Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
File:                     61AMkAIyHwOWRYNxC3uqRZc0EhM.mft (raw, json)
Hash identifier:          TNOTAldBMDQHqMCNYeXwEhGM7pkDgbKoMGjaR6Vf1gQ=
Subject key identifier:   F4:D8:AA:7E:0A:BF:B6:D2:B8:1F:5F:69:03:78:5A:ED:BC:16:5C:BA
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Certificate issuer:       /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial:       0196A49C5057AAD78938BBA88EBF5A65DB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
Manifest number:          152D
Signing time:             Tue 06 May 2025 08:00:29 +0000
Manifest this update:     Tue 06 May 2025 08:00:29 +0000
Manifest next update:     Wed 07 May 2025 08:00:29 +0000
Files and hashes:         1: 61AMkAIyHwOWRYNxC3uqRZc0EhM.crl (hash: Ca9fKZw5LqJbnFSmANjvb5ZmkvdlYYEtr9N2t+2s+9A=)
                          2: 6s1rAoY1cgsZglE9s92pMrhjc5Q.roa (hash: nkfFdPk5iNJ2P8OJWCdmalFNk/kh9hrsJictlP+YVtY=)
                          3: TGq58ZjTD-pqvSJbNFsZB_cZLb8.roa (hash: eFisfgLPIzcOnAx5sFvM7aa3CEnOvkni4lCvh6oymsc=)
                          4: UJ_XpDmmIDl8LNm-we0fMHDUKHo.roa (hash: HUV+zXa5m96O5QiGf90TomYx4xutIIrNWiXFbD6WTuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:9c:50:57:aa:d7:89:38:bb:a8:8e:bf:5a:65:db:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb500c9002321f03964583710b7baa4597341213
        Validity
            Not Before: May  6 08:00:29 2025 GMT
            Not After : May  7 08:00:29 2025 GMT
        Subject: CN=f4d8aa7e0abfb6d2b81f5f6903785aedbc165cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:f8:2b:6b:c4:c6:12:a4:d4:eb:b8:1e:c4:
                    07:b8:4c:2e:ae:c4:91:9d:66:f4:67:36:14:01:de:
                    7c:96:ca:df:b0:54:be:5d:7a:61:08:60:12:b1:be:
                    11:eb:86:21:b6:2f:6d:2f:1c:85:75:7a:02:f7:4d:
                    49:2b:c1:ee:43:08:0b:55:39:07:e2:fe:11:85:e3:
                    3a:19:1a:f5:7f:cf:cd:8c:9d:26:2d:c5:9b:77:e8:
                    0b:dc:e1:37:06:01:75:92:8e:34:a2:31:12:64:90:
                    e2:1f:ed:ba:4a:0e:92:2e:34:65:ce:ff:d3:3e:0c:
                    21:d4:cd:c5:67:c7:cc:e1:a3:a0:b3:5e:c5:3f:4b:
                    34:67:8a:a5:ce:1e:0b:cc:6b:b2:60:2c:39:93:6f:
                    0a:e1:0d:3b:fd:46:a3:8b:92:35:52:d0:dc:6b:ef:
                    5a:be:50:fc:7e:ae:5c:fa:95:8b:9b:e3:ed:88:2b:
                    f0:bc:87:40:08:a6:eb:7c:76:4f:ac:3b:28:cc:73:
                    be:22:fe:5a:69:74:7b:e2:8c:d1:75:a9:9d:dd:1e:
                    0c:0f:f8:6a:68:93:40:6b:1e:0e:b4:42:94:e7:35:
