Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File:                     V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier:          9HOmhN1Ske06hL464jGjXD5DeWt6RViX7tinLY2dgUw=
Subject key identifier:   E1:41:F2:B4:9F:5A:EB:86:CE:1D:1B:4D:0A:E7:8A:D1:CC:60:6E:2F
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer:       /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial:       0196827DF7EB9ACB5F51345AA42F56F1EAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number:          1200
Signing time:             Tue 29 Apr 2025 17:00:15 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:15 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:15 +0000
Files and hashes:         1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
                          2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: ME8qHsLHW3SbOcKtFwPmxywOgjeBg3fvY6gsHUAwu0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7d:f7:eb:9a:cb:5f:51:34:5a:a4:2f:56:f1:ea:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
        Validity
            Not Before: Apr 29 17:00:15 2025 GMT
            Not After : Apr 30 17:00:15 2025 GMT
        Subject: CN=e141f2b49f5aeb86ce1d1b4d0ae78ad1cc606e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:c6:f9:cd:c4:f2:1c:54:cc:bb:22:60:a4:
                    b3:e7:66:2b:c9:8b:e5:81:55:c6:0d:7b:c3:f5:b7:
                    39:97:17:ae:d2:2a:1c:0c:76:5b:49:a6:6c:a4:28:
                    1b:df:68:20:f0:54:c8:2b:49:23:02:9d:c2:a5:7a:
                    13:9e:07:f6:2c:41:20:66:3a:66:1d:95:48:12:4e:
                    df:60:ee:a7:dc:85:43:b2:99:d9:83:67:5e:3e:b1:
                    2c:80:88:15:f1:cf:fb:73:be:bf:77:35:f1:e0:e6:
                    67:f9:e4:46:c1:b7:83:10:08:21:f6:ab:64:d4:37:
                    a6:4c:8b:71:a2:4a:a8:be:fe:d6:7e:37:3b:68:74:
                    8c:7f:02:46:c8:cf:83:af:18:f6:72:5e:a1:b5:2e:
                    27:57:86:db:da:44:01:03:67:c9:06:4a:f4:74:d0:
                    21:30:c8:ea:7c:ed:66:1d:3a:e8:dd:2a:34:ee:f6:
                    0c:c6:8e:55:a3:63:32:85:7a:f9:34:23:f9:89:47:
                    e8:ea:9a:24:16:7e:18:95:bb:36:d8:2f:e7:8f:2b:
                    29:ae:d8:65:12:16:85:2d:fd:fa:81:6a:cc:b4:01:
                    e5:4f:c4:13:85:24:41:11:7f:34:fa:ea:c7:90:83:
                    68:5b:9d:f4:f4:80:55:33:98:11:4e:0f:f3:d5:c3:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:41:F2:B4:9F:5A:EB:86:CE:1D:1B:4D:0A:E7:8A:D1:CC:60:6E:2F
            X509v3 Authority Key Identifier:
                keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:5c:a5:17:62:cd:c0:8a:cb:0c:71:40:48:09:23:c6:a5:
         da:e8:d4:9a:39:93:34:f3:13:aa:4f:7b:81:6e:03:b0:3c:36:
         0d:ec:21:95:79:af:6f:f5:35:03:dd:0a:37:09:9c:a0:14:d3:
         75:43:a8:23:4c:98:9c:cf:4b:90:ba:bf:b2:09:0b:94:72:94:
         91:7c:ce:85:9f:47:92:c4:6f:46:bc:19:53:a0:99:41:09:7a:
         6c:9e:0c:f7:c9:cc:44:f0:27:42:6a:be:b8:8c:77:d8:6b:62:
         76:b5:fa:09:51:b7:78:28:05:94:72:e0:d4:77:af:55:e6:3a:
         de:52:35:9b:93:e2:c5:1e:68:74:58:61:96:59:5d:56:7d:84:
         ef:0d:a9:db:b4:d9:72:25:64:ba:52:b0:96:1f:f3:87:ca:26:
         09:36:e7:0f:f5:28:6a:37:e0:b6:5d:df:77:08:51:eb:a3:74:
         1c:e9:98:ea:43:6e:62:4f:69:d4:0d:9f:d1:54:93:54:de:cc:
         6e:cc:92:7f:14:29:ee:19:9b:1e:7e:eb:2b:9e:ec:36:b1:ac:
         82:6c:c8:85:9a:40:bf:cb:f7:d5:d0:8e:43:39:26:36:0c:70:
         1b:c5:ac:db:6b:80:54:fb:af:16:59:12:c9:74:ee:b7:ff:db:
         ed:c2:5f:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfffrmstfUTRapC9W8eqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTcyNDVkNzgwNzg5ODVjMTQ3ZGNjYmUwZWM2ZDE2OGRk
OTk4MmQwHhcNMjUwNDI5MTcwMDE1WhcNMjUwNDMwMTcwMDE1WjAzMTEwLwYDVQQD
EyhlMTQxZjJiNDlmNWFlYjg2Y2UxZDFiNGQwYWU3OGFkMWNjNjA2ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVPG+c3E8hxUzLsiYKSz52YryYvl
gVXGDXvD9bc5lxeu0iocDHZbSaZspCgb32gg8FTIK0kjAp3CpXoTngf2LEEgZjpm
HZVIEk7fYO6n3IVDspnZg2dePrEsgIgV8c/7c76/dzXx4OZn+eRGwbeDEAgh9qtk
1DemTItxokqovv7Wfjc7aHSMfwJGyM+Drxj2cl6htS4nV4bb2kQBA2fJBkr0dNAh
MMjqfO1mHTro3So07vYMxo5Vo2MyhXr5NCP5iUfo6pokFn4Ylbs22C/njysprthl
EhaFLf36gWrMtAHlT8QThSRBEX80+urHkINoW5309IBVM5gRTg/z1cN4vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFB8rSfWuuGzh0bTQrnitHMYG4vMB8GA1UdIwQY
MBaAFFeXJF14B4mFwUfcy+DsbRaN2ZgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUt
NzNlMzhjY2UxMzgzLzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUtNzNlMzhjY2UxMzgz
LzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxpcpRdi
zcCKywxxQEgJI8al2ujUmjmTNPMTqk97gW4DsDw2DewhlXmvb/U1A90KNwmcoBTT
dUOoI0yYnM9LkLq/sgkLlHKUkXzOhZ9HksRvRrwZU6CZQQl6bJ4M98nMRPAnQmq+
uIx32GtidrX6CVG3eCgFlHLg1HevVeY63lI1m5PixR5odFhhllldVn2E7w2p27TZ
ciVkulKwlh/zh8omCTbnD/Uoajfgtl3fdwhR66N0HOmY6kNuYk9p1A2f0VSTVN7M
bsySfxQp7hmbHn7rK57sNrGsgmzIhZpAv8v31dCOQzkmNgxwG8Ws22uAVPuvFlkS
yXTut//b7cJfFA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:33:09 2025 by rpki-client