Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
File:                     d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft (raw, json)
Hash identifier:          hX/Dv+IGYDmEuM8WWfo20KoW3Npugcfza1BaTL08g+I=
Subject key identifier:   BA:BD:9C:39:3A:7F:EA:8E:37:87:57:22:E6:11:69:DB:3E:4F:6D:23
Authority key identifier: 77:4D:21:5C:AE:DB:05:0D:6F:6F:E8:42:6D:50:58:AF:E2:9A:A8:96
Certificate issuer:       /CN=774d215caedb050d6f6fe8426d5058afe29aa896
Certificate serial:       01968391DDD1E1D2E42ACDF1173B37BAE10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
Manifest number:          1518
Signing time:             Tue 29 Apr 2025 22:01:36 +0000
Manifest this update:     Tue 29 Apr 2025 22:01:36 +0000
Manifest next update:     Wed 30 Apr 2025 22:01:36 +0000
Files and hashes:         1: PkCW-_NsM-T7UPkn9ndPg_lm2Cc.roa (hash: 6zURgMS5q85VCfD90tOCn/JEDDZzrGjQCgloW9Hyt6U=)
                          2: d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl (hash: GC7494I8zJPmgJ+QOaV60S/WrgWpLPkTr0Tyv8OEW+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:dd:d1:e1:d2:e4:2a:cd:f1:17:3b:37:ba:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774d215caedb050d6f6fe8426d5058afe29aa896
        Validity
            Not Before: Apr 29 22:01:36 2025 GMT
            Not After : Apr 30 22:01:36 2025 GMT
        Subject: CN=babd9c393a7fea8e37875722e61169db3e4f6d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:9c:69:80:69:64:86:22:93:84:c6:bf:9c:
                    ec:1b:ee:d4:da:43:69:94:ac:6f:82:90:5c:d7:9d:
                    c8:5e:6a:ea:63:e2:f7:9e:46:46:95:41:70:cf:8c:
                    f4:3d:9c:d6:69:6f:24:6d:f3:2e:c0:e8:27:4c:80:
                    fb:1e:08:b2:a2:72:c4:3a:42:b4:09:cd:73:b9:31:
                    17:96:1f:a4:0b:e3:3e:76:6f:85:20:04:0a:62:7e:
                    4b:4d:b6:37:4d:0f:2e:1a:be:1d:77:8a:e5:b5:76:
                    63:4e:dc:9d:8f:20:e4:b9:fe:4a:e4:30:a7:3e:07:
                    b2:52:dd:ce:0f:a9:33:ac:81:0c:68:e2:14:92:87:
                    bd:94:21:13:c3:71:36:4a:1f:7d:d8:66:b1:35:9f:
                    bb:f1:9c:5d:2a:d8:5b:45:f5:b4:4b:82:fb:35:48:
                    54:65:0c:d9:b8:73:b8:b9:d5:75:5a:87:41:fa:41:
                    df:de:70:ae:73:49:15:82:16:8e:38:3e:c3:81:6b:
                    5a:2b:3a:fa:3e:29:35:b0:c6:2c:98:63:03:44:ba:
                    da:07:25:ae:84:9a:d5:e4:04:0c:33:b5:20:75:23:
                    d6:0f:75:b3:88:98:51:d0:07:f6:4c:c0:c1:8d:2d:
                    57:8d:da:81:ab:22:7c:62:b1:58:06:9f:db:15:2d:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:9C:39:3A:7F:EA:8E:37:87:57:22:E6:11:69:DB:3E:4F:6D:23
            X509v3 Authority Key Identifier:
