Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          cN6n0mqJOofTirLowQjxi32CdYblOI3x/lI4z8/XdSU=
Subject key identifier:   88:65:77:00:2C:A0:91:86:BA:71:6F:6F:18:37:6F:5A:34:99:A7:A6
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       0196AB42E7F2D0A892E6BDC320DD07B022DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          152E
Signing time:             Wed 07 May 2025 15:00:10 +0000
Manifest this update:     Wed 07 May 2025 15:00:10 +0000
Manifest next update:     Thu 08 May 2025 15:00:10 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: 7H8RaEzy2vG70pKivQwHxPi1TMaoZ8aPhqDKdWLhFAg=)
                          2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
                          3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
                          4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:42:e7:f2:d0:a8:92:e6:bd:c3:20:dd:07:b0:22:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: May  7 15:00:10 2025 GMT
            Not After : May  8 15:00:10 2025 GMT
        Subject: CN=886577002ca09186ba716f6f18376f5a3499a7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f4:6e:c2:eb:49:0b:aa:c7:63:a9:45:d5:6e:
                    f8:cf:1a:53:ee:a0:ad:c8:3c:88:b7:ac:09:a7:a4:
                    27:55:f7:dc:56:61:b3:d9:e5:e8:d7:0b:2d:e6:d2:
                    0c:e6:7e:1e:5f:76:9a:15:fe:cc:68:f5:46:a4:9f:
                    c5:e8:65:ff:40:b6:35:86:3e:ef:9f:67:f1:35:45:
                    5a:07:9f:c4:06:ce:56:57:0f:06:b3:c9:0a:b3:25:
                    99:8b:20:8d:ae:c3:2e:93:da:09:6a:4b:45:92:e0:
                    5e:a7:dd:e0:28:fd:86:55:6d:fe:87:87:62:fc:a3:
                    b7:8f:c8:2c:bf:75:bd:29:85:af:0f:59:e9:f6:02:
                    f0:29:89:37:d1:10:64:93:c3:a7:ea:d9:79:3b:89:
                    1f:aa:89:10:5f:15:b7:b3:07:c3:57:25:ab:28:db:
                    11:c5:54:4f:9b:f2:e8:e7:a1:ed:43:c9:ac:05:02:
                    b9:87:8e:6d:50:4d:3e:18:00:e2:8f:26:b3:8f:e1:
                    c9:7d:05:4f:ee:9f:6b:d1:55:6e:08:38:6c:ed:c1:
                    d8:e0:bc:52:c8:11:f8:0a:04:e1:c8:2c:3e:18:3c:
                    1f:a3:7f:7f:ba:93:aa:ce:2c:8a:fe:9e:35:ff:a4:
                    86:3a:4f:29:ba:c1:99:98:e1:8b:4f:af:0c:e4:47:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:65:77:00:2C:A0:91:86:BA:71:6F:6F:18:37:6F:5A:34:99:A7:A6
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:ab:e4:f5:29:e5:f2:44:1d:f3:2a:59:c4:21:6f:d7:43:
         15:3b:40:fa:ac:14:59:27:84:99:b0:e3:9f:07:06:4b:36:ba:
         2c:ef:1e:0b:37:50:e5:2a:b4:71:52:38:08:7f:5a:5d:6c:a2:
         37:de:6d:0a:d1:a0:f6:0c:73:51:3a:f0:4a:3b:a8:c9:3f:10:
         69:b9:a2:17:d8:ab:b1:fc:59:aa:5f:fe:48:9a:c8:10:ac:db:
         6e:c4:ba:29:e1:75:ba:28:bd:af:8d:5c:58:40:40:7e:b2:6e:
         f9:33:b9:55:25:a0:4b:07:68:5c:43:e5:ea:31:47:97:7a:d0:
         52:6c:56:5c:12:41:35:5a:2b:cc:03:26:51:48:08:b1:e3:30:
         91:99:ac:01:39:8b:7b:c5:a3:61:c6:ca:eb:70:ac:46:93:9e:
         e6:e2:9b:d3:67:c7:9a:83:a5:12:21:fb:63:e1:de:11:62:3c:
         55:fd:62:b3:f8:e2:92:26:df:43:b5:13:e2:43:c3:91:6c:80:
         0d:e4:54:45:c3:d2:7b:75:85:52:32:79:b4:b2:8e:90:95:07:
         df:26:04:ce:54:e0:d7:e0:26:89:4f:51:56:40:41:e3:5f:a3:
         b5:5f:f3:9c:1d:3b:97:94:79:1a:ca:56:de:4d:4a:75:88:db:
         d7:4e:8c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarQufy0KiS5r3DIN0HsCLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz
YThlMWQwHhcNMjUwNTA3MTUwMDEwWhcNMjUwNTA4MTUwMDEwWjAzMTEwLwYDVQQD
Eyg4ODY1NzcwMDJjYTA5MTg2YmE3MTZmNmYxODM3NmY1YTM0OTlhN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/RuwutJC6rHY6lF1W74zxpT7qCt
yDyIt6wJp6QnVffcVmGz2eXo1wst5tIM5n4eX3aaFf7MaPVGpJ/F6GX/QLY1hj7v
n2fxNUVaB5/EBs5WVw8Gs8kKsyWZiyCNrsMuk9oJaktFkuBep93gKP2GVW3+h4di
/KO3j8gsv3W9KYWvD1np9gLwKYk30RBkk8On6tl5O4kfqokQXxW3swfDVyWrKNsR
xVRPm/Lo56HtQ8msBQK5h45tUE0+GADijyazj+HJfQVP7p9r0VVuCDhs7cHY4LxS
yBH4CgThyCw+GDwfo39/upOqziyK/p41/6SGOk8pusGZmOGLT68M5EfbRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhldwAsoJGGunFvbxg3b1o0maemMB8GA1UdIwQY
MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut
YTQ1YmJjYjM0ZGU1LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1
LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPmr5PUp
5fJEHfMqWcQhb9dDFTtA+qwUWSeEmbDjnwcGSza6LO8eCzdQ5Sq0cVI4CH9aXWyi
N95tCtGg9gxzUTrwSjuoyT8QabmiF9irsfxZql/+SJrIEKzbbsS6KeF1uii9r41c
WEBAfrJu+TO5VSWgSwdoXEPl6jFHl3rQUmxWXBJBNVorzAMmUUgIseMwkZmsATmL
e8WjYcbK63CsRpOe5uKb02fHmoOlEiH7Y+HeEWI8Vf1is/jikibfQ7UT4kPDkWyA
DeRURcPSe3WFUjJ5tLKOkJUH3yYEzlTg1+AmiU9RVkBB41+jtV/znB07l5R5GspW
3k1KdYjb106MXw==
-----END CERTIFICATE-----
Generated at Wed May 7 22:53:02 2025 by rpki-client