Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File:                     Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier:          FAOJlFUlVJAQP5w9Cd/UikfcZWZgCRphcvRlUDMuIyo=
Subject key identifier:   4D:E3:D8:6D:0C:3B:5A:5B:0A:A8:6C:0F:4D:D2:5B:98:EF:22:08:9D
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer:       /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial:       01967E340787B1A02AA445C53DF65FD017B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number:          1515
Signing time:             Mon 28 Apr 2025 21:01:01 +0000
Manifest this update:     Mon 28 Apr 2025 21:01:01 +0000
Manifest next update:     Tue 29 Apr 2025 21:01:01 +0000
Files and hashes:         1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: vpI1M1a+pwyWPO/Nxl9fHH3v0lyYGpOPed/V4MpwSq0=)
                          2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:34:07:87:b1:a0:2a:a4:45:c5:3d:f6:5f:d0:17:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
        Validity
            Not Before: Apr 28 21:01:01 2025 GMT
            Not After : Apr 29 21:01:01 2025 GMT
        Subject: CN=4de3d86d0c3b5a5b0aa86c0f4dd25b98ef22089d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:e3:61:09:1b:a0:89:04:d0:8d:bd:3b:fb:
                    33:18:fe:21:0c:ca:49:13:8c:a5:72:7b:ad:2e:8d:
                    e2:d8:f6:61:da:62:15:eb:a6:d5:2e:03:12:56:eb:
                    25:2b:65:3c:a8:58:aa:62:fa:3f:51:e4:a9:9d:84:
                    d5:67:3e:81:1e:80:56:e3:0d:6a:19:2b:23:b3:7d:
                    c7:74:a9:31:dc:d0:90:a9:28:b2:de:1b:30:b0:e7:
                    82:be:a2:44:c5:c5:86:f6:1f:b4:62:e2:e4:25:52:
                    0f:67:e2:a5:15:2f:c9:8e:72:4d:64:52:b8:d8:63:
                    a7:d8:77:62:3b:39:ef:e6:e7:d6:25:79:07:73:6e:
                    9b:6f:fc:09:e8:f5:d7:cc:85:80:96:bd:a7:a4:81:
                    7c:cd:e4:b6:1f:ff:4b:32:3f:de:1a:64:38:17:65:
                    53:49:fa:44:5c:5f:d6:13:85:09:cf:1b:3e:a5:86:
                    f1:70:8a:b4:64:01:1c:ff:82:7c:a9:fa:9e:f1:74:
                    36:e5:1e:a9:7d:d1:af:cf:56:58:60:a2:f8:e5:dc:
                    86:13:25:4b:c7:98:2e:6d:a5:5d:f9:7f:63:e4:05:
                    55:f0:6a:dc:ef:d3:4c:23:1a:5a:fc:3f:43:8f:41:
                    8a:8d:a0:19:dd:be:54:b5:37:ae:7f:7a:fb:a8:b5:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:D8:6D:0C:3B:5A:5B:0A:A8:6C:0F:4D:D2:5B:98:EF:22:08:9D
            X509v3 Authority Key Identifier:
                keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:c9:4a:69:3d:52:67:05:19:f8:d1:4c:79:87:6c:1f:90:
         bb:a6:63:ce:18:05:78:9d:4b:1b:bb:25:d5:c2:00:a0:96:c2:
         65:64:a8:2b:7f:d2:d4:e9:f2:ef:b7:28:79:99:60:07:f0:5e:
         69:93:36:f8:db:8b:6e:a6:fa:60:b7:c6:34:23:bc:53:26:0f:
         40:5d:af:16:f1:e7:94:20:09:a1:f2:d6:4c:9d:c0:cf:16:0a:
         d8:56:c5:3c:84:c7:86:e9:ad:f2:2c:b7:94:56:18:af:34:04:
         ce:43:3c:d3:9d:da:4f:35:34:ad:b8:c2:2f:bc:6f:67:0d:e1:
         ec:6b:d2:64:04:bf:8c:5b:8c:c3:d0:f9:c2:63:4b:3d:9b:83:
         29:81:9f:28:ff:19:24:cb:57:c5:01:af:09:a5:15:81:18:21:
         9c:9c:d9:f3:dc:8a:e3:ed:e9:7b:58:b3:cc:92:55:ec:27:57:
         e4:29:e9:e7:b3:af:2e:72:5e:85:86:8c:e0:89:8c:64:83:bd:
         2f:8e:f8:b2:52:4a:d9:bc:68:58:8b:1c:64:e7:3d:99:8b:b9:
         a2:8a:6a:b7:9f:d9:7f:67:e3:cf:3c:55:d5:42:db:4f:b0:24:
         7f:f2:e9:d1:ef:4a:99:b6:ac:b6:a9:77:35:d7:8f:da:82:a5:
         29:d8:64:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+NAeHsaAqpEXFPfZf0Be1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGQxNWVmMmY1OWFiYjk1ZjJkOWJlNWNlZTMzMDM4ODg2
MjNiOTcwHhcNMjUwNDI4MjEwMTAxWhcNMjUwNDI5MjEwMTAxWjAzMTEwLwYDVQQD
Eyg0ZGUzZDg2ZDBjM2I1YTViMGFhODZjMGY0ZGQyNWI5OGVmMjIwODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DnjYQkboIkE0I29O/szGP4hDMpJ
E4ylcnutLo3i2PZh2mIV66bVLgMSVuslK2U8qFiqYvo/UeSpnYTVZz6BHoBW4w1q
GSsjs33HdKkx3NCQqSiy3hswsOeCvqJExcWG9h+0YuLkJVIPZ+KlFS/JjnJNZFK4
2GOn2HdiOznv5ufWJXkHc26bb/wJ6PXXzIWAlr2npIF8zeS2H/9LMj/eGmQ4F2VT
SfpEXF/WE4UJzxs+pYbxcIq0ZAEc/4J8qfqe8XQ25R6pfdGvz1ZYYKL45dyGEyVL
x5gubaVd+X9j5AVV8Grc79NMIxpa/D9Dj0GKjaAZ3b5UtTeuf3r7qLWuIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3j2G0MO1pbCqhsD03SW5jvIgidMB8GA1UdIwQY
MBaAFB3dFe8vWau5Xy2b5c7jMDiIYjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1Mjgt
OGI2MGU0Yjk0YmNmLzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1MjgtOGI2MGU0Yjk0YmNm
LzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPXJSmk9
UmcFGfjRTHmHbB+Qu6ZjzhgFeJ1LG7sl1cIAoJbCZWSoK3/S1Ony77coeZlgB/Be
aZM2+NuLbqb6YLfGNCO8UyYPQF2vFvHnlCAJofLWTJ3AzxYK2FbFPITHhumt8iy3
lFYYrzQEzkM8053aTzU0rbjCL7xvZw3h7GvSZAS/jFuMw9D5wmNLPZuDKYGfKP8Z
JMtXxQGvCaUVgRghnJzZ89yK4+3pe1izzJJV7CdX5Cnp57OvLnJehYaM4ImMZIO9
L474slJK2bxoWIscZOc9mYu5oopqt5/Zf2fjzzxV1ULbT7Akf/Lp0e9Kmbastql3
NdeP2oKlKdhkGw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:32:29 2025 by rpki-client