                keyid:77:4D:21:5C:AE:DB:05:0D:6F:6F:E8:42:6D:50:58:AF:E2:9A:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:81:3e:18:04:7b:c0:7a:28:97:28:2d:14:3a:7d:35:b3:
         16:41:ec:6f:65:7b:e6:83:ce:9f:5e:3b:3f:9c:bf:90:f5:2e:
         27:a5:d3:fb:4c:5c:5d:a9:17:3a:09:82:e3:ff:b8:8a:a5:0a:
         19:10:79:92:42:e7:2f:7f:56:32:ff:0c:b9:cf:61:d9:28:04:
         f4:01:57:b3:47:2f:8b:f0:1b:8d:3e:17:c8:20:16:df:1a:53:
         88:5c:25:be:8c:7d:15:e7:bc:4d:67:0b:02:3f:2e:83:28:e7:
         76:a2:97:ed:75:c3:2c:b6:ec:2d:78:89:30:fd:05:b8:06:c3:
         39:80:b8:20:2f:ff:fb:7a:f0:5a:2a:70:cd:bb:62:79:14:50:
         b0:1d:ba:8e:33:d8:cc:da:c2:4d:1e:97:3d:0c:24:69:b9:bb:
         e4:6d:93:ff:9b:a4:d2:22:28:fd:09:e4:33:b0:43:97:10:a9:
         57:01:b8:81:a3:0f:96:70:ca:a4:8e:ef:ab:0f:bd:0b:61:64:
         5a:30:ce:fe:14:5d:50:a2:7b:ba:4d:2c:dd:e4:1c:05:04:1c:
         b1:d1:fb:63:3c:31:c6:5e:16:6a:41:6a:66:2e:09:2e:a9:e0:
         78:23:6e:d2:76:fc:a8:7d:41:ae:65:d1:52:a5:d9:5e:89:f0:
         a4:ee:c8:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkd3R4dLkKs3xFzs3uuEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NGQyMTVjYWVkYjA1MGQ2ZjZmZTg0MjZkNTA1OGFmZTI5
YWE4OTYwHhcNMjUwNDI5MjIwMTM2WhcNMjUwNDMwMjIwMTM2WjAzMTEwLwYDVQQD
EyhiYWJkOWMzOTNhN2ZlYThlMzc4NzU3MjJlNjExNjlkYjNlNGY2ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAOcaYBpZIYik4TGv5zsG+7U2kNp
lKxvgpBc153IXmrqY+L3nkZGlUFwz4z0PZzWaW8kbfMuwOgnTID7HgiyonLEOkK0
Cc1zuTEXlh+kC+M+dm+FIAQKYn5LTbY3TQ8uGr4dd4rltXZjTtydjyDkuf5K5DCn
PgeyUt3OD6kzrIEMaOIUkoe9lCETw3E2Sh992GaxNZ+78ZxdKthbRfW0S4L7NUhU
ZQzZuHO4udV1WodB+kHf3nCuc0kVghaOOD7DgWtaKzr6Pik1sMYsmGMDRLraByWu
hJrV5AQMM7UgdSPWD3WziJhR0Af2TMDBjS1XjdqBqyJ8YrFYBp/bFS3AIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq9nDk6f+qON4dXIuYRads+T20jMB8GA1UdIwQY
MBaAFHdNIVyu2wUNb2/oQm1QWK/imqiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDAwaFhLN2JCUTF2Yi1oQ2JWQllyLUthcUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YjM0NTMtYWU3OS00ZjNjLWJjNzIt
NWQ4ZmU5YWNlZjgzLzEvZDAwaFhLN2JCUTF2Yi1oQ2JWQllyLUthcUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YjM0NTMtYWU3OS00ZjNjLWJjNzItNWQ4ZmU5YWNlZjgz
LzEvZDAwaFhLN2JCUTF2Yi1oQ2JWQllyLUthcUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooCBPhgE
e8B6KJcoLRQ6fTWzFkHsb2V75oPOn147P5y/kPUuJ6XT+0xcXakXOgmC4/+4iqUK
GRB5kkLnL39WMv8Muc9h2SgE9AFXs0cvi/AbjT4XyCAW3xpTiFwlvox9Fee8TWcL
Aj8ugyjndqKX7XXDLLbsLXiJMP0FuAbDOYC4IC//+3rwWipwzbtieRRQsB26jjPY
zNrCTR6XPQwkabm75G2T/5uk0iIo/QnkM7BDlxCpVwG4gaMPlnDKpI7vqw+9C2Fk
WjDO/hRdUKJ7uk0s3eQcBQQcsdH7Yzwxxl4WakFqZi4JLqngeCNu0nb8qH1BrmXR
UqXZXonwpO7Ikg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:16 2025 by rpki-client