                    92:b6:95:40:8a:60:94:06:fd:8e:62:dc:cb:b3:29:
                    b4:e8:cc:5e:df:93:f5:2b:e4:f0:a0:c8:f9:49:86:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:AA:7E:0A:BF:B6:D2:B8:1F:5F:69:03:78:5A:ED:BC:16:5C:BA
            X509v3 Authority Key Identifier:
                keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:66:eb:bb:ce:95:86:55:f3:94:45:5e:b6:e7:ac:32:fe:
         63:ad:7b:4a:61:cb:08:88:f3:ff:4f:bc:ca:aa:67:60:41:fc:
         70:66:b9:2f:2e:82:20:c9:27:3e:d6:86:c8:80:fe:a1:b3:2a:
         ee:54:03:d4:e4:36:4f:6e:f9:05:22:ec:4f:7b:da:d2:dc:6e:
         bc:e5:ca:70:71:bb:08:8c:f5:46:3d:9b:2f:3e:2a:bf:7e:bc:
         a4:90:31:8d:21:a7:eb:92:b9:fa:fe:a3:e9:64:8b:e5:a3:f3:
         42:cc:94:e8:28:c6:e3:13:26:38:f7:b8:d6:e0:f9:17:df:cf:
         a8:22:e3:cb:69:38:94:c1:19:d6:c7:ed:d4:af:31:33:79:19:
         6e:9c:c8:d4:8e:b0:a0:05:f0:62:a7:be:87:45:57:49:b9:0c:
         34:12:d5:39:fd:a7:e7:e1:0c:ab:23:82:ca:67:8c:f7:5e:18:
         02:c9:71:e4:86:2e:ab:6c:cd:5e:19:2a:fa:80:a1:14:bb:53:
         4b:c8:73:7f:49:50:44:7b:4d:6d:f2:16:2b:cd:a1:0f:b9:33:
         c2:ed:69:1d:cb:e2:d3:eb:12:97:f6:cb:52:5c:6f:46:d6:72:
         e3:8f:bb:a7:a2:87:a1:b7:42:bd:69:da:79:44:d7:c7:72:7c:
         10:3b:f5:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaknFBXqteJOLuojr9aZdsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz
NDEyMTMwHhcNMjUwNTA2MDgwMDI5WhcNMjUwNTA3MDgwMDI5WjAzMTEwLwYDVQQD
EyhmNGQ4YWE3ZTBhYmZiNmQyYjgxZjVmNjkwMzc4NWFlZGJjMTY1Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWT4K2vExhKk1Ou4HsQHuEwursSR
nWb0ZzYUAd58lsrfsFS+XXphCGASsb4R64Yhti9tLxyFdXoC901JK8HuQwgLVTkH
4v4RheM6GRr1f8/NjJ0mLcWbd+gL3OE3BgF1ko40ojESZJDiH+26Sg6SLjRlzv/T
Pgwh1M3FZ8fM4aOgs17FP0s0Z4qlzh4LzGuyYCw5k28K4Q07/Uaji5I1UtDca+9a
vlD8fq5c+pWLm+PtiCvwvIdACKbrfHZPrDsozHO+Iv5aaXR74ozRdamd3R4MD/hq
aJNAax4OtEKU5zWStpVAimCUBv2OYtzLsym06Mxe35P1K+TwoMj5SYYAhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTYqn4Kv7bSuB9faQN4Wu28Fly6MB8GA1UdIwQY
MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt
NGE2ODU5NjJmM2U4LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4
LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnxm67vO
lYZV85RFXrbnrDL+Y617SmHLCIjz/0+8yqpnYEH8cGa5Ly6CIMknPtaGyID+obMq
7lQD1OQ2T275BSLsT3va0txuvOXKcHG7CIz1Rj2bLz4qv368pJAxjSGn65K5+v6j
6WSL5aPzQsyU6CjG4xMmOPe41uD5F9/PqCLjy2k4lMEZ1sft1K8xM3kZbpzI1I6w
oAXwYqe+h0VXSbkMNBLVOf2n5+EMqyOCymeM914YAslx5IYuq2zNXhkq+oChFLtT
S8hzf0lQRHtNbfIWK82hD7kzwu1pHcvi0+sSl/bLUlxvRtZy44+7p6KHobdCvWna
eUTXx3J8EDv1Vw==
-----END CERTIFICATE-----
Generated at Tue May 6 17:50:15 2025 by rpki-client