Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File:                     S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier:          t7qteKtlNkgbaVpRi5RnfW3rgN9hmJ2WL1ItcHLA1SQ=
Subject key identifier:   96:B2:F1:C4:02:CC:89:CB:D1:BB:9A:D1:EC:C6:FC:AD:B0:DF:BE:97
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer:       /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial:       019683C7F3F68A409D8A89B9AB0139368852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number:          0BAA
Signing time:             Tue 29 Apr 2025 23:00:41 +0000
Manifest this update:     Tue 29 Apr 2025 23:00:41 +0000
Manifest next update:     Wed 30 Apr 2025 23:00:41 +0000
Files and hashes:         1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=)
                          2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: kdW4ou6p5J7Vs83EO47eh6xr5Tp5glf2gitPtmTR1VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:c7:f3:f6:8a:40:9d:8a:89:b9:ab:01:39:36:88:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
        Validity
            Not Before: Apr 29 23:00:41 2025 GMT
            Not After : Apr 30 23:00:41 2025 GMT
        Subject: CN=96b2f1c402cc89cbd1bb9ad1ecc6fcadb0dfbe97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:c5:0c:40:23:61:0c:4e:32:18:8a:ca:96:
                    03:86:9d:e7:c0:68:cb:17:4b:9c:f2:a1:b1:26:3b:
                    87:d8:b4:d3:7b:bd:b6:7f:fc:d3:d6:c8:88:fc:1b:
                    db:01:1b:87:c1:44:9b:45:1c:b9:6d:f1:ca:bc:d8:
                    71:77:34:a2:01:de:9c:dd:71:14:0a:c3:d1:01:a7:
                    0e:f0:91:5b:8f:eb:7c:58:bb:47:a5:5f:d8:66:71:
                    26:97:e0:42:f9:b4:dc:8e:11:11:1e:d0:27:15:bd:
                    38:5e:6e:23:da:47:83:9e:b7:73:ff:c2:f5:2d:2f:
                    04:3b:e4:ea:68:0a:a7:87:6b:a7:31:b6:ea:af:59:
                    5f:28:b3:65:3f:8f:71:ef:de:a5:a4:97:24:00:fa:
                    78:5e:05:1f:a3:8c:2c:f2:77:f5:c9:fd:be:ce:d1:
                    43:3c:1d:ac:8a:a1:4b:d2:69:d0:9b:0d:6f:66:68:
                    7b:0b:6c:63:d7:92:4f:8f:97:1c:cf:bc:ff:d7:49:
                    a2:d2:a4:11:c3:d2:4b:1a:ac:43:0b:92:13:c4:4e:
                    56:0e:d0:bd:2f:0a:b8:0e:90:91:e3:96:83:89:7c:
                    47:1a:c7:93:90:31:cb:d2:6e:53:de:97:dd:fb:59:
                    a0:80:19:bc:04:74:fb:2a:78:9f:e8:fb:d9:cc:00:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B2:F1:C4:02:CC:89:CB:D1:BB:9A:D1:EC:C6:FC:AD:B0:DF:BE:97
            X509v3 Authority Key Identifier:
                keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:e3:7b:e6:ac:86:0d:1d:22:41:ea:0c:34:a6:3e:66:a3:
         93:83:07:0a:ab:6b:85:f7:96:bc:de:ee:39:a0:41:c7:73:03:
         ba:98:31:2c:d9:87:cd:9b:96:b6:81:f7:6e:6d:ed:86:21:e0:
         df:b4:d6:30:24:4a:1e:ce:85:c9:f5:af:1a:53:3a:28:5e:45:
         01:6a:ec:76:3f:32:12:bf:0f:5b:c5:3d:06:ce:72:66:9b:b4:
         ba:64:8e:5a:79:cb:f7:7e:11:16:3e:67:4c:75:f6:6f:d3:55:
         29:dc:15:b7:e5:d2:34:91:d1:38:e6:a9:b3:fb:e7:6f:87:6a:
         a5:f3:23:67:c0:c5:3b:d6:a5:8a:cf:ae:76:d7:56:b5:77:67:
         41:d1:29:a3:46:7b:43:ba:2c:13:78:2e:7b:dd:0d:98:02:41:
         71:db:45:0b:18:fe:f8:cf:db:9c:96:79:a6:bf:69:d6:99:55:
         8d:0a:e4:2a:93:ea:5e:f4:ba:96:24:5e:df:f9:76:af:ef:dc:
         96:36:b8:b5:d6:86:12:cf:c0:ad:82:c8:87:63:4a:17:ac:e1:
         d0:6e:ed:e5:54:32:78:c3:fe:0a:d1:9b:22:5b:48:3b:73:18:
         0b:46:17:c1:c1:4d:b8:a9:5f:a5:ef:07:40:40:c9:73:6e:93:
         e0:cb:7d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx/P2ikCdiom5qwE5NohSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh
Yzk5YzUwHhcNMjUwNDI5MjMwMDQxWhcNMjUwNDMwMjMwMDQxWjAzMTEwLwYDVQQD
Eyg5NmIyZjFjNDAyY2M4OWNiZDFiYjlhZDFlY2M2ZmNhZGIwZGZiZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL7FDEAjYQxOMhiKypYDhp3nwGjL
F0uc8qGxJjuH2LTTe722f/zT1siI/BvbARuHwUSbRRy5bfHKvNhxdzSiAd6c3XEU
CsPRAacO8JFbj+t8WLtHpV/YZnEml+BC+bTcjhERHtAnFb04Xm4j2keDnrdz/8L1
LS8EO+TqaAqnh2unMbbqr1lfKLNlP49x796lpJckAPp4XgUfo4ws8nf1yf2+ztFD
PB2siqFL0mnQmw1vZmh7C2xj15JPj5ccz7z/10mi0qQRw9JLGqxDC5ITxE5WDtC9
Lwq4DpCR45aDiXxHGseTkDHL0m5T3pfd+1mggBm8BHT7Knif6PvZzABtJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJay8cQCzInL0bua0ezG/K2w376XMB8GA1UdIwQY
MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt
NGIxNTgxZjA5ZDNiLzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi
LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6Lje+as
hg0dIkHqDDSmPmajk4MHCqtrhfeWvN7uOaBBx3MDupgxLNmHzZuWtoH3bm3thiHg
37TWMCRKHs6FyfWvGlM6KF5FAWrsdj8yEr8PW8U9Bs5yZpu0umSOWnnL934RFj5n
THX2b9NVKdwVt+XSNJHROOaps/vnb4dqpfMjZ8DFO9alis+udtdWtXdnQdEpo0Z7
Q7osE3gue90NmAJBcdtFCxj++M/bnJZ5pr9p1plVjQrkKpPqXvS6liRe3/l2r+/c
lja4tdaGEs/ArYLIh2NKF6zh0G7t5VQyeMP+CtGbIltIO3MYC0YXwcFNuKlfpe8H
QEDJc26T4Mt95A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:50 2025 by rpki-client