Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          jaafcG+GX2Boh1dfMgsMsfoJ6or8+CANfxKHiSFyIVE=
Subject key identifier:   49:CE:BC:47:40:5A:CE:22:F9:21:D4:EE:08:98:E0:2C:06:57:9C:4D
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       0196730B3B38E3A6C4B6A9EB2413AD2F4439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          1510
Signing time:             Sat 26 Apr 2025 17:00:37 +0000
Manifest this update:     Sat 26 Apr 2025 17:00:37 +0000
Manifest next update:     Sun 27 Apr 2025 17:00:37 +0000
Files and hashes:         1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=)
                          2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: QnvXf+aoqaE5uy9ePrf/+0MEGspN59S7UySyfNYVzlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0b:3b:38:e3:a6:c4:b6:a9:eb:24:13:ad:2f:44:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: Apr 26 17:00:37 2025 GMT
            Not After : Apr 27 17:00:37 2025 GMT
        Subject: CN=49cebc47405ace22f921d4ee0898e02c06579c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:fc:26:59:73:d7:1c:81:e2:2b:28:a5:ea:
                    ba:8b:9e:ad:ab:5e:97:44:f9:cf:fe:c1:75:f0:ae:
                    68:3e:f0:80:e3:43:20:19:e5:3b:50:32:21:76:c7:
                    d1:16:90:a8:85:46:30:dc:75:18:b6:27:54:2d:36:
                    3d:00:95:d8:e9:4b:e6:1a:54:15:6a:04:7c:b1:62:
                    11:38:51:02:74:d5:c9:60:79:d5:5f:72:45:8b:4d:
                    a3:7d:0a:bc:97:70:1b:9f:f6:c5:17:ae:0f:d2:6f:
                    b5:6f:de:b4:68:d0:9d:5d:19:23:39:c6:d8:4c:a0:
                    87:9b:e3:a9:d3:72:63:ee:c2:da:27:f9:f8:9f:c0:
                    87:f7:cb:80:58:9c:c3:a8:09:50:77:c5:a1:b0:cf:
                    66:e2:d1:2a:63:18:1c:a7:f9:d9:b9:b4:fb:76:70:
                    1f:90:7f:ce:ac:c6:a0:67:22:c6:f6:f5:ce:20:e4:
                    83:6a:b0:18:70:13:88:03:55:82:72:17:bb:bb:fe:
                    04:8c:21:48:5a:29:e1:38:d1:3c:4e:33:23:88:9f:
                    9d:ed:c8:cc:5a:63:2b:67:17:f7:a9:6f:28:e6:27:
                    b5:54:5f:48:5e:32:00:80:49:e7:d3:11:f3:8a:7d:
                    d9:2e:d3:2c:0d:88:0b:3f:b0:d2:11:c5:bf:76:ff:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CE:BC:47:40:5A:CE:22:F9:21:D4:EE:08:98:E0:2C:06:57:9C:4D
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:62:03:fc:45:47:c5:ab:bf:92:8c:01:d9:a2:d2:1e:c4:
         1b:ed:f7:88:5b:55:23:30:2b:45:f1:4b:f5:57:b3:73:ad:0a:
         49:ff:92:78:b5:2c:e9:09:0e:73:67:14:d0:73:e8:79:37:c9:
         ef:c3:c8:7a:7d:4e:5e:24:de:c6:bd:e4:69:c3:c2:dc:a7:e8:
         8e:ca:66:31:af:85:7d:46:d4:ac:56:a3:24:63:2c:78:3a:c2:
         69:31:8d:00:0d:dd:28:46:d6:73:92:d0:29:9e:0b:64:91:92:
         ac:f2:00:64:17:38:65:05:87:96:2b:80:2a:a8:d6:dc:50:a2:
         7a:5a:a6:9f:b5:ad:dd:05:d5:16:35:ed:ce:dc:6f:15:10:3b:
         21:31:74:8b:18:9c:b8:7b:27:63:c6:f2:5e:06:76:eb:81:34:
         e8:92:9a:ca:67:17:39:23:ca:c7:fa:2d:b2:71:3c:11:4e:b0:
         14:5f:21:c0:46:f0:f9:2a:e3:b6:70:46:d7:a5:72:db:a4:85:
         b6:d2:1e:1d:a2:4c:b2:e3:de:87:37:6b:bc:c0:e6:65:4e:23:
         41:ce:bd:1f:ee:82:c1:72:a1:68:19:67:a9:39:05:5c:57:3e:
         25:d4:35:d5:cf:5d:da:a5:75:76:c6:ab:ab:5b:81:a1:3d:1b:
         fa:66:d2:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzCzs446bEtqnrJBOtL0Q5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTM1YmFkZTM3YTNkNmZjMzgwNDQyYTI4NWUxNTdiOTg0
Y2E5MWQwHhcNMjUwNDI2MTcwMDM3WhcNMjUwNDI3MTcwMDM3WjAzMTEwLwYDVQQD
Eyg0OWNlYmM0NzQwNWFjZTIyZjkyMWQ0ZWUwODk4ZTAyYzA2NTc5YzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVD8Jllz1xyB4isopeq6i56tq16X
RPnP/sF18K5oPvCA40MgGeU7UDIhdsfRFpCohUYw3HUYtidULTY9AJXY6UvmGlQV
agR8sWIROFECdNXJYHnVX3JFi02jfQq8l3Abn/bFF64P0m+1b960aNCdXRkjOcbY
TKCHm+Op03Jj7sLaJ/n4n8CH98uAWJzDqAlQd8WhsM9m4tEqYxgcp/nZubT7dnAf
kH/OrMagZyLG9vXOIOSDarAYcBOIA1WCche7u/4EjCFIWinhONE8TjMjiJ+d7cjM
WmMrZxf3qW8o5ie1VF9IXjIAgEnn0xHzin3ZLtMsDYgLP7DSEcW/dv8rIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnOvEdAWs4i+SHU7giY4CwGV5xNMB8GA1UdIwQY
MBaAFHVTW63jej1vw4BEKiheFXuYTKkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUt
MjlmZmM0NDQzOTAxLzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUtMjlmZmM0NDQzOTAx
LzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJC1iA/xF
R8Wrv5KMAdmi0h7EG+33iFtVIzArRfFL9Vezc60KSf+SeLUs6QkOc2cU0HPoeTfJ
78PIen1OXiTexr3kacPC3KfojspmMa+FfUbUrFajJGMseDrCaTGNAA3dKEbWc5LQ
KZ4LZJGSrPIAZBc4ZQWHliuAKqjW3FCielqmn7Wt3QXVFjXtztxvFRA7ITF0ixic
uHsnY8byXgZ264E06JKaymcXOSPKx/otsnE8EU6wFF8hwEbw+SrjtnBG16Vy26SF
ttIeHaJMsuPehzdrvMDmZU4jQc69H+6CwXKhaBlnqTkFXFc+JdQ11c9d2qV1dsar
q1uBoT0b+mbSQw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:54:54 2025 by rpki-client