Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File:                     KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier:          swdugYkt3hrzceQwxKj8pnmQ5IyStYKEdLl9BtuHs74=
Subject key identifier:   39:BE:36:45:65:51:0A:11:75:31:72:A6:BD:7B:F6:D5:33:B6:B7:FF
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer:       /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial:       0197488C26085E26837C3B3FFB4AA602AC96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number:          150D
Signing time:             Sat 07 Jun 2025 04:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:33 +0000
Files and hashes:         1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
                          2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: dGWMt8Kbr1nUGOtScT7MbhJ2YuIqpLYfyvWdK+fNdTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:26:08:5e:26:83:7c:3b:3f:fb:4a:a6:02:ac:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
        Validity
            Not Before: Jun  7 04:00:33 2025 GMT
            Not After : Jun  8 04:00:33 2025 GMT
        Subject: CN=39be364565510a11753172a6bd7bf6d533b6b7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:24:7c:9e:8b:b8:29:7f:84:2c:ba:06:4d:
                    29:e7:df:f3:3c:1a:1c:e3:49:3a:94:3a:c3:0f:d2:
                    07:8a:31:b9:b5:92:bd:27:fe:33:82:bf:37:80:83:
                    0f:97:93:27:fe:16:74:1d:dd:a3:3e:49:e9:52:5f:
                    55:4f:15:21:b4:1d:4a:06:07:bc:cf:52:4a:52:a5:
                    4a:9e:cc:bc:ba:37:d1:80:3f:4f:12:ff:fc:3e:cf:
                    22:29:ed:79:88:24:63:b2:bd:95:e9:43:09:f2:11:
                    75:2e:41:d6:9b:a8:b2:64:a9:81:da:80:d3:5b:5d:
                    04:e4:d9:d5:7a:b0:b7:e2:23:20:95:07:76:61:f4:
                    a1:03:09:6c:a4:67:bf:ed:ec:4e:bd:1c:c5:5c:4b:
                    49:99:a4:eb:e9:d7:ab:5c:c1:59:29:2f:3b:50:4e:
                    05:9e:7a:1b:9e:29:d7:5d:0f:17:14:36:5a:fe:e2:
                    ab:9b:8d:67:3c:46:6c:4f:0c:8f:7d:14:7e:06:f4:
                    15:e4:16:d7:2a:a9:52:18:7c:aa:74:23:97:9b:3c:
                    5a:42:02:63:8a:c7:83:5b:5e:6d:83:f7:a9:34:c9:
                    2f:04:fd:0c:c6:7c:8c:ac:0b:44:65:27:cb:24:38:
                    0d:6a:ef:b9:df:7d:52:50:f4:af:34:4f:42:a5:ea:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:36:45:65:51:0A:11:75:31:72:A6:BD:7B:F6:D5:33:B6:B7:FF
            X509v3 Authority Key Identifier:
                keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:11:42:62:48:bd:be:82:8d:a4:fa:3c:2e:36:02:19:f5:9e:
         7e:83:26:a1:2b:ea:80:df:6d:be:ca:a0:c6:22:e9:30:cd:11:
         4e:56:53:a4:d7:43:92:f1:34:1a:7c:b2:c0:39:d4:0e:12:2a:
         ab:e1:81:4f:f9:50:b0:01:19:45:76:0a:b9:cf:7d:1c:90:0c:
         f8:18:35:f6:da:e4:37:4f:4a:16:ba:ac:10:0f:6c:ac:f3:7b:
         b5:03:df:10:06:d3:b1:22:18:53:c7:5a:5f:1a:5d:07:77:c8:
         a0:f9:78:77:7f:70:8f:ad:97:23:d9:97:42:8f:ca:f0:fc:d2:
         0e:8d:90:49:bb:c0:13:99:a6:32:60:a5:c4:c3:48:1e:29:80:
         7f:24:5d:9a:0c:fe:4a:f3:7b:14:d4:c6:64:3e:a0:fe:08:31:
         fb:84:1d:de:a8:13:50:46:78:8e:2a:4e:ad:3c:0b:50:29:0b:
         74:03:42:c3:d2:e4:b1:98:c8:8f:f5:db:53:6b:65:96:be:a1:
         c5:67:45:8e:b7:48:ba:d8:4c:02:9e:15:38:04:69:b1:81:3f:
         36:9c:5f:e8:ec:b1:1a:ab:54:00:11:9f:7f:34:3f:82:bd:99:
         37:50:dc:88:59:05:ed:97:93:ce:d0:56:70:63:3d:8e:ad:f8:
         18:e7:59:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjCYIXiaDfDs/+0qmAqyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGI1YmJiZTE3NDY3NDc2ZTIyODI4ODgyMjE4ODdkZjU0
OWY0YjkwHhcNMjUwNjA3MDQwMDMzWhcNMjUwNjA4MDQwMDMzWjAzMTEwLwYDVQQD
EygzOWJlMzY0NTY1NTEwYTExNzUzMTcyYTZiZDdiZjZkNTMzYjZiN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY8kfJ6LuCl/hCy6Bk0p59/zPBoc
40k6lDrDD9IHijG5tZK9J/4zgr83gIMPl5Mn/hZ0Hd2jPknpUl9VTxUhtB1KBge8
z1JKUqVKnsy8ujfRgD9PEv/8Ps8iKe15iCRjsr2V6UMJ8hF1LkHWm6iyZKmB2oDT
W10E5NnVerC34iMglQd2YfShAwlspGe/7exOvRzFXEtJmaTr6derXMFZKS87UE4F
nnobninXXQ8XFDZa/uKrm41nPEZsTwyPfRR+BvQV5BbXKqlSGHyqdCOXmzxaQgJj
iseDW15tg/epNMkvBP0MxnyMrAtEZSfLJDgNau+5331SUPSvNE9CpercaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm+NkVlUQoRdTFypr179tUztrf/MB8GA1UdIwQY
MBaAFClLW7vhdGdHbiKCiIIhiH31SfS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYt
YzQxZDg2MDk4ZGY3LzEvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYtYzQxZDg2MDk4ZGY3
LzEvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzRFCYki9
voKNpPo8LjYCGfWefoMmoSvqgN9tvsqgxiLpMM0RTlZTpNdDkvE0GnyywDnUDhIq
q+GBT/lQsAEZRXYKuc99HJAM+Bg19trkN09KFrqsEA9srPN7tQPfEAbTsSIYU8da
XxpdB3fIoPl4d39wj62XI9mXQo/K8PzSDo2QSbvAE5mmMmClxMNIHimAfyRdmgz+
SvN7FNTGZD6g/ggx+4Qd3qgTUEZ4jipOrTwLUCkLdANCw9LksZjIj/XbU2tllr6h
xWdFjrdIuthMAp4VOARpsYE/Npxf6OyxGqtUABGffzQ/gr2ZN1DciFkF7ZeTztBW
cGM9jq34GOdZZA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:09 2025 by rpki-client