Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File:                     MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier:          TnXneWD9DEimnE6ylExFz4Lj+IixoJClknKlAJO6sTE=
Subject key identifier:   71:90:E1:9C:21:92:EB:EA:31:29:83:CD:1B:78:9E:B7:2A:6B:4B:0C
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       0196827E45B2BD627A2F29C871DB5DDAC145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number:          1518
Signing time:             Tue 29 Apr 2025 17:00:35 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:35 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:35 +0000
Files and hashes:         1: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: rdSL6dCyMrHRtqp9DuSK85LfYOrZ7yJ4x0ct7MX1xLI=)
                          2: sQzmhjMqbnYxePAUvm9cNK1Tjw4.roa (hash: tJJ1LdtYmxN6Mm4HIKko/zr0MUnt+0ElprJSwioZ+lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:45:b2:bd:62:7a:2f:29:c8:71:db:5d:da:c1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: Apr 29 17:00:35 2025 GMT
            Not After : Apr 30 17:00:35 2025 GMT
        Subject: CN=7190e19c2192ebea312983cd1b789eb72a6b4b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:e2:92:60:99:37:23:5a:b8:f1:2b:d7:b5:
                    f6:34:28:07:44:39:48:1d:a5:56:6e:de:6d:a5:89:
                    c8:3e:c5:1c:c3:bb:ea:8c:fa:76:ee:f4:5e:c7:68:
                    cc:33:5f:66:e6:a5:2b:d5:6d:bd:6c:29:31:31:31:
                    52:67:b4:2b:59:d8:6e:99:3f:01:5a:f4:82:75:f5:
                    a8:3d:f6:3b:99:15:af:80:01:de:fe:f5:64:7b:05:
                    ec:07:6a:a7:db:c3:34:15:8b:10:77:70:98:57:7b:
                    e7:05:f9:a0:17:d8:4e:46:08:66:ad:e7:be:f5:43:
                    b3:69:96:3a:e1:b4:51:ff:ba:1a:08:6b:f2:f1:ae:
                    48:0b:a8:0f:f1:8a:51:f7:b6:6c:d3:f1:17:bb:83:
                    53:7f:c9:5b:fc:17:7a:dd:17:38:ac:d6:d3:8d:ed:
                    66:b9:4d:2e:1e:4a:3b:29:f5:bb:71:9e:f7:f4:e9:
                    ab:bd:20:4c:da:81:67:9a:16:1c:81:34:4f:8e:f5:
                    1a:8f:28:8a:09:60:6d:98:5f:30:5d:5c:80:3f:df:
                    53:a4:8b:1a:77:cb:d2:dc:c3:ea:a0:23:56:c8:ce:
                    55:8b:d6:79:60:e2:76:da:0c:38:f9:31:f7:77:9a:
                    5b:ec:72:5c:3d:1b:ad:20:3f:82:98:53:a1:cc:46:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:90:E1:9C:21:92:EB:EA:31:29:83:CD:1B:78:9E:B7:2A:6B:4B:0C
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:bd:d2:d1:1c:f7:a9:16:a3:ff:ae:17:12:e2:0b:f4:4e:7e:
         ad:f6:cb:69:34:1e:46:3d:de:0b:13:5e:fc:56:a2:b9:d4:1c:
         2d:60:7f:24:e5:c3:c0:81:1e:16:17:94:c7:fd:25:49:48:d2:
         62:b0:c5:fc:c4:c6:d2:82:8a:b6:dd:9e:24:57:09:b4:73:63:
         98:ff:7a:11:22:7e:ec:a5:4e:89:fb:fb:7e:10:bc:f1:aa:84:
         fd:d3:6d:e9:37:21:0d:61:fc:1d:9d:a3:f1:82:ee:ac:be:a1:
         5b:6d:5c:44:b9:d0:25:a8:b9:f6:5c:e8:90:24:9f:fa:b1:83:
         cd:63:42:87:99:e2:4b:ac:df:02:25:56:21:7e:87:3c:6a:8a:
         8d:49:d7:3b:b5:ff:3e:7c:05:c6:c6:1c:61:eb:2a:2c:f8:27:
         24:69:9d:78:ca:2a:21:1f:7c:e4:b9:aa:e1:83:d3:bd:3e:0c:
         98:b6:bd:e1:77:c4:9d:e6:43:e2:7c:bf:cd:2b:64:9f:a9:22:
         1d:35:2e:7b:55:41:96:4e:54:38:95:1f:50:a7:3b:00:74:84:
         5e:2a:eb:22:bf:e1:4a:b1:70:b0:50:ad:83:fc:63:9a:08:14:
         e8:c1:dd:8f:f3:73:18:15:d9:00:8c:83:d4:f0:c6:c0:e9:0f:
         76:cb:11:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfkWyvWJ6LynIcdtd2sFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh
YjZkYjQwHhcNMjUwNDI5MTcwMDM1WhcNMjUwNDMwMTcwMDM1WjAzMTEwLwYDVQQD
Eyg3MTkwZTE5YzIxOTJlYmVhMzEyOTgzY2QxYjc4OWViNzJhNmI0YjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3ikmCZNyNauPEr17X2NCgHRDlI
HaVWbt5tpYnIPsUcw7vqjPp27vRex2jMM19m5qUr1W29bCkxMTFSZ7QrWdhumT8B
WvSCdfWoPfY7mRWvgAHe/vVkewXsB2qn28M0FYsQd3CYV3vnBfmgF9hORghmree+
9UOzaZY64bRR/7oaCGvy8a5IC6gP8YpR97Zs0/EXu4NTf8lb/Bd63Rc4rNbTje1m
uU0uHko7KfW7cZ739OmrvSBM2oFnmhYcgTRPjvUajyiKCWBtmF8wXVyAP99TpIsa
d8vS3MPqoCNWyM5Vi9Z5YOJ22gw4+TH3d5pb7HJcPRutID+CmFOhzEY0hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGQ4ZwhkuvqMSmDzRt4nrcqa0sMMB8GA1UdIwQY
MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt
MWY2NmZhYWI0YWI1LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1
LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFL3S0Rz3
qRaj/64XEuIL9E5+rfbLaTQeRj3eCxNe/FaiudQcLWB/JOXDwIEeFheUx/0lSUjS
YrDF/MTG0oKKtt2eJFcJtHNjmP96ESJ+7KVOifv7fhC88aqE/dNt6TchDWH8HZ2j
8YLurL6hW21cRLnQJai59lzokCSf+rGDzWNCh5niS6zfAiVWIX6HPGqKjUnXO7X/
PnwFxsYcYesqLPgnJGmdeMoqIR985Lmq4YPTvT4MmLa94XfEneZD4ny/zStkn6ki
HTUue1VBlk5UOJUfUKc7AHSEXirrIr/hSrFwsFCtg/xjmggU6MHdj/NzGBXZAIyD
1PDGwOkPdssRVQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:54:30 2025 by rpki-client