Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          68yw/1Ridd0wDLh0JhSHsKzIYjAUhdhbsrmSoS3LiAk=
Subject key identifier:   ED:D9:19:1B:98:1E:48:FD:80:BC:DE:34:90:DC:35:19:84:FE:7C:1C
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       01974A0CE59794F8CD4A61D271B752D95608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          148C
Signing time:             Sat 07 Jun 2025 11:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:48 +0000
Files and hashes:         1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: eDv84pqfCsGVAO9AJHo88r1E+t85E1OM935dCpK1T4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:e5:97:94:f8:cd:4a:61:d2:71:b7:52:d9:56:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Jun  7 11:00:48 2025 GMT
            Not After : Jun  8 11:00:48 2025 GMT
        Subject: CN=edd9191b981e48fd80bcde3490dc351984fe7c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:1c:bb:57:5e:3c:49:6e:a9:80:59:75:30:
                    a5:ce:23:a2:b9:e7:8b:63:4e:50:99:f3:d3:86:87:
                    6f:97:7d:ae:0d:10:75:86:d6:53:34:c7:77:6f:28:
                    03:36:78:86:67:41:0c:b9:b2:cb:6d:49:8f:49:a5:
                    cd:0c:03:3c:df:a8:16:f6:67:df:63:60:17:4e:9d:
                    dc:b2:49:b8:e8:e8:37:8c:60:af:2a:75:56:3c:17:
                    b8:da:54:18:b4:cd:f5:bf:09:07:a0:89:8c:17:1a:
                    73:ad:4f:5b:e6:43:d6:ff:78:3a:39:ea:82:b1:39:
                    c6:1b:8b:06:41:4e:67:1a:6d:03:92:75:2c:d6:6d:
                    71:91:c8:74:b8:69:ae:e9:73:23:98:d6:82:bd:6e:
                    eb:fb:d0:1f:22:35:9f:4b:8f:bc:f7:15:8a:1f:f1:
                    ac:7f:99:a3:70:b5:e5:5a:0a:a2:f5:9e:06:18:d0:
                    eb:b4:9b:62:f4:52:27:f8:9e:16:a2:5a:4f:e8:d4:
                    4e:39:df:0a:93:ad:7a:26:df:ed:c4:5f:53:b5:92:
                    e9:82:ab:04:19:f4:27:79:48:c4:5b:0a:3a:ed:bc:
                    cc:cd:10:bf:fe:0c:1e:63:6c:f8:d6:04:9d:cd:14:
                    a3:12:98:38:30:4a:61:f9:ec:83:70:2c:8b:0b:b8:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:19:1B:98:1E:48:FD:80:BC:DE:34:90:DC:35:19:84:FE:7C:1C
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:73:cf:91:f2:63:60:24:a6:34:2f:7e:df:3c:50:ba:17:
         46:1a:15:ea:41:db:37:6f:62:2d:4f:06:7d:0c:d4:7a:a6:9b:
         a8:b8:04:9f:bd:3c:79:a7:f2:3b:c1:a6:b2:09:51:8b:6d:68:
         ab:aa:ce:35:99:46:44:2c:f0:f7:25:40:a8:eb:49:bb:a9:b6:
         02:c4:f5:da:62:fb:d7:55:9d:7a:07:9c:75:0a:76:30:8c:13:
         e3:25:a3:70:44:51:c4:a4:c3:75:77:2a:3e:53:57:62:ea:f8:
         9e:35:5d:cf:63:70:04:d0:4d:8b:8a:b2:2c:e0:27:f4:92:47:
         0e:d5:5b:92:89:81:38:c0:d4:eb:4b:f5:fb:a2:ee:b0:34:ec:
         73:7e:b2:3c:6e:bb:ce:50:ac:20:1b:41:97:b6:6e:60:42:31:
         cd:57:7b:4a:81:c5:8d:b5:67:63:a2:5f:a7:5b:e2:ed:7e:21:
         b4:6e:db:8a:57:ab:cd:8d:26:c2:87:96:ff:91:bb:2a:c8:56:
         b3:c2:fb:77:4a:f8:c7:97:16:57:57:2b:e9:4a:46:cf:6a:7e:
         e9:26:37:ec:84:5e:69:0e:a2:02:96:9d:e8:18:4a:87:c3:ef:
         85:79:a5:41:6c:73:02:4e:21:ee:48:1a:58:8d:0e:a6:4c:93:
         fb:24:2d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDOWXlPjNSmHScbdS2VYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5
OWNmZjYwHhcNMjUwNjA3MTEwMDQ4WhcNMjUwNjA4MTEwMDQ4WjAzMTEwLwYDVQQD
EyhlZGQ5MTkxYjk4MWU0OGZkODBiY2RlMzQ5MGRjMzUxOTg0ZmU3YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiQcu1dePEluqYBZdTClziOiueeL
Y05QmfPThodvl32uDRB1htZTNMd3bygDNniGZ0EMubLLbUmPSaXNDAM836gW9mff
Y2AXTp3cskm46Og3jGCvKnVWPBe42lQYtM31vwkHoImMFxpzrU9b5kPW/3g6OeqC
sTnGG4sGQU5nGm0DknUs1m1xkch0uGmu6XMjmNaCvW7r+9AfIjWfS4+89xWKH/Gs
f5mjcLXlWgqi9Z4GGNDrtJti9FIn+J4WolpP6NROOd8Kk616Jt/txF9TtZLpgqsE
GfQneUjEWwo67bzMzRC//gweY2z41gSdzRSjEpg4MEph+eyDcCyLC7gWtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3ZGRuYHkj9gLzeNJDcNRmE/nwcMB8GA1UdIwQY
MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt
ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw
LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO31zz5Hy
Y2AkpjQvft88ULoXRhoV6kHbN29iLU8GfQzUeqabqLgEn708eafyO8GmsglRi21o
q6rONZlGRCzw9yVAqOtJu6m2AsT12mL711WdegecdQp2MIwT4yWjcERRxKTDdXcq
PlNXYur4njVdz2NwBNBNi4qyLOAn9JJHDtVbkomBOMDU60v1+6LusDTsc36yPG67
zlCsIBtBl7ZuYEIxzVd7SoHFjbVnY6Jfp1vi7X4htG7bilerzY0mwoeW/5G7KshW
s8L7d0r4x5cWV1cr6UpGz2p+6SY37IReaQ6iApad6BhKh8PvhXmlQWxzAk4h7kga
WI0OpkyT+yQtkA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:05 2025 by rpki-client