Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File:                     Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier:          WydYm6hgBy8MlZhQTQeavYYRe7kF7LPbkHLbYJHdGdU=
Subject key identifier:   73:28:3C:3D:F8:1A:DF:C0:3C:8A:E8:3C:78:B3:7D:35:DD:2A:A3:06
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer:       /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial:       0196753081FD15D6B883DEC4392FE604861C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number:          0DE7
Signing time:             Sun 27 Apr 2025 03:00:35 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:35 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:35 +0000
Files and hashes:         1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: Vch8X5NYNgC3jQTpiWZxw38s7s4ba3f3nUq9QibBAgQ=)
                          2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:81:fd:15:d6:b8:83:de:c4:39:2f:e6:04:86:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
        Validity
            Not Before: Apr 27 03:00:35 2025 GMT
            Not After : Apr 28 03:00:35 2025 GMT
        Subject: CN=73283c3df81adfc03c8ae83c78b37d35dd2aa306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:9e:38:d3:30:fb:d9:ec:31:dd:cf:03:09:
                    fb:da:3e:ed:78:5c:95:80:9a:55:e1:35:3f:03:9f:
                    83:52:b0:c0:1c:f7:21:25:79:d6:84:66:9c:1a:a3:
                    46:fc:f4:7b:f9:6d:be:4c:bf:9d:d7:18:d8:bb:b6:
                    ad:5b:d6:ac:62:49:af:99:d6:50:04:c3:f9:5a:82:
                    f0:46:11:d2:5e:f6:1f:08:a9:c5:ea:78:a2:a9:83:
                    81:e9:6c:b4:39:35:40:9a:0b:34:c3:e7:cb:ca:60:
                    da:f6:b5:59:73:d8:eb:06:b5:20:03:c4:95:8b:db:
                    ff:6c:92:6e:9d:91:11:ca:fc:80:a7:b7:4f:c2:ed:
                    de:83:5e:03:60:ba:63:c3:8e:ec:e5:d6:88:bf:b5:
                    84:22:9f:58:ad:40:0a:8b:64:1e:0b:11:67:d3:54:
                    e5:75:56:ad:fe:25:08:10:94:4a:bb:32:44:c2:90:
                    5f:21:27:47:d7:58:96:c7:1d:96:8b:ba:b2:c6:37:
                    df:4d:63:16:77:d0:a0:d2:15:f6:13:6b:ee:e2:55:
                    01:6e:f0:c0:4c:7c:f6:49:a8:58:56:72:8b:31:79:
                    3f:e7:70:78:e5:75:8f:00:ac:20:15:8a:6b:58:01:
                    d2:f0:06:46:16:bb:d1:5c:cb:d6:c8:9a:2a:73:27:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:3C:3D:F8:1A:DF:C0:3C:8A:E8:3C:78:B3:7D:35:DD:2A:A3:06
            X509v3 Authority Key Identifier:
                keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:75:5f:5e:2e:d1:90:13:c4:10:4a:00:48:b2:3c:e5:87:
         61:2a:ce:32:b7:de:27:5a:27:e0:81:d4:c9:2a:06:0d:43:b4:
         94:0e:fe:71:5e:e3:26:dc:dd:1d:f5:bd:54:f5:50:ea:22:57:
         e4:ca:a3:6c:2d:6b:9b:79:36:25:c3:61:d8:03:ed:89:af:68:
         04:30:eb:94:25:ec:10:b5:e8:fa:43:26:5c:21:7d:15:85:93:
         ff:70:f2:ea:ba:8d:29:1a:7e:67:32:4c:30:f5:a1:96:c2:b1:
         ef:ef:b5:94:1b:1e:82:77:30:3d:8d:29:9b:84:d6:30:02:80:
         5c:19:1d:f1:a4:44:74:ab:d0:8e:2e:e9:eb:fd:99:75:d4:6c:
         8a:0a:69:e1:5e:96:97:84:b4:91:e0:3c:c0:be:67:b6:f9:da:
         77:d1:64:94:a0:96:08:10:e7:87:70:bf:b6:7f:68:84:32:96:
         86:d3:23:0a:49:a7:5d:9f:13:12:95:04:b1:e1:46:5f:12:a5:
         46:3d:cc:a9:38:a5:59:fc:73:8a:d7:86:ec:eb:2b:96:11:de:
         c4:42:ce:4d:0d:f3:e7:3f:06:27:21:e4:0f:33:a3:46:bb:45:
         fc:04:58:90:50:3d:b8:01:ad:9c:4a:c3:55:9a:14:9f:b6:92:
         eb:46:f2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MIH9Fda4g97EOS/mBIYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmI3NzI3ZDY0YTUxOGM3Y2Q0ODVlNDgyM2VlNzhhOWUy
OTEwMDgwHhcNMjUwNDI3MDMwMDM1WhcNMjUwNDI4MDMwMDM1WjAzMTEwLwYDVQQD
Eyg3MzI4M2MzZGY4MWFkZmMwM2M4YWU4M2M3OGIzN2QzNWRkMmFhMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX6eONMw+9nsMd3PAwn72j7teFyV
gJpV4TU/A5+DUrDAHPchJXnWhGacGqNG/PR7+W2+TL+d1xjYu7atW9asYkmvmdZQ
BMP5WoLwRhHSXvYfCKnF6niiqYOB6Wy0OTVAmgs0w+fLymDa9rVZc9jrBrUgA8SV
i9v/bJJunZERyvyAp7dPwu3eg14DYLpjw47s5daIv7WEIp9YrUAKi2QeCxFn01Tl
dVat/iUIEJRKuzJEwpBfISdH11iWxx2Wi7qyxjffTWMWd9Cg0hX2E2vu4lUBbvDA
THz2SahYVnKLMXk/53B45XWPAKwgFYprWAHS8AZGFrvRXMvWyJoqcyeIrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMoPD34Gt/APIroPHizfTXdKqMGMB8GA1UdIwQY
MBaAFGb7dyfWSlGMfNSF5II+54qeKRAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4Mzkt
N2MzYmRkYzI5NzhhLzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4MzktN2MzYmRkYzI5Nzhh
LzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhd1X14u
0ZATxBBKAEiyPOWHYSrOMrfeJ1on4IHUySoGDUO0lA7+cV7jJtzdHfW9VPVQ6iJX
5MqjbC1rm3k2JcNh2APtia9oBDDrlCXsELXo+kMmXCF9FYWT/3Dy6rqNKRp+ZzJM
MPWhlsKx7++1lBsegncwPY0pm4TWMAKAXBkd8aREdKvQji7p6/2ZddRsigpp4V6W
l4S0keA8wL5ntvnad9FklKCWCBDnh3C/tn9ohDKWhtMjCkmnXZ8TEpUEseFGXxKl
Rj3MqTilWfxziteG7OsrlhHexELOTQ3z5z8GJyHkDzOjRrtF/ARYkFA9uAGtnErD
VZoUn7aS60byGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:50 2025 by rpki-client