Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File:                     eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier:          /Zq16bkzXxaJrORsL4R9o8A5kYSdNRHZQbEeAEiDQG4=
Subject key identifier:   BE:0B:3A:36:4F:24:CD:69:AE:82:D4:2A:C1:FC:B4:FA:C3:9B:51:5A
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer:       /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial:       01968A384226173F1EF70EFE4077475ED537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number:          1518
Signing time:             Thu 01 May 2025 05:01:04 +0000
Manifest this update:     Thu 01 May 2025 05:01:04 +0000
Manifest next update:     Fri 02 May 2025 05:01:04 +0000
Files and hashes:         1: