Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File:                     AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier:          8+UkhnV1iEXYxyTA8kdj2KlaLIUzi8x+ZUxMTKTeg9A=
Subject key identifier:   E4:17:B5:F2:2F:54:66:1B:AD:77:1B:D1:16:50:13:A3:DA:70:FD:61
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer:       /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial:       019688EE54B762EC9307752C84CF570C55B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number:          15
Signing time:             Wed 30 Apr 2025 23:00:42 +0000
Manifest this update:     Wed 30 Apr 2025 23:00:42 +0000
Manifest next update:     Thu 01 May 2025 23:00:42 +0000
Files and hashes:         1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: c4BqpE6ydjvbTDcry/d6bS5kJIG28kgXT7jBb09KOtA=)
                          2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:ee:54:b7:62:ec:93:07:75:2c:84:cf:57:0c:55:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
        Validity
            Not Before: Apr 30 23:00:42 2025 GMT
            Not After : May  1 23:00:42 2025 GMT
        Subject: CN=e417b5f22f54661bad771bd1165013a3da70fd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:92:49:00:6b:78:d8:5d:1b:12:35:84:7b:
                    b9:3a:00:3f:e8:0d:ed:99:84:08:bc:e9:cf:48:71:
                    23:97:c5:4a:b0:8c:a3:6a:44:13:f2:20:4d:bc:46:
                    f6:2a:3f:bb:6f:29:e3:09:4a:40:5b:cd:4f:c9:6a:
                    c3:00:59:46:ae:1a:75:c8:52:d8:8a:d9:d0:d8:ab:
                    a2:29:a8:93:d4:bf:d9:96:be:e0:c2:90:f2:cf:80:
                    5c:99:94:26:c3:05:9c:22:ed:30:b1:bf:41:f3:12:
                    db:cb:1e:82:ce:6e:d1:ea:aa:56:94:48:b5:cd:14:
                    e9:e8:e2:9e:99:3c:15:10:18:1e:1e:11:58:57:89:
                    54:a0:de:2b:34:5a:eb:ae:84:74:26:cd:0c:ca:35:
                    07:39:43:59:a1:da:f3:fe:70:d8:61:84:c2:d8:ef:
                    7c:a8:57:6b:52:ce:96:8e:9e:8d:e5:86:2d:af:ac:
                    c3:19:9b:80:97:ee:0e:47:42:93:9e:02:d5:8c:b0:
                    fc:8f:27:62:ac:cb:e5:84:f9:14:f5:f1:08:4f:32:
                    d4:9d:6a:c9:14:8b:f5:05:7e:ab:ce:27:c1:63:0e:
                    0f:3e:4c:0a:2e:70:6c:4e:18:ac:de:f9:1e:d6:42:
                    9e:59:8b:f9:52:fd:7a:b5:49:48:14:a1:2c:28:87:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:B5:F2:2F:54:66:1B:AD:77:1B:D1:16:50:13:A3:DA:70:FD:61
            X509v3 Authority Key Identifier:
                keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:20:62:67:46:ab:94:ba:41:91:73:12:7d:d4:81:a0:52:a3:
         34:de:65:55:93:c6:95:c5:58:16:dc:34:10:27:32:94:6b:25:
         1b:7d:c1:64:7a:6f:fe:20:15:3a:43:79:90:ef:98:0a:b5:c7:
         7c:5a:2e:95:2c:90:9c:a3:65:b7:6a:36:12:a5:93:72:80:47:
         a4:8a:5c:da:87:79:a9:88:44:8b:11:28:5c:e7:21:5b:32:a7:
         3f:c7:81:e6:2d:34:df:0b:85:df:6c:85:17:3c:39:cd:ac:cc:
         c5:1a:19:2a:b7:0a:22:2b:ec:2b:94:37:ea:de:16:eb:dc:4a:
         a6:70:0e:fc:e3:20:7c:c1:51:e6:d9:b9:2e:d1:3b:86:83:c0:
         5e:62:a5:36:6a:fe:11:9e:40:b5:0e:5f:a4:b7:db:ff:9b:25:
         4b:1c:d5:cd:25:11:0d:cf:8a:8f:74:b0:81:31:e7:86:40:75:
         6d:e3:7d:92:66:a7:d8:5e:0d:3f:13:0b:3d:7d:1a:f5:58:cf:
         8a:c5:72:ce:43:08:28:c4:1a:ff:9b:d7:02:30:33:84:64:be:
         37:ff:a5:94:2e:8c:71:04:b6:a8:43:98:60:aa:00:53:c4:e5:
         1d:ec:77:a2:c5:ed:8c:98:01:a8:e8:aa:44:e4:80:27:0e:8d:
         65:57:b8:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaI7lS3YuyTB3UshM9XDFWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTY5MDg1ZGJmYWVlNWEyYjExZjVjYzg3ZjU5ZDc0MTg3
OGJkMWUwHhcNMjUwNDMwMjMwMDQyWhcNMjUwNTAxMjMwMDQyWjAzMTEwLwYDVQQD
EyhlNDE3YjVmMjJmNTQ2NjFiYWQ3NzFiZDExNjUwMTNhM2RhNzBmZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25GSSQBreNhdGxI1hHu5OgA/6A3t
mYQIvOnPSHEjl8VKsIyjakQT8iBNvEb2Kj+7bynjCUpAW81PyWrDAFlGrhp1yFLY
itnQ2KuiKaiT1L/Zlr7gwpDyz4BcmZQmwwWcIu0wsb9B8xLbyx6Czm7R6qpWlEi1
zRTp6OKemTwVEBgeHhFYV4lUoN4rNFrrroR0Js0MyjUHOUNZodrz/nDYYYTC2O98
qFdrUs6Wjp6N5YYtr6zDGZuAl+4OR0KTngLVjLD8jydirMvlhPkU9fEITzLUnWrJ
FIv1BX6rzifBYw4PPkwKLnBsThis3vke1kKeWYv5Uv16tUlIFKEsKIeWYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQXtfIvVGYbrXcb0RZQE6PacP1hMB8GA1UdIwQY
MBaAFAGWkIXb+u5aKxH1zIf1nXQYeL0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzIt
NjY3ZDk3NGY4YjE0LzEvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzItNjY3ZDk3NGY4YjE0
LzEvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyBiZ0ar
lLpBkXMSfdSBoFKjNN5lVZPGlcVYFtw0ECcylGslG33BZHpv/iAVOkN5kO+YCrXH
fFoulSyQnKNlt2o2EqWTcoBHpIpc2od5qYhEixEoXOchWzKnP8eB5i003wuF32yF
Fzw5zazMxRoZKrcKIivsK5Q36t4W69xKpnAO/OMgfMFR5tm5LtE7hoPAXmKlNmr+
EZ5AtQ5fpLfb/5slSxzVzSURDc+Kj3SwgTHnhkB1beN9kman2F4NPxMLPX0a9VjP
isVyzkMIKMQa/5vXAjAzhGS+N/+llC6McQS2qEOYYKoAU8TlHex3osXtjJgBqOiq
ROSAJw6NZVe4Ng==
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:57 2025 by rpki-client