Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File:                     zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier:          9mE/hpHTmAnEL+xXx4Qxf6XqYucmlgFp2OPMsmyPtT4=
Subject key identifier:   31:EE:25:98:5E:22:1E:7B:42:50:29:82:F0:A4:F5:19:67:F8:1C:51
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer:       /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial:       0196B1EA9F34920F09245D97A01E4AD8646E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number:          152E
Signing time:             Thu 08 May 2025 22:01:05 +0000
Manifest this update:     Thu 08 May 2025 22:01:05 +0000
Manifest next update:     Fri 09 May 2025 22:01:05 +0000
Files and hashes:         1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
                          2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
                          3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: CwKpuwRvAAPAkQxdueKNgJFgcqnrCeTnFE1bHJfdPmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:9f:34:92:0f:09:24:5d:97:a0:1e:4a:d8:64:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
        Validity
            Not Before: May  8 22:01:05 2025 GMT
            Not After : May  9 22:01:05 2025 GMT
        Subject: CN=31ee25985e221e7b42502982f0a4f51967f81c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:f3:27:f3:ba:19:42:0a:f4:67:b7:15:ce:
                    a0:5c:bb:27:0a:0a:1b:6f:c4:90:a4:1f:b5:ec:a2:
                    9d:f0:dd:d7:ec:62:00:ba:27:71:e6:3a:da:a8:a9:
                    61:9d:82:b6:c1:b9:52:8f:79:7e:5d:3e:12:14:8d:
                    c4:d3:2c:3c:26:a4:bc:31:80:49:7f:07:8d:c9:6f:
                    f6:24:fa:e7:e9:83:8e:95:73:c1:c1:8f:cc:57:f2:
                    0e:2b:5f:49:84:a3:32:f5:7f:99:d4:57:c3:a4:84:
                    16:3c:98:fa:bb:96:37:87:ee:c6:7a:4d:a2:b1:fc:
                    b9:95:08:9e:55:07:b2:bf:3a:a4:85:5d:ad:99:7c:
                    df:8a:c5:10:89:45:71:73:e7:36:8d:4a:4b:a0:df:
                    97:01:88:6a:56:3d:f4:d9:52:24:41:00:79:31:f4:
                    61:58:2f:23:3b:0a:13:da:75:97:85:5a:23:12:fc:
                    0d:ef:3e:ed:5c:81:96:a5:1f:59:b9:bd:77:dd:2e:
                    f6:c1:b8:50:6d:5c:88:46:f7:3f:6d:47:64:6d:06:
                    fd:71:da:e2:6d:24:80:4e:49:57:7e:d1:b5:4a:b8:
                    15:1d:0d:da:89:48:4a:eb:77:4b:3e:ec:eb:1d:d3:
                    ae:0a:b9:08:48:37:9e:48:f1:35:fd:57:80:a1:a4:
                    6b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EE:25:98:5E:22:1E:7B:42:50:29:82:F0:A4:F5:19:67:F8:1C:51
            X509v3 Authority Key Identifier:
                keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3f:33:83:b9:59:53:df:6a:75:cf:5f:ec:1b:a0:e8:fc:d0:
         58:1e:03:d6:46:15:3d:a0:8b:65:fc:4e:b7:0e:33:06:32:7a:
         38:04:53:cb:c5:87:7d:8b:9f:75:57:83:60:71:a9:9a:94:5f:
         9a:69:54:aa:5f:98:2c:15:a2:bc:6d:1c:c4:8a:3a:17:1a:f3:
         5f:44:d9:4f:01:49:05:74:e1:c2:ad:64:e9:1a:ae:5d:b6:8e:
         70:86:3c:ef:11:a5:3d:46:5f:72:08:4a:b4:60:29:30:d6:1d:
         66:d4:73:4f:c8:a1:8b:f2:6d:bd:0f:f4:9e:7d:76:3c:a4:fe:
         74:5d:d5:77:9d:68:e2:ae:f5:68:ec:78:73:12:31:58:f3:e5:
         57:bb:91:89:b0:3c:3b:02:ee:c6:29:f0:63:73:bc:d8:5a:6a:
         6e:9b:5c:73:27:1a:e9:e4:af:c9:3b:c6:93:f9:23:66:a6:9e:
         89:a2:a2:b2:b3:09:dd:bf:ff:a2:04:33:73:4d:2f:77:9c:b0:
         92:3b:56:36:a4:0d:a9:66:cd:0c:2b:78:e3:dd:b7:59:77:be:
         73:7e:c8:f9:48:9d:4b:bd:a5:66:88:62:6c:24:88:20:43:74:
         af:0e:43:81:31:2a:6d:9d:71:72:ef:b0:02:96:5b:3e:95:45:
         6d:a4:33:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZax6p80kg8JJF2XoB5K2GRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy
YzAwMjMwHhcNMjUwNTA4MjIwMTA1WhcNMjUwNTA5MjIwMTA1WjAzMTEwLwYDVQQD
EygzMWVlMjU5ODVlMjIxZTdiNDI1MDI5ODJmMGE0ZjUxOTY3ZjgxYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+bzJ/O6GUIK9Ge3Fc6gXLsnCgob
b8SQpB+17KKd8N3X7GIAuidx5jraqKlhnYK2wblSj3l+XT4SFI3E0yw8JqS8MYBJ
fweNyW/2JPrn6YOOlXPBwY/MV/IOK19JhKMy9X+Z1FfDpIQWPJj6u5Y3h+7Gek2i
sfy5lQieVQeyvzqkhV2tmXzfisUQiUVxc+c2jUpLoN+XAYhqVj302VIkQQB5MfRh
WC8jOwoT2nWXhVojEvwN7z7tXIGWpR9Zub133S72wbhQbVyIRvc/bUdkbQb9cdri
bSSATklXftG1SrgVHQ3aiUhK63dLPuzrHdOuCrkISDeeSPE1/VeAoaRrbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHuJZheIh57QlApgvCk9Rln+BxRMB8GA1UdIwQY
MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et
M2VlMWU2OTkxMjY5LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5
LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj8zg7lZ
U99qdc9f7Bug6PzQWB4D1kYVPaCLZfxOtw4zBjJ6OARTy8WHfYufdVeDYHGpmpRf
mmlUql+YLBWivG0cxIo6FxrzX0TZTwFJBXThwq1k6RquXbaOcIY87xGlPUZfcghK
tGApMNYdZtRzT8ihi/JtvQ/0nn12PKT+dF3Vd51o4q71aOx4cxIxWPPlV7uRibA8
OwLuxinwY3O82Fpqbptccyca6eSvyTvGk/kjZqaeiaKisrMJ3b//ogQzc00vd5yw
kjtWNqQNqWbNDCt44923WXe+c37I+UidS72lZohibCSIIEN0rw5DgTEqbZ1xcu+w
ApZbPpVFbaQzdA==
-----END CERTIFICATE-----
Generated at Fri May 9 03:09:51 2025 by rpki-client