Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
File:                     fPySsKdbia0uPFf3y6DkeGhCGc4.mft (raw, json)
Hash identifier:          tReVct6cvWsIidjDlQWIxWLoSuUcYOVj+cALdnKmsWI=
Subject key identifier:   C8:3B:E1:3B:04:33:AF:86:22:D3:E6:B7:16:4D:0A:8A:BE:5A:43:60
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Certificate issuer:       /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial:       0196CA60AAF5FF5E86F1A199395C88C97A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
Manifest number:          153F
Signing time:             Tue 13 May 2025 16:00:54 +0000
Manifest this update:     Tue 13 May 2025 16:00:54 +0000
Manifest next update:     Wed 14 May 2025 16:00:54 +0000
Files and hashes:         1: 9yjHUYS9Fxw_4dxtmR-3Rxot344.roa (hash: AWQ6glDSqhKNOCwBlnvSM0hvzT6dwIHbQaxbn9xxzkI=)
                          2: XQ5p_v2P6Gqcwe6mUUsVtaNZ97A.roa (hash: AfJ0RTbLQ6sDHJhxmnbkdCHcxDZgS6nXOmdvB8FlyiA=)
                          3: Y5V8eP_AgzuwiFE2HrYGmskh04c.roa (hash: SlwWJVVTaYw9Z8mUHoA0C0IZ8H875se5L3mE0H1vEwY=)
                          4: fPySsKdbia0uPFf3y6DkeGhCGc4.crl (hash: XfeVxXuXYgxd4Rzj8He4UkSJ/1RdSCOI3tgNzW5habA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:60:aa:f5:ff:5e:86:f1:a1:99:39:5c:88:c9:7a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
        Validity
            Not Before: May 13 16:00:54 2025 GMT
            Not After : May 14 16:00:54 2025 GMT
        Subject: CN=c83be13b0433af8622d3e6b7164d0a8abe5a4360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:01:38:3f:0e:1b:ee:6b:2f:a9:63:6b:19:
                    23:f6:e0:d0:92:ac:96:a7:0a:45:32:fb:84:13:c7:
                    c3:04:7c:49:66:e3:5d:ef:87:ee:ca:a3:cf:be:fd:
                    e1:eb:56:a8:25:47:f1:21:4b:c0:08:1b:93:cf:62:
                    b9:41:6f:13:8e:4c:8d:02:27:43:04:8f:4d:eb:7f:
                    21:ea:68:d6:c3:47:52:d0:c8:d2:10:b9:d1:99:f2:
                    7f:1a:a0:0e:f2:23:75:b8:11:73:ae:8b:5d:e1:e5:
                    af:b2:80:d1:9c:33:fe:c6:b1:b4:74:37:1f:b2:12:
                    47:52:f8:37:90:89:4a:c1:7b:5c:bb:01:3d:43:2d:
                    0e:10:39:14:ce:db:ec:9b:2e:ca:fd:3a:90:0a:d7:
                    d7:84:93:46:8d:40:b1:59:32:32:c3:ce:49:05:a4:
                    ca:99:b6:02:c3:bb:76:c5:02:10:71:b5:7c:53:f7:
                    9e:ff:cd:5c:c3:27:7f:27:ac:7a:a3:fe:9a:86:95:
                    0d:e0:0b:50:ab:2a:07:04:2a:b5:b9:41:ee:f8:9b:
                    31:fe:31:ec:12:45:92:72:0e:95:98:23:37:4f:74:
                    9e:b1:b3:ef:da:39:f3:a6:4d:b2:03:fc:38:da:32:
