Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          +jD32kwCpSdprkLwuQ1CiFS9Of20NZ64/OmkXtz0auw=
Subject key identifier:   DD:43:30:0B:F4:EA:EC:13:6C:58:35:1F:B2:B7:A5:0D:41:8C:80:18
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       0196722FD73A70B8147A311B32B88E886EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          1510
Signing time:             Sat 26 Apr 2025 13:00:59 +0000
Manifest this update:     Sat 26 Apr 2025 13:00:59 +0000
Manifest next update:     Sun 27 Apr 2025 13:00:59 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          4: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: KVuSgwcBZcngXeSyvxDjVuZrGerkI+tXZn4ouLrxXoE=)
                          5: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          6: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:2f:d7:3a:70:b8:14:7a:31:1b:32:b8:8e:88:6e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Apr 26 13:00:59 2025 GMT
            Not After : Apr 27 13:00:59 2025 GMT
        Subject: CN=dd43300bf4eaec136c58351fb2b7a50d418c8018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:06:56:75:20:02:81:64:84:b8:0d:0c:d9:
                    d0:35:de:71:b6:42:db:8c:49:42:e1:0c:63:b0:b5:
                    42:86:73:d3:7b:b7:5c:8a:27:5c:f0:b5:64:9c:80:
                    96:62:d5:58:9c:0d:1b:fe:11:1b:e2:ae:75:b0:ce:
                    53:b8:a6:31:4e:13:8c:50:17:41:a4:56:27:e4:d2:
                    e7:10:d0:82:16:04:da:12:4b:28:7d:ba:ea:52:ec:
                    3d:c3:07:69:6b:10:c1:d4:f2:9b:45:41:4b:d0:d5:
                    b7:c2:2a:cc:b6:a3:de:4e:58:9e:f1:88:09:d4:04:
                    e5:2a:9a:df:d8:24:bc:04:4a:38:56:b0:fb:a8:21:
                    57:a4:ee:b7:94:b0:0b:80:0f:23:a6:e2:da:a8:f9:
                    06:e5:68:79:1b:af:84:5f:c2:b4:fa:33:d9:04:77:
                    41:1f:67:b7:ca:ec:fe:d7:45:02:d3:c9:08:2a:14:
                    ea:0d:7f:f4:88:fe:62:52:e6:ef:a9:0c:30:ec:14:
                    a6:cf:f9:3a:07:3d:51:ef:8a:ae:ff:e9:ec:65:8c:
                    03:11:64:e1:1b:90:c4:68:7a:a2:6f:60:e5:98:d5:
                    7f:0e:87:33:fd:d7:12:3c:ce:40:39:b5:bc:a1:38:
                    ab:ea:d5:97:83:62:30:a2:fb:4c:e0:c3:61:f8:5c:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:30:0B:F4:EA:EC:13:6C:58:35:1F:B2:B7:A5:0D:41:8C:80:18
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:04:31:11:0c:20:9b:d8:84:84:77:91:27:f4:d0:e3:0b:
         ba:62:e7:ff:b2:18:fa:8b:b9:0d:41:7f:b6:52:c4:5a:fc:c3:
         fe:75:42:e8:57:ca:05:32:ef:25:50:e9:b7:20:b4:8c:e1:8f:
         17:f4:00:d4:89:55:d1:2b:c6:26:0f:06:d5:44:eb:e2:f6:55:
         bc:f8:b9:79:ab:7f:e5:ad:f7:a2:09:9c:19:da:05:fb:4e:fb:
         82:30:e3:69:13:32:2e:8a:da:71:74:d9:32:4e:1e:e1:f4:1f:
         e3:4a:e8:51:0b:ab:3c:4c:fb:43:90:b2:5f:bb:01:b5:db:df:
         57:68:66:c8:39:3e:cb:de:93:b9:51:e6:c1:b9:b9:e6:2e:ca:
         01:1a:9d:f8:0c:65:49:4c:ca:d9:02:a3:db:01:63:d1:7f:49:
         51:9f:9a:08:05:5e:53:2b:7c:79:2c:75:f4:cc:f9:bb:71:c3:
         18:a3:2c:84:39:a6:7c:c5:5d:06:1c:69:2e:d2:cf:f7:b1:bc:
         e1:41:27:c0:28:45:98:55:8a:d7:97:67:29:0e:4f:ad:c1:9a:
         8d:6b:53:6d:93:0e:ec:03:a6:cb:b1:8c:18:9b:8a:4b:e4:3c:
         cd:f1:36:93:b9:83:1c:b7:ef:6f:b7:aa:6a:11:0a:2d:d5:1b:
         1d:fb:18:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyL9c6cLgUejEbMriOiG7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjUwNDI2MTMwMDU5WhcNMjUwNDI3MTMwMDU5WjAzMTEwLwYDVQQD
EyhkZDQzMzAwYmY0ZWFlYzEzNmM1ODM1MWZiMmI3YTUwZDQxOGM4MDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFwGVnUgAoFkhLgNDNnQNd5xtkLb
jElC4QxjsLVChnPTe7dciidc8LVknICWYtVYnA0b/hEb4q51sM5TuKYxThOMUBdB
pFYn5NLnENCCFgTaEksofbrqUuw9wwdpaxDB1PKbRUFL0NW3wirMtqPeTlie8YgJ
1ATlKprf2CS8BEo4VrD7qCFXpO63lLALgA8jpuLaqPkG5Wh5G6+EX8K0+jPZBHdB
H2e3yuz+10UC08kIKhTqDX/0iP5iUubvqQww7BSmz/k6Bz1R74qu/+nsZYwDEWTh
G5DEaHqib2DlmNV/Docz/dcSPM5AObW8oTir6tWXg2IwovtM4MNh+FwcBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1DMAv06uwTbFg1H7K3pQ1BjIAYMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMoEMREM
IJvYhIR3kSf00OMLumLn/7IY+ou5DUF/tlLEWvzD/nVC6FfKBTLvJVDptyC0jOGP
F/QA1IlV0SvGJg8G1UTr4vZVvPi5eat/5a33ogmcGdoF+077gjDjaRMyLoracXTZ
Mk4e4fQf40roUQurPEz7Q5CyX7sBtdvfV2hmyDk+y96TuVHmwbm55i7KARqd+Axl
SUzK2QKj2wFj0X9JUZ+aCAVeUyt8eSx19Mz5u3HDGKMshDmmfMVdBhxpLtLP97G8
4UEnwChFmFWK15dnKQ5PrcGajWtTbZMO7AOmy7GMGJuKS+Q8zfE2k7mDHLfvb7eq
ahEKLdUbHfsYSg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:24:57 2025 by rpki-client