Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File:                     eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier:          4kTGZaa1sdRiqKudHQZf5JaYAlCHBHVdb4x7zi5RKF0=
Subject key identifier:   F7:5E:11:E9:2C:05:92:E4:B8:B5:9E:EE:AE:59:3B:ED:43:E6:CD:64
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer:       /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial:       0196729D9F4358E26527589F7A5F0193B643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number:          03B4
Signing time:             Sat 26 Apr 2025 15:00:54 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:54 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:54 +0000
Files and hashes:         1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
                          2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
                          3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: NSu7BlywOTeieCOHxrTv534zew7x0jroVbaqCxlJQYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:9f:43:58:e2:65:27:58:9f:7a:5f:01:93:b6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
        Validity
            Not Before: Apr 26 15:00:54 2025 GMT
            Not After : Apr 27 15:00:54 2025 GMT
        Subject: CN=f75e11e92c0592e4b8b59eeeae593bed43e6cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:53:e7:c9:17:c2:2e:e3:2d:4f:8f:ed:b6:
                    f6:58:6d:26:2f:6d:b0:5e:99:55:32:f7:19:a0:02:
                    c2:c5:1f:4e:63:57:ea:4a:0b:bb:38:2c:31:5f:0e:
                    3b:c0:99:37:8d:45:76:b8:be:f5:7c:1d:6f:8a:d5:
                    fc:57:fc:1c:6f:f1:f0:77:01:3a:b4:e6:85:6b:84:
                    64:ab:8a:af:02:02:bc:b5:5e:84:dd:ae:ab:d1:ba:
                    af:8f:ac:13:ac:04:27:72:81:20:c1:df:18:b4:1b:
                    17:ea:a4:15:6d:4a:50:ed:3f:a2:af:ea:4f:32:ae:
                    33:ca:e6:20:d2:5b:4f:47:8e:55:5f:37:0e:06:52:
                    10:ff:23:14:cf:00:35:ec:16:37:61:21:92:65:80:
                    11:ef:fd:ac:1c:6e:68:a7:fa:3d:b3:db:ba:93:bf:
                    60:44:a5:7a:2d:11:82:cc:ab:b6:54:9c:a6:32:31:
                    01:3c:be:8b:a2:25:1c:96:5a:2c:3c:f0:f0:e8:79:
                    e8:d2:22:36:aa:8d:d0:0c:f8:a1:b1:c9:f3:97:bb:
                    9a:7e:20:99:08:6e:02:5b:6d:fe:59:0b:1d:0c:23:
                    b6:f6:f4:ce:d3:41:01:8f:cd:c9:ed:d0:69:12:27:
                    42:ac:cc:20:2b:60:1c:a2:8f:15:ac:82:4c:ea:a5:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:11:E9:2C:05:92:E4:B8:B5:9E:EE:AE:59:3B:ED:43:E6:CD:64
            X509v3 Authority Key Identifier:
                keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c5:38:73:f5:9b:8c:17:30:bc:38:e4:2b:9c:70:16:1b:f6:
         28:a3:04:1c:f6:ca:e7:96:c7:18:aa:38:48:d1:37:b9:be:1f:
         44:9f:d0:99:5b:68:f1:0e:cd:33:08:76:cc:0f:0f:89:0f:2e:
         b6:ac:5d:b3:65:67:37:33:c9:3c:a4:c6:d7:c3:0e:5a:c7:b3:
         55:ab:20:55:4e:65:b4:6c:5f:35:93:66:58:c0:b7:42:da:cf:
         c9:db:b9:32:e8:4b:87:70:b2:75:fd:78:6a:95:23:ce:39:91:
         ae:dd:1e:af:b8:f6:46:6e:2a:6f:70:93:4c:84:70:8d:3a:80:
         cb:a9:93:59:c7:86:3b:e1:5c:fc:76:b9:b3:6a:6d:65:88:e3:
         61:67:aa:6c:1e:92:bd:22:08:98:60:a3:65:bd:71:a7:29:8a:
         3c:ab:75:d1:35:06:9e:32:93:53:2f:9c:e1:fd:c0:b2:3c:61:
         20:9c:f3:db:41:ed:d5:36:6c:0a:2f:4a:71:33:e0:c6:6d:a6:
         e7:af:20:11:24:56:ab:78:fb:d8:8b:af:81:1a:4d:48:6a:c5:
         55:16:ff:c5:3c:ec:21:59:fd:52:c9:6b:e7:27:0d:4b:69:15:
         9b:47:af:b3:ec:37:46:70:06:5c:57:e0:e4:3a:96:92:0c:39:
         be:64:b7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynZ9DWOJlJ1ifel8Bk7ZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTNmOGMxM2JhODI5MGY2MGRhNjNiYTg5ZTkzNWIyNzU4
OTNhZGIwHhcNMjUwNDI2MTUwMDU0WhcNMjUwNDI3MTUwMDU0WjAzMTEwLwYDVQQD
EyhmNzVlMTFlOTJjMDU5MmU0YjhiNTllZWVhZTU5M2JlZDQzZTZjZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CRT58kXwi7jLU+P7bb2WG0mL22w
XplVMvcZoALCxR9OY1fqSgu7OCwxXw47wJk3jUV2uL71fB1vitX8V/wcb/HwdwE6
tOaFa4Rkq4qvAgK8tV6E3a6r0bqvj6wTrAQncoEgwd8YtBsX6qQVbUpQ7T+ir+pP
Mq4zyuYg0ltPR45VXzcOBlIQ/yMUzwA17BY3YSGSZYAR7/2sHG5op/o9s9u6k79g
RKV6LRGCzKu2VJymMjEBPL6LoiUcllosPPDw6Hno0iI2qo3QDPihscnzl7uafiCZ
CG4CW23+WQsdDCO29vTO00EBj83J7dBpEidCrMwgK2Acoo8VrIJM6qUZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdeEeksBZLkuLWe7q5ZO+1D5s1kMB8GA1UdIwQY
MBaAFHkT+ME7qCkPYNpjuonpNbJ1iTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTIt
ZmUxY2YzMDhhMDA4LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTItZmUxY2YzMDhhMDA4
LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8U4c/Wb
jBcwvDjkK5xwFhv2KKMEHPbK55bHGKo4SNE3ub4fRJ/QmVto8Q7NMwh2zA8PiQ8u
tqxds2VnNzPJPKTG18MOWsezVasgVU5ltGxfNZNmWMC3QtrPydu5MuhLh3Cydf14
apUjzjmRrt0er7j2Rm4qb3CTTIRwjTqAy6mTWceGO+Fc/Ha5s2ptZYjjYWeqbB6S
vSIImGCjZb1xpymKPKt10TUGnjKTUy+c4f3AsjxhIJzz20Ht1TZsCi9KcTPgxm2m
568gESRWq3j72IuvgRpNSGrFVRb/xTzsIVn9Uslr5ycNS2kVm0evs+w3RnAGXFfg
5DqWkgw5vmS3NA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:04 2025 by rpki-client