Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File:                     A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier:          +k/P5ctkdv3NW3W8xBTcfiz807SDLi/kTuOYxcumJq8=
Subject key identifier:   30:82:C0:80:7B:1F:05:F2:DC:71:BE:46:2A:74:F0:7F:71:3E:74:31
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer:       /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial:       019687DC03BEF0D90280AA73F01EE3E8AB4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number:          14AA
Signing time:             Wed 30 Apr 2025 18:01:05 +0000
Manifest this update:     Wed 30 Apr 2025 18:01:05 +0000
Manifest next update:     Thu 01 May 2025 18:01:05 +0000
Files and hashes:         1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=)
                          2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: eiRd36jk0POZyu7fZ/c69qCj1sBR+XkxtntsWOT4aVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:dc:03:be:f0:d9:02:80:aa:73:f0:1e:e3:e8:ab:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
        Validity
            Not Before: Apr 30 18:01:05 2025 GMT
            Not After : May  1 18:01:05 2025 GMT
        Subject: CN=3082c0807b1f05f2dc71be462a74f07f713e7431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:bb:a8:ab:8a:80:df:7d:3b:6a:bd:af:15:
                    e7:f0:0f:18:ef:1e:0e:3c:d2:56:4a:72:61:46:99:
                    30:bf:f8:4e:a5:5e:b1:b1:98:a9:61:68:79:99:3d:
                    d0:a2:f3:6c:cf:37:82:73:06:f6:7a:56:76:62:93:
                    6b:61:3a:46:96:46:9a:7a:d7:50:26:97:e6:f4:98:
                    0f:bf:51:d6:11:a2:25:be:f0:2d:10:d9:41:5f:05:
                    48:04:82:a3:d8:93:0a:e2:0c:fa:3a:e3:4a:64:fc:
                    bf:df:5d:71:80:06:04:17:30:d1:57:22:5d:bc:f8:
                    c0:92:8d:60:f1:3d:de:4c:65:a2:41:cb:8b:2b:44:
                    43:32:9a:3b:d2:1b:f8:98:cf:0f:6f:5e:84:f0:8f:
                    fa:00:a1:a6:9e:e4:c7:d7:08:20:de:f3:43:e5:b6:
                    78:f4:f4:d3:71:2c:8d:6a:ec:11:ac:fe:75:9c:b4:
                    05:53:9e:65:e6:2a:72:8d:5a:70:d7:91:67:12:1e:
                    c2:35:79:cb:6f:da:75:de:c4:f0:32:10:06:1b:b5:
                    9e:fc:1f:78:d5:e5:48:76:74:7d:3c:3c:d8:f0:e6:
                    ad:20:12:62:a0:c6:ae:26:97:28:8e:2e:27:82:67:
                    32:50:f9:bc:31:b7:af:b0:ca:7d:b9:0b:1d:dc:d1:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:C0:80:7B:1F:05:F2:DC:71:BE:46:2A:74:F0:7F:71:3E:74:31
            X509v3 Authority Key Identifier:
                keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:75:23:b6:cb:f8:4c:f5:c3:8b:71:6d:f4:fa:c9:5e:b5:
         68:df:b6:f2:7b:6d:58:be:5a:f3:5a:5d:49:38:a5:50:81:bc:
         bf:70:15:27:47:9b:bb:9b:ea:58:c6:13:0e:f7:0b:67:bc:7a:
         15:b1:d7:a0:59:d0:30:c0:bc:d4:73:dd:a4:55:26:fa:e4:88:
         3b:7e:65:04:8b:3b:25:27:4b:01:b1:66:7c:82:a2:46:e6:f2:
         ae:68:5e:ef:2b:55:b2:96:94:ad:76:40:13:34:a0:27:0f:d8:
         e4:bf:f0:9f:56:4b:c2:43:dc:d4:46:21:5b:97:e8:a4:89:ee:
         18:6c:6d:3d:a5:69:7c:6f:ca:14:75:61:15:71:48:b2:00:4d:
         dc:9e:ab:dd:87:3f:01:e4:df:7e:ca:6f:3c:ff:07:d8:f6:a1:
         23:1b:33:b9:a6:27:e0:d1:8d:8b:ee:b6:ce:e1:01:84:51:11:
         b8:ce:1e:a9:8b:d3:68:0e:17:08:54:87:62:18:81:8f:f6:d4:
         3a:d2:01:d5:f1:8f:7f:c8:5a:31:4b:bd:35:91:7e:e8:50:bb:
         0c:16:6d:35:9a:2a:6f:ed:9c:ac:7e:d5:80:49:50:b4:9e:d8:
         0b:fd:2b:39:d3:8d:78:4e:cc:17:1e:c5:6e:ee:79:cd:e4:25:
         cd:57:18:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH3AO+8NkCgKpz8B7j6KtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTVhZGQ4NmJhZjZiMmQwNmZmNDFmNTUyNmQzNDdmNzFl
ZWI0MTAwHhcNMjUwNDMwMTgwMTA1WhcNMjUwNTAxMTgwMTA1WjAzMTEwLwYDVQQD
EygzMDgyYzA4MDdiMWYwNWYyZGM3MWJlNDYyYTc0ZjA3ZjcxM2U3NDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWy7qKuKgN99O2q9rxXn8A8Y7x4O
PNJWSnJhRpkwv/hOpV6xsZipYWh5mT3QovNszzeCcwb2elZ2YpNrYTpGlkaaetdQ
Jpfm9JgPv1HWEaIlvvAtENlBXwVIBIKj2JMK4gz6OuNKZPy/311xgAYEFzDRVyJd
vPjAko1g8T3eTGWiQcuLK0RDMpo70hv4mM8Pb16E8I/6AKGmnuTH1wgg3vND5bZ4
9PTTcSyNauwRrP51nLQFU55l5ipyjVpw15FnEh7CNXnLb9p13sTwMhAGG7We/B94
1eVIdnR9PDzY8OatIBJioMauJpcoji4ngmcyUPm8MbevsMp9uQsd3NHYvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCCwIB7HwXy3HG+Rip08H9xPnQxMB8GA1UdIwQY
MBaAFAOVrdhrr2stBv9B9VJtNH9x7rQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMt
Y2ZjNGE2NzZkNmUwLzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMtY2ZjNGE2NzZkNmUw
LzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdZ1I7bL
+Ez1w4txbfT6yV61aN+28nttWL5a81pdSTilUIG8v3AVJ0ebu5vqWMYTDvcLZ7x6
FbHXoFnQMMC81HPdpFUm+uSIO35lBIs7JSdLAbFmfIKiRubyrmhe7ytVspaUrXZA
EzSgJw/Y5L/wn1ZLwkPc1EYhW5fopInuGGxtPaVpfG/KFHVhFXFIsgBN3J6r3Yc/
AeTffspvPP8H2PahIxszuaYn4NGNi+62zuEBhFERuM4eqYvTaA4XCFSHYhiBj/bU
OtIB1fGPf8haMUu9NZF+6FC7DBZtNZoqb+2crH7VgElQtJ7YC/0rOdONeE7MFx7F
bu55zeQlzVcYmw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:58 2025 by rpki-client