Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File:                     Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier:          YTxxr9VLJw36+2ul9u6CGYxXsxT7nhJbeUqB2P814Y4=
Subject key identifier:   B0:F9:0B:D6:D6:44:D4:49:42:77:23:7B:58:3B:F6:2D:CB:B4:40:43
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer:       /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial:       0196789F3DC5E33880F36D3E6E06AC21B508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number:          1360
Signing time:             Sun 27 Apr 2025 19:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:23 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:23 +0000
Files and hashes:         1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
                          2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: t/0IDgWV1kcEF7P/fYT+8yjhMyabmPXGgSjzbqCYkZk=)
                          3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:3d:c5:e3:38:80:f3:6d:3e:6e:06:ac:21:b5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
        Validity
            Not Before: Apr 27 19:00:23 2025 GMT
            Not After : Apr 28 19:00:23 2025 GMT
        Subject: CN=b0f90bd6d644d4494277237b583bf62dcbb44043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f8:17:47:fc:44:72:85:86:3e:a7:0d:df:ae:
                    3a:6c:70:55:50:63:bb:70:1c:87:79:18:f4:a8:1c:
                    87:3c:f0:94:b0:d2:05:f7:d0:2f:90:54:61:39:82:
                    bb:4f:7f:c2:47:41:a6:aa:e4:42:fa:c9:b5:47:8a:
                    f8:3e:55:a4:f6:e4:01:18:b3:c1:21:55:f3:fc:6d:
                    b2:40:75:93:40:da:1d:2c:c5:c7:e3:79:39:03:8d:
                    3e:05:17:2b:1f:9b:e0:3f:97:36:9f:93:61:ca:ed:
                    02:f6:a6:8d:22:4b:35:20:a7:2f:a5:95:4b:25:70:
                    d3:11:f6:5c:96:67:42:c3:bf:06:05:64:5e:f7:a8:
                    80:c6:28:12:f3:43:fe:89:ce:21:23:d4:42:02:9f:
                    29:e2:f5:7e:55:28:df:da:99:9c:82:57:47:ba:39:
                    9c:68:d9:40:69:8b:b3:ef:44:17:e1:ca:38:c8:0f:
                    cc:18:3a:df:4e:17:a9:b7:59:44:70:ed:be:3f:31:
                    0c:a2:b4:66:50:36:67:1d:38:f9:eb:51:e0:0e:d5:
                    0c:81:f7:30:65:4e:1f:ed:6d:8a:33:ce:30:21:ac:
                    be:ee:ea:4c:bd:07:0b:9f:20:ad:17:00:1a:03:75:
                    9b:e0:76:bd:28:87:0f:f9:4d:a1:b2:11:01:e2:84:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F9:0B:D6:D6:44:D4:49:42:77:23:7B:58:3B:F6:2D:CB:B4:40:43
            X509v3 Authority Key Identifier:
                keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d5:e6:6c:a6:db:1e:17:77:da:af:47:ac:ac:44:e2:53:60:
         fc:00:9f:b7:e2:be:15:52:4e:e5:71:8e:d6:2d:ff:cf:d4:f2:
         e5:4b:84:0d:28:7e:60:95:5c:19:4d:93:4c:15:41:70:2e:4a:
         85:21:a5:b9:cf:14:21:a5:5e:a7:48:99:ad:df:e0:a6:15:6f:
         5a:d0:54:5e:6d:d1:76:47:21:68:a0:d6:8f:04:66:c2:65:56:
         88:91:b5:99:45:6d:39:13:52:01:e1:b4:4f:b9:71:bd:ea:41:
         0c:5c:f6:95:09:2b:fa:0a:0a:9c:52:b8:d9:0f:59:e3:a4:d5:
         fe:7e:96:d4:c5:dc:c3:a2:44:29:b1:f3:24:6c:35:6c:75:c2:
         86:da:b4:60:1a:89:df:42:a8:5f:99:7a:29:08:d5:52:96:96:
         0b:36:84:2e:41:17:50:80:d9:46:68:5a:40:85:0b:02:05:3c:
         a0:54:44:42:6b:fa:b0:f6:f3:cc:25:db:94:44:fa:a1:ea:fe:
         39:71:0f:77:e0:51:8a:48:1e:0c:e9:25:b2:b2:c2:14:e6:4c:
         be:e4:43:b7:2e:35:5d:c1:91:5b:72:3a:bb:7f:21:61:c5:93:
         0f:e3:53:20:d1:c0:56:83:2c:50:45:56:e6:d3:bb:3d:5f:80:
         29:68:f5:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4nz3F4ziA820+bgasIbUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2RlZWQ4ODNjMmE2OTBjZTU0ODI5YjQ4ZjlkNzhjZDdi
MjVmZDcwHhcNMjUwNDI3MTkwMDIzWhcNMjUwNDI4MTkwMDIzWjAzMTEwLwYDVQQD
EyhiMGY5MGJkNmQ2NDRkNDQ5NDI3NzIzN2I1ODNiZjYyZGNiYjQ0MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PgXR/xEcoWGPqcN3646bHBVUGO7
cByHeRj0qByHPPCUsNIF99AvkFRhOYK7T3/CR0GmquRC+sm1R4r4PlWk9uQBGLPB
IVXz/G2yQHWTQNodLMXH43k5A40+BRcrH5vgP5c2n5Nhyu0C9qaNIks1IKcvpZVL
JXDTEfZclmdCw78GBWRe96iAxigS80P+ic4hI9RCAp8p4vV+VSjf2pmcgldHujmc
aNlAaYuz70QX4co4yA/MGDrfThept1lEcO2+PzEMorRmUDZnHTj561HgDtUMgfcw
ZU4f7W2KM84wIay+7upMvQcLnyCtFwAaA3Wb4Ha9KIcP+U2hshEB4oRlpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD5C9bWRNRJQncje1g79i3LtEBDMB8GA1UdIwQY
MBaAFBM97tiDwqaQzlSCm0j514zXsl/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEt
NGJlZGQzYmQ2ZWExLzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEtNGJlZGQzYmQ2ZWEx
LzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntXmbKbb
Hhd32q9HrKxE4lNg/ACft+K+FVJO5XGO1i3/z9Ty5UuEDSh+YJVcGU2TTBVBcC5K
hSGluc8UIaVep0iZrd/gphVvWtBUXm3RdkchaKDWjwRmwmVWiJG1mUVtORNSAeG0
T7lxvepBDFz2lQkr+goKnFK42Q9Z46TV/n6W1MXcw6JEKbHzJGw1bHXChtq0YBqJ
30KoX5l6KQjVUpaWCzaELkEXUIDZRmhaQIULAgU8oFREQmv6sPbzzCXblET6oer+
OXEPd+BRikgeDOklsrLCFOZMvuRDty41XcGRW3I6u38hYcWTD+NTINHAVoMsUEVW
5tO7PV+AKWj1ag==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:54:40 2025 by rpki-client