Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          /yHaypGPNhXMOayj5gAJ3ROM1lUWviW3Tvj1Dm6CN5I=
Subject key identifier:   FD:5D:24:B3:F8:E9:2A:DD:86:51:15:5B:6E:B0:AF:CC:85:21:55:A9
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       019678D666374BE2088399900BADD4E32CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          148E
Signing time:             Sun 27 Apr 2025 20:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:38 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: EBKzXtJ31leKA6FtJoN7nUR3POc8JBTYsFHDSq9P7/w=)
                          2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:66:37:4b:e2:08:83:99:90:0b:ad:d4:e3:2c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Apr 27 20:00:38 2025 GMT
            Not After : Apr 28 20:00:38 2025 GMT
        Subject: CN=fd5d24b3f8e92add8651155b6eb0afcc852155a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:10:8b:2a:0c:58:1c:61:4b:60:24:e7:75:
                    f5:33:cf:cd:97:5d:93:9e:e4:2b:e0:4c:63:56:c7:
                    4b:dd:5c:a5:99:4d:aa:fe:f2:38:dd:fa:09:f0:0b:
                    20:22:47:2a:75:ad:5c:e9:ee:d8:2d:94:eb:d0:30:
                    c6:2d:32:03:55:97:b9:b1:55:16:ad:36:02:0e:0a:
                    c2:31:d5:af:99:d8:05:6b:2d:48:f8:e0:63:80:a6:
                    18:c8:2f:ed:5e:f2:07:b1:5b:f3:9d:b9:96:e2:37:
                    82:32:f8:3f:06:f0:ef:6a:d6:56:2e:7c:1a:db:71:
                    50:8c:87:61:dc:4a:d8:29:e2:22:98:14:99:d6:e5:
                    72:30:f9:32:b1:a8:ac:1f:4c:2c:86:ce:46:f4:87:
                    d8:9b:b8:7b:47:f8:92:6f:a7:76:cf:a0:15:d3:89:
                    bf:83:18:1b:59:a5:1e:ec:fc:7b:4d:50:1d:09:af:
                    c8:19:86:b0:32:68:ad:1b:7a:c1:88:dd:af:31:77:
                    b5:fd:f5:54:79:9d:2e:c4:ef:65:61:63:36:5e:5a:
                    28:20:92:64:9e:0f:1e:82:ee:7a:2d:36:1d:6c:c1:
                    1d:0c:7c:06:5a:c9:bc:25:40:46:54:91:77:b2:a2:
                    7a:ca:df:20:bc:28:95:69:ba:6e:12:5a:52:4c:5e:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5D:24:B3:F8:E9:2A:DD:86:51:15:5B:6E:B0:AF:CC:85:21:55:A9
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:da:c8:72:55:e2:e5:77:36:d7:f1:d2:3c:58:d1:d8:6c:b0:
         9c:46:e7:ae:fb:3e:4f:e6:57:95:6d:fc:ca:2f:4e:03:70:dc:
         82:30:58:b7:ca:58:ff:d3:1a:d6:41:69:6e:e0:ae:d4:f9:e9:
         05:62:c3:a0:bc:e3:b1:99:60:1a:16:23:64:b1:19:ba:aa:9e:
         3b:4f:c5:d9:a1:11:30:b4:07:77:5c:0b:4b:af:21:1c:01:af:
         2b:b4:bc:75:7c:1f:8a:07:f0:77:91:fe:6a:88:df:20:fd:fe:
         67:da:cd:ac:4a:a2:db:38:29:61:49:e2:c9:f2:de:49:74:3f:
         f0:35:53:0f:0b:58:f2:f0:62:ee:bd:7b:97:35:c2:bf:13:d8:
         5a:19:1d:db:88:bd:50:f6:aa:db:fd:66:9d:50:3e:87:62:43:
         90:48:9e:9d:54:2e:02:0f:f7:36:70:20:36:8a:a7:1e:f1:6c:
         2a:15:fc:e5:5c:20:65:c7:a6:2d:81:82:7b:5e:8e:54:89:0b:
         53:6d:15:f0:16:4d:02:0c:d3:1e:1d:25:ef:06:48:a5:7a:45:
         95:d7:d4:aa:ed:14:f1:57:1b:6b:62:55:3d:aa:1e:27:f2:6a:
         05:6a:8f:8a:8a:0a:1c:2e:8c:48:8d:85:8e:2b:08:82:cc:95:
         b9:50:aa:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41mY3S+IIg5mQC63U4yyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NmNkNTc4ZjQyZjhkZTA2NzIzNjc2N2M2Y2ZjMmJhY2Jj
MTZlMDUwHhcNMjUwNDI3MjAwMDM4WhcNMjUwNDI4MjAwMDM4WjAzMTEwLwYDVQQD
EyhmZDVkMjRiM2Y4ZTkyYWRkODY1MTE1NWI2ZWIwYWZjYzg1MjE1NWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08IQiyoMWBxhS2Ak53X1M8/Nl12T
nuQr4ExjVsdL3VylmU2q/vI43foJ8AsgIkcqda1c6e7YLZTr0DDGLTIDVZe5sVUW
rTYCDgrCMdWvmdgFay1I+OBjgKYYyC/tXvIHsVvznbmW4jeCMvg/BvDvatZWLnwa
23FQjIdh3ErYKeIimBSZ1uVyMPkysaisH0wshs5G9IfYm7h7R/iSb6d2z6AV04m/
gxgbWaUe7Px7TVAdCa/IGYawMmitG3rBiN2vMXe1/fVUeZ0uxO9lYWM2XlooIJJk
ng8egu56LTYdbMEdDHwGWsm8JUBGVJF3sqJ6yt8gvCiVabpuElpSTF6ZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1dJLP46SrdhlEVW26wr8yFIVWpMB8GA1UdIwQY
MBaAFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQt
YjdhNTY0YWZiMDRiLzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQtYjdhNTY0YWZiMDRi
LzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9rIclXi
5Xc21/HSPFjR2GywnEbnrvs+T+ZXlW38yi9OA3DcgjBYt8pY/9Ma1kFpbuCu1Pnp
BWLDoLzjsZlgGhYjZLEZuqqeO0/F2aERMLQHd1wLS68hHAGvK7S8dXwfigfwd5H+
aojfIP3+Z9rNrEqi2zgpYUniyfLeSXQ/8DVTDwtY8vBi7r17lzXCvxPYWhkd24i9
UPaq2/1mnVA+h2JDkEienVQuAg/3NnAgNoqnHvFsKhX85VwgZcemLYGCe16OVIkL
U20V8BZNAgzTHh0l7wZIpXpFldfUqu0U8Vcba2JVPaoeJ/JqBWqPiooKHC6MSI2F
jisIgsyVuVCqrw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:29:01 2025 by rpki-client