Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          oE4XKy9nFPW5AdoGG7sW7TP85oCVhCPHxfyzRE0ugf8=
Subject key identifier:   93:B2:CF:07:FC:6D:98:4E:AF:38:0F:78:E8:AB:AE:4C:B7:2F:88:CC
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       019684A3A5777994FD2349FB90415F0B9617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          1515
Signing time:             Wed 30 Apr 2025 03:00:38 +0000
Manifest this update:     Wed 30 Apr 2025 03:00:38 +0000
Manifest next update:     Thu 01 May 2025 03:00:38 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: pMqSB6ppw47RjLLZ3sTS3n4lqKZIaHvozvUT9nRldpA=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:a3:a5:77:79:94:fd:23:49:fb:90:41:5f:0b:96:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Apr 30 03:00:38 2025 GMT
            Not After : May  1 03:00:38 2025 GMT
        Subject: CN=93b2cf07fc6d984eaf380f78e8abae4cb72f88cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:a4:66:87:f9:6e:bb:f0:be:7c:91:c0:31:
                    89:c3:c4:a9:61:8c:f9:3a:91:0e:55:32:51:fd:d9:
                    57:e4:f1:e2:a9:89:b4:1d:7d:44:db:76:e5:70:12:
                    7b:a5:43:2f:3f:fc:58:da:2f:f6:29:35:e2:a2:fc:
                    f9:2a:96:74:89:3e:35:5f:fe:93:ff:49:3e:6f:de:
                    a9:6c:ba:fa:95:21:51:d4:d3:0e:ab:d5:89:38:91:
                    8a:43:b8:94:15:ad:59:49:8a:13:3b:d5:8f:cb:c9:
                    c7:d9:ce:a4:3a:41:79:35:59:2f:9f:e2:ba:fb:e2:
                    64:46:a3:d6:c1:77:52:4a:c8:7d:9e:87:0a:af:b3:
                    91:f5:ba:93:32:fa:0d:e1:50:ff:75:36:25:3f:59:
                    90:be:ab:98:39:5d:59:6d:ec:6f:aa:cf:86:18:1e:
                    50:51:73:a6:91:42:aa:db:04:c4:53:6c:e9:ee:0f:
                    6d:e8:a6:bd:81:4a:44:0f:77:3a:86:c4:28:fa:aa:
                    d6:ba:be:39:d5:5c:20:ac:0a:31:d2:56:cd:f4:51:
                    ed:df:92:ef:54:08:b7:8e:d0:96:a7:0f:41:ea:50:
                    98:6d:b9:27:f7:f5:15:ba:22:38:4f:6a:48:aa:4a:
                    0c:31:7c:5b:d2:66:67:29:7c:b3:b1:d5:e3:ad:99:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:CF:07:FC:6D:98:4E:AF:38:0F:78:E8:AB:AE:4C:B7:2F:88:CC
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f4:c9:17:a3:22:67:fd:a6:68:56:d8:08:9c:46:41:9d:7f:
         6b:d5:75:65:4e:af:c3:34:31:a9:82:e2:bb:6a:b9:74:e4:5f:
         a3:4e:01:b3:ec:f0:9c:7a:5f:ac:9b:1e:e1:f5:b3:57:63:33:
         95:bc:68:82:6c:ba:be:c2:6f:6a:57:d2:46:a2:6e:79:a9:e9:
         f6:b1:17:a5:e7:fe:8e:ca:d1:71:25:47:1a:8b:eb:9d:9c:3e:
         bf:ac:ab:3a:6a:08:5b:43:5a:55:13:3b:c3:0c:25:39:15:e5:
         2a:f3:24:bf:d6:be:a5:c3:3b:31:a6:4e:03:20:94:cc:d3:93:
         d3:64:69:17:dc:1d:f6:4d:cf:af:c4:3d:55:66:49:c2:16:96:
         8a:06:08:63:10:77:44:75:53:ec:31:26:61:2b:c8:37:28:67:
         a4:c0:87:be:ec:d5:b7:d9:71:b6:4d:05:68:95:4b:f7:e6:da:
         da:9c:04:98:da:ee:dc:c7:05:5e:d6:fa:be:34:75:7c:f1:e4:
         90:ce:b5:a6:29:3e:5d:97:cd:b3:94:24:97:df:ae:01:95:43:
         b8:53:0f:f3:89:4b:19:05:09:6d:e2:40:c0:70:fe:c3:78:a6:
         57:f3:4d:48:c7:c2:00:a0:0b:05:4d:61:23:6a:7a:f2:6b:c2:
         93:fa:fe:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEo6V3eZT9I0n7kEFfC5YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTlhZTNmNDE3N2EzY2RkOTY2OGQwYzViOGE4OWY5MTg2
YjViZmMwHhcNMjUwNDMwMDMwMDM4WhcNMjUwNTAxMDMwMDM4WjAzMTEwLwYDVQQD
Eyg5M2IyY2YwN2ZjNmQ5ODRlYWYzODBmNzhlOGFiYWU0Y2I3MmY4OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYekZof5brvwvnyRwDGJw8SpYYz5
OpEOVTJR/dlX5PHiqYm0HX1E23blcBJ7pUMvP/xY2i/2KTXiovz5KpZ0iT41X/6T
/0k+b96pbLr6lSFR1NMOq9WJOJGKQ7iUFa1ZSYoTO9WPy8nH2c6kOkF5NVkvn+K6
++JkRqPWwXdSSsh9nocKr7OR9bqTMvoN4VD/dTYlP1mQvquYOV1Zbexvqs+GGB5Q
UXOmkUKq2wTEU2zp7g9t6Ka9gUpED3c6hsQo+qrWur451VwgrAox0lbN9FHt35Lv
VAi3jtCWpw9B6lCYbbkn9/UVuiI4T2pIqkoMMXxb0mZnKXyzsdXjrZkjkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOyzwf8bZhOrzgPeOirrky3L4jMMB8GA1UdIwQY
MBaAFIlZrj9Bd6PN2WaNDFuKifkYa1v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEt
ZWU5ODJhNTEyZjQzLzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEtZWU5ODJhNTEyZjQz
LzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/TJF6Mi
Z/2maFbYCJxGQZ1/a9V1ZU6vwzQxqYLiu2q5dORfo04Bs+zwnHpfrJse4fWzV2Mz
lbxogmy6vsJvalfSRqJueanp9rEXpef+jsrRcSVHGovrnZw+v6yrOmoIW0NaVRM7
wwwlORXlKvMkv9a+pcM7MaZOAyCUzNOT02RpF9wd9k3Pr8Q9VWZJwhaWigYIYxB3
RHVT7DEmYSvINyhnpMCHvuzVt9lxtk0FaJVL9+ba2pwEmNru3McFXtb6vjR1fPHk
kM61pik+XZfNs5Qkl9+uAZVDuFMP84lLGQUJbeJAwHD+w3imV/NNSMfCAKALBU1h
I2p68mvCk/r+6g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:12:46 2025 by rpki-client