Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
File:                     6LPu0cespjbWJFhSuALg5zdU32M.mft (raw, json)
Hash identifier:          u2WpInicY4lIQTRrMirZLyROAVmnsubrid6moxtWFEQ=
Subject key identifier:   27:03:DE:50:E5:49:34:91:68:E4:24:AB:A5:82:25:78:D0:CD:E0:55
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Certificate issuer:       /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial:       019601F686DD2B67FA5D7A721B6E755CB09C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
Manifest number:          1514
Signing time:             Fri 04 Apr 2025 18:00:55 +0000
Manifest this update:     Fri 04 Apr 2025 18:00:55 +0000
Manifest next update:     Sat 05 Apr 2025 18:00:55 +0000
Files and hashes:         1: 0jV5LTodhzA8wVDje7kdH5wl0LE.roa (hash: OhxiR+DlZMWnXzRatnCbYzcanScQ4hgV764Jpk76hgE=)
                          2: 6LPu0cespjbWJFhSuALg5zdU32M.crl (hash: He/RRBNtbIbFqFsOtwu3wfy2j0ruwYVFvdPHDRCKdac=)
                          3: EN2PA4LqEXKuo3e1ogAJM00I6hM.roa (hash: 3uEUfj7BRtsImAsWNlV+zd3yfILmZLpbeXXviDfiiGM=)
                          4: WVc2CMMzl3OxTazniKfgsA94UX8.roa (hash: oI3YDyrSL6PU5Wku37K2bFNDUgHLVbR5NcKy+jwV1Rk=)
                          5: gKwuz84JqfXVd9t-9wMc3TNayS8.roa (hash: LZYvjlHHoyK3zXtyxiowPJdeZotF/mJqVEEs+1kxVxM=)
                          6: h-bGacU9fgiR4H-2E9v6XeiGSeU.roa (hash: 6ypd4fLA8aJnNBffyCEBKS5ixXKMj39JyrXTMihA55M=)
                          7: qfkric2QUPKYkBB8bRDsZGyi6XE.roa (hash: daBShC7pqFoAAMzOkHKm3B5xOXs3TKHpZ+IiJ/7BGOg=)
                          8: tGECs5OY2cdz8mikBEFoXz5C6d8.roa (hash: Bw/zZmttO7DthXv4UKcvtOUWOfn1bWNIO4IyRKEnc00=)
                          9: yvemJiK1Cycaocx5avnL9-oYiCE.roa (hash: BK41sOqXvEWiYHdHTa4CVgvJdtFcY5ASV/WzcL1u36M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:01:f6:86:dd:2b:67:fa:5d:7a:72:1b:6e:75:5c:b0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
        Validity
            Not Before: Apr  4 18:00:55 2025 GMT
            Not After : Apr  5 18:00:55 2025 GMT
        Subject: CN=2703de50e549349168e424aba5822578d0cde055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f3:cf:c5:e1:bc:32:0e:e6:fa:be:6b:f2:94:
                    8d:7c:ef:8d:98:b2:a3:ee:0a:b1:53:00:22:31:70:
                    c2:1a:0e:f9:88:2a:da:d9:71:4e:c0:a8:9b:b3:4e:
                    90:29:ff:69:6b:53:41:57:01:77:c7:01:9e:f0:7b:
                    4a:ee:29:57:9a:08:10:d2:87:00:29:e1:3d:da:2a:
                    95:47:d9:09:4c:a8:2a:30:05:c8:7b:2b:1a:35:b1:
                    bc:ac:d4:f2:1a:bf:40:0b:a9:8f:99:70:78:c2:03:
                    10:d8:57:e7:1a:af:92:be:6c:25:7c:8e:0f:b8:6d:
                    90:07:ed:1e:a9:72:7c:6f:25:91:01:ce:c3:11:49:
                    ed:3d:3c:e5:fa:ea:2f:da:3a:9b:b4:53:e3:f7:90:
                    e6:85:25:f3:91:b1:a5:2e:fa:9b:58:cb:f8:2a:b0:
