Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File:                     EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier:          Wm8SZUrPLXhvlrwVVqBKgXWNKo2t4FymaA7nZsi0mPg=
Subject key identifier:   DC:80:E9:0A:49:54:28:02:73:0E:59:5A:24:B7:37:F2:DE:C3:7B:34
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer:       /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial:       0196B333E90863C92ACBDF9127C4512676BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number:          152F
Signing time:             Fri 09 May 2025 04:00:45 +0000
Manifest this update:     Fri 09 May 2025 04:00:45 +0000
Manifest next update:     Sat 10 May 2025 04:00:45 +0000
Files and hashes:         1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: wgzcrDyA/K1TLecBUroq5N4WV8Hgtj9O3PtSWTMz0Ko=)
                          2: c5PalyNSyST_aAI1KT3QGDFOwJs.roa (hash: mO2ZdsVC3fTegCqI2v7PXch94it/WJD1mL1+9bQtLsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:33:e9:08:63:c9:2a:cb:df:91:27:c4:51:26:76:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
        Validity
            Not Before: May  9 04:00:45 2025 GMT
            Not After : May 10 04:00:45 2025 GMT
        Subject: CN=dc80e90a49542802730e595a24b737f2dec37b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:f0:21:5b:2c:ed:c8:8d:f7:87:77:a7:eb:
                    6d:e3:6d:70:80:cc:a6:e3:3f:53:f2:90:85:39:70:
                    d1:c7:16:06:f6:f9:d5:f0:f3:c8:99:ef:e3:dc:7b:
                    d1:e2:de:3b:57:e3:e7:33:28:c5:59:c6:61:3e:c8:
                    f6:40:b9:a4:fc:90:db:55:7a:17:88:db:06:86:f3:
                    38:fe:07:0f:c6:b7:1e:1a:eb:69:f9:3e:9c:41:ef:
                    36:9e:9d:16:01:d6:5a:c5:7f:35:8f:a0:cf:fe:22:
                    8f:dd:5c:03:69:b4:37:c1:9a:38:7a:a2:bc:50:bc:
                    aa:da:09:cb:f7:58:de:84:45:18:45:0c:b8:2d:cc:
                    38:b2:bd:8c:a7:29:9f:12:39:5b:c4:38:60:93:89:
                    5c:68:2d:ea:cb:b5:00:af:96:d0:23:b7:52:4c:33:
                    f7:a3:35:e3:df:1f:82:02:b5:c1:a4:55:fe:ea:94:
                    9f:52:46:e8:2e:43:12:3c:ff:ef:8a:da:25:24:9d:
                    67:dd:32:49:4e:a7:ff:9b:a3:6c:34:a9:fc:e5:81:
                    65:17:3b:1f:55:8b:f3:1d:f2:b7:b6:19:23:97:56:
                    a1:93:9b:fa:1f:73:31:d7:be:f0:bc:4b:fb:d8:37:
                    31:a5:76:31:b9:ae:94:22:0d:f1:93:e7:e4:53:6a:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:E9:0A:49:54:28:02:73:0E:59:5A:24:B7:37:F2:DE:C3:7B:34
            X509v3 Authority Key Identifier:
                keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:59:21:98:00:10:b5:b6:8a:6e:49:ba:d0:be:f1:27:ce:4f:
         ba:9a:d8:a0:36:7b:a4:a9:2f:34:bc:97:0d:9e:82:4a:a4:81:
         1b:a6:40:6c:67:ea:83:25:13:b2:b3:d3:f7:f4:31:8a:2a:b6:
         35:30:d2:f5:81:d4:10:b4:17:97:b4:9b:2f:3a:31:91:07:78:
         16:0d:da:0e:f8:11:45:46:25:2f:1f:cb:a4:b3:0f:d8:1e:ef:
         53:21:9f:ea:2a:63:2b:73:4f:a0:a8:39:59:2d:af:c2:c4:ba:
         3e:a6:ca:67:67:d4:87:6e:f7:34:16:e9:48:d3:0f:ac:95:b2:
         c2:eb:79:a4:51:f6:87:e2:19:99:08:7e:5b:6d:ab:cb:21:8c:
         dd:94:ef:c4:cd:cf:6d:52:da:16:8a:76:ee:9d:7f:a8:67:b3:
         bc:74:8f:70:9a:de:0e:fc:98:e5:d9:e1:0c:eb:27:9a:0b:e3:
         2f:d1:95:98:c9:bb:a9:30:2e:3a:6c:67:da:02:76:53:9b:5d:
         0f:ed:fd:53:fb:98:c8:64:aa:68:c4:cd:91:12:9d:e0:9e:4d:
         fb:16:34:a1:9d:3d:ea:61:cc:ce:1d:82:4d:63:24:61:54:eb:
         9b:f4:b4:84:9b:47:cb:83:d9:eb:7f:87:d4:35:20:b6:20:93:
         4f:e5:7e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazM+kIY8kqy9+RJ8RRJna9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZGQzYTcyZjc5MGIyNWVlM2QyMjlhYzk5ZjY5YTcxYmYx
ZDgyOTQwHhcNMjUwNTA5MDQwMDQ1WhcNMjUwNTEwMDQwMDQ1WjAzMTEwLwYDVQQD
EyhkYzgwZTkwYTQ5NTQyODAyNzMwZTU5NWEyNGI3MzdmMmRlYzM3YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i7wIVss7ciN94d3p+tt421wgMym
4z9T8pCFOXDRxxYG9vnV8PPIme/j3HvR4t47V+PnMyjFWcZhPsj2QLmk/JDbVXoX
iNsGhvM4/gcPxrceGutp+T6cQe82np0WAdZaxX81j6DP/iKP3VwDabQ3wZo4eqK8
ULyq2gnL91jehEUYRQy4Lcw4sr2MpymfEjlbxDhgk4lcaC3qy7UAr5bQI7dSTDP3
ozXj3x+CArXBpFX+6pSfUkboLkMSPP/vitolJJ1n3TJJTqf/m6NsNKn85YFlFzsf
VYvzHfK3thkjl1ahk5v6H3Mx177wvEv72DcxpXYxua6UIg3xk+fkU2rniwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyA6QpJVCgCcw5ZWiS3N/Lew3s0MB8GA1UdIwQY
MBaAFBDdOnL3kLJe49IprJn2mnG/HYKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODkt
OWNiMjYxZTY2NzYyLzEvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODktOWNiMjYxZTY2NzYy
LzEvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElkhmAAQ
tbaKbkm60L7xJ85PuprYoDZ7pKkvNLyXDZ6CSqSBG6ZAbGfqgyUTsrPT9/Qxiiq2
NTDS9YHUELQXl7SbLzoxkQd4Fg3aDvgRRUYlLx/LpLMP2B7vUyGf6ipjK3NPoKg5
WS2vwsS6PqbKZ2fUh273NBbpSNMPrJWywut5pFH2h+IZmQh+W22ryyGM3ZTvxM3P
bVLaFop27p1/qGezvHSPcJreDvyY5dnhDOsnmgvjL9GVmMm7qTAuOmxn2gJ2U5td
D+39U/uYyGSqaMTNkRKd4J5N+xY0oZ096mHMzh2CTWMkYVTrm/S0hJtHy4PZ63+H
1DUgtiCTT+V+rQ==
-----END CERTIFICATE-----
Generated at Fri May 9 12:37:13 2025 by rpki-client