Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File:                     0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier:          fObmmZmtQzpoLNaYG5rZF3EZ98Df9p9O5sSzGmVUmD4=
Subject key identifier:   47:BF:67:38:69:8E:17:75:61:AB:6C:BE:45:04:B3:3A:33:AD:A0:F2
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer:       /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial:       0196982AA34D9B81C0CB4F36B0030357C1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number:          0732
Signing time:             Sat 03 May 2025 22:00:53 +0000
Manifest this update:     Sat 03 May 2025 22:00:53 +0000
Manifest next update:     Sun 04 May 2025 22:00:53 +0000
Files and hashes:         1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: 3pwfcsxjPiCWk9K+Im/XDO7PWEgnXSAmy4OVGnj86X0=)
                          2: DqE8gRgoYoMtwrum6k0T5AcgbA0.roa (hash: 7aUKY9kAGmruCwUgSEXbHojzDkwM52NN/3MTuZeZTP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:98:2a:a3:4d:9b:81:c0:cb:4f:36:b0:03:03:57:c1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
        Validity
            Not Before: May  3 22:00:53 2025 GMT
            Not After : May  4 22:00:53 2025 GMT
        Subject: CN=47bf6738698e177561ab6cbe4504b33a33ada0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:d8:2c:df:e8:ef:46:06:8a:e8:44:e7:8c:
                    61:51:51:c5:64:8b:e2:8b:b0:c0:f3:04:01:24:ba:
                    54:cb:8e:5e:5f:5a:8d:9c:28:24:5d:6d:7f:95:3f:
                    48:31:9f:2d:a2:0b:f7:07:3a:8b:e2:21:dc:29:61:
                    ad:6c:dd:94:d6:b0:40:f2:25:4e:c9:cf:c9:4f:63:
                    19:3a:ec:a9:41:fc:96:4c:81:b5:ba:e7:25:64:36:
                    b3:b7:5e:49:dd:75:5a:ab:49:b8:62:38:fe:67:8a:
                    71:ea:de:e6:73:92:dc:d2:ab:0d:cd:95:9d:a9:fd:
                    49:01:05:66:ce:ac:8b:03:bc:f5:26:50:af:37:f8:
                    e0:17:5a:bb:8b:9f:26:be:23:67:8c:38:75:62:6c:
                    e9:ad:21:3d:80:b0:1c:24:4b:56:23:37:88:04:f3:
                    2c:84:72:f8:f9:ee:a7:5f:33:87:fd:91:d4:5a:2d:
                    42:c0:81:f8:1a:c0:12:7b:bd:db:0c:c2:a3:2e:9e:
                    4b:82:40:3f:ae:bf:80:d7:cd:c9:c2:17:b6:22:9c:
                    62:7a:51:92:fc:e3:e8:96:d3:46:67:91:e4:2c:05:
                    35:52:08:49:78:08:c0:4c:93:84:b9:9d:ec:77:ac:
                    54:4d:7d:2a:9d:29:93:a7:7c:48:d3:89:50:af:9e:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:67:38:69:8E:17:75:61:AB:6C:BE:45:04:B3:3A:33:AD:A0:F2
            X509v3 Authority Key Identifier:
                keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:55:83:cc:73:c4:77:4d:5f:1c:96:51:7b:4b:36:1e:f3:a4:
         2c:e1:d2:b0:82:34:99:1e:b9:4a:28:62:45:26:76:aa:4a:8f:
         07:f7:d0:01:24:fa:51:d5:cf:db:ca:1f:50:ae:7d:7e:f2:c7:
         4b:b7:b7:1f:3d:62:2b:60:87:a1:95:cb:8c:a7:0a:a3:9d:96:
         11:9a:08:da:f2:63:53:84:fc:e8:46:81:26:59:1a:a3:7f:db:
         ba:0f:d5:a1:3b:9e:0b:96:38:59:e0:57:7c:8d:58:b9:06:e0:
         aa:d8:c5:f3:b9:20:d1:ab:bd:db:36:a3:54:9c:af:ff:42:19:
         5b:f8:5c:7e:6c:d6:0d:3d:96:b6:e8:4c:a7:9c:71:ea:78:04:
         04:28:a3:b7:c1:fb:68:d0:25:cd:4f:76:0c:d3:ff:a4:e7:b8:
         92:1c:37:25:b9:ab:70:a7:d0:1d:8f:40:a0:43:da:c9:81:a4:
         0c:8c:19:39:32:29:db:78:48:63:f7:db:c4:36:bc:48:44:5d:
         18:d8:40:fe:db:ee:24:c9:61:13:81:42:aa:cb:93:d4:f5:dc:
         32:9c:f6:ce:d3:7a:41:0e:47:00:87:bb:71:f9:98:11:8b:b5:
         a3:ee:b0:65:9b:c1:b3:e8:e6:22:bc:18:a4:42:3e:64:f7:ed:
         96:df:4e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYKqNNm4HAy082sAMDV8GtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2NkMDlhNTRiZmE2MzE0MTk5N2NkNjUzYjc3YmM5OTM5
MmVmNjIwHhcNMjUwNTAzMjIwMDUzWhcNMjUwNTA0MjIwMDUzWjAzMTEwLwYDVQQD
Eyg0N2JmNjczODY5OGUxNzc1NjFhYjZjYmU0NTA0YjMzYTMzYWRhMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMfYLN/o70YGiuhE54xhUVHFZIvi
i7DA8wQBJLpUy45eX1qNnCgkXW1/lT9IMZ8togv3BzqL4iHcKWGtbN2U1rBA8iVO
yc/JT2MZOuypQfyWTIG1uuclZDazt15J3XVaq0m4Yjj+Z4px6t7mc5Lc0qsNzZWd
qf1JAQVmzqyLA7z1JlCvN/jgF1q7i58mviNnjDh1YmzprSE9gLAcJEtWIzeIBPMs
hHL4+e6nXzOH/ZHUWi1CwIH4GsASe73bDMKjLp5LgkA/rr+A183Jwhe2IpxielGS
/OPoltNGZ5HkLAU1UghJeAjATJOEuZ3sd6xUTX0qnSmTp3xI04lQr55ikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe/Zzhpjhd1YatsvkUEszozraDyMB8GA1UdIwQY
MBaAFNDM0JpUv6YxQZl81lO3e8mTku9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWIt
M2I5OTA4NzhhNTJiLzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWItM2I5OTA4NzhhNTJi
LzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFWDzHPE
d01fHJZRe0s2HvOkLOHSsII0mR65SihiRSZ2qkqPB/fQAST6UdXP28ofUK59fvLH
S7e3Hz1iK2CHoZXLjKcKo52WEZoI2vJjU4T86EaBJlkao3/bug/VoTueC5Y4WeBX
fI1YuQbgqtjF87kg0au92zajVJyv/0IZW/hcfmzWDT2WtuhMp5xx6ngEBCijt8H7
aNAlzU92DNP/pOe4khw3JbmrcKfQHY9AoEPayYGkDIwZOTIp23hIY/fbxDa8SERd
GNhA/tvuJMlhE4FCqsuT1PXcMpz2ztN6QQ5HAIe7cfmYEYu1o+6wZZvBs+jmIrwY
pEI+ZPftlt9Ofw==
-----END CERTIFICATE-----
Generated at Sun May 4 06:58:39 2025 by rpki-client