58:c5:ce:6b:7e:19:a4:9d:4f:42:d4:7e:
         00:62:7f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2a+Rs/nCSPDjtITVakj4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTJmYWI2ZDMyMDZlYjYwYTMxZGI5NmM3MmQ5NGZjMjQy
YzBhMDgwHhcNMjUwNTA5MTkwMDQ2WhcNMjUwNTEwMTkwMDQ2WjAzMTEwLwYDVQQD
EyhjZTUwZjA5MjlmNDljYzY0NmUwZmE0YjhlZDYyOTEyY2FjOWU5ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH9RzQGfo4oWH6aLxRJRQP88pBqL
mWg1/vE32fP83sdKlwNa7hS8BfvSY8Qhs2OHUXncLk+l1z1nLtQRUKAUKdvicLT9
18KDgHuoxtXdUhgqJNfXNRfarMWtv0Huu3cH08e3688NrKIq8H1Pz2p/kiUSPezi
hHfGeTPxIYgCaYdvqzJf+aUljP2f3S3Nosm0RsvOU0pRRxh70wxZdo6oUOPwfcXY
eTCCJhOgTD11GqhMt2DxzVHeXM/DfqoOaNbG+G5MyIeLkJH9t9s0EqP8VsgHYO1E
ESU5NmHON+lmJotxgwXg/iRqhq1HDhkfZJHFkojgHzEkaMjyiTpjRqzHGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5Q8JKfScxkbg+kuO1ikSysnp+0MB8GA1UdIwQY
MBaAFH5S+rbTIG62CjHblsctlPwkLAoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjIt
YTVjOTNhN2I5ZmE1LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjItYTVjOTNhN2I5ZmE1
LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHiyENUa
6ZzdafUUJj7//e+6bTD+6cNXrhtViHl8wSePXId0aXvXoe4ztiqniy1xdiroZX6P
QKVMaFK9t7Tm8oZs8RIjXoUpEn90gh8tyAX/UkIQJvxI7cWDZKdW0MesDX+pV989
PWzgiKQAAWWze3IxsGsFfx6AHYj+1w3y40bkiuYWK5l/HIpMul6XYjtou6iw1t3D
ADX4owtjcnDDXLoZCQy2PV0JqhtpTOm3NYFo1otfN/kP+u/PfxFVuXhekE/vBxyQ
7SAePZeNQ9HLXl7jziG/5V37roPs/jcEiaT/B5ebRSjILAd6EEdTZO1EWMXOa34Z
pJ1PQtR+AGJ/pg==
-----END CERTIFICATE-----
Generated at Fri May 9 21:59:51 2025 by rpki-client