Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File:                     E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier:          7p+jLEUTw2FnhzIxoekei5zd0dVCT3wO0uwIYbQoayA=
Subject key identifier:   1A:0F:F9:F4:B0:F7:51:74:5A:D5:0F:E5:3F:C1:23:A4:4B:96:B5:BF
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer:       /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial:       0196876E7BFF18ED76A08E1821013B0AB45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number:          1518
Signing time:             Wed 30 Apr 2025 16:01:26 +0000
Manifest this update:     Wed 30 Apr 2025 16:01:26 +0000
Manifest next update:     Thu 01 May 2025 16:01:26 +0000
Files and hashes:         1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: Ii4jtXiVZi8PrEl9X4f+1DrXJvIWYhWbAuIRJ2xkOZU=)
                          2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6e:7b:ff:18:ed:76:a0:8e:18:21:01:3b:0a:b4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
        Validity
            Not Before: Apr 30 16:01:26 2025 GMT
            Not After : May  1 16:01:26 2025 GMT
        Subject: CN=1a0ff9f4b0f751745ad50fe53fc123a44b96b5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:de:c9:c4:f2:05:1b:79:f3:b5:ad:f4:36:
                    72:15:c2:73:24:3d:f8:1c:84:d9:12:f2:5a:01:dc:
                    f9:8e:4c:de:69:15:ae:6c:c6:d8:02:78:12:75:fc:
                    44:9d:8e:9a:8b:98:7c:d0:19:63:08:ea:a8:54:c5:
                    72:0d:42:59:87:a0:b9:c9:6f:cc:dc:c2:72:17:f5:
                    57:a7:34:48:c5:49:70:7a:a1:77:85:a0:d1:5b:ad:
                    c5:27:d0:18:f6:35:79:57:e2:8b:61:e3:d4:56:ac:
                    75:ce:c6:3d:2f:e7:72:2f:cc:fd:ed:89:78:ac:12:
                    2a:45:40:54:bc:d1:8f:f8:d2:b8:01:50:f2:37:7a:
                    bd:cf:ff:16:e0:48:4f:b1:35:5d:9c:30:fe:cf:c0:
                    83:ca:5f:97:34:b3:05:15:bd:4c:9b:c0:3f:dd:7d:
                    e8:a2:05:d2:df:93:aa:26:d0:ea:72:52:00:81:c1:
                    e9:86:cf:a4:42:fc:47:35:fe:0c:c8:94:72:d7:18:
                    2b:3d:94:96:ce:f8:d9:dd:dd:76:26:66:04:a1:21:
                    40:46:28:ef:e6:9d:9e:30:cc:df:7c:22:f2:3f:bc:
                    38:16:db:f2:e1:11:71:1b:8b:59:41:6d:a3:9e:bb:
                    fa:57:df:ad:90:c5:53:af:a0:23:6e:90:15:e3:f0:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0F:F9:F4:B0:F7:51:74:5A:D5:0F:E5:3F:C1:23:A4:4B:96:B5:BF
            X509v3 Authority Key Identifier:
                keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:30:51:42:ab:2f:8f:58:52:9b:c1:a5:86:b9:57:74:ee:03:
         af:22:bc:04:b2:35:23:f4:c2:76:e5:d6:23:53:36:08:ff:a7:
         8c:fe:6d:4a:02:2d:68:ae:58:22:cf:68:47:21:4c:0b:0c:26:
         c6:59:42:24:7a:16:ef:dc:b5:f2:4d:ff:66:e4:3d:5d:f1:eb:
         f9:23:7b:37:e5:47:de:ee:e1:00:2f:f9:d5:e7:90:de:28:8c:
         82:5f:51:c4:c9:c2:40:ab:28:79:d8:c7:1e:d6:3e:ca:08:bc:
         81:fc:29:7c:91:85:bb:29:fa:0b:99:c5:6d:5a:52:00:ff:31:
         48:93:90:d4:71:e0:dc:a1:a9:77:de:5f:71:5a:92:86:e4:1c:
         77:ee:12:d7:eb:b1:bb:f5:ed:00:c7:94:ed:1b:e4:ab:e2:19:
         7e:49:6c:a6:3e:6a:03:f4:82:85:07:1f:e2:60:37:b3:f0:ea:
         49:2b:ba:92:57:3e:e7:41:53:20:18:08:13:c7:2b:be:c7:cd:
         b3:5e:39:01:c2:c8:2d:37:e1:62:8a:0a:3d:a4:f9:70:e7:fd:
         ec:5a:3d:c7:60:3a:8d:79:f6:cd:fa:e2:02:d1:a1:4c:3a:20:
         d4:b0:c9:d0:6d:b2:78:6b:b9:70:b1:84:a8:e1:da:c5:ce:84:
         32:48:c1:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbnv/GO12oI4YIQE7CrRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYzlmZDM3Yzc0MzFjZTZhYTNjOTNhNjk1MmM2N2YwZjBj
OTg0NmUwHhcNMjUwNDMwMTYwMTI2WhcNMjUwNTAxMTYwMTI2WjAzMTEwLwYDVQQD
EygxYTBmZjlmNGIwZjc1MTc0NWFkNTBmZTUzZmMxMjNhNDRiOTZiNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7LeycTyBRt587Wt9DZyFcJzJD34
HITZEvJaAdz5jkzeaRWubMbYAngSdfxEnY6ai5h80BljCOqoVMVyDUJZh6C5yW/M
3MJyF/VXpzRIxUlweqF3haDRW63FJ9AY9jV5V+KLYePUVqx1zsY9L+dyL8z97Yl4
rBIqRUBUvNGP+NK4AVDyN3q9z/8W4EhPsTVdnDD+z8CDyl+XNLMFFb1Mm8A/3X3o
ogXS35OqJtDqclIAgcHphs+kQvxHNf4MyJRy1xgrPZSWzvjZ3d12JmYEoSFARijv
5p2eMMzffCLyP7w4Ftvy4RFxG4tZQW2jnrv6V9+tkMVTr6AjbpAV4/CQ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoP+fSw91F0WtUP5T/BI6RLlrW/MB8GA1UdIwQY
MBaAFBPJ/TfHQxzmqjyTppUsZ/DwyYRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUt
NmEzZGZiNDdmOGM0LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUtNmEzZGZiNDdmOGM0
LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODBRQqsv
j1hSm8GlhrlXdO4DryK8BLI1I/TCduXWI1M2CP+njP5tSgItaK5YIs9oRyFMCwwm
xllCJHoW79y18k3/ZuQ9XfHr+SN7N+VH3u7hAC/51eeQ3iiMgl9RxMnCQKsoedjH
HtY+ygi8gfwpfJGFuyn6C5nFbVpSAP8xSJOQ1HHg3KGpd95fcVqShuQcd+4S1+ux
u/XtAMeU7Rvkq+IZfklspj5qA/SChQcf4mA3s/DqSSu6klc+50FTIBgIE8crvsfN
s145AcLILTfhYooKPaT5cOf97Fo9x2A6jXn2zfriAtGhTDog1LDJ0G2yeGu5cLGE
qOHaxc6EMkjBJA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:48:33 2025 by rpki-client