Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File:                     0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier:          d/Pm8pYIclPtEq2ugftmAdvIoMmSAoAb7wX6FrlVhKE=
Subject key identifier:   A6:6C:A3:70:B2:1D:9D:36:A5:2E:78:7D:4C:C8:A1:59:AC:22:58:8D
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer:       /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial:       01967ED856F5EC0EBDD726A0128DBCD5F7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number:          76
Signing time:             Tue 29 Apr 2025 00:00:29 +0000
Manifest this update:     Tue 29 Apr 2025 00:00:29 +0000
Manifest next update:     Wed 30 Apr 2025 00:00:29 +0000
Files and hashes:         1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: zzkJEhP6U4cVhYLzzIQIqzf/fEvUExJTeHEwXdW7uTQ=)
                          2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:d8:56:f5:ec:0e:bd:d7:26:a0:12:8d:bc:d5:f7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
        Validity
            Not Before: Apr 29 00:00:29 2025 GMT
            Not After : Apr 30 00:00:29 2025 GMT
        Subject: CN=a66ca370b21d9d36a52e787d4cc8a159ac22588d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:fd:ed:84:44:00:2b:d3:4e:03:a9:59:44:
                    0d:fc:fa:13:12:c4:bb:0e:60:ac:8c:f9:c1:1b:a5:
                    61:3d:d5:64:15:11:5d:52:62:33:a2:8e:6e:9f:f2:
                    36:f6:40:71:ff:88:9b:b5:9e:95:54:0a:f5:e0:2d:
                    b5:1f:9c:65:56:e7:b6:24:d7:59:00:c2:95:64:11:
                    c4:0d:b1:26:00:8b:2f:3e:11:01:07:98:e3:7f:2e:
                    cb:53:f4:ce:3b:66:e8:4f:b4:0e:71:2b:1c:8c:17:
                    d0:6c:0f:28:24:bf:6c:d2:d2:88:5f:6f:b7:a0:a6:
                    6d:08:f2:63:ac:25:9a:fd:21:fc:0a:e1:69:a9:0a:
                    50:56:57:92:10:15:9a:e2:f4:18:34:ac:3a:64:f9:
                    a5:6b:c4:50:80:da:72:a7:03:0a:7e:34:f9:33:9c:
                    13:34:f9:36:c5:6a:7f:44:5b:29:5b:ab:1f:ba:0b:
                    fd:0d:71:35:27:3f:6a:8c:bf:a4:90:a0:0e:18:4d:
                    ed:cd:5a:ab:06:cf:71:b6:85:a9:d5:71:87:b8:15:
                    44:d7:ee:ca:2f:01:e4:60:eb:a3:1d:26:c8:cc:63:
                    9a:0e:97:3d:75:43:25:45:d1:54:f7:e6:b5:ef:4c:
                    93:51:5c:81:b9:30:28:61:00:0b:b7:1c:68:e6:c1:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6C:A3:70:B2:1D:9D:36:A5:2E:78:7D:4C:C8:A1:59:AC:22:58:8D
            X509v3 Authority Key Identifier:
                keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:32:d1:64:39:f4:76:51:c6:75:e9:b2:11:5b:82:00:fb:ff:
         b9:43:57:e7:ea:ba:1e:6d:ce:d1:78:08:bf:c5:f8:11:1f:77:
         f7:40:e7:ee:48:28:8d:2c:6a:9b:70:94:e4:84:08:5a:3a:cf:
         05:24:b3:63:da:72:98:d8:1f:d6:9c:db:d8:e4:95:4f:cc:9d:
         9d:41:9b:8b:08:48:0b:0d:aa:c2:d3:fd:b6:e4:ca:fe:5b:d0:
         48:68:ee:41:ef:48:7e:06:2d:34:15:4b:5a:5b:35:47:f9:34:
         b1:70:35:08:8e:03:64:b2:b3:03:8c:6d:b0:36:00:96:20:c6:
         d5:43:ce:d4:75:5b:1a:a9:95:16:6f:97:7d:e8:f5:cf:b9:2a:
         21:44:8c:53:87:08:07:6a:50:11:f8:e1:95:68:83:6b:66:fb:
         9f:9f:08:6b:e0:98:a0:f5:51:e6:f8:87:81:56:c6:36:36:cb:
         61:6d:2c:57:48:8c:f8:51:e1:fe:64:2d:26:99:51:12:c5:bf:
         8b:71:78:cf:13:5f:80:e1:66:25:cf:72:41:ea:66:24:78:85:
         7d:34:4d:b8:d7:f9:c9:8d:a8:8c:0d:cd:55:c4:07:76:6a:6b:
         e5:32:fc:42:a6:6a:5c:1b:9b:29:3a:66:6f:5a:1e:f9:0a:a1:
         6b:ad:e4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2Fb17A691yagEo281feqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl
NThhOTIwHhcNMjUwNDI5MDAwMDI5WhcNMjUwNDMwMDAwMDI5WjAzMTEwLwYDVQQD
EyhhNjZjYTM3MGIyMWQ5ZDM2YTUyZTc4N2Q0Y2M4YTE1OWFjMjI1ODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nD97YREACvTTgOpWUQN/PoTEsS7
DmCsjPnBG6VhPdVkFRFdUmIzoo5un/I29kBx/4ibtZ6VVAr14C21H5xlVue2JNdZ
AMKVZBHEDbEmAIsvPhEBB5jjfy7LU/TOO2boT7QOcSscjBfQbA8oJL9s0tKIX2+3
oKZtCPJjrCWa/SH8CuFpqQpQVleSEBWa4vQYNKw6ZPmla8RQgNpypwMKfjT5M5wT
NPk2xWp/RFspW6sfugv9DXE1Jz9qjL+kkKAOGE3tzVqrBs9xtoWp1XGHuBVE1+7K
LwHkYOujHSbIzGOaDpc9dUMlRdFU9+a170yTUVyBuTAoYQALtxxo5sFYnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZso3CyHZ02pS54fUzIoVmsIliNMB8GA1UdIwQY
MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt
OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk
LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDLRZDn0
dlHGdemyEVuCAPv/uUNX5+q6Hm3O0XgIv8X4ER9390Dn7kgojSxqm3CU5IQIWjrP
BSSzY9pymNgf1pzb2OSVT8ydnUGbiwhICw2qwtP9tuTK/lvQSGjuQe9IfgYtNBVL
Wls1R/k0sXA1CI4DZLKzA4xtsDYAliDG1UPO1HVbGqmVFm+Xfej1z7kqIUSMU4cI
B2pQEfjhlWiDa2b7n58Ia+CYoPVR5viHgVbGNjbLYW0sV0iM+FHh/mQtJplREsW/
i3F4zxNfgOFmJc9yQepmJHiFfTRNuNf5yY2ojA3NVcQHdmpr5TL8QqZqXBubKTpm
b1oe+Qqha63k8g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:28:24 2025 by rpki-client