Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File:                     10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier:          PH1OHQr6A97igDF6kRfjBUjS36IKMtV+Fc/32y2GOZI=
Subject key identifier:   4B:4B:0A:BD:A2:01:FD:C7:7A:70:82:F7:18:2B:25:AC:82:B0:47:65
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       01967E33755026C4EE0BC8F3B6CB5B6ECAF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number:          1513
Signing time:             Mon 28 Apr 2025 21:00:23 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:23 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:23 +0000
Files and hashes:         1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: 9q63WwYjVfNzh8AE2c6LkzH8xALWaQXvFNINm6GumGk=)
                          2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:75:50:26:c4:ee:0b:c8:f3:b6:cb:5b:6e:ca:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Apr 28 21:00:23 2025 GMT
            Not After : Apr 29 21:00:23 2025 GMT
        Subject: CN=4b4b0abda201fdc77a7082f7182b25ac82b04765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:a8:ef:00:13:11:41:50:71:2a:9a:f5:04:
                    2a:a8:f1:47:f5:27:9e:12:76:8a:bc:05:fc:f2:13:
                    c0:70:a4:66:23:d8:fa:35:2d:0e:b5:5b:53:27:49:
                    00:4b:3b:43:fd:b4:07:2f:7e:42:0d:0f:10:1a:06:
                    01:3c:fc:49:69:bc:f2:0f:07:80:bd:3e:a3:3d:20:
                    76:c6:6f:e6:9d:ad:24:90:2f:fb:92:4a:50:df:4f:
                    7b:6b:d3:1c:1d:ee:9f:02:64:96:c5:90:03:fd:5c:
                    5e:ff:a3:7c:3e:51:ae:0b:6c:96:74:d1:87:da:21:
                    77:f1:66:d6:a6:80:8e:86:aa:0a:31:61:41:9e:a1:
                    17:27:cb:8c:b2:83:09:0b:26:7b:30:a0:1c:14:8e:
                    8a:0d:d7:e7:c8:49:31:e7:c4:62:13:c6:ca:d4:d8:
                    51:6c:98:ba:d5:dc:85:d2:2d:6f:70:4a:45:18:97:
                    7b:48:83:c8:2d:a3:2e:0b:fa:73:91:20:10:9b:36:
                    b2:b1:3f:d4:be:a2:c9:54:8c:21:a4:f9:7f:47:9e:
                    06:1b:40:57:f3:cc:50:59:9d:a6:bc:7e:0c:95:ef:
                    45:79:e7:06:bb:34:f1:41:03:09:fa:b6:0c:19:05:
                    2a:12:cb:b1:69:3f:29:16:60:17:9d:e3:bc:e5:c4:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4B:0A:BD:A2:01:FD:C7:7A:70:82:F7:18:2B:25:AC:82:B0:47:65
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:78:41:cf:7f:c1:b3:8b:ca:d0:a7:b0:08:c7:19:6d:24:
         5d:05:f9:07:b7:3c:47:92:d2:a0:4c:12:ba:f7:dc:fc:48:fd:
         91:62:70:47:64:4d:74:c1:63:42:79:d0:ed:56:0d:f5:21:06:
         ee:59:eb:e9:39:f6:d7:5d:1d:bd:50:4e:21:88:5c:98:84:20:
         af:66:93:b8:72:2d:3f:e2:0a:44:3d:71:cc:e4:1c:c1:3b:29:
         37:3f:ce:b4:e2:25:08:4f:fe:db:5e:23:a5:db:9d:b9:db:7c:
         50:a5:3a:fc:b2:47:76:7b:43:ed:5f:a0:8f:2a:9f:30:74:db:
         ce:8d:b1:d3:2a:57:44:72:c2:a9:3b:a0:13:76:b4:9b:4a:5b:
         af:87:cd:7d:8a:e3:11:c7:c5:82:41:4d:0a:b6:b4:b2:0f:0d:
         fa:06:bf:7f:d3:82:b1:7f:53:82:49:47:28:9a:0d:b2:18:f9:
         52:fa:a9:90:18:58:dd:16:a7:54:ca:f2:52:94:62:27:0b:6b:
         47:8d:11:2f:59:9c:8d:d9:f3:33:09:c4:1d:22:c3:0f:de:e4:
         96:a0:99:8d:94:ea:0f:aa:d3:85:38:0b:54:9f:9d:b5:98:67:
         4e:96:7d:88:ba:1f:e4:ef:3f:e9:70:e7:3c:02:23:1a:c5:06:
         27:18:6d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+M3VQJsTuC8jztstbbsrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy
MjExODQwHhcNMjUwNDI4MjEwMDIzWhcNMjUwNDI5MjEwMDIzWjAzMTEwLwYDVQQD
Eyg0YjRiMGFiZGEyMDFmZGM3N2E3MDgyZjcxODJiMjVhYzgyYjA0NzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS2o7wATEUFQcSqa9QQqqPFH9See
EnaKvAX88hPAcKRmI9j6NS0OtVtTJ0kASztD/bQHL35CDQ8QGgYBPPxJabzyDweA
vT6jPSB2xm/mna0kkC/7kkpQ3097a9McHe6fAmSWxZAD/Vxe/6N8PlGuC2yWdNGH
2iF38WbWpoCOhqoKMWFBnqEXJ8uMsoMJCyZ7MKAcFI6KDdfnyEkx58RiE8bK1NhR
bJi61dyF0i1vcEpFGJd7SIPILaMuC/pzkSAQmzaysT/UvqLJVIwhpPl/R54GG0BX
88xQWZ2mvH4Mle9FeecGuzTxQQMJ+rYMGQUqEsuxaT8pFmAXneO85cSybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtLCr2iAf3HenCC9xgrJayCsEdlMB8GA1UdIwQY
MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct
NjNiOTUyNDBkNzQ1LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1
LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0F4Qc9/
wbOLytCnsAjHGW0kXQX5B7c8R5LSoEwSuvfc/Ej9kWJwR2RNdMFjQnnQ7VYN9SEG
7lnr6Tn2110dvVBOIYhcmIQgr2aTuHItP+IKRD1xzOQcwTspNz/OtOIlCE/+214j
pdududt8UKU6/LJHdntD7V+gjyqfMHTbzo2x0ypXRHLCqTugE3a0m0pbr4fNfYrj
EcfFgkFNCra0sg8N+ga/f9OCsX9TgklHKJoNshj5UvqpkBhY3RanVMryUpRiJwtr
R40RL1mcjdnzMwnEHSLDD97klqCZjZTqD6rThTgLVJ+dtZhnTpZ9iLof5O8/6XDn
PAIjGsUGJxhtwA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:51 2025 by rpki-client