Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File:                     5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier:          zrVZtMMePgvG8s6sQHka6ytxgMgXCGdnjFHYEdCp2hM=
Subject key identifier:   D2:F4:0A:CE:C7:43:1F:F1:6E:D0:9C:C6:87:45:FE:71:9E:B3:D5:B7
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer:       /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial:       01967E337B6B05CB3F38F9B3E76825DE06B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number:          07CD
Signing time:             Mon 28 Apr 2025 21:00:25 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:25 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:25 +0000
Files and hashes:         1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: PWD5nVFmGW+Qg6l66+/A5FzfH+LiJM3xu2pREBwvlsQ=)
                          2: xKaI03GURyzSZb-rRcYioTYAybk.roa (hash: HlTvUY61ftuf4HfBCvEW2aFKorP77hcqRc1NgwCXzCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:7b:6b:05:cb:3f:38:f9:b3:e7:68:25:de:06:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
        Validity
            Not Before: Apr 28 21:00:25 2025 GMT
            Not After : Apr 29 21:00:25 2025 GMT
        Subject: CN=d2f40acec7431ff16ed09cc68745fe719eb3d5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:8d:9b:7f:df:a7:a6:e2:57:35:ea:e7:a9:
                    5b:ca:ca:af:63:e7:49:ce:95:ea:71:92:ff:3e:2c:
                    3b:29:c5:2d:1d:00:98:38:1f:ad:44:6d:1f:6c:53:
                    d5:a4:8a:16:67:e6:41:4c:2c:f0:44:92:07:f0:48:
                    73:d5:32:88:00:b8:34:d2:3e:42:d0:04:17:d5:e1:
                    f0:f0:af:28:5d:ec:eb:82:b0:4b:77:88:48:0c:00:
                    95:3c:7c:22:0d:15:06:c6:af:00:5d:e9:c6:10:00:
                    10:e6:0f:5e:70:19:e8:fd:e4:a9:15:55:9f:67:0b:
                    f5:b6:be:b5:56:6d:ae:85:5a:61:47:5c:2d:d1:15:
                    3d:4b:cf:12:21:82:f2:c7:66:09:61:b9:f2:2d:cb:
                    5a:4e:0b:09:be:35:c7:2b:cc:b4:78:f0:93:b2:72:
                    2b:35:82:c0:c5:c3:24:f0:66:c2:59:9c:22:4b:44:
                    bc:1c:4d:b2:0b:40:57:f0:f1:d4:f2:28:3c:e2:fb:
                    55:10:cc:76:28:07:79:e4:3f:eb:f1:04:1f:2d:1b:
                    78:7c:4c:04:0f:c4:d6:ff:63:e3:1a:99:dd:c4:9a:
                    db:0f:d2:79:54:a7:6b:9e:e4:fa:bc:2b:6c:e2:92:
                    1a:25:2b:52:7f:84:dd:35:b8:43:1f:00:a6:44:a7:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F4:0A:CE:C7:43:1F:F1:6E:D0:9C:C6:87:45:FE:71:9E:B3:D5:B7
            X509v3 Authority Key Identifier:
                keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bd:02:e1:c3:a7:84:6b:d6:d4:9f:65:07:cc:af:d1:7b:27:
         32:67:c9:e5:02:0a:19:14:b7:ae:17:89:f8:4b:30:78:39:96:
         3d:b9:93:bc:48:1b:47:b0:c6:c6:99:1d:9d:a1:fa:aa:71:59:
         fc:31:af:8b:7f:d3:6e:57:da:76:f2:b8:c6:75:b2:3b:37:d8:
         4f:bf:6e:a5:c2:a7:1f:06:fc:e1:a5:19:12:3f:9e:14:1e:3d:
         7c:37:60:61:40:0b:39:1e:33:8f:b0:91:44:fb:a4:50:ed:43:
         f4:35:2d:17:cc:6e:51:23:ad:f9:84:62:ca:b3:ba:6c:61:f0:
         01:6b:b6:c2:fa:e9:85:8e:50:d1:26:99:06:20:2e:78:43:ca:
         87:45:dc:53:99:6e:d6:5c:42:b6:ac:54:30:38:4c:c4:5c:c4:
         d6:24:d2:88:15:07:82:a3:e1:56:d0:11:0e:88:05:78:f1:ba:
         d4:7c:94:f0:93:8c:53:b2:87:b1:88:ba:5a:e7:ef:37:bf:13:
         d4:2a:b7:6a:5d:25:58:98:9d:3f:05:80:7e:89:6f:18:23:e4:
         c1:b2:4b:36:73:7c:93:24:59:6b:8d:38:7b:0d:b3:67:cd:bc:
         61:51:da:17:5d:df:ab:0d:df:e7:1c:aa:a3:01:29:bf:41:20:
         f5:8e:fe:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+M3trBcs/OPmz52gl3ga5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTVhY2JhZmU0NmVmMmY0ZDZjNTFmY2YyM2JkNzJmNjM5
Y2ZkMGIwHhcNMjUwNDI4MjEwMDI1WhcNMjUwNDI5MjEwMDI1WjAzMTEwLwYDVQQD
EyhkMmY0MGFjZWM3NDMxZmYxNmVkMDljYzY4NzQ1ZmU3MTllYjNkNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQeNm3/fp6biVzXq56lbysqvY+dJ
zpXqcZL/Piw7KcUtHQCYOB+tRG0fbFPVpIoWZ+ZBTCzwRJIH8Ehz1TKIALg00j5C
0AQX1eHw8K8oXezrgrBLd4hIDACVPHwiDRUGxq8AXenGEAAQ5g9ecBno/eSpFVWf
Zwv1tr61Vm2uhVphR1wt0RU9S88SIYLyx2YJYbnyLctaTgsJvjXHK8y0ePCTsnIr
NYLAxcMk8GbCWZwiS0S8HE2yC0BX8PHU8ig84vtVEMx2KAd55D/r8QQfLRt4fEwE
D8TW/2PjGpndxJrbD9J5VKdrnuT6vCts4pIaJStSf4TdNbhDHwCmRKdDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNL0Cs7HQx/xbtCcxodF/nGes9W3MB8GA1UdIwQY
MBaAFOSVrLr+Ru8vTWxR/PI71y9jnP0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEt
Nzk5MWI0ZTRiZmEyLzEvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEtNzk5MWI0ZTRiZmEy
LzEvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb0C4cOn
hGvW1J9lB8yv0XsnMmfJ5QIKGRS3rheJ+EsweDmWPbmTvEgbR7DGxpkdnaH6qnFZ
/DGvi3/TblfadvK4xnWyOzfYT79upcKnHwb84aUZEj+eFB49fDdgYUALOR4zj7CR
RPukUO1D9DUtF8xuUSOt+YRiyrO6bGHwAWu2wvrphY5Q0SaZBiAueEPKh0XcU5lu
1lxCtqxUMDhMxFzE1iTSiBUHgqPhVtARDogFePG61HyU8JOMU7KHsYi6WufvN78T
1Cq3al0lWJidPwWAfolvGCPkwbJLNnN8kyRZa404ew2zZ828YVHaF13fqw3f5xyq
owEpv0Eg9Y7+dQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:54:49 2025 by rpki-client