Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File:                     Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier:          BkqxQrgb1qNtZpveQwqyTLWG75+OhzYpc7wsHHCco+0=
Subject key identifier:   D7:DB:C9:CD:E9:29:8B:C3:CF:EE:23:B0:65:66:24:73:A8:A7:DC:7F
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer:       /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial:       019674F9F2F865967325785B3A6CD8051462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number:          1527
Signing time:             Sun 27 Apr 2025 02:00:59 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:59 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:59 +0000
Files and hashes:         1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=)
                          2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=)
                          3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=)
                          4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=)
                          5: OFV1r1QJow53fRZBggEbIKMbl2g.roa (hash: rW/jUWytgGfLF3WCPUKqcjsSdM1E9Dkl4C0j/GKMBjY=)
                          6: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=)
                          7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: ltRGNcXKUm7WC9hDTO7RMLPhUC/aVLlGDtXJfWZibTU=)
                          8: cId8V7j1DXooq_T1g9EFQ0FCvzw.roa (hash: QJXoETg4tOT8lLS3JnVPNBwPS3l57Eztn4NIz3Sxb1s=)
                          9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=)
                          10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:f2:f8:65:96:73:25:78:5b:3a:6c:d8:05:14:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
        Validity
            Not Before: Apr 27 02:00:59 2025 GMT
            Not After : Apr 28 02:00:59 2025 GMT
        Subject: CN=d7dbc9cde9298bc3cfee23b065662473a8a7dc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:c6:c1:b8:de:27:b6:70:eb:6b:f4:f3:e8:
                    0f:31:c3:01:09:95:4a:68:fe:a7:51:82:bf:f1:e1:
                    0e:62:30:14:03:1b:d8:4e:32:ee:14:86:3f:21:92:
                    dc:a2:dc:81:2b:60:4d:4e:b5:23:e1:9f:e7:63:3e:
                    35:77:45:ee:20:0d:4e:88:c7:5a:45:c4:84:75:3d:
                    0c:f5:c0:c4:03:d9:8c:aa:0f:6d:0a:cc:d7:4e:2c:
                    3d:3e:e1:9c:39:f1:48:82:3a:e8:8e:41:ba:ee:9d:
                    6d:5c:57:ac:e9:f2:34:9b:fc:34:36:ac:0a:02:1c:
                    34:a7:13:e3:3a:96:3d:9f:d6:69:4b:2c:51:6c:37:
                    84:a9:3a:de:38:02:9c:5e:30:fe:9b:02:63:25:d0:
                    13:1c:70:8f:16:56:05:58:29:30:21:37:09:d8:e5:
                    18:b4:6d:ba:70:83:d0:92:e3:6a:02:29:1d:85:6d:
                    d0:c3:27:5f:11:e8:7e:a1:23:a4:10:84:28:01:a4:
                    f8:89:e9:68:cb:29:be:ac:90:78:76:ea:c8:e7:d1:
                    29:f5:2b:92:42:2d:c3:0c:08:98:20:4f:03:33:0e:
                    d8:7b:1e:f8:d8:8c:95:08:57:77:e4:a9:9d:d2:f2:
                    c3:c6:a3:94:68:c5:38:fa:39:a6:c2:3e:6e:a5:5d:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DB:C9:CD:E9:29:8B:C3:CF:EE:23:B0:65:66:24:73:A8:A7:DC:7F
            X509v3 Authority Key Identifier:
                keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fc:67:5f:24:d3:6f:12:26:71:88:55:dc:26:d7:e6:45:e3:
         55:39:6c:47:dd:99:3d:ed:3f:a1:f7:23:5c:ca:04:36:86:db:
         ac:95:69:b8:cc:db:17:61:7e:4b:fe:8e:07:7e:9d:3f:03:a8:
         23:d8:3b:aa:0d:78:63:37:23:fc:03:77:d3:cf:f1:21:28:c3:
         0e:31:c8:06:6c:74:db:c4:ee:59:24:24:f0:36:b6:76:58:a3:
         18:62:f0:e9:c2:6e:d1:96:14:c5:3d:98:7c:b2:fc:98:3f:83:
         c3:29:2f:45:1f:f6:7a:ec:91:18:04:fb:44:cf:4b:a7:92:38:
         09:ed:2d:99:9d:00:09:72:bb:f1:56:ab:a7:4c:4e:39:78:35:
         02:39:32:a7:89:8d:da:55:1e:bf:93:b3:f1:3f:52:b5:bf:b9:
         c6:ad:e8:08:a9:b1:47:32:ab:35:14:c3:b0:31:3b:7a:e1:76:
         e5:7f:89:6a:2f:b0:97:00:e6:28:d3:cb:d1:50:21:ce:cc:b1:
         28:77:43:d3:72:2c:69:ad:ef:9b:54:1d:57:2f:67:27:c3:d2:
         3c:ee:fb:ea:7e:45:c0:22:22:a0:d1:fa:e5:f2:76:c8:63:24:
         75:7c:b6:c2:a3:35:65:e5:11:07:65:90:8b:c9:31:5d:54:84:
         08:f9:c0:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+fL4ZZZzJXhbOmzYBRRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjUwNDI3MDIwMDU5WhcNMjUwNDI4MDIwMDU5WjAzMTEwLwYDVQQD
EyhkN2RiYzljZGU5Mjk4YmMzY2ZlZTIzYjA2NTY2MjQ3M2E4YTdkYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmHGwbjeJ7Zw62v08+gPMcMBCZVK
aP6nUYK/8eEOYjAUAxvYTjLuFIY/IZLcotyBK2BNTrUj4Z/nYz41d0XuIA1OiMda
RcSEdT0M9cDEA9mMqg9tCszXTiw9PuGcOfFIgjrojkG67p1tXFes6fI0m/w0NqwK
Ahw0pxPjOpY9n9ZpSyxRbDeEqTreOAKcXjD+mwJjJdATHHCPFlYFWCkwITcJ2OUY
tG26cIPQkuNqAikdhW3QwydfEeh+oSOkEIQoAaT4ieloyym+rJB4durI59Ep9SuS
Qi3DDAiYIE8DMw7Yex742IyVCFd35Kmd0vLDxqOUaMU4+jmmwj5upV2gHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfbyc3pKYvDz+4jsGVmJHOop9x/MB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvxnXyTT
bxImcYhV3CbX5kXjVTlsR92ZPe0/ofcjXMoENobbrJVpuMzbF2F+S/6OB36dPwOo
I9g7qg14Yzcj/AN308/xISjDDjHIBmx028TuWSQk8Da2dlijGGLw6cJu0ZYUxT2Y
fLL8mD+DwykvRR/2euyRGAT7RM9Lp5I4Ce0tmZ0ACXK78Varp0xOOXg1Ajkyp4mN
2lUev5Oz8T9Stb+5xq3oCKmxRzKrNRTDsDE7euF25X+Jai+wlwDmKNPL0VAhzsyx
KHdD03Isaa3vm1QdVy9nJ8PSPO776n5FwCIioNH65fJ2yGMkdXy2wqM1ZeURB2WQ
i8kxXVSECPnA6Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:26:16 2025 by rpki-client