Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
File:                     5_7U53ggnDyuk9S3bTUHBEYsOqs.mft (raw, json)
Hash identifier:          zi8GIB2oUNtDn0f+ENeJeguWSmuRKA3ORzYb7CQWMrc=
Subject key identifier:   D8:57:A2:05:44:84:03:09:1E:AE:B2:B6:25:61:F9:1E:FD:DD:40:D6
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       0196789F5187A8F9950DACA4CDBD4D53D891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
Manifest number:          129D
Signing time:             Sun 27 Apr 2025 19:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:29 +0000
Files and hashes:         1: 5_7U53ggnDyuk9S3bTUHBEYsOqs.crl (hash: nzVzwAyBZcLVcPrJGFJ0un4PKGTNSQpVKa2pyaotMm0=)
                          2: HgeaiXNp8oaIkVjkrRG17ULDd1I.roa (hash: wPu6bKujUWw8Q6Ywc1kUepdeVq7pWlsdycgmuKRoAys=)
                          3: NTo8wbiTR1K2HfWuJU9NIGO7ZNw.roa (hash: chETypjvCT3i5s+QcgGlph3xjE01ueClG2327nST8KQ=)
                          4: cM8VCwAToYUay8Cs8r_uqKsIbSU.roa (hash: 6pPF0krqdzFpgqEz+0MFM0HfAkc4fzw70yHfP6Ohc+4=)
                          5: wcnB-JJNXq_0bFPzZ6d2oZ9Vpto.roa (hash: 23Nhz5S2T6oMIxU1BET30KjpLb1Pj+emx/UM9kj1sew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:51:87:a8:f9:95:0d:ac:a4:cd:bd:4d:53:d8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Apr 27 19:00:29 2025 GMT
            Not After : Apr 28 19:00:29 2025 GMT
        Subject: CN=d857a205448403091eaeb2b62561f91efddd40d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:0e:53:1a:43:0f:fb:5d:4d:eb:eb:cd:88:
                    d3:60:37:dd:19:3d:2a:b1:15:db:38:a4:4a:fa:e6:
                    75:f6:bd:91:6e:d7:de:4d:d5:0b:8b:5a:ff:9a:b5:
                    32:97:e6:fa:2a:6c:59:b9:a7:9f:84:46:5a:50:f4:
                    3c:0f:22:9e:66:b7:92:05:70:ac:12:61:4c:38:32:
                    de:4b:84:b3:f0:75:ed:1e:55:57:9a:16:e7:f6:98:
                    ae:3a:f2:36:b1:5b:19:10:6a:25:bd:55:55:8c:fc:
                    01:f2:fb:85:0b:6c:23:a3:c8:7c:7b:03:e4:77:db:
                    fa:1e:b1:0a:8a:b2:18:af:b1:39:2b:d9:3f:d3:f8:
                    99:94:76:86:b6:6f:79:61:a9:e3:68:0a:6a:a4:6b:
                    27:43:54:d2:fd:f0:48:4e:d0:e6:aa:57:90:2e:e4:
                    ff:f6:04:51:a5:37:25:63:49:55:18:26:f5:ac:49:
                    b0:38:80:35:d9:5e:bc:ae:ad:14:9b:c8:c1:0c:67:
                    3a:9f:71:e2:66:9b:a8:63:26:48:ec:b0:18:63:a4:
                    f3:16:12:d8:fd:1b:79:3f:ea:8a:3a:7d:b6:11:b8:
                    47:c7:af:b5:5e:ca:2d:91:c4:d8:22:72:d4:b6:e3:
