Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          iGBGzGG8vbNxgIeyhBGvFCNxitC2br95xAPMefixZF4=
Subject key identifier:   1C:BE:CC:C1:EF:46:63:C7:CF:05:50:A0:F2:1E:65:57:75:1B:0E:9C
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       01968C25F33CE073E63F623CA4C3B15DCCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0B40
Signing time:             Thu 01 May 2025 14:00:19 +0000
Manifest this update:     Thu 01 May 2025 14:00:19 +0000
Manifest next update:     Fri 02 May 2025 14:00:19 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: 71YlU8SH7tcRp4Rd6JbyxcWmiIbbJS93yJQ4bi/XWhE=)
                          2: CCavKhP7AEj7Vk_SGWe1jvcCRyg.roa (hash: ErCh+iOQog12EmBkEQOKm5CnYVqmDx85/Bq5syDjRtk=)
                          3: _UE4NiO0pfWfFFAbb7iwrwRdv6s.roa (hash: Nt6mUmB/b8Tz/UtmdUFBFCY+JhXJPjG/PVld3xk2bu0=)
                          4: hNzhsJdSXiT8XXk4l8WcnUMry00.roa (hash: y9TrG3MRhc+YaHxz1FlPh4FWDR2QP4R98mul7cPcOWM=)
                          5: sJD4QxX177UEmI36HO3Czbd6lZo.roa (hash: eB1LP6A5y8Zxb2lEo5Jx2JKKRWjFRnxR3igeTvfMlBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:25:f3:3c:e0:73:e6:3f:62:3c:a4:c3:b1:5d:cc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: May  1 14:00:19 2025 GMT
            Not After : May  2 14:00:19 2025 GMT
        Subject: CN=1cbeccc1ef4663c7cf0550a0f21e6557751b0e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:de:20:4b:c5:f3:d4:72:ea:20:1a:ee:b7:
                    64:e5:e7:c1:3c:5d:86:21:20:b2:af:7d:d1:db:b8:
                    0d:cd:c4:7a:91:fe:d7:d0:34:0b:53:ec:c2:c0:f2:
                    62:7b:4a:70:01:85:68:2b:d5:a9:b4:87:91:cb:4b:
                    12:3f:f0:25:e8:fc:3e:7d:e6:9c:39:96:74:7a:7f:
                    12:b0:4b:2e:a9:3a:d3:2f:eb:1c:8d:d4:01:7a:28:
                    ef:f0:0f:33:a1:ca:bd:04:f6:1f:1b:63:11:33:af:
                    34:c5:2d:74:6d:5e:1b:1e:52:01:7f:d5:78:2d:fb:
                    bc:ab:4a:e4:27:36:7e:cf:35:f1:dc:ef:4b:6d:f5:
                    04:02:85:41:b8:64:ba:3f:c4:33:b9:75:f5:71:5d:
                    a9:63:b7:4f:92:75:20:9f:e3:d7:b1:db:b5:d8:25:
                    0d:17:6a:da:f8:19:71:75:dc:60:e7:93:01:80:1d:
                    7f:db:4f:0a:14:d5:19:6a:57:60:d1:6e:b4:ae:cd:
                    39:88:74:eb:d6:65:ab:9c:cd:7c:9f:9d:4f:75:d4:
                    15:ba:11:1e:9b:3c:de:75:15:6a:bb:c2:9f:bc:24:
                    d9:33:20:e7:e2:1d:fb:17:86:56:83:c1:40:5b:39:
                    77:0b:a1:eb:da:f1:0d:f8:c0:e9:a5:cb:a6:46:be:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BE:CC:C1:EF:46:63:C7:CF:05:50:A0:F2:1E:65:57:75:1B:0E:9C
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:49:65:24:46:94:b1:c9:fe:4f:4e:54:3c:16:46:ce:b5:de:
         2d:8a:ea:cf:10:41:98:d5:bc:39:19:30:60:02:4a:95:af:16:
         5c:ce:cc:a0:e4:59:eb:83:13:b9:6e:d9:67:a0:ef:5b:92:2d:
         28:9f:9e:6c:3d:f6:87:4d:1a:fb:27:26:5d:10:8a:f6:b2:2f:
         67:e4:16:59:7d:14:1e:94:f8:5b:f6:ad:8e:ee:7d:ff:bf:07:
         60:7f:17:07:2e:37:b7:0c:9b:a6:1b:f4:fb:62:e1:40:a6:f9:
         26:c9:02:10:6e:62:8c:05:73:b6:99:17:47:4f:d7:ea:21:73:
         9b:d1:fd:27:70:df:ec:12:9b:6d:4c:31:b6:1b:96:fb:57:fd:
         88:ee:a5:6b:36:df:a3:de:8d:37:fe:0d:97:ec:ae:f4:1b:bd:
         d7:52:b4:a4:1d:ea:1c:92:01:1a:9e:13:e3:8c:f8:8d:07:50:
         43:10:8c:a1:d3:88:1f:55:6c:1b:1e:7e:05:71:0c:d2:ed:86:
         7a:1f:39:1e:70:9c:19:25:3e:a8:4f:2a:d8:6b:30:53:e5:ad:
         e1:ba:7a:51:7f:30:a2:d6:dd:28:3d:52:3d:5f:b5:db:c3:11:
         9c:b5:b2:3d:ea:59:0a:98:46:a9:e0:dd:d6:03:22:6d:91:a8:
         8e:dd:2e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMJfM84HPmP2I8pMOxXczBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWFhOTI4NTBlYmZlNjQ4YWQzZDg5YWRkOGU3MzZlYzM2
NzVhMTEwHhcNMjUwNTAxMTQwMDE5WhcNMjUwNTAyMTQwMDE5WjAzMTEwLwYDVQQD
EygxY2JlY2NjMWVmNDY2M2M3Y2YwNTUwYTBmMjFlNjU1Nzc1MWIwZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCfeIEvF89Ry6iAa7rdk5efBPF2G
ISCyr33R27gNzcR6kf7X0DQLU+zCwPJie0pwAYVoK9WptIeRy0sSP/Al6Pw+feac
OZZ0en8SsEsuqTrTL+scjdQBeijv8A8zocq9BPYfG2MRM680xS10bV4bHlIBf9V4
Lfu8q0rkJzZ+zzXx3O9LbfUEAoVBuGS6P8QzuXX1cV2pY7dPknUgn+PXsdu12CUN
F2ra+Blxddxg55MBgB1/208KFNUZaldg0W60rs05iHTr1mWrnM18n51PddQVuhEe
mzzedRVqu8KfvCTZMyDn4h37F4ZWg8FAWzl3C6Hr2vEN+MDppcumRr7dmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy+zMHvRmPHzwVQoPIeZVd1Gw6cMB8GA1UdIwQY
MBaAFOEaqShQ6/5kitPYmt2Oc27DZ1oRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEt
MGY4OGQxNmUxYWZlLzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEtMGY4OGQxNmUxYWZl
LzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUllJEaU
scn+T05UPBZGzrXeLYrqzxBBmNW8ORkwYAJKla8WXM7MoORZ64MTuW7ZZ6DvW5It
KJ+ebD32h00a+ycmXRCK9rIvZ+QWWX0UHpT4W/atju59/78HYH8XBy43twybphv0
+2LhQKb5JskCEG5ijAVztpkXR0/X6iFzm9H9J3Df7BKbbUwxthuW+1f9iO6lazbf
o96NN/4Nl+yu9Bu911K0pB3qHJIBGp4T44z4jQdQQxCModOIH1VsGx5+BXEM0u2G
eh85HnCcGSU+qE8q2GswU+Wt4bp6UX8wotbdKD1SPV+128MRnLWyPepZCphGqeDd
1gMibZGojt0uCQ==
-----END CERTIFICATE-----
Generated at Fri May 2 01:17:04 2025 by rpki-client