Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File:                     1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier:          zxFszPjhggg2GThTg1OUO35atPAWWPkwBq2llrU1p4k=
Subject key identifier:   94:9C:36:DB:78:A8:A9:90:50:26:DC:88:E8:61:A7:0D:02:AE:90:46
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer:       /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial:       019653490C182687E7D213053D2E97D9FF7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number:          151F
Signing time:             Sun 20 Apr 2025 13:00:18 +0000
Manifest this update:     Sun 20 Apr 2025 13:00:18 +0000
Manifest next update:     Mon 21 Apr 2025 13:00:18 +0000
Files and hashes:         1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: JcJeNca/W2orLPImP2SyjmMdHdHJvTK9m1plc5000Zc=)
                          2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:49:0c:18:26:87:e7:d2:13:05:3d:2e:97:d9:ff:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
        Validity
            Not Before: Apr 20 13:00:18 2025 GMT
            Not After : Apr 21 13:00:18 2025 GMT
        Subject: CN=949c36db78a8a9905026dc88e861a70d02ae9046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:89:46:f2:b6:63:43:59:86:ec:11:13:b5:
                    2c:6d:20:75:3e:e8:c2:d3:43:3f:2b:72:b2:df:29:
                    3e:02:38:e1:a5:c4:39:6b:eb:c5:da:47:c5:b5:04:
                    b5:bf:d1:d0:d7:c8:14:fc:71:cf:6c:51:87:ae:aa:
                    3c:f4:bb:0e:7f:d6:03:2b:78:39:ec:72:bc:16:41:
                    50:31:11:cc:d0:77:20:36:e2:6c:83:8d:9e:f0:d6:
                    56:d9:4e:23:4e:fb:1d:57:1a:ba:45:b3:e0:03:ab:
                    a8:8f:b8:f6:53:19:84:88:a1:9d:a3:46:15:39:a9:
                    fe:4d:1e:fb:85:70:5a:e8:40:fa:87:cf:76:f3:3e:
                    a5:4d:bb:8c:b2:30:97:f8:d1:12:9a:5e:71:b7:aa:
                    2d:da:fa:e8:9f:e9:ec:55:3c:55:d4:5c:9a:1b:4d:
                    1b:b2:ca:2d:4a:de:f1:f5:8c:d6:a8:e5:d4:16:c0:
                    b0:b2:4f:b3:4d:21:09:46:27:53:6b:98:f7:3a:54:
                    ca:9d:38:97:e6:15:b3:4d:58:d0:92:cc:cb:f7:91:
                    93:f1:4a:53:4a:ff:b5:3d:d9:44:77:56:35:df:bb:
                    a9:95:62:0e:c1:7f:0f:89:e4:30:c7:bb:6b:13:f9:
                    f1:f9:dd:3b:d1:11:bc:42:a0:57:ce:44:47:fd:7c:
                    44:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:36:DB:78:A8:A9:90:50:26:DC:88:E8:61:A7:0D:02:AE:90:46
            X509v3 Authority Key Identifier:
                keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c3:4a:cc:e6:9c:48:75:0a:cc:b3:93:e3:db:6b:d8:e4:bb:
         2e:71:66:ed:0b:5d:73:e4:56:c0:49:0a:c2:f0:90:26:28:42:
         cd:55:89:03:17:c3:11:8f:d7:67:49:e4:5b:95:1e:24:d1:b3:
         68:68:7c:34:1b:4a:d7:1f:09:52:ce:64:47:e4:64:bf:b8:23:
         8e:0e:40:cd:68:6e:99:75:32:ac:77:94:54:da:07:72:33:bf:
         06:bc:d6:c1:b2:38:c0:a7:f5:7a:31:11:bf:fb:9d:c3:a6:56:
         47:0b:1b:ec:14:e3:a1:3d:14:48:0b:1e:23:1c:0f:14:d3:d7:
         df:7b:df:17:ed:9e:25:5e:b8:c6:be:e0:d5:23:f0:06:a4:54:
         b8:63:5f:8c:8f:7b:b0:de:03:5e:75:dc:57:74:28:b3:e7:f5:
         51:54:42:1d:fd:37:39:14:80:d8:14:62:99:ab:f9:f0:73:5d:
         35:ea:47:d2:44:65:79:3a:75:1d:2b:31:3e:60:28:74:cd:2a:
         20:7d:52:69:d2:20:78:57:a6:dc:b9:36:02:41:cf:3f:2b:89:
         60:cf:1d:07:51:e7:18:6a:fb:9a:e2:dc:6a:48:44:21:53:d9:
         a1:0d:1e:2e:b2:95:a6:df:a8:a8:a3:8d:1e:cc:4c:2c:14:9c:
         87:c6:04:dc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZTSQwYJofn0hMFPS6X2f96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjYyZjc2MDYyNzNmNDFhNmNjYzhlMjk1NjA3NmYzYzBh
MWViNTQwHhcNMjUwNDIwMTMwMDE4WhcNMjUwNDIxMTMwMDE4WjAzMTEwLwYDVQQD
Eyg5NDljMzZkYjc4YThhOTkwNTAyNmRjODhlODYxYTcwZDAyYWU5MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5yJRvK2Y0NZhuwRE7UsbSB1PujC
00M/K3Ky3yk+AjjhpcQ5a+vF2kfFtQS1v9HQ18gU/HHPbFGHrqo89LsOf9YDK3g5
7HK8FkFQMRHM0HcgNuJsg42e8NZW2U4jTvsdVxq6RbPgA6uoj7j2UxmEiKGdo0YV
Oan+TR77hXBa6ED6h8928z6lTbuMsjCX+NESml5xt6ot2vron+nsVTxV1FyaG00b
ssotSt7x9YzWqOXUFsCwsk+zTSEJRidTa5j3OlTKnTiX5hWzTVjQkszL95GT8UpT
Sv+1PdlEd1Y137uplWIOwX8PieQwx7trE/nx+d070RG8QqBXzkRH/XxETQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJScNtt4qKmQUCbciOhhpw0CrpBGMB8GA1UdIwQY
MBaAFPv2L3YGJz9BpszI4pVgdvPAoetUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fWXZkZ1luUDBHbXpNamlsV0IyODhDaDYxUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvOTVlZWJiLTBhOWQtNGY3MS1iM2Y5
LTU2NDllMWIxOTJiYi8xLzEtX1l2ZGdZblAwR216TWppbFdCMjg4Q2g2MVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIzLzk1ZWViYi0wYTlkLTRmNzEtYjNmOS01NjQ5ZTFiMTky
YmIvMS8xLV9ZdmRnWW5QMEdtek1qaWxXQjI4OENoNjFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMNK
zOacSHUKzLOT49tr2OS7LnFm7Qtdc+RWwEkKwvCQJihCzVWJAxfDEY/XZ0nkW5Ue
JNGzaGh8NBtK1x8JUs5kR+Rkv7gjjg5AzWhumXUyrHeUVNoHcjO/BrzWwbI4wKf1
ejERv/udw6ZWRwsb7BTjoT0USAseIxwPFNPX33vfF+2eJV64xr7g1SPwBqRUuGNf
jI97sN4DXnXcV3Qos+f1UVRCHf03ORSA2BRimav58HNdNepH0kRleTp1HSsxPmAo
dM0qIH1SadIgeFem3Lk2AkHPPyuJYM8dB1HnGGr7muLcakhEIVPZoQ0eLrKVpt+o
qKONHsxMLBSch8YE3A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:06 2025 by rpki-client