Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File:                     AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier:          TJYC+mt77plHzRkBz7yMV/YC4mTEK+cfnPbDYDcQTQw=
Subject key identifier:   BB:6C:B0:D8:63:12:3C:3D:E2:70:A4:DD:BC:B0:55:D3:05:09:EC:9E
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer:       /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial:       019610570F840EE916B1E582AD250220CD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number:          136D
Signing time:             Mon 07 Apr 2025 13:01:03 +0000
Manifest this update:     Mon 07 Apr 2025 13:01:03 +0000
Manifest next update:     Tue 08 Apr 2025 13:01:03 +0000
Files and hashes:         1: 4lSW2DqUUyfLAwCJxmdcakNOOAc.roa (hash: 0bkR+y4/sbmt2mM+LAt7tzsFlo9ay8a2libMzm6BQSQ=)
                          2: A1UUEmWN8hJvE_QDz6Phuppzgos.roa (hash: 71wzKo8KkCCIqHry8cTGiYr86Ds73uxSzDKBszKZYsI=)
                          3: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: 9NgjOzeHrMRU7j5C2GIuv3Q+eKhXpHGHMg2AwbFwHx4=)
                          4: PUvtKljRLvuOqowlndxBwGQKDl4.roa (hash: U5kHad25poEIvcwR4qtcel7KCFYyUvjuPf1N4FDV5NU=)
                          5: g4grZmuORaKS7qXdfY2Tw1BKwR8.roa (hash: J3nP1OMrsWuilznvZEcg4t0c4Ea3mup5IdWbWJUSouo=)
                          6: iciSv140fL3PtQnQ9u8uKNyjZD0.roa (hash: 3xoVorNvU/VeFcuXASi64FFVnBKDDjZqYnmoKneCFZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:57:0f:84:0e:e9:16:b1:e5:82:ad:25:02:20:cd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
        Validity
            Not Before: Apr  7 13:01:03 2025 GMT
            Not After : Apr  8 13:01:03 2025 GMT
        Subject: CN=bb6cb0d863123c3de270a4ddbcb055d30509ec9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:39:ec:0b:d7:62:36:98:33:c3:59:ee:81:b4:
                    d6:6c:ae:ee:68:19:bb:18:7e:7b:c3:6c:1b:a7:83:
                    97:44:9e:c8:79:e8:e4:82:bf:fc:4c:aa:7b:83:d6:
                    69:07:d2:41:c8:a8:10:ea:f4:36:0b:df:05:e4:d0:
                    9e:b1:30:7b:e6:ee:34:04:63:1c:09:6c:60:42:fb:
                    bb:ad:3c:c6:61:ee:25:4a:8a:9a:74:3e:b5:5e:ad:
                    1c:e5:2b:dc:22:91:f4:23:dd:b2:7c:02:5c:31:c4:
                    ee:51:a5:2f:b3:33:33:b5:0b:f5:9e:df:c4:51:6f:
                    92:d6:5e:b7:90:82:c0:d6:26:a0:4f:f8:78:0a:9b:
                    f6:be:8c:19:98:db:45:64:a7:02:6c:49:c8:03:d4:
                    70:e5:fb:b5:63:1d:99:85:e0:12:ff:2a:95:68:28:
                    23:85:70:1c:8f:6c:21:17:bb:e4:57:fb:39:07:8c:
                    9c:eb:2e:01:3a:f2:6b:36:34:5f:69:59:af:ce:b6:
                    44:84:0a:be:f6:c7:7b:ab:84:d4:e8:61:2f:d4:d5:
                    da:5e:a8:21:88:cf:6e:b2:fe:cb:ee:f5:9a:f0:73:
