Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File:                     tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier:          m4nNjP3NZT57MIpgf+38Uh73ZmgSlrM5AL8qonl4W4A=
Subject key identifier:   29:D9:A3:80:B4:B0:98:D4:EF:81:25:3E:FA:06:3A:F1:C2:BA:C6:04
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer:       /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial:       0196778D113C7224B16D81206C960A52846C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number:          0B73
Signing time:             Sun 27 Apr 2025 14:00:55 +0000
Manifest this update:     Sun 27 Apr 2025 14:00:55 +0000
Manifest next update:     Mon 28 Apr 2025 14:00:55 +0000
Files and hashes:         1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
                          2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
                          3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: ipWTFxBTKrK9DVPvMKmQphl8z8uQE+2/En5oA/VcdvI=)
                          4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:8d:11:3c:72:24:b1:6d:81:20:6c:96:0a:52:84:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
        Validity
            Not Before: Apr 27 14:00:55 2025 GMT
            Not After : Apr 28 14:00:55 2025 GMT
        Subject: CN=29d9a380b4b098d4ef81253efa063af1c2bac604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:65:1d:7a:d3:6e:44:02:36:63:c9:f0:21:
                    b8:c5:bd:79:4b:99:54:d0:8f:0b:a0:e8:f3:e9:ce:
                    52:ce:f3:53:fc:09:3f:1c:e1:cb:64:e3:29:92:5f:
                    1a:28:9e:5a:10:6a:f2:79:f8:f0:cb:eb:f1:23:a5:
                    9b:0b:19:b8:d4:87:c4:87:5f:ee:50:c7:46:84:0c:
                    0e:c4:1d:25:26:6e:f1:f9:d5:9d:b2:f3:0c:4c:b0:
                    ff:da:44:fe:b6:1f:7a:63:3d:e5:e5:19:7b:0f:10:
                    d3:8b:03:bf:a1:46:ef:d0:b0:0b:a2:a7:1e:cb:ba:
                    97:5c:7b:bd:45:4b:3c:fd:4a:ab:3a:c3:5d:60:ad:
                    82:a6:43:99:21:45:ee:08:32:f3:1d:33:ef:30:25:
                    cb:ef:c1:7e:48:1b:85:70:78:6f:4e:ff:d6:5c:f6:
                    e8:1f:c2:e7:3a:3e:e3:7b:77:da:5d:b7:11:48:8d:
                    5e:2f:a1:95:24:08:e8:f7:ea:5e:7d:a1:bd:27:49:
                    03:0b:ce:ad:8b:d5:d3:26:99:99:fc:53:21:62:93:
                    dd:59:d6:30:af:45:03:b0:68:df:32:7c:8b:8c:93:
                    c2:26:83:69:4b:9a:e4:ba:a3:f3:97:a4:e2:5f:a2:
                    d2:43:60:f0:9e:83:97:68:b2:32:df:96:c7:33:ec:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:A3:80:B4:B0:98:D4:EF:81:25:3E:FA:06:3A:F1:C2:BA:C6:04
            X509v3 Authority Key Identifier:
                keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:fb:1c:b5:ab:77:76:87:f5:6d:1e:7d:13:96:3b:50:79:
         b3:75:91:57:cb:1a:a4:e3:a3:f7:02:05:2b:0f:8f:15:71:6a:
         6f:f1:a4:6a:b6:e4:f2:c4:23:61:b4:a7:2f:02:d2:c2:eb:75:
         d2:09:34:e9:93:ad:e6:9b:16:73:b0:80:93:b5:bd:df:d9:39:
         9e:9d:ef:20:2f:54:73:1d:88:68:85:38:87:dd:f3:7c:88:f8:
         e2:b3:c8:c6:b3:bb:d3:2b:01:37:84:e6:af:f7:32:0c:99:55:
         a6:2e:49:8d:08:b9:3d:5d:70:5e:22:50:37:a6:7f:f0:ae:78:
         d0:48:5a:d8:9f:9d:2c:67:7b:a4:b2:a9:b2:24:e1:b7:a5:f2:
         4c:24:7d:dd:ab:87:1a:c8:86:5a:e7:14:72:e4:e1:7e:3c:90:
         fa:81:46:87:21:cb:d6:02:99:25:08:b3:e9:f8:31:52:94:46:
         23:7a:11:c7:1b:0d:da:7a:e9:23:f5:a1:9d:7f:ed:87:b7:05:
         a7:4e:7e:6c:9a:1b:41:ae:96:5f:09:b2:d8:a1:8f:87:1e:e6:
         c1:8c:39:01:46:5b:e2:a5:32:fb:dc:a0:ad:dd:29:c9:6c:84:
         35:80:17:11:b4:01:93:4d:cf:cf:0e:fb:38:6f:ab:06:04:7c:
         58:52:f4:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jRE8ciSxbYEgbJYKUoRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy
NDE3YmYwHhcNMjUwNDI3MTQwMDU1WhcNMjUwNDI4MTQwMDU1WjAzMTEwLwYDVQQD
EygyOWQ5YTM4MGI0YjA5OGQ0ZWY4MTI1M2VmYTA2M2FmMWMyYmFjNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbBlHXrTbkQCNmPJ8CG4xb15S5lU
0I8LoOjz6c5SzvNT/Ak/HOHLZOMpkl8aKJ5aEGryefjwy+vxI6WbCxm41IfEh1/u
UMdGhAwOxB0lJm7x+dWdsvMMTLD/2kT+th96Yz3l5Rl7DxDTiwO/oUbv0LALoqce
y7qXXHu9RUs8/UqrOsNdYK2CpkOZIUXuCDLzHTPvMCXL78F+SBuFcHhvTv/WXPbo
H8LnOj7je3faXbcRSI1eL6GVJAjo9+pefaG9J0kDC86ti9XTJpmZ/FMhYpPdWdYw
r0UDsGjfMnyLjJPCJoNpS5rkuqPzl6TiX6LSQ2DwnoOXaLIy35bHM+xo8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnZo4C0sJjU74ElPvoGOvHCusYEMB8GA1UdIwQY
MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt
NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3
LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnz77HLWr
d3aH9W0efROWO1B5s3WRV8sapOOj9wIFKw+PFXFqb/Gkarbk8sQjYbSnLwLSwut1
0gk06ZOt5psWc7CAk7W939k5np3vIC9Ucx2IaIU4h93zfIj44rPIxrO70ysBN4Tm
r/cyDJlVpi5JjQi5PV1wXiJQN6Z/8K540Eha2J+dLGd7pLKpsiTht6XyTCR93auH
GsiGWucUcuThfjyQ+oFGhyHL1gKZJQiz6fgxUpRGI3oRxxsN2nrpI/WhnX/th7cF
p05+bJobQa6WXwmy2KGPhx7mwYw5AUZb4qUy+9ygrd0pyWyENYAXEbQBk03Pzw77
OG+rBgR8WFL0aw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:30 2025 by rpki-client