                    0a:37:e2:29:bc:54:13:42:d1:18:3f:8b:05:0a:67:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:A2:05:44:84:03:09:1E:AE:B2:B6:25:61:F9:1E:FD:DD:40:D6
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:9d:71:12:cd:88:0e:30:cc:89:66:e8:f4:93:e4:61:8c:c4:
         45:50:40:5a:63:ce:22:5b:cd:82:60:7c:04:cc:da:c2:7e:f7:
         a3:d0:6d:68:d4:cb:a5:77:4b:47:bd:99:2d:38:64:f4:44:94:
         1d:f9:bf:b0:f9:43:23:29:0c:03:66:f6:93:76:2a:3d:20:c8:
         4a:be:44:d6:2a:f2:e8:09:12:69:ef:ad:f5:7a:25:89:3f:f4:
         2d:b3:a8:11:75:5f:c7:29:94:00:b7:12:50:ff:14:11:fb:fe:
         fc:d8:7f:59:67:e6:bf:a3:09:01:b0:1f:eb:01:2b:d2:0a:82:
         19:35:c9:28:15:58:07:e4:32:7e:3d:d2:90:8f:d6:56:66:70:
         50:c7:9d:d6:e6:ab:10:0b:8b:0c:44:0f:01:d8:9b:9a:c1:6e:
         39:fb:08:1f:e7:19:74:74:78:fa:55:0f:6c:f8:18:ab:17:6a:
         09:fd:32:68:e8:e2:d9:80:53:99:9d:a1:87:98:3a:20:6c:bd:
         9e:d4:8e:a5:bf:c1:4b:62:f7:85:39:c2:71:09:de:00:ce:53:
         01:d9:cf:bc:fe:5f:6e:ce:ba:b9:1c:a2:5e:eb:29:86:2a:cc:
         1c:c0:cc:25:d3:9f:70:11:f6:e2:47:ec:76:0c:74:ad:ab:39:
         38:e6:f2:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n1GHqPmVDaykzb1NU9iRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmVkNGU3NzgyMDljM2NhZTkzZDRiNzZkMzUwNzA0NDYy
YzNhYWIwHhcNMjUwNDI3MTkwMDI5WhcNMjUwNDI4MTkwMDI5WjAzMTEwLwYDVQQD
EyhkODU3YTIwNTQ0ODQwMzA5MWVhZWIyYjYyNTYxZjkxZWZkZGQ0MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1wOUxpDD/tdTevrzYjTYDfdGT0q
sRXbOKRK+uZ19r2RbtfeTdULi1r/mrUyl+b6KmxZuaefhEZaUPQ8DyKeZreSBXCs
EmFMODLeS4Sz8HXtHlVXmhbn9piuOvI2sVsZEGolvVVVjPwB8vuFC2wjo8h8ewPk
d9v6HrEKirIYr7E5K9k/0/iZlHaGtm95YanjaApqpGsnQ1TS/fBITtDmqleQLuT/
9gRRpTclY0lVGCb1rEmwOIA12V68rq0Um8jBDGc6n3HiZpuoYyZI7LAYY6TzFhLY
/Rt5P+qKOn22EbhHx6+1XsotkcTYInLUtuMKN+IpvFQTQtEYP4sFCmf4zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhXogVEhAMJHq6ytiVh+R793UDWMB8GA1UdIwQY
MBaAFOf+1Od4IJw8rpPUt201BwRGLDqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQt
OGJiODAxNTJhYjM0LzEvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQtOGJiODAxNTJhYjM0
LzEvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxp1xEs2I
DjDMiWbo9JPkYYzERVBAWmPOIlvNgmB8BMzawn73o9BtaNTLpXdLR72ZLThk9ESU
Hfm/sPlDIykMA2b2k3YqPSDISr5E1iry6AkSae+t9XoliT/0LbOoEXVfxymUALcS
UP8UEfv+/Nh/WWfmv6MJAbAf6wEr0gqCGTXJKBVYB+Qyfj3SkI/WVmZwUMed1uar
EAuLDEQPAdibmsFuOfsIH+cZdHR4+lUPbPgYqxdqCf0yaOji2YBTmZ2hh5g6IGy9
ntSOpb/BS2L3hTnCcQneAM5TAdnPvP5fbs66uRyiXusphirMHMDMJdOfcBH24kfs
dgx0ras5OOby2A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:32 2025 by rpki-client