Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File:                     Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier:          BgxB0PfJhbDkby5IexqUfxT8YNuDqW81S6gRK7WSShY=
Subject key identifier:   7D:D9:6E:0E:76:43:49:EB:B1:25:84:DE:54:DF:D6:17:08:CE:54:75
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer:       /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial:       01967B32F295CC390889C5377E31628D3F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number:          0642
Signing time:             Mon 28 Apr 2025 07:00:58 +0000
Manifest this update:     Mon 28 Apr 2025 07:00:58 +0000
Manifest next update:     Tue 29 Apr 2025 07:00:58 +0000
Files and hashes:         1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: ivqdiIey++OZ1fN1hbMRGRxb9Jtj9VbvQuz2eo5CxRU=)
                          2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:32:f2:95:cc:39:08:89:c5:37:7e:31:62:8d:3f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
        Validity
            Not Before: Apr 28 07:00:58 2025 GMT
            Not After : Apr 29 07:00:58 2025 GMT
        Subject: CN=7dd96e0e764349ebb12584de54dfd61708ce5475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:39:d7:58:8e:3b:f0:9a:91:11:77:eb:06:8d:
                    59:17:63:6b:68:0d:33:ec:c3:89:8b:e2:80:7f:98:
                    62:80:19:e2:c1:e9:0e:95:1a:49:2f:e8:0c:92:3b:
                    49:2f:58:4c:9b:ea:8a:c9:5a:90:f7:ba:d4:05:50:
                    41:f6:bd:47:6b:f1:c7:2e:ed:3f:30:2e:60:74:fb:
                    57:55:af:0a:1c:34:0a:8a:86:41:5b:df:6e:e8:10:
                    e1:ae:c5:6c:b9:b7:a9:1e:fc:95:cb:19:94:18:0d:
                    a4:6c:19:fe:17:36:8e:67:17:93:12:ad:3c:a4:bd:
                    b6:23:d5:da:0a:43:2d:28:82:cd:ce:34:70:0b:76:
                    62:77:a6:bb:a1:95:81:b3:a4:d6:25:43:cd:00:94:
                    71:1c:fb:60:fa:40:5a:0e:2f:39:3c:f1:dd:a4:15:
                    9e:c9:1c:8a:04:fc:f2:62:42:b9:42:58:75:38:0b:
                    2b:e0:e7:30:92:62:a1:3e:33:4f:fe:bc:0f:0c:9f:
                    de:c1:71:44:21:f7:e0:7e:cf:20:83:2a:be:97:cd:
                    ad:9f:7b:66:6b:3f:64:7d:33:8a:ae:35:67:de:15:
                    cd:f1:9a:ce:ec:2e:9c:39:19:40:27:c8:b9:88:31:
                    98:80:03:af:ed:6a:50:9b:de:54:73:c4:77:ee:f6:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D9:6E:0E:76:43:49:EB:B1:25:84:DE:54:DF:D6:17:08:CE:54:75
            X509v3 Authority Key Identifier:
                keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:2e:1c:ea:75:40:0d:30:5f:e9:a5:d2:9f:3d:c8:c9:5e:
         be:fd:44:4b:9d:56:26:59:10:23:50:d4:8c:24:cc:1b:3f:84:
         75:8d:01:2a:7c:20:f4:e5:de:ce:e3:be:92:32:12:6f:bc:06:
         e8:2d:33:b6:6e:c2:a8:ef:59:1e:2d:63:9d:3a:51:76:67:89:
         34:11:be:02:38:0b:3a:48:6a:ea:b9:15:7a:2f:5c:43:37:50:
         39:e1:55:5f:50:c8:d0:0f:7f:c9:42:a9:82:fd:c4:f8:8c:a6:
         b8:77:67:21:22:08:5a:da:be:8b:b4:26:bc:15:aa:13:a1:10:
         5b:fb:c5:8d:15:b4:6c:cb:6e:83:ce:9c:db:bc:c7:b7:45:3f:
         0f:2e:54:ef:fb:fe:a7:f3:64:16:f6:8a:9e:64:25:dc:9c:be:
         54:70:fc:be:10:45:2f:0a:09:ba:3b:e7:86:5d:7a:be:20:cb:
         51:66:ed:5c:67:84:7f:d6:1d:5d:db:46:18:06:06:90:f5:d0:
         4b:4c:a0:be:4a:6b:a2:c1:4a:26:59:5b:a4:17:09:d5:20:7f:
         94:d8:d3:4d:9c:ac:5b:bc:19:45:14:17:bd:79:0a:03:6d:26:
         0e:25:a8:10:44:8e:9f:95:56:5a:fd:c9:54:9f:dc:d4:4c:ea:
         cf:2b:52:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7MvKVzDkIicU3fjFijT8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3
ZTE5ZWQwHhcNMjUwNDI4MDcwMDU4WhcNMjUwNDI5MDcwMDU4WjAzMTEwLwYDVQQD
Eyg3ZGQ5NmUwZTc2NDM0OWViYjEyNTg0ZGU1NGRmZDYxNzA4Y2U1NDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jnXWI478JqREXfrBo1ZF2NraA0z
7MOJi+KAf5higBniwekOlRpJL+gMkjtJL1hMm+qKyVqQ97rUBVBB9r1Ha/HHLu0/
MC5gdPtXVa8KHDQKioZBW99u6BDhrsVsubepHvyVyxmUGA2kbBn+FzaOZxeTEq08
pL22I9XaCkMtKILNzjRwC3Zid6a7oZWBs6TWJUPNAJRxHPtg+kBaDi85PPHdpBWe
yRyKBPzyYkK5Qlh1OAsr4OcwkmKhPjNP/rwPDJ/ewXFEIffgfs8ggyq+l82tn3tm
az9kfTOKrjVn3hXN8ZrO7C6cORlAJ8i5iDGYgAOv7WpQm95Uc8R37vZuNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3Zbg52Q0nrsSWE3lTf1hcIzlR1MB8GA1UdIwQY
MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt
OTJkNDE4ZThkOWE1LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1
LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSsuHOp1
QA0wX+ml0p89yMlevv1ES51WJlkQI1DUjCTMGz+EdY0BKnwg9OXezuO+kjISb7wG
6C0ztm7CqO9ZHi1jnTpRdmeJNBG+AjgLOkhq6rkVei9cQzdQOeFVX1DI0A9/yUKp
gv3E+IymuHdnISIIWtq+i7QmvBWqE6EQW/vFjRW0bMtug86c27zHt0U/Dy5U7/v+
p/NkFvaKnmQl3Jy+VHD8vhBFLwoJujvnhl16viDLUWbtXGeEf9YdXdtGGAYGkPXQ
S0ygvkprosFKJllbpBcJ1SB/lNjTTZysW7wZRRQXvXkKA20mDiWoEESOn5VWWv3J
VJ/c1EzqzytSAg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:35 2025 by rpki-client