Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          untZ/Kk4EKFO1tdzp3ioa5YbFxilybdXRtSfWndvpyU=
Subject key identifier:   35:F2:9E:E3:E1:39:70:F0:46:9B:00:A6:F2:67:EE:F4:65:0A:E1:C4
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       0196C5DE90BAA05F3D25B3E91D38761674BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          1537
Signing time:             Mon 12 May 2025 19:00:19 +0000
Manifest this update:     Mon 12 May 2025 19:00:19 +0000
Manifest next update:     Tue 13 May 2025 19:00:19 +0000
Files and hashes:         1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
                          2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
                          3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
                          4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: JnE8ATi8j1wpNVFP3KUD+HrehNx1ZOxGxJRuQl9KJoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:90:ba:a0:5f:3d:25:b3:e9:1d:38:76:16:74:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: May 12 19:00:19 2025 GMT
            Not After : May 13 19:00:19 2025 GMT
        Subject: CN=35f29ee3e13970f0469b00a6f267eef4650ae1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:93:d2:d4:6a:b8:c4:65:bd:3f:5e:90:08:
                    47:24:da:c2:43:01:d0:d2:f5:05:8a:63:91:31:04:
                    19:ca:3f:fd:e4:04:8d:44:1a:b5:42:11:47:65:74:
                    ee:72:8f:bc:95:d7:37:20:95:ff:bd:ab:88:99:ef:
                    1c:b7:53:29:7f:53:e2:44:0b:f0:61:31:05:ba:38:
                    dc:23:3b:1d:5f:1b:b4:be:54:68:d8:54:5c:47:d0:
                    41:66:5c:5f:37:73:cc:3a:73:81:f5:28:ef:6a:08:
                    41:f5:b2:e8:f0:13:19:a7:9c:34:6c:09:33:d1:ad:
                    ab:f0:36:c6:a8:bb:c2:29:fc:3b:91:17:43:3f:e7:
                    2d:26:fd:ed:54:38:81:f2:4e:61:1a:9c:35:30:35:
                    56:48:b1:8b:31:c9:0b:06:4a:6b:db:ed:d8:1a:75:
                    dc:71:ef:67:be:ba:34:6e:79:e6:f3:45:64:41:ee:
                    41:61:ab:1b:ed:aa:61:a1:22:56:c6:51:78:07:e9:
                    fd:23:3a:85:42:6c:3e:6d:47:0f:7e:99:7a:57:df:
                    9d:31:b6:51:f6:3c:c5:7a:1a:47:fb:a4:56:b6:51:
                    e8:bf:08:68:77:cd:7e:56:32:bf:87:80:0a:bf:ed:
                    df:ad:79:c6:51:48:5b:dc:f3:34:49:24:f8:62:d7:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:9E:E3:E1:39:70:F0:46:9B:00:A6:F2:67:EE:F4:65:0A:E1:C4
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:d1:1d:b1:1e:88:3f:1c:3d:0e:66:1e:a0:ad:4a:bc:a8:
         9d:e8:c5:24:1f:eb:07:1f:1a:95:0e:b3:f2:69:94:3a:17:23:
         e1:d7:d0:1f:6a:44:b2:dc:d7:1c:16:86:21:ac:c3:dd:59:5b:
         f5:35:4a:ba:b7:c3:5e:ea:51:33:77:84:1c:06:af:cc:d0:2e:
         47:ea:03:cf:4c:c2:87:3c:a4:58:d5:79:ea:ec:2a:ce:0f:c6:
         a9:f8:a0:48:b7:bd:20:db:4c:2f:b1:f3:60:18:b6:be:98:06:
         e5:25:46:ee:a3:05:f0:1a:90:94:79:3a:30:ea:a1:77:6c:65:
         fe:33:b8:43:4b:d6:c5:8b:2b:2d:c8:40:24:b1:99:1b:01:66:
         67:4b:d3:29:11:66:34:77:74:d3:62:a0:12:45:40:df:34:d1:
         49:5f:7e:6c:24:e7:a7:f0:bd:fe:c3:82:a2:09:f9:ef:69:20:
         dd:b1:e7:00:61:d8:db:a8:ed:97:84:15:a2:d3:77:4b:b1:be:
         ea:73:0d:e1:75:75:80:95:de:17:ad:a0:0d:05:13:c4:11:dc:
         17:90:25:2c:f5:3a:ec:40:6b:27:b3:82:b8:e0:54:01:5e:3d:
         d8:04:ee:46:54:c5:bc:9f:c1:23:12:80:a7:9b:90:2e:67:7b:
         e5:f7:66:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3pC6oF89JbPpHTh2FnS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4
OWE3NWYwHhcNMjUwNTEyMTkwMDE5WhcNMjUwNTEzMTkwMDE5WjAzMTEwLwYDVQQD
EygzNWYyOWVlM2UxMzk3MGYwNDY5YjAwYTZmMjY3ZWVmNDY1MGFlMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshWT0tRquMRlvT9ekAhHJNrCQwHQ
0vUFimORMQQZyj/95ASNRBq1QhFHZXTuco+8ldc3IJX/vauIme8ct1Mpf1PiRAvw
YTEFujjcIzsdXxu0vlRo2FRcR9BBZlxfN3PMOnOB9SjvaghB9bLo8BMZp5w0bAkz
0a2r8DbGqLvCKfw7kRdDP+ctJv3tVDiB8k5hGpw1MDVWSLGLMckLBkpr2+3YGnXc
ce9nvro0bnnm80VkQe5BYasb7aphoSJWxlF4B+n9IzqFQmw+bUcPfpl6V9+dMbZR
9jzFehpH+6RWtlHovwhod81+VjK/h4AKv+3frXnGUUhb3PM0SST4YtcaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXynuPhOXDwRpsApvJn7vRlCuHEMB8GA1UdIwQY
MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt
NTJiODE2NjgyOWQ3LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3
LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirnRHbEe
iD8cPQ5mHqCtSryonejFJB/rBx8alQ6z8mmUOhcj4dfQH2pEstzXHBaGIazD3Vlb
9TVKurfDXupRM3eEHAavzNAuR+oDz0zChzykWNV56uwqzg/GqfigSLe9INtML7Hz
YBi2vpgG5SVG7qMF8BqQlHk6MOqhd2xl/jO4Q0vWxYsrLchAJLGZGwFmZ0vTKRFm
NHd002KgEkVA3zTRSV9+bCTnp/C9/sOCogn572kg3bHnAGHY26jtl4QVotN3S7G+
6nMN4XV1gJXeF62gDQUTxBHcF5AlLPU67EBrJ7OCuOBUAV492ATuRlTFvJ/BIxKA
p5uQLmd75fdmaQ==
-----END CERTIFICATE-----
Generated at Mon May 12 22:47:28 2025 by rpki-client