                    30:77:ff:56:50:84:40:92:b4:4c:2f:50:2b:31:d4:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3B:E1:3B:04:33:AF:86:22:D3:E6:B7:16:4D:0A:8A:BE:5A:43:60
            X509v3 Authority Key Identifier:
                keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:81:5c:70:28:ea:0d:3a:53:1e:cf:51:bf:93:49:b4:14:
         9b:a9:50:a5:9d:bb:6c:e7:ec:04:b0:c9:54:a7:8e:a0:5a:71:
         0b:53:f3:d2:ab:25:fe:6a:d0:d8:9c:4b:b7:32:71:24:d9:a3:
         52:80:ba:f4:89:d9:e2:94:c4:3d:76:da:f5:dc:f0:f0:e0:cf:
         ce:fa:46:dd:1c:06:70:d0:52:b1:b1:15:16:a6:a6:2d:9f:e5:
         f4:7a:c8:5e:2c:8a:ad:02:09:b5:30:93:8d:c9:7d:3c:46:9d:
         35:8d:18:dc:21:34:a0:ff:38:b6:1c:2d:f2:c5:fe:9b:13:b3:
         62:96:72:40:69:33:e3:c5:f3:36:4c:f2:6f:27:ef:c0:2d:0e:
         d1:86:4d:aa:71:eb:ff:d8:8a:18:6f:33:14:18:41:93:78:8b:
         d5:fc:fb:9c:26:a2:17:cd:f2:2c:f2:05:ce:6c:05:1b:90:a2:
         c7:3f:a8:93:e8:d4:6c:52:07:2e:b3:7f:a5:1d:18:64:b7:ba:
         d2:8d:21:d6:d5:ac:2c:d6:9b:6f:19:ce:73:d2:9a:c4:8e:5b:
         d4:8d:fe:1c:7d:24:5a:3c:ce:74:1d:34:ca:bf:3b:12:ba:50:
         e2:86:d4:c8:3c:5e:32:49:ac:e1:de:37:39:fb:c2:22:57:e1:
         ef:9f:a5:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKYKr1/16G8aGZOVyIyXoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZmM5MmIwYTc1Yjg5YWQyZTNjNTdmN2NiYTBlNDc4Njg0
MjE5Y2UwHhcNMjUwNTEzMTYwMDU0WhcNMjUwNTE0MTYwMDU0WjAzMTEwLwYDVQQD
EyhjODNiZTEzYjA0MzNhZjg2MjJkM2U2YjcxNjRkMGE4YWJlNWE0MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnUBOD8OG+5rL6ljaxkj9uDQkqyW
pwpFMvuEE8fDBHxJZuNd74fuyqPPvv3h61aoJUfxIUvACBuTz2K5QW8TjkyNAidD
BI9N638h6mjWw0dS0MjSELnRmfJ/GqAO8iN1uBFzrotd4eWvsoDRnDP+xrG0dDcf
shJHUvg3kIlKwXtcuwE9Qy0OEDkUztvsmy7K/TqQCtfXhJNGjUCxWTIyw85JBaTK
mbYCw7t2xQIQcbV8U/ee/81cwyd/J6x6o/6ahpUN4AtQqyoHBCq1uUHu+Jsx/jHs
EkWScg6VmCM3T3SesbPv2jnzpk2yA/w42jIwd/9WUIRAkrRML1ArMdTdswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg74TsEM6+GItPmtxZNCoq+WkNgMB8GA1UdIwQY
MBaAFHz8krCnW4mtLjxX98ug5HhoQhnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2It
MzZkN2I0Zjg0ZTVjLzEvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2ItMzZkN2I0Zjg0ZTVj
LzEvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHuBXHAo
6g06Ux7PUb+TSbQUm6lQpZ27bOfsBLDJVKeOoFpxC1Pz0qsl/mrQ2JxLtzJxJNmj
UoC69InZ4pTEPXba9dzw8ODPzvpG3RwGcNBSsbEVFqamLZ/l9HrIXiyKrQIJtTCT
jcl9PEadNY0Y3CE0oP84thwt8sX+mxOzYpZyQGkz48XzNkzybyfvwC0O0YZNqnHr
/9iKGG8zFBhBk3iL1fz7nCaiF83yLPIFzmwFG5Cixz+ok+jUbFIHLrN/pR0YZLe6
0o0h1tWsLNabbxnOc9KaxI5b1I3+HH0kWjzOdB00yr87ErpQ4obUyDxeMkms4d43
OfvCIlfh75+l5Q==
-----END CERTIFICATE-----
Generated at Tue May 13 23:15:25 2025 by rpki-client