Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File:                     1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier:          UYFN2ELWhVWISsckAyPMhulSBm4K/HXAxQpvTwvql2w=
Subject key identifier:   5D:0D:85:3A:BF:A1:8C:D9:6A:38:E6:FE:A1:38:80:5B:3F:E2:D0:57
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       01967679D639F993790870DF8BBCD230B06D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 09:00:18 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:18 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:18 +0000
Files and hashes:         1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: Ok3LTvyOX17nXNMkrQNdKq8BmU3TkCv12Z/qy+cPmgg=)
                          2: kM09o73dWvN-pIf-j5VVGqnFs3E.roa (hash: 1NF2t1HFyA9I2wGXRPo18jluITzSgbYTlyBY51pRw6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:d6:39:f9:93:79:08:70:df:8b:bc:d2:30:b0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: Apr 27 09:00:18 2025 GMT
            Not After : Apr 28 09:00:18 2025 GMT
        Subject: CN=5d0d853abfa18cd96a38e6fea138805b3fe2d057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:89:47:29:0b:2e:5d:78:cc:db:35:a8:78:
                    4b:3b:ae:52:c3:3e:29:bd:a0:2f:34:06:13:b7:26:
                    25:92:75:33:22:03:70:0b:7d:f3:10:79:a4:d7:84:
                    67:0c:b4:39:bf:bd:3f:bc:08:c7:d9:d9:43:08:03:
                    6c:70:0e:ef:6a:88:c0:83:8e:13:7e:49:80:12:ec:
                    69:93:50:8b:0e:dc:69:b8:bd:81:58:ee:5c:71:8f:
                    15:48:d8:b7:ae:f4:a4:8e:4b:a7:d2:a0:4d:78:db:
                    e7:43:16:ac:66:e0:1a:a4:72:65:17:4f:bd:8b:e5:
                    ff:48:08:cf:d7:cd:c3:e9:ea:9f:5b:00:79:f4:f4:
                    c4:6a:17:6f:6d:80:99:29:19:41:66:f0:bb:a9:d9:
                    1f:57:84:97:53:bd:ee:02:0a:dd:b6:97:aa:88:d3:
                    9a:5a:5f:ab:ee:dd:cc:c6:8d:31:4b:1f:d2:b6:79:
                    cd:10:53:9a:84:17:7f:34:80:6e:f4:d6:99:15:fb:
                    2c:ec:27:6e:5e:02:a9:22:7a:70:fa:2c:0e:b2:78:
                    d7:ce:6e:6a:ab:c6:79:44:f2:b9:3e:ac:69:8c:aa:
                    74:5c:e1:f3:1c:77:4e:b5:98:3e:db:57:4a:11:d7:
                    f8:fa:bc:13:13:66:db:7e:0d:09:d8:35:d4:ba:90:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:85:3A:BF:A1:8C:D9:6A:38:E6:FE:A1:38:80:5B:3F:E2:D0:57
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5e:2a:60:73:da:61:69:7a:61:a7:6c:ee:3c:64:a9:35:de:
         14:26:37:f8:26:6d:a9:85:7e:2a:20:ec:6b:d4:2a:24:3e:93:
         7b:58:c6:a0:2c:e4:62:75:ef:b0:ab:f3:42:d5:9f:2e:bd:21:
         4f:7d:4f:24:e0:1a:3d:44:9a:c5:f7:94:74:c8:cb:d2:c0:cd:
         87:15:77:ad:a3:47:5b:6a:6a:5b:9d:7a:b8:aa:9a:bf:ae:c0:
         ac:f3:86:06:c2:65:2a:db:6e:78:67:2e:f5:7d:04:53:4e:b2:
         4b:ae:d4:bb:78:9f:af:83:a2:3f:e7:a8:87:9a:2a:da:2f:ec:
         69:33:69:9e:9c:12:71:f5:00:37:33:e4:52:22:ca:9e:7b:0c:
         0b:ba:ed:b7:59:80:5b:3c:f2:5f:7d:10:7a:33:16:78:b2:0f:
         82:f1:3e:12:82:a7:01:57:1c:dc:f2:ec:15:d6:78:59:c0:d6:
         98:e7:09:53:42:33:4c:94:20:f1:3d:b8:32:5f:23:6b:83:86:
         a5:91:27:6b:b8:3d:51:be:61:1f:f2:f8:21:8a:92:a2:ec:08:
         92:c1:aa:bf:dc:16:c3:ab:ce:80:e9:fe:22:e5:a9:6f:32:41:
         42:f0:51:f9:80:20:41:ab:e7:c0:b8:65:14:00:1c:83:3d:65:
         ba:1d:e5:e7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ2edY5+ZN5CHDfi7zSMLBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDgwYzczMzU0MzA1Y2M0MGY4ZmFiYTllNTQwMmVmMzdk
ZTJlYWEwHhcNMjUwNDI3MDkwMDE4WhcNMjUwNDI4MDkwMDE4WjAzMTEwLwYDVQQD
Eyg1ZDBkODUzYWJmYTE4Y2Q5NmEzOGU2ZmVhMTM4ODA1YjNmZTJkMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58mJRykLLl14zNs1qHhLO65Swz4p
vaAvNAYTtyYlknUzIgNwC33zEHmk14RnDLQ5v70/vAjH2dlDCANscA7vaojAg44T
fkmAEuxpk1CLDtxpuL2BWO5ccY8VSNi3rvSkjkun0qBNeNvnQxasZuAapHJlF0+9
i+X/SAjP183D6eqfWwB59PTEahdvbYCZKRlBZvC7qdkfV4SXU73uAgrdtpeqiNOa
Wl+r7t3Mxo0xSx/StnnNEFOahBd/NIBu9NaZFfss7CduXgKpInpw+iwOsnjXzm5q
q8Z5RPK5PqxpjKp0XOHzHHdOtZg+21dKEdf4+rwTE2bbfg0J2DXUupCCAQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF0NhTq/oYzZajjm/qE4gFs/4tBXMB8GA1UdIwQY
MBaAFPtIDHM1QwXMQPj6up5UAu833i6qMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wZ01jelZEQmN4QS1QcTZubFFDN3pmZUxxby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMGRjNDg5LWUwMjgtNGYzNy1hOTcy
LTUwOWY0NGU5MjAyMi8xLzEtMGdNY3pWREJjeEEtUHE2bmxRQzd6ZmVMcW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1LzBkYzQ4OS1lMDI4LTRmMzctYTk3Mi01MDlmNDRlOTIw
MjIvMS8xLTBnTWN6VkRCY3hBLVBxNm5sUUM3emZlTHFvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKl4q
YHPaYWl6Yads7jxkqTXeFCY3+CZtqYV+KiDsa9QqJD6Te1jGoCzkYnXvsKvzQtWf
Lr0hT31PJOAaPUSaxfeUdMjL0sDNhxV3raNHW2pqW516uKqav67ArPOGBsJlKttu
eGcu9X0EU06yS67Uu3ifr4OiP+eoh5oq2i/saTNpnpwScfUANzPkUiLKnnsMC7rt
t1mAWzzyX30QejMWeLIPgvE+EoKnAVcc3PLsFdZ4WcDWmOcJU0IzTJQg8T24Ml8j
a4OGpZEna7g9Ub5hH/L4IYqSouwIksGqv9wWw6vOgOn+IuWpbzJBQvBR+YAgQavn
wLhlFAAcgz1luh3l5w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:59 2025 by rpki-client