Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
File:                     CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json)
Hash identifier:          jiiEjUXIk19K4+EgbysjG3YF32z719E9UuOStZOmQAQ=
Subject key identifier:   02:0A:B7:C2:C5:D0:25:E3:A9:3D:6D:F1:0D:E5:15:46:B8:B7:BA:13
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       0196734210C7A84AD27852BC80C753B41758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
Manifest number:          1519
Signing time:             Sat 26 Apr 2025 18:00:31 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:31 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:31 +0000
Files and hashes:         1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=)
                          2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: nBcr4211HKHasPFHbZlyRiyFgdP8ay6bNHFu494bEqg=)
                          3: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=)
                          4: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=)
                          5: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=)
                          6: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:42:10:c7:a8:4a:d2:78:52:bc:80:c7:53:b4:17:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Apr 26 18:00:31 2025 GMT
            Not After : Apr 27 18:00:31 2025 GMT
        Subject: CN=020ab7c2c5d025e3a93d6df10de51546b8b7ba13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:9c:21:0a:14:56:d7:38:35:11:54:db:1d:
                    82:2a:ed:af:de:53:99:c9:05:4c:74:13:9c:ba:6e:
                    d3:5b:a1:e5:53:6d:7b:2a:13:ec:98:72:9f:0f:39:
                    09:56:8c:7f:1c:89:da:fc:13:49:60:dc:d6:ae:b5:
                    08:39:6d:bf:a5:e4:65:9c:64:fd:97:87:a6:f6:6a:
                    ef:1b:70:63:ff:98:e0:54:2b:13:7b:56:32:49:62:
                    98:1a:00:a4:9a:21:ab:11:eb:11:39:8e:3a:50:ec:
                    63:10:80:30:d8:44:c4:f7:fa:92:66:c4:14:2a:3e:
                    75:c8:b2:76:d3:e6:33:5d:48:4b:80:f7:19:28:fc:
                    b8:d6:ea:9e:90:a7:6e:eb:50:49:16:38:4c:48:d7:
                    a6:c2:ce:3b:83:a5:a4:a6:54:4d:de:cd:49:7f:a9:
                    a1:42:71:2b:17:0d:1f:68:db:43:df:bc:61:40:6e:
                    7d:2e:96:f9:cf:57:28:92:8a:02:39:da:86:c9:46:
                    1f:59:39:53:3f:ee:e7:04:55:57:38:38:e1:67:db:
                    1a:ce:82:67:6a:13:48:83:94:88:96:3f:aa:6d:2a:
                    ed:a2:5b:2c:f6:1f:6a:56:d4:64:65:bc:d6:c8:2b:
                    85:1f:43:af:f3:0f:d8:fe:dc:d8:85:7d:e7:c1:60:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0A:B7:C2:C5:D0:25:E3:A9:3D:6D:F1:0D:E5:15:46:B8:B7:BA:13
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:a0:4f:f6:d8:d4:55:73:61:78:bf:1c:58:14:20:9b:60:
         a7:20:d2:b5:14:91:ff:e1:df:b3:29:48:b3:49:09:0d:67:b1:
         58:84:b5:01:01:e7:2c:1b:69:c5:18:96:2f:95:0b:27:83:ee:
         0a:ed:f3:7b:dc:d1:73:47:77:3d:7a:c5:26:10:ff:0e:12:ca:
         d4:59:1e:e8:e3:69:34:c6:38:cb:f4:7a:fc:b2:1a:f2:cb:07:
         3d:a3:1d:71:d3:e1:56:2c:18:d6:dd:ec:3c:1a:5e:6e:73:47:
         a8:1e:91:27:10:9b:60:3f:b6:fd:68:83:a5:0f:9d:7f:e2:88:
         0b:86:a3:65:02:1c:69:c4:8a:ed:e1:d9:65:b7:67:53:7b:9b:
         16:99:9a:0b:ea:8f:27:22:e9:c9:50:23:e9:cc:71:42:41:d6:
         a2:a2:3c:50:4a:59:a0:c2:a4:53:a2:39:30:5a:82:d3:d3:99:
         b9:c9:cb:fe:ee:e1:c5:b0:07:96:07:06:11:70:09:d8:29:52:
         03:8d:72:d8:e5:30:45:63:d4:39:0f:c3:e3:cb:fa:c6:be:36:
         70:31:73:41:4f:2f:91:ae:28:ac:c7:97:e9:bb:b3:71:b8:d8:
         d8:9d:74:62:30:20:06:ee:9c:20:66:82:f9:a6:a6:a6:7a:09:
         3e:7f:fa:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzQhDHqErSeFK8gMdTtBdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm
OWY0NjUwHhcNMjUwNDI2MTgwMDMxWhcNMjUwNDI3MTgwMDMxWjAzMTEwLwYDVQQD
EygwMjBhYjdjMmM1ZDAyNWUzYTkzZDZkZjEwZGU1MTU0NmI4YjdiYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7WcIQoUVtc4NRFU2x2CKu2v3lOZ
yQVMdBOcum7TW6HlU217KhPsmHKfDzkJVox/HIna/BNJYNzWrrUIOW2/peRlnGT9
l4em9mrvG3Bj/5jgVCsTe1YySWKYGgCkmiGrEesROY46UOxjEIAw2ETE9/qSZsQU
Kj51yLJ20+YzXUhLgPcZKPy41uqekKdu61BJFjhMSNemws47g6WkplRN3s1Jf6mh
QnErFw0faNtD37xhQG59Lpb5z1cokooCOdqGyUYfWTlTP+7nBFVXODjhZ9sazoJn
ahNIg5SIlj+qbSrtolss9h9qVtRkZbzWyCuFH0Ov8w/Y/tzYhX3nwWCDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIKt8LF0CXjqT1t8Q3lFUa4t7oTMB8GA1UdIwQY
MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt
NmRlZjM5OGNlNWM5LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5
LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF6gT/bY
1FVzYXi/HFgUIJtgpyDStRSR/+HfsylIs0kJDWexWIS1AQHnLBtpxRiWL5ULJ4Pu
Cu3ze9zRc0d3PXrFJhD/DhLK1Fke6ONpNMY4y/R6/LIa8ssHPaMdcdPhViwY1t3s
PBpebnNHqB6RJxCbYD+2/WiDpQ+df+KIC4ajZQIcacSK7eHZZbdnU3ubFpmaC+qP
JyLpyVAj6cxxQkHWoqI8UEpZoMKkU6I5MFqC09OZucnL/u7hxbAHlgcGEXAJ2ClS
A41y2OUwRWPUOQ/D48v6xr42cDFzQU8vka4orMeX6buzcbjY2J10YjAgBu6cIGaC
+aampnoJPn/6vA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:09:01 2025 by rpki-client