Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
File:                     FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft (raw, json)
Hash identifier:          RYRUJ7i8BK31x96UGlyvDYRh34DRWY2ltvSEymz9jbA=
Subject key identifier:   53:5F:72:26:55:18:6B:90:0F:EB:D2:31:CC:5F:F7:2C:09:58:E8:7C
Authority key identifier: 15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
Certificate issuer:       /CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Certificate serial:       0196B7EC338884118E33DD6F5BC4E4DA6A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
Manifest number:          152F
Signing time:             Sat 10 May 2025 02:00:32 +0000
Manifest this update:     Sat 10 May 2025 02:00:32 +0000
Manifest next update:     Sun 11 May 2025 02:00:32 +0000
Files and hashes:         1: FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl (hash: 65OZE5ijc24ii3OpxijWKgy4jflSYSlCDK0uKU9Zfu4=)
                          2: PyQ8fu5pDLbvLBuzcMMxIAkMsmo.roa (hash: mZg5dPb6uDIAF/lQgfs5kl+MW8uT39zjW3CSCFzbS/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:33:88:84:11:8e:33:dd:6f:5b:c4:e4:da:6a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
        Validity
            Not Before: May 10 02:00:32 2025 GMT
            Not After : May 11 02:00:32 2025 GMT
        Subject: CN=535f722655186b900febd231cc5ff72c0958e87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:d1:2b:94:f4:3d:cf:4f:01:a0:d7:9c:27:
                    63:f0:12:b5:c4:3c:ae:da:20:5a:1e:61:62:3b:43:
                    e7:27:7f:7d:72:60:7a:01:f6:29:39:92:6f:b1:c2:
                    86:b8:20:d4:c6:19:79:74:89:0a:b8:39:38:20:81:
                    6a:1e:7e:f5:34:97:9f:9c:75:8d:13:84:7b:76:e0:
                    51:b0:27:7a:93:58:42:19:dc:98:d1:be:53:39:8d:
                    75:2d:0a:5e:b0:07:c0:ce:4b:10:b2:0c:5c:0d:62:
                    36:45:37:b1:b1:cd:de:12:c2:51:4b:f9:50:ee:e3:
                    6c:35:03:18:de:9d:aa:77:dd:ca:42:8c:5b:91:45:
                    65:1c:75:42:a7:93:40:91:47:ae:29:eb:2b:a3:56:
                    21:9e:89:41:1c:be:56:6f:7f:de:f3:b9:b1:49:2d:
                    3f:40:13:64:c5:a1:05:0c:02:45:5e:df:72:c3:37:
                    9c:dc:90:b3:d4:99:31:18:a4:11:14:ba:da:61:e9:
                    1b:54:bd:de:ac:fe:46:12:9f:40:8c:a2:e5:eb:f6:
                    05:99:41:73:45:82:b9:a5:ff:a0:ad:1c:0b:a6:e3:
                    0f:12:da:bd:c0:ec:3f:4c:12:58:17:d9:ac:ca:09:
                    48:76:1b:34:af:56:5e:9c:8a:fc:a9:2f:d4:e2:3e:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5F:72:26:55:18:6B:90:0F:EB:D2:31:CC:5F:F7:2C:09:58:E8:7C
            X509v3 Authority Key Identifier:
                keyid:15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f6:01:12:d4:4f:41:a8:0c:d3:f6:25:c5:21:77:62:db:0e:1c:
         4b:39:22:29:0e:ca:6b:6b:17:37:4d:ad:cd:e6:9b:db:20:a7:
         f3:1a:b4:2f:66:cc:1e:bc:83:0c:2e:01:f8:d2:66:a5:1b:ec:
         4e:5a:8b:bb:ae:7e:99:be:aa:bd:f1:69:84:bb:19:00:f2:ef:
         0b:9f:26:69:22:99:5a:54:a7:2d:05:90:c5:86:88:9b:1e:cc:
         35:63:0a:34:c3:5e:33:da:96:da:85:5c:00:42:e6:04:d3:ed:
         36:1a:0b:45:23:07:ff:99:d9:ac:57:6d:6f:22:42:2b:58:68:
         cc:25:6e:4e:85:cc:ec:be:88:8d:2b:49:36:4a:04:88:f6:d3:
         c8:b7:4a:f1:cf:b2:7a:b5:22:a6:f8:bf:5f:9f:77:cc:05:ae:
         8b:78:2b:c4:9e:e5:8d:be:ef:aa:d8:b8:74:14:02:2c:4c:ad:
         83:f3:bc:b0:2d:31:3a:bc:fb:a5:67:5d:63:a2:8b:f0:02:e2:
         89:2f:e3:9c:92:ea:55:82:b0:51:5e:9f:77:7c:14:ad:d6:18:
         85:74:9b:cd:18:42:32:8d:4b:0d:cf:3f:14:09:8c:b8:19:71:
         5a:51:1e:79:b9:bf:e4:86:1d:95:7a:51:12:0f:f6:0e:82:12:
         33:33:8b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa37DOIhBGOM91vW8Tk2mpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MGI3ZmY5YmMxOTYyZWJjZWMwYmU0MzVjY2MyNzJkNzUx
YTFjMTYwHhcNMjUwNTEwMDIwMDMyWhcNMjUwNTExMDIwMDMyWjAzMTEwLwYDVQQD
Eyg1MzVmNzIyNjU1MTg2YjkwMGZlYmQyMzFjYzVmZjcyYzA5NThlODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5XRK5T0Pc9PAaDXnCdj8BK1xDyu
2iBaHmFiO0PnJ399cmB6AfYpOZJvscKGuCDUxhl5dIkKuDk4IIFqHn71NJefnHWN
E4R7duBRsCd6k1hCGdyY0b5TOY11LQpesAfAzksQsgxcDWI2RTexsc3eEsJRS/lQ
7uNsNQMY3p2qd93KQoxbkUVlHHVCp5NAkUeuKesro1YhnolBHL5Wb3/e87mxSS0/
QBNkxaEFDAJFXt9ywzec3JCz1JkxGKQRFLraYekbVL3erP5GEp9AjKLl6/YFmUFz
RYK5pf+grRwLpuMPEtq9wOw/TBJYF9msyglIdhs0r1ZenIr8qS/U4j5fsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNfciZVGGuQD+vSMcxf9ywJWOh8MB8GA1UdIwQY
MBaAFBULf/m8GWLrzsC+Q1zMJy11GhwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUt
MTBjZDIwZmFiMzg2LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUtMTBjZDIwZmFiMzg2
LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9gES1E9B
qAzT9iXFIXdi2w4cSzkiKQ7Ka2sXN02tzeab2yCn8xq0L2bMHryDDC4B+NJmpRvs
TlqLu65+mb6qvfFphLsZAPLvC58maSKZWlSnLQWQxYaImx7MNWMKNMNeM9qW2oVc
AELmBNPtNhoLRSMH/5nZrFdtbyJCK1hozCVuToXM7L6IjStJNkoEiPbTyLdK8c+y
erUipvi/X593zAWui3grxJ7ljb7vqti4dBQCLEytg/O8sC0xOrz7pWddY6KL8ALi
iS/jnJLqVYKwUV6fd3wUrdYYhXSbzRhCMo1LDc8/FAmMuBlxWlEeebm/5IYdlXpR
Eg/2DoISMzOLug==
-----END CERTIFICATE-----
Generated at Sat May 10 07:09:43 2025 by rpki-client