Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File:                     yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier:          lbMyKlVBtCWxUTkwI2MBUsAn1R7s1m+o5kiCFbCWIqE=
Subject key identifier:   70:AD:0A:FF:8B:68:07:67:C7:91:F5:8F:3C:2E:E0:C9:98:BF:5C:EE
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer:       /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial:       01967530333BF0B669F573AD7651AA2E4B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number:          0362
Signing time:             Sun 27 Apr 2025 03:00:15 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:15 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:15 +0000
Files and hashes:         1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
                          2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: ZMeGccaGK/Bvff0MUqV+qWWHURK6BIxGtWERgeGbbJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:33:3b:f0:b6:69:f5:73:ad:76:51:aa:2e:4b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
        Validity
            Not Before: Apr 27 03:00:15 2025 GMT
            Not After : Apr 28 03:00:15 2025 GMT
        Subject: CN=70ad0aff8b680767c791f58f3c2ee0c998bf5cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:8a:c2:be:c2:ac:1a:07:2c:d9:42:a0:44:
                    8a:58:4b:2f:ff:4f:61:74:92:b3:b3:bf:b2:23:d5:
                    25:90:32:d3:63:71:20:de:95:b4:f8:a8:c3:34:02:
                    ae:b6:e1:a2:9c:a5:3a:3e:4c:9c:86:de:0d:75:a9:
                    9d:cc:cf:70:d8:dd:7c:db:df:69:9d:a0:9c:7b:27:
                    59:fc:94:9c:32:2e:e4:a9:7a:d6:28:b2:5c:f9:fa:
                    04:56:4e:9a:db:89:be:a7:a0:57:75:d6:8b:25:a4:
                    16:b3:0d:0f:4e:d8:48:80:88:b7:db:2c:75:e0:50:
                    84:6b:de:ee:c7:68:9a:51:d8:9f:8c:13:c8:53:88:
                    45:96:b3:cd:37:85:1e:d5:6d:f2:49:7e:8d:75:8f:
                    00:95:d0:1b:c7:94:c4:11:79:3c:f3:6b:81:f7:27:
                    d3:5c:58:09:c1:46:c4:03:b0:1e:fb:fa:ae:ec:75:
                    5c:13:a0:aa:d5:8d:c4:75:09:fd:58:a3:d7:3b:61:
                    d0:e5:22:76:e6:51:17:0f:13:f1:e4:68:28:31:43:
                    35:3e:e5:57:5c:ab:c5:42:b8:0e:68:91:3f:80:a3:
                    1c:62:91:fe:32:7d:8a:bd:98:ba:91:cf:5c:5b:67:
                    3a:6f:4f:86:e0:4e:8a:28:1e:09:ed:27:f1:e5:82:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:0A:FF:8B:68:07:67:C7:91:F5:8F:3C:2E:E0:C9:98:BF:5C:EE
            X509v3 Authority Key Identifier:
                keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:56:36:58:69:61:cc:25:ee:06:e5:90:e8:1f:c1:47:ce:b7:
         0c:d7:7c:c4:c4:3c:cc:16:4e:2f:33:f0:8c:63:68:70:a1:fa:
         01:1f:e5:54:d1:e8:17:91:f7:fc:5f:bc:d9:d7:7d:cb:e8:81:
         59:c9:90:36:5c:32:29:e0:90:52:6f:a4:1f:60:e1:d7:20:8c:
         99:39:cb:f5:c9:eb:02:36:d5:39:50:7a:09:7e:df:db:10:b6:
         92:3f:07:51:c8:5f:84:8f:55:0f:cb:17:75:df:79:f3:41:f9:
         e9:39:02:7d:df:3c:07:d1:08:a3:7f:0d:e1:b8:af:20:f9:79:
         e2:67:22:af:fc:db:f3:90:ca:93:73:c4:4a:d5:da:4d:4f:20:
         c5:13:f3:bf:19:05:ae:9a:bd:4a:57:97:64:7a:80:d5:d2:89:
         0c:b2:57:9e:34:4a:04:96:84:86:9a:cb:09:c5:9d:39:89:64:
         27:db:bd:fc:29:c4:67:ca:e4:42:bc:a7:cc:bf:c8:2e:c5:2a:
         eb:01:5e:9f:d6:1c:0d:5a:87:18:82:a9:b7:98:51:d5:28:32:
         c1:c7:c7:22:8c:a6:1f:b2:8c:35:40:9b:8d:35:03:f8:70:65:
         92:93:fe:86:58:0e:0a:c4:40:46:e6:a6:32:f2:b4:a0:6f:41:
         eb:70:c5:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MDM78LZp9XOtdlGqLksDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5
OTYzNzkwHhcNMjUwNDI3MDMwMDE1WhcNMjUwNDI4MDMwMDE1WjAzMTEwLwYDVQQD
Eyg3MGFkMGFmZjhiNjgwNzY3Yzc5MWY1OGYzYzJlZTBjOTk4YmY1Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZWKwr7CrBoHLNlCoESKWEsv/09h
dJKzs7+yI9UlkDLTY3Eg3pW0+KjDNAKutuGinKU6Pkycht4NdamdzM9w2N18299p
naCceydZ/JScMi7kqXrWKLJc+foEVk6a24m+p6BXddaLJaQWsw0PTthIgIi32yx1
4FCEa97ux2iaUdifjBPIU4hFlrPNN4Ue1W3ySX6NdY8AldAbx5TEEXk882uB9yfT
XFgJwUbEA7Ae+/qu7HVcE6Cq1Y3EdQn9WKPXO2HQ5SJ25lEXDxPx5GgoMUM1PuVX
XKvFQrgOaJE/gKMcYpH+Mn2KvZi6kc9cW2c6b0+G4E6KKB4J7Sfx5YIMnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCtCv+LaAdnx5H1jzwu4MmYv1zuMB8GA1UdIwQY
MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt
MzFhNGRhNjFkNTc2LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2
LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlY2WGlh
zCXuBuWQ6B/BR863DNd8xMQ8zBZOLzPwjGNocKH6AR/lVNHoF5H3/F+82dd9y+iB
WcmQNlwyKeCQUm+kH2Dh1yCMmTnL9cnrAjbVOVB6CX7f2xC2kj8HUchfhI9VD8sX
dd9580H56TkCfd88B9EIo38N4bivIPl54mcir/zb85DKk3PEStXaTU8gxRPzvxkF
rpq9SleXZHqA1dKJDLJXnjRKBJaEhprLCcWdOYlkJ9u9/CnEZ8rkQrynzL/ILsUq
6wFen9YcDVqHGIKpt5hR1SgywcfHIoymH7KMNUCbjTUD+HBlkpP+hlgOCsRARuam
MvK0oG9B63DFlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:26 2025 by rpki-client