Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File:                     iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier:          +QjfWBe63zYAogdRoZQdvtYrm+MGPE7ASQ+bPcvWr+w=
Subject key identifier:   46:E6:9F:FD:91:7E:54:18:CC:87:2D:5C:20:2C:73:65:AA:B3:92:B9
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer:       /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial:       01967FB423F1FCC7EDF0454AD974713917B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number:          0DDA
Signing time:             Tue 29 Apr 2025 04:00:34 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:34 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:34 +0000
Files and hashes:         1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=)
                          2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: 0s+ZSisLYhj2cjPWyFfm3mk2l/t/hCaBL52eTvsYiSA=)
                          3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=)
                          4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:23:f1:fc:c7:ed:f0:45:4a:d9:74:71:39:17:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
        Validity
            Not Before: Apr 29 04:00:34 2025 GMT
            Not After : Apr 30 04:00:34 2025 GMT
        Subject: CN=46e69ffd917e5418cc872d5c202c7365aab392b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:af:e4:4a:ef:2e:c4:a1:5c:79:a7:fe:b6:
                    ab:90:73:4f:21:1b:6b:03:97:8a:1a:05:8a:58:72:
                    dc:e1:65:5c:5b:2e:4e:dc:1c:32:2e:83:c9:9a:b1:
                    b3:7e:dd:13:0b:c6:6c:79:7c:6d:91:17:0e:6a:64:
                    ac:ef:1d:37:37:f6:f4:bb:83:f9:0d:80:0f:5e:e9:
                    fa:b9:35:8a:2f:cc:af:d9:38:62:e1:8f:90:df:28:
                    cb:12:2e:6c:ef:26:c6:6f:81:cd:33:7f:e7:26:b7:
                    ac:50:7e:25:68:94:39:0c:30:31:0a:6b:87:a6:81:
                    e3:f9:43:64:82:b6:02:77:87:5c:7f:9f:8e:20:e1:
                    e1:54:0b:62:5f:b2:2a:af:58:57:d4:cf:cb:b0:57:
                    12:87:f6:a1:c2:b7:35:68:84:67:d2:c0:e2:1c:a6:
                    87:89:0f:95:45:1d:35:f9:62:fc:87:09:cd:12:40:
                    47:b4:94:dc:62:4e:70:cd:00:5a:41:d8:b6:57:c3:
                    91:56:9e:5d:d2:f4:04:67:d0:ae:4a:18:65:ab:00:
                    68:28:69:63:49:35:c4:f7:c5:10:c7:56:05:04:41:
                    af:e6:7d:06:0e:ee:8f:3e:a0:5b:6e:27:6b:57:ef:
                    79:19:1d:05:7b:d8:8c:db:32:ea:63:58:f5:c5:94:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E6:9F:FD:91:7E:54:18:CC:87:2D:5C:20:2C:73:65:AA:B3:92:B9
            X509v3 Authority Key Identifier:
                keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:85:58:5b:27:ec:2d:10:06:6a:4e:79:59:0c:00:17:bc:7e:
         f1:19:30:6d:f5:2c:99:64:38:e4:ed:10:b2:7e:44:3c:aa:b5:
         3d:15:37:da:05:92:26:9b:2e:6e:fa:90:23:19:fe:70:0f:7e:
         d2:ee:87:b6:72:56:0a:34:73:b9:6a:7b:2a:78:e5:65:c5:e3:
         8a:b0:70:97:c7:c4:66:21:95:7c:de:9b:51:c3:ae:6a:2e:21:
         1e:10:77:fa:55:c0:8b:64:3a:dc:c9:9a:76:9e:36:58:54:ed:
         ee:71:7e:be:49:1b:fd:6a:f2:80:7d:0c:fb:50:06:e6:95:35:
         b7:b8:db:61:8d:75:a7:df:ca:11:66:76:83:a9:2a:fd:fd:38:
         37:a4:a6:ca:6f:26:64:8d:10:53:20:31:39:2f:a4:0e:42:a1:
         76:3f:fc:95:92:cc:76:e5:ad:82:f6:75:02:ef:e9:ba:15:18:
         6e:9e:7b:ee:fe:7a:67:96:79:c1:fa:16:dd:e4:29:1e:00:78:
         29:b0:a9:2b:a0:85:20:12:f0:c7:7e:77:80:73:80:28:7f:99:
         4a:f5:0d:23:18:32:03:4f:0e:fd:10:ab:dd:9e:72:39:e2:2b:
         19:46:94:8c:d2:57:6c:8b:bd:ac:d5:8c:59:69:6f:ec:1a:ee:
         26:bb:b2:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tCPx/Mft8EVK2XRxORe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4
ZTI0YTYwHhcNMjUwNDI5MDQwMDM0WhcNMjUwNDMwMDQwMDM0WjAzMTEwLwYDVQQD
Eyg0NmU2OWZmZDkxN2U1NDE4Y2M4NzJkNWMyMDJjNzM2NWFhYjM5MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B2v5ErvLsShXHmn/rarkHNPIRtr
A5eKGgWKWHLc4WVcWy5O3BwyLoPJmrGzft0TC8ZseXxtkRcOamSs7x03N/b0u4P5
DYAPXun6uTWKL8yv2Thi4Y+Q3yjLEi5s7ybGb4HNM3/nJresUH4laJQ5DDAxCmuH
poHj+UNkgrYCd4dcf5+OIOHhVAtiX7Iqr1hX1M/LsFcSh/ahwrc1aIRn0sDiHKaH
iQ+VRR01+WL8hwnNEkBHtJTcYk5wzQBaQdi2V8ORVp5d0vQEZ9CuShhlqwBoKGlj
STXE98UQx1YFBEGv5n0GDu6PPqBbbidrV+95GR0Fe9iM2zLqY1j1xZRskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbmn/2RflQYzIctXCAsc2Wqs5K5MB8GA1UdIwQY
MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt
N2EwYjE0NWNmNjJiLzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi
LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYVYWyfs
LRAGak55WQwAF7x+8RkwbfUsmWQ45O0Qsn5EPKq1PRU32gWSJpsubvqQIxn+cA9+
0u6HtnJWCjRzuWp7KnjlZcXjirBwl8fEZiGVfN6bUcOuai4hHhB3+lXAi2Q63Mma
dp42WFTt7nF+vkkb/WrygH0M+1AG5pU1t7jbYY11p9/KEWZ2g6kq/f04N6Smym8m
ZI0QUyAxOS+kDkKhdj/8lZLMduWtgvZ1Au/puhUYbp577v56Z5Z5wfoW3eQpHgB4
KbCpK6CFIBLwx353gHOAKH+ZSvUNIxgyA08O/RCr3Z5yOeIrGUaUjNJXbIu9rNWM
WWlv7BruJruyng==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:45:18 2025 by rpki-client