                    4c:de:d4:5a:95:53:1d:81:2e:6c:e0:15:e6:8e:ab:
                    78:98:00:62:18:54:b2:9f:8d:a8:2a:aa:26:46:76:
                    5b:61:28:dd:62:2d:4a:2c:ff:ed:af:a5:40:e4:da:
                    4b:9e:6c:96:3f:65:7b:3a:7f:d2:72:3b:6d:fd:f8:
                    1d:5d:44:00:11:e8:44:8a:05:94:15:32:b0:7c:f1:
                    ff:bd:39:f7:f0:0e:2f:7f:ac:84:95:f8:69:54:aa:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:03:DE:50:E5:49:34:91:68:E4:24:AB:A5:82:25:78:D0:CD:E0:55
            X509v3 Authority Key Identifier:
                keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8a:ce:10:ff:fc:32:44:63:22:de:cf:08:a3:36:1f:f9:11:
         d5:bd:97:0b:be:bb:fc:2d:a0:7c:e5:dd:ce:9b:40:2e:58:a3:
         f4:d8:21:90:49:d4:83:88:39:05:98:0a:78:a3:7f:c5:92:74:
         f6:b0:c2:7e:13:a9:ef:ad:d4:b8:f3:f0:87:87:84:f6:a1:b1:
         e5:0c:2a:41:da:d2:53:fe:a3:40:9f:bc:68:b4:a0:33:b9:c3:
         d0:ae:83:cc:a3:71:fa:67:41:42:03:1d:b1:86:56:36:70:9c:
         d9:a9:98:72:1f:c1:e6:5b:12:21:9d:ad:51:d2:f7:a6:0c:02:
         b6:f2:2d:2a:94:1e:44:1a:3a:08:6d:48:e3:65:be:50:66:7e:
         b1:94:be:f9:2f:95:92:29:f3:4a:3a:e0:37:2e:c7:63:3f:08:
         ee:7f:d9:dd:3e:89:25:e7:41:70:be:d9:70:d7:2a:aa:71:65:
         5b:cc:07:42:55:3c:15:17:cc:8a:81:44:5c:bd:68:bc:8f:71:
         48:a8:1b:cc:a6:e0:b4:9b:72:31:5e:9a:8e:ed:4f:59:c2:dc:
         09:15:4c:f5:c0:45:c6:dc:3b:e7:49:cd:d2:d4:0a:19:2f:3c:
         b5:c9:07:32:da:e8:c2:fe:86:a4:a6:b2:ed:85:43:5c:42:19:
         15:21:ad:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYB9obdK2f6XXpyG251XLCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1
NGRmNjMwHhcNMjUwNDA0MTgwMDU1WhcNMjUwNDA1MTgwMDU1WjAzMTEwLwYDVQQD
EygyNzAzZGU1MGU1NDkzNDkxNjhlNDI0YWJhNTgyMjU3OGQwY2RlMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PPPxeG8Mg7m+r5r8pSNfO+NmLKj
7gqxUwAiMXDCGg75iCra2XFOwKibs06QKf9pa1NBVwF3xwGe8HtK7ilXmggQ0ocA
KeE92iqVR9kJTKgqMAXIeysaNbG8rNTyGr9AC6mPmXB4wgMQ2FfnGq+SvmwlfI4P
uG2QB+0eqXJ8byWRAc7DEUntPTzl+uov2jqbtFPj95DmhSXzkbGlLvqbWMv4KrBM
3tRalVMdgS5s4BXmjqt4mABiGFSyn42oKqomRnZbYSjdYi1KLP/tr6VA5NpLnmyW
P2V7On/Scjtt/fgdXUQAEehEigWUFTKwfPH/vTn38A4vf6yElfhpVKplJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcD3lDlSTSRaOQkq6WCJXjQzeBVMB8GA1UdIwQY
MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt
OTQ2NDA0ZWMxYWE0LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0
LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYrOEP/8
MkRjIt7PCKM2H/kR1b2XC767/C2gfOXdzptALlij9NghkEnUg4g5BZgKeKN/xZJ0
9rDCfhOp763UuPPwh4eE9qGx5QwqQdrSU/6jQJ+8aLSgM7nD0K6DzKNx+mdBQgMd
sYZWNnCc2amYch/B5lsSIZ2tUdL3pgwCtvItKpQeRBo6CG1I42W+UGZ+sZS++S+V
kinzSjrgNy7HYz8I7n/Z3T6JJedBcL7ZcNcqqnFlW8wHQlU8FRfMioFEXL1ovI9x
SKgbzKbgtJtyMV6aju1PWcLcCRVM9cBFxtw750nN0tQKGS88tckHMtrowv6GpKay
7YVDXEIZFSGtbA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:22:54 2025 by rpki-client