Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File:                     V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier:          ZZxhK0AojvvzSkvKB4JHojcyDWrs6Ikpo9e1NqOApJ0=
Subject key identifier:   B6:3B:CF:0B:29:4A:0F:E3:19:58:84:06:39:4F:5C:F4:78:7D:A0:9A
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer:       /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial:       01968E829BC5CBE6E7EAA915E6169D987820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number:          144D
Signing time:             Fri 02 May 2025 01:00:46 +0000
Manifest this update:     Fri 02 May 2025 01:00:46 +0000
Manifest next update:     Sat 03 May 2025 01:00:46 +0000
Files and hashes:         1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=)
                          2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: pUwWozK+pMoXBlXFTYGwGQq+F6IZZ6PDA3Y4C+rU0Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:82:9b:c5:cb:e6:e7:ea:a9:15:e6:16:9d:98:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
        Validity
            Not Before: May  2 01:00:46 2025 GMT
            Not After : May  3 01:00:46 2025 GMT
        Subject: CN=b63bcf0b294a0fe319588406394f5cf4787da09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:0a:f9:77:3c:d9:3f:a0:c0:4b:e2:4a:18:
                    0e:df:dd:ca:fd:b6:e7:13:2e:b1:15:3d:65:08:53:
                    30:25:3f:1e:5a:9d:e3:0b:45:4a:0b:83:31:ec:bd:
                    9a:99:d8:58:98:68:1a:01:36:6d:20:27:61:29:a6:
                    d4:76:45:18:7b:5d:42:29:d8:cb:55:25:b8:94:b8:
                    85:32:d0:2d:31:52:e5:fd:cb:07:0c:ec:69:18:4a:
                    ed:70:01:70:db:79:19:d0:1e:50:dd:31:c9:5f:f4:
                    b4:e0:4e:4c:c6:10:03:91:5c:a9:07:2f:87:25:5a:
                    a7:b3:fa:f7:db:d9:a0:c9:2f:32:0c:4f:bd:fb:cc:
                    de:d7:70:64:ce:5c:84:6d:d1:e8:3a:4a:cf:b6:eb:
                    da:61:09:0c:75:c9:b0:50:97:6d:96:3d:e3:c5:21:
                    23:c0:7d:52:a0:cd:ad:16:ab:0c:74:cb:b7:82:3e:
                    08:81:ad:fc:4c:f7:5c:3e:63:d3:9e:97:8a:e9:27:
                    e3:a7:bd:1b:7e:83:db:ed:11:f9:28:70:1f:0f:05:
                    32:1b:b3:b1:e4:80:d0:30:bd:17:9e:00:7f:ae:14:
                    5e:0a:f6:af:c0:36:d4:e8:61:c8:30:c5:70:cd:46:
                    89:29:62:85:57:e4:d4:ab:94:2a:ab:5a:be:20:1c:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:CF:0B:29:4A:0F:E3:19:58:84:06:39:4F:5C:F4:78:7D:A0:9A
            X509v3 Authority Key Identifier:
                keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:ce:58:8b:05:48:4c:fb:80:f1:a4:8e:9d:dd:e1:fe:42:
         1e:81:9e:04:5f:c5:2a:7b:3c:57:04:7a:f5:b9:84:b8:0d:f3:
         bf:e0:dc:24:ff:0e:ac:31:c0:48:7b:ca:ea:b3:3e:0d:5c:17:
         69:47:42:88:e9:a4:bb:74:bb:5f:51:8f:54:06:bb:54:34:65:
         19:67:c7:97:86:a1:61:34:b8:47:d1:5c:d1:1e:fc:fc:de:59:
         2a:fb:0f:13:2b:65:d2:c6:dd:cf:8c:97:e5:ca:dc:2b:d0:7a:
         50:ef:dd:52:59:09:30:84:92:94:18:9a:08:f5:ac:24:ca:76:
         d4:59:a8:11:6a:63:7c:b1:95:ff:b4:59:a5:50:18:2b:33:97:
         94:a6:e4:2c:ae:05:da:59:f2:d5:dc:30:53:c2:70:d5:a1:3c:
         55:2d:55:23:0b:fb:af:de:80:c4:8c:88:7c:91:34:bc:48:7f:
         cf:fd:d1:9c:33:d2:a9:11:a3:ca:a7:08:36:ac:cc:9f:b7:ae:
         97:96:90:4f:c6:47:a9:b4:dc:14:71:62:da:24:b9:ee:4d:85:
         ff:13:8e:ea:9d:a0:a7:3a:6c:62:4b:69:c3:9f:87:65:74:d1:
         7f:09:0d:79:30:e3:3b:01:53:8c:bd:73:83:cf:d7:02:7f:62:
         94:4e:92:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOgpvFy+bn6qkV5hadmHggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yjc3MTE4YmQ1NmIyYjNiNDQ5OWM1NjZhN2M2NDhhYWQ3
YTZlOWYwHhcNMjUwNTAyMDEwMDQ2WhcNMjUwNTAzMDEwMDQ2WjAzMTEwLwYDVQQD
EyhiNjNiY2YwYjI5NGEwZmUzMTk1ODg0MDYzOTRmNWNmNDc4N2RhMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28wK+Xc82T+gwEviShgO393K/bbn
Ey6xFT1lCFMwJT8eWp3jC0VKC4Mx7L2amdhYmGgaATZtICdhKabUdkUYe11CKdjL
VSW4lLiFMtAtMVLl/csHDOxpGErtcAFw23kZ0B5Q3THJX/S04E5MxhADkVypBy+H
JVqns/r329mgyS8yDE+9+8ze13BkzlyEbdHoOkrPtuvaYQkMdcmwUJdtlj3jxSEj
wH1SoM2tFqsMdMu3gj4Iga38TPdcPmPTnpeK6Sfjp70bfoPb7RH5KHAfDwUyG7Ox
5IDQML0XngB/rhReCvavwDbU6GHIMMVwzUaJKWKFV+TUq5Qqq1q+IBw+xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY7zwspSg/jGViEBjlPXPR4faCaMB8GA1UdIwQY
MBaAFFe3cRi9VrKztEmcVmp8ZIqtem6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2It
MDY1YWE0MTU1ZWQ0LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2ItMDY1YWE0MTU1ZWQ0
LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV3OWIsF
SEz7gPGkjp3d4f5CHoGeBF/FKns8VwR69bmEuA3zv+DcJP8OrDHASHvK6rM+DVwX
aUdCiOmku3S7X1GPVAa7VDRlGWfHl4ahYTS4R9Fc0R78/N5ZKvsPEytl0sbdz4yX
5crcK9B6UO/dUlkJMISSlBiaCPWsJMp21FmoEWpjfLGV/7RZpVAYKzOXlKbkLK4F
2lny1dwwU8Jw1aE8VS1VIwv7r96AxIyIfJE0vEh/z/3RnDPSqRGjyqcINqzMn7eu
l5aQT8ZHqbTcFHFi2iS57k2F/xOO6p2gpzpsYktpw5+HZXTRfwkNeTDjOwFTjL1z
g8/XAn9ilE6S/w==
-----END CERTIFICATE-----
Generated at Fri May 2 08:11:12 2025 by rpki-client