Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File:                     oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier:          kaQttL51u5Xe8RvdygoxQDopo0upio/g3VO+aW7v8X4=
Subject key identifier:   4E:B7:B5:03:D8:9A:2A:58:88:9A:6D:F8:C7:F2:88:E2:A6:41:45:C2
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer:       /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial:       0196A2771F5BEB635C908B1A1F0154A5F04C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number:          152D
Signing time:             Mon 05 May 2025 22:00:37 +0000
Manifest this update:     Mon 05 May 2025 22:00:37 +0000
Manifest next update:     Tue 06 May 2025 22:00:37 +0000
Files and hashes:         1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
                          2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
                          3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
                          4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: VHFfR0Lu/jnjltdppLf8ePSnLgP3armp9FJwZzRsJvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:1f:5b:eb:63:5c:90:8b:1a:1f:01:54:a5:f0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
        Validity
            Not Before: May  5 22:00:37 2025 GMT
            Not After : May  6 22:00:37 2025 GMT
        Subject: CN=4eb7b503d89a2a58889a6df8c7f288e2a64145c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:15:3e:c9:8e:4a:b3:1d:2d:2a:14:a4:91:
                    78:4b:1c:5b:3e:e5:7f:3a:66:08:bc:2d:ef:52:ea:
                    ce:bd:91:d9:6b:aa:fe:ba:0f:31:82:d5:59:aa:8d:
                    da:f5:2f:98:b9:c7:03:9e:04:f6:6d:c1:51:c0:c8:
                    8a:7c:f8:40:b8:39:ee:fb:a4:6c:61:e2:51:e4:ea:
                    4b:b6:0a:bb:38:e3:8e:4a:59:2d:fa:ef:90:d0:14:
                    ef:02:ca:79:b3:68:29:88:04:d0:29:e8:3b:8e:37:
                    53:ae:d3:f4:85:20:fb:d1:30:ba:fe:74:ab:4b:bc:
                    b1:9c:c9:6f:4d:7f:dc:78:d2:64:b8:51:72:61:16:
                    f8:d8:2f:0e:42:65:ab:bd:f7:6a:ff:cb:46:55:5c:
                    d8:94:0c:91:4c:82:96:ce:7b:61:e9:dc:ce:9c:c0:
                    e8:80:a3:ed:e2:de:1b:c3:b1:45:c2:fc:f7:93:ad:
                    5e:a6:7b:fd:fc:3c:64:58:0d:2b:8a:f9:69:0f:a2:
                    f0:85:fc:03:cc:4b:c5:dd:9e:ff:16:7e:c3:2f:ad:
                    df:d4:1c:cd:c0:71:22:c4:3b:26:6d:7f:0e:8d:9d:
                    c2:ce:59:44:45:73:83:3b:08:43:27:d3:87:c2:18:
                    18:a3:fc:b1:d6:3e:72:f8:c3:04:6a:81:19:c5:cd:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B7:B5:03:D8:9A:2A:58:88:9A:6D:F8:C7:F2:88:E2:A6:41:45:C2
            X509v3 Authority Key Identifier:
                keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ff:e9:13:94:16:c4:66:e1:ed:8d:ca:bc:fa:63:53:af:01:
         bc:fc:68:f6:21:77:c2:c6:c2:37:83:82:26:01:2d:9e:fc:71:
         56:de:9a:71:25:8e:bc:dd:60:0a:51:a3:6a:22:23:d0:b5:08:
         91:7a:80:79:3e:39:e3:a4:61:8d:47:25:d3:68:ad:3e:21:7b:
         f6:b4:61:33:d5:a9:ca:cc:c4:80:61:ff:87:da:cc:6c:c7:a7:
         bf:76:3b:96:bc:02:e3:3c:c3:cf:b3:fc:4d:5b:e3:8c:29:df:
         13:34:df:ad:81:f9:19:9f:23:a8:a0:03:15:35:c9:da:6f:ed:
         75:1a:d5:d2:2d:f0:7f:aa:c5:01:db:03:58:54:b7:5e:d9:85:
         3c:7d:d7:5b:88:ae:c6:73:4c:1e:ad:d4:6b:6f:ea:48:de:f1:
         3f:a2:9f:de:98:f3:eb:30:f5:5a:98:82:e6:c9:9b:01:9b:8f:
         c2:c0:7a:67:3d:9c:50:c5:8c:e9:e9:55:9f:89:f6:13:c7:00:
         f2:ab:11:fe:c3:d5:f0:7d:81:3c:ed:0e:6b:96:14:33:4c:ff:
         78:7a:2c:fd:33:65:b6:44:c4:d5:d3:ae:8d:7b:80:09:1d:27:
         a1:73:e8:a9:56:de:6f:5b:68:7f:4f:ca:f4:05:8a:dd:7c:2a:
         e7:6b:e4:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaidx9b62NckIsaHwFUpfBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNmIwZDhhYjQ5NDM2NTUwYjZhYmY0NWI3OTAzNWFlYzZh
ZmYyM2MwHhcNMjUwNTA1MjIwMDM3WhcNMjUwNTA2MjIwMDM3WjAzMTEwLwYDVQQD
Eyg0ZWI3YjUwM2Q4OWEyYTU4ODg5YTZkZjhjN2YyODhlMmE2NDE0NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx90VPsmOSrMdLSoUpJF4SxxbPuV/
OmYIvC3vUurOvZHZa6r+ug8xgtVZqo3a9S+YuccDngT2bcFRwMiKfPhAuDnu+6Rs
YeJR5OpLtgq7OOOOSlkt+u+Q0BTvAsp5s2gpiATQKeg7jjdTrtP0hSD70TC6/nSr
S7yxnMlvTX/ceNJkuFFyYRb42C8OQmWrvfdq/8tGVVzYlAyRTIKWznth6dzOnMDo
gKPt4t4bw7FFwvz3k61epnv9/DxkWA0rivlpD6LwhfwDzEvF3Z7/Fn7DL63f1BzN
wHEixDsmbX8OjZ3CzllERXODOwhDJ9OHwhgYo/yx1j5y+MMEaoEZxc0umQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE63tQPYmipYiJpt+MfyiOKmQUXCMB8GA1UdIwQY
MBaAFKFrDYq0lDZVC2q/RbeQNa7Gr/I8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUt
MTVjYzlkYzdiZDg3LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUtMTVjYzlkYzdiZDg3
LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP/pE5QW
xGbh7Y3KvPpjU68BvPxo9iF3wsbCN4OCJgEtnvxxVt6acSWOvN1gClGjaiIj0LUI
kXqAeT4546RhjUcl02itPiF79rRhM9WpyszEgGH/h9rMbMenv3Y7lrwC4zzDz7P8
TVvjjCnfEzTfrYH5GZ8jqKADFTXJ2m/tdRrV0i3wf6rFAdsDWFS3XtmFPH3XW4iu
xnNMHq3Ua2/qSN7xP6Kf3pjz6zD1WpiC5smbAZuPwsB6Zz2cUMWM6elVn4n2E8cA
8qsR/sPV8H2BPO0Oa5YUM0z/eHos/TNltkTE1dOujXuACR0noXPoqVbeb1tof0/K
9AWK3Xwq52vkgA==
-----END CERTIFICATE-----
Generated at Tue May 6 07:22:01 2025 by rpki-client