Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          +zsq53KleQjvB4RvjhpMcioQeYmzRHC69cLeH96+iQc=
Subject key identifier:   BE:10:79:0C:FB:66:79:74:F2:1C:30:40:0D:C8:2F:15:5B:B5:C1:34
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       0194BB96D9604AE905C0C2D0EB723A8AFD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 09:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:12 +0000
Files and hashes:         1: 2OeHcKfmsEyG-2LRs0NWXFV5C60.roa (hash: jZteFmx9inEQsnxXi9EJKFlZraBJ0Xs80P+ZZvDXyxY=)
                          2: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: Zmyqxmam+uiZJPwa8LEfjzDy5JTOuGV8RKsHA0fRNwE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:d9:60:4a:e9:05:c0:c2:d0:eb:72:3a:8a:fd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: Jan 31 09:00:12 2025 GMT
            Not After : Feb  1 09:00:12 2025 GMT
        Subject: CN=be10790cfb667974f21c30400dc82f155bb5c134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c7:40:19:b7:7c:a7:68:47:0a:d0:de:b9:ca:
                    12:da:35:ce:38:4e:64:8b:f3:a0:c3:51:47:29:f2:
                    06:c7:a2:52:e6:fe:3c:03:f5:59:14:a0:2c:e2:6b:
                    dd:4b:86:ff:20:5e:53:ae:2d:dc:52:b5:8b:a8:ee:
                    5f:8b:c7:f2:18:4d:de:7b:4a:cd:a1:30:87:ff:2b:
                    e1:07:48:6a:c2:22:88:a1:9f:ac:1c:92:3c:ed:f9:
                    97:5b:22:50:d2:63:d7:55:16:3f:14:cd:ff:df:5a:
                    1b:26:69:ae:86:d9:8c:25:86:8c:8c:a2:d2:7c:9d:
                    9b:eb:46:44:05:0a:ad:9e:83:7e:10:a7:9e:eb:96:
                    79:a8:0b:84:6e:eb:fb:59:a5:2a:c6:5c:cb:1f:61:
                    a8:f2:fc:25:e6:de:88:d1:ab:5c:8d:55:a2:9d:d9:
                    63:0e:6f:d4:dc:25:a0:97:5a:15:8b:1e:f1:53:4b:
                    f8:79:58:83:1e:7f:6d:9e:b8:0a:fe:96:02:fd:cc:
                    44:76:2b:e5:15:aa:e9:de:f7:1d:f3:ff:6e:b5:34:
                    f0:4f:06:ed:d4:57:09:00:76:65:41:7d:93:55:f4:
                    79:c8:58:96:76:d0:59:96:4e:b8:25:a8:30:23:2b:
                    6a:f7:91:4d:7c:c1:97:df:b2:1f:08:ef:83:46:bb:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:10:79:0C:FB:66:79:74:F2:1C:30:40:0D:C8:2F:15:5B:B5:C1:34
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:16:45:bb:fc:b9:6d:f7:8d:8c:76:22:27:d6:7e:1a:81:9d:
         a0:38:55:c6:3d:14:0b:03:43:9d:9b:e0:4c:7e:4a:80:ca:2d:
         42:5b:f4:c1:88:81:3a:61:2d:70:ad:02:3e:b0:2e:3b:3c:3a:
         48:0f:61:90:b0:f3:fa:9d:82:28:d8:26:5f:1f:57:e9:a1:fb:
         31:ea:f9:ba:7b:d3:7e:47:fd:d7:e7:d2:03:05:28:bb:4c:1b:
         4f:06:22:06:94:f8:86:72:d0:ac:8e:65:28:a2:eb:50:8e:71:
         3f:02:9e:65:c4:d3:65:2f:44:d7:95:32:44:78:e5:d7:40:23:
         1d:33:a3:3c:f6:ea:3e:ab:13:1c:4c:d3:c9:97:4f:57:2d:d7:
         ed:c2:26:3b:0b:92:78:ba:94:5f:ae:7f:78:37:00:8d:66:03:
         eb:9a:91:0b:28:c1:c9:3d:de:30:ec:1b:35:d7:fa:72:13:67:
         a2:c2:26:9c:2e:a7:0b:db:84:11:25:14:15:61:fe:31:f5:2c:
         04:44:3c:43:c4:fc:6c:49:5e:ca:e1:1f:9e:ac:00:56:73:bf:
         97:b7:7b:c7:a9:88:7e:43:c5:78:7d:7b:bc:69:bb:c9:e2:34:
         b0:18:2a:ab:70:ee:3f:fd:29:63:2b:df:b3:e5:33:dc:fe:86:
         bb:d8:9f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ltlgSukFwMLQ63I6iv0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjczZTZkNmUxY2Y2ZjYwMTE1ZTMwNTA4YmUxNWJiYmZl
NWVhYWQwHhcNMjUwMTMxMDkwMDEyWhcNMjUwMjAxMDkwMDEyWjAzMTEwLwYDVQQD
EyhiZTEwNzkwY2ZiNjY3OTc0ZjIxYzMwNDAwZGM4MmYxNTViYjVjMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sdAGbd8p2hHCtDeucoS2jXOOE5k
i/Ogw1FHKfIGx6JS5v48A/VZFKAs4mvdS4b/IF5Tri3cUrWLqO5fi8fyGE3ee0rN
oTCH/yvhB0hqwiKIoZ+sHJI87fmXWyJQ0mPXVRY/FM3/31obJmmuhtmMJYaMjKLS
fJ2b60ZEBQqtnoN+EKee65Z5qAuEbuv7WaUqxlzLH2Go8vwl5t6I0atcjVWindlj
Dm/U3CWgl1oVix7xU0v4eViDHn9tnrgK/pYC/cxEdivlFarp3vcd8/9utTTwTwbt
1FcJAHZlQX2TVfR5yFiWdtBZlk64JagwIytq95FNfMGX37IfCO+DRru1VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4QeQz7Znl08hwwQA3ILxVbtcE0MB8GA1UdIwQY
MBaAFORnPm1uHPb2ARXjBQi+Fbu/5eqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xYjUzMDEtZTgwNy00Nzk1LWI5OGMt
YzE1OTRmNjA5NjhlLzEvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xYjUzMDEtZTgwNy00Nzk1LWI5OGMtYzE1OTRmNjA5Njhl
LzEvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRZFu/y5
bfeNjHYiJ9Z+GoGdoDhVxj0UCwNDnZvgTH5KgMotQlv0wYiBOmEtcK0CPrAuOzw6
SA9hkLDz+p2CKNgmXx9X6aH7Mer5unvTfkf91+fSAwUou0wbTwYiBpT4hnLQrI5l
KKLrUI5xPwKeZcTTZS9E15UyRHjl10AjHTOjPPbqPqsTHEzTyZdPVy3X7cImOwuS
eLqUX65/eDcAjWYD65qRCyjByT3eMOwbNdf6chNnosImnC6nC9uEESUUFWH+MfUs
BEQ8Q8T8bEleyuEfnqwAVnO/l7d7x6mIfkPFeH17vGm7yeI0sBgqq3DuP/0pYyvf
s+Uz3P6Gu9if5Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:48 2025 by rpki-client on console-fra.rpki-client.org