Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          ZB1s+MA8DIkSYIIYcTUAh1mWRp+KNTH+47gJZT1O878=
Subject key identifier:   D3:1A:73:B1:A5:98:D7:BE:41:EA:88:C1:C0:53:24:6E:4B:2D:7C:B2
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       0196176C81CCD3CB9639546CB52749B90671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1156
Signing time:             Tue 08 Apr 2025 22:01:49 +0000
Manifest this update:     Tue 08 Apr 2025 22:01:49 +0000
Manifest next update:     Wed 09 Apr 2025 22:01:49 +0000
Files and hashes:         1: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          2: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
                          3: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
                          4: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          5: rpVEI9UEI1-WJFYPN_yr9LMGvvc.roa (hash: JaM6/GuUVucxk5DxvvEe7MfBQN9s9ZArtYnX5zZQ0E0=)
                          6: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: dqaeYTi65jhmkSkifAt8FJqtpPkDIln25es5MB8n2Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:17:6c:81:cc:d3:cb:96:39:54:6c:b5:27:49:b9:06:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Apr  8 22:01:49 2025 GMT
            Not After : Apr  9 22:01:49 2025 GMT
        Subject: CN=d31a73b1a598d7be41ea88c1c053246e4b2d7cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:97:54:cb:68:fb:4e:26:85:fd:3d:31:be:
                    41:c2:03:30:6f:e7:07:d5:09:d2:d5:04:01:80:03:
                    21:da:3a:9c:a6:35:2a:10:a3:19:d1:1d:15:21:ed:
                    64:9b:38:0f:8d:fc:50:8c:1b:b0:d1:c7:5f:9e:a8:
                    be:e6:28:ff:1c:52:59:17:d6:a9:13:38:8c:29:ba:
                    81:1b:d5:bc:98:e0:43:3c:cb:07:96:79:b5:03:8c:
                    0a:55:5c:64:f5:f5:95:8a:a8:d5:c1:be:4b:e6:9c:
                    ba:e8:eb:02:0f:36:f0:73:e5:f0:3e:40:50:f5:33:
                    3e:18:48:5a:d2:ae:67:0e:4e:9d:a3:11:33:91:71:
                    d6:6d:61:72:c5:e1:e1:16:11:9c:a8:57:63:50:86:
                    a6:b1:ea:41:b8:d9:31:90:56:37:55:e3:dc:90:ec:
                    57:49:94:22:8b:43:63:31:79:c5:71:74:13:10:9d:
                    99:6a:73:82:57:e1:8e:cf:91:0e:38:25:91:6b:ea:
                    f9:89:a5:ab:dd:b1:12:7b:a0:c6:7c:4e:3a:d7:71:
                    3c:63:bb:17:a1:03:1b:07:f3:a8:2d:a2:7e:00:57:
                    fd:2b:2d:c7:70:22:3a:4f:02:e5:ac:50:cd:9b:5c:
                    56:f7:f0:d4:10:69:cb:ad:0e:c8:b3:08:c8:80:ac:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1A:73:B1:A5:98:D7:BE:41:EA:88:C1:C0:53:24:6E:4B:2D:7C:B2
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:df:e6:7e:7a:d6:bd:b2:ad:af:08:4a:12:5d:d9:fc:b8:
         14:db:9c:46:c2:dd:bf:ae:e5:b5:4d:7d:24:e6:5a:39:34:d3:
         a3:ca:52:6c:5e:4e:91:4e:e6:26:31:44:6f:f0:6c:e0:82:6d:
         32:da:83:1b:d2:89:dc:f9:a5:69:79:a3:82:17:56:f5:bd:9b:
         7d:8f:bf:eb:f5:29:30:67:5e:2c:b9:6e:f9:78:3a:63:46:7c:
         a9:94:6e:a9:99:4d:60:38:c2:51:da:de:df:d5:c0:99:af:f3:
         49:d0:7a:89:ac:36:09:a3:ef:72:23:c4:d9:62:0d:a2:62:b8:
         d2:b0:f7:c8:e7:35:15:b0:67:a0:4a:0d:98:3f:ca:c7:16:7a:
         8b:b9:a8:01:da:db:16:46:04:ac:a9:cf:aa:b9:4a:dc:68:51:
         87:3a:fb:ee:e3:c6:fa:d8:0c:16:cc:29:f2:10:06:18:34:25:
         cd:d8:8e:88:18:53:2a:85:00:51:94:11:8f:24:67:ad:65:c1:
         da:6f:5e:b9:14:7f:12:d8:33:3b:45:5d:65:91:48:53:5b:98:
         ba:b3:68:7b:69:72:5d:60:70:b9:91:30:2a:f1:96:d9:d6:e9:
         b8:11:1c:44:46:9c:4a:6c:14:ed:9d:81:4a:32:3b:0a:56:00:
         b2:ae:81:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYXbIHM08uWOVRstSdJuQZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjUwNDA4MjIwMTQ5WhcNMjUwNDA5MjIwMTQ5WjAzMTEwLwYDVQQD
EyhkMzFhNzNiMWE1OThkN2JlNDFlYTg4YzFjMDUzMjQ2ZTRiMmQ3Y2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwKXVMto+04mhf09Mb5BwgMwb+cH
1QnS1QQBgAMh2jqcpjUqEKMZ0R0VIe1kmzgPjfxQjBuw0cdfnqi+5ij/HFJZF9ap
EziMKbqBG9W8mOBDPMsHlnm1A4wKVVxk9fWViqjVwb5L5py66OsCDzbwc+XwPkBQ
9TM+GEha0q5nDk6doxEzkXHWbWFyxeHhFhGcqFdjUIamsepBuNkxkFY3VePckOxX
SZQii0NjMXnFcXQTEJ2ZanOCV+GOz5EOOCWRa+r5iaWr3bESe6DGfE4613E8Y7sX
oQMbB/OoLaJ+AFf9Ky3HcCI6TwLlrFDNm1xW9/DUEGnLrQ7IswjIgKw2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMac7GlmNe+QeqIwcBTJG5LLXyyMB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/Hf5n56
1r2yra8IShJd2fy4FNucRsLdv67ltU19JOZaOTTTo8pSbF5OkU7mJjFEb/Bs4IJt
MtqDG9KJ3PmlaXmjghdW9b2bfY+/6/UpMGdeLLlu+Xg6Y0Z8qZRuqZlNYDjCUdre
39XAma/zSdB6iaw2CaPvciPE2WINomK40rD3yOc1FbBnoEoNmD/KxxZ6i7moAdrb
FkYErKnPqrlK3GhRhzr77uPG+tgMFswp8hAGGDQlzdiOiBhTKoUAUZQRjyRnrWXB
2m9euRR/EtgzO0VdZZFIU1uYurNoe2lyXWBwuZEwKvGW2dbpuBEcREacSmwU7Z2B
SjI7ClYAsq6BwA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:23:50 2025 by rpki-client