Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File:                     eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier:          hYStpcrFE5Hwokf5owIXRBpjW8jOFUrG8C4CboELBxc=
Subject key identifier:   78:04:5D:9C:54:A7:3F:6D:FC:31:A8:59:EB:4A:B2:28:DE:AA:92:15
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer:       /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial:       01968435B9B161FEDBB0EC358C641176FD9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number:          0704
Signing time:             Wed 30 Apr 2025 01:00:35 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:35 +0000
Manifest next update:     Thu 01 May 2025 01:00:35 +0000
Files and hashes:         1: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (hash: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=)
                          2: FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (hash: sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=)
                          3: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: 0iz17mWmrotmK/tU1/TgivAUR1sN4ha0WS4nWpYRTQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:b9:b1:61:fe:db:b0:ec:35:8c:64:11:76:fd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
        Validity
            Not Before: Apr 30 01:00:35 2025 GMT
            Not After : May  1 01:00:35 2025 GMT
        Subject: CN=78045d9c54a73f6dfc31a859eb4ab228deaa9215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:e4:e5:b0:76:b8:a1:6d:2b:98:63:b5:b0:
                    71:8e:66:20:27:d3:4d:43:b0:4e:94:83:cd:0e:b9:
                    bc:39:0f:0f:bc:d3:81:f9:f3:31:d5:28:20:43:97:
                    79:dd:e8:c2:7c:07:66:d9:91:cc:c2:bf:f5:f9:23:
                    38:71:4e:67:55:63:60:b5:43:fa:73:c9:05:b6:1f:
                    34:c4:40:d6:da:88:b3:f0:2d:35:a4:3c:c2:f2:f3:
                    48:de:5e:e4:f2:91:a7:cb:3f:7c:ac:3a:20:56:c6:
                    b9:08:f3:49:4f:4a:a9:71:88:32:b9:34:21:30:25:
                    18:ae:8e:80:b9:1c:56:e0:d6:8f:55:ac:81:6e:08:
                    a6:36:70:eb:4d:dc:16:be:3b:78:e4:5e:39:68:60:
                    4e:fd:c4:c8:b5:8d:7d:a8:b3:81:17:de:9e:7c:f0:
                    ba:a8:7e:28:ee:1d:f4:84:4e:a7:bc:f2:a0:e1:c4:
                    30:fa:6c:62:7b:7e:71:5a:d8:5b:53:87:a6:db:09:
                    07:7c:85:cf:73:9f:1a:ec:3a:48:8d:0b:89:c4:29:
                    71:ac:44:b5:30:4a:34:ed:6a:88:a5:06:c2:12:25:
                    89:43:5b:a7:a8:5d:5b:39:72:37:09:bb:e3:9d:b8:
                    77:37:c1:c8:09:13:45:67:ea:bc:3c:ac:d4:db:0c:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:04:5D:9C:54:A7:3F:6D:FC:31:A8:59:EB:4A:B2:28:DE:AA:92:15
            X509v3 Authority Key Identifier:
                keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ab:a1:b7:df:f8:fd:11:95:9b:b1:77:aa:18:dc:8a:eb:a8:
         0c:19:1e:ab:9a:ea:3c:15:f2:76:4f:62:da:cd:1a:14:a3:f4:
         1b:88:7d:a6:4c:95:57:53:2e:62:e7:26:ba:22:d8:41:09:11:
         5a:74:46:d2:91:2a:8b:00:41:91:37:41:91:5c:4d:e4:7c:6d:
         91:21:14:de:20:db:7e:10:ef:9b:83:b6:1a:93:02:df:35:43:
         00:64:6c:0a:2b:c0:e8:14:c0:b9:2b:d2:a8:ee:4a:bd:fd:c4:
         39:8f:8d:ab:9a:50:0c:50:88:43:62:64:b8:b9:79:54:0e:86:
         9d:50:41:7d:2e:ff:2e:32:28:02:6d:74:23:64:5a:64:af:d5:
         33:a6:f4:ed:0a:a5:1e:39:c0:79:1b:8f:59:04:50:b0:58:18:
         03:b6:42:55:ff:71:0b:5a:d5:7b:8a:d2:80:50:42:44:20:e9:
         0f:9d:47:cb:16:02:da:5b:19:c4:40:b0:9f:47:a8:d5:52:49:
         f9:a9:b5:49:0b:57:a8:c0:c0:d1:83:c8:64:86:06:6c:cc:35:
         99:71:da:29:b0:80:b0:3e:b3:e8:70:00:97:31:ff:f3:e8:04:
         99:07:1b:ed:5c:f9:3c:8e:fe:1e:7a:7a:c4:f8:6d:6c:9b:9e:
         09:0d:6d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENbmxYf7bsOw1jGQRdv2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njg4MTgyYjhmMjUzYzVjZjk0NjI5NDc4NmI3OTAxNDM1
ZmM4YzMwHhcNMjUwNDMwMDEwMDM1WhcNMjUwNTAxMDEwMDM1WjAzMTEwLwYDVQQD
Eyg3ODA0NWQ5YzU0YTczZjZkZmMzMWE4NTllYjRhYjIyOGRlYWE5MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hbk5bB2uKFtK5hjtbBxjmYgJ9NN
Q7BOlIPNDrm8OQ8PvNOB+fMx1SggQ5d53ejCfAdm2ZHMwr/1+SM4cU5nVWNgtUP6
c8kFth80xEDW2oiz8C01pDzC8vNI3l7k8pGnyz98rDogVsa5CPNJT0qpcYgyuTQh
MCUYro6AuRxW4NaPVayBbgimNnDrTdwWvjt45F45aGBO/cTItY19qLOBF96efPC6
qH4o7h30hE6nvPKg4cQw+mxie35xWthbU4em2wkHfIXPc58a7DpIjQuJxClxrES1
MEo07WqIpQbCEiWJQ1unqF1bOXI3Cbvjnbh3N8HICRNFZ+q8PKzU2wyInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgEXZxUpz9t/DGoWetKsijeqpIVMB8GA1UdIwQY
MBaAFHhogYK48lPFz5RilHhreQFDX8jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYt
Yzg2YzJmYzZjNjFiLzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYtYzg2YzJmYzZjNjFi
LzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuquht9/4
/RGVm7F3qhjciuuoDBkeq5rqPBXydk9i2s0aFKP0G4h9pkyVV1MuYucmuiLYQQkR
WnRG0pEqiwBBkTdBkVxN5HxtkSEU3iDbfhDvm4O2GpMC3zVDAGRsCivA6BTAuSvS
qO5Kvf3EOY+Nq5pQDFCIQ2JkuLl5VA6GnVBBfS7/LjIoAm10I2RaZK/VM6b07Qql
HjnAeRuPWQRQsFgYA7ZCVf9xC1rVe4rSgFBCRCDpD51HyxYC2lsZxECwn0eo1VJJ
+am1SQtXqMDA0YPIZIYGbMw1mXHaKbCAsD6z6HAAlzH/8+gEmQcb7Vz5PI7+Hnp6
xPhtbJueCQ1t+w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:18:21 2025 by rpki-client