                    68:fa:d1:e9:96:ff:d1:ec:1a:f1:3d:16:44:43:71:
                    30:c6:39:2f:8e:9c:6b:be:5a:fb:11:e5:1d:dc:5e:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:B0:D8:63:12:3C:3D:E2:70:A4:DD:BC:B0:55:D3:05:09:EC:9E
            X509v3 Authority Key Identifier:
                keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:99:58:6a:e5:9b:9c:19:48:c2:19:6a:88:1d:62:f0:17:a4:
         8c:d8:ec:0c:43:bc:c3:d5:27:94:7e:67:e6:8c:b5:f8:05:ba:
         94:bc:80:56:92:b0:80:c6:42:9f:8b:34:68:42:69:fb:f3:30:
         28:19:1d:2b:cf:eb:f2:65:58:ec:cf:70:44:2c:da:89:42:63:
         0f:9e:53:1d:19:35:0f:8c:3f:c3:62:86:5a:36:35:59:6e:74:
         d7:b9:26:ab:e6:10:c7:74:30:6b:da:a8:48:60:29:e1:0e:29:
         f4:38:ba:b9:04:43:26:86:97:2a:91:67:8f:88:68:19:71:7f:
         23:21:3c:e0:cb:60:8c:83:63:1b:54:6a:eb:87:1c:6a:c3:d8:
         9c:6d:62:a3:01:b9:79:da:c0:a7:ab:2d:5d:54:13:24:a3:05:
         a0:c0:ba:c0:da:2f:da:a6:2b:ea:96:83:ed:0c:d0:9b:73:37:
         63:51:69:5e:c3:2d:a5:4e:0d:8d:a6:b1:70:96:98:5c:aa:4a:
         dc:6b:c0:a6:36:5e:8f:ea:99:f0:68:5b:d8:a8:65:cc:f1:93:
         16:ce:99:2e:16:51:48:aa:a6:e1:59:cd:2b:6c:be:67:54:4b:
         c4:ac:46:fd:51:65:8c:fd:84:66:e9:4c:35:35:65:7a:6a:00:
         92:17:fa:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQVw+EDukWseWCrSUCIM01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDZiNDI5ZjhjNDk2MTFmY2ZlYTFlZmExYTUxYjljMGVk
ZGI2ZTcwHhcNMjUwNDA3MTMwMTAzWhcNMjUwNDA4MTMwMTAzWjAzMTEwLwYDVQQD
EyhiYjZjYjBkODYzMTIzYzNkZTI3MGE0ZGRiY2IwNTVkMzA1MDllYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jnsC9diNpgzw1nugbTWbK7uaBm7
GH57w2wbp4OXRJ7Ieejkgr/8TKp7g9ZpB9JByKgQ6vQ2C98F5NCesTB75u40BGMc
CWxgQvu7rTzGYe4lSoqadD61Xq0c5SvcIpH0I92yfAJcMcTuUaUvszMztQv1nt/E
UW+S1l63kILA1iagT/h4Cpv2vowZmNtFZKcCbEnIA9Rw5fu1Yx2ZheAS/yqVaCgj
hXAcj2whF7vkV/s5B4yc6y4BOvJrNjRfaVmvzrZEhAq+9sd7q4TU6GEv1NXaXqgh
iM9usv7L7vWa8HNo+tHplv/R7BrxPRZEQ3Ewxjkvjpxrvlr7EeUd3F4pYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtssNhjEjw94nCk3bywVdMFCeyeMB8GA1UdIwQY
MBaAFAFGtCn4xJYR/P6h76GlG5wO3bbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMt
ZWEyNmU3NDZhMGFkLzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMtZWEyNmU3NDZhMGFk
LzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIplYauWb
nBlIwhlqiB1i8BekjNjsDEO8w9UnlH5n5oy1+AW6lLyAVpKwgMZCn4s0aEJp+/Mw
KBkdK8/r8mVY7M9wRCzaiUJjD55THRk1D4w/w2KGWjY1WW5017kmq+YQx3Qwa9qo
SGAp4Q4p9Di6uQRDJoaXKpFnj4hoGXF/IyE84MtgjINjG1Rq64ccasPYnG1iowG5
edrAp6stXVQTJKMFoMC6wNov2qYr6paD7QzQm3M3Y1FpXsMtpU4NjaaxcJaYXKpK
3GvApjZej+qZ8Ghb2KhlzPGTFs6ZLhZRSKqm4VnNK2y+Z1RLxKxG/VFljP2EZulM
NTVlemoAkhf6OA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:24 2025 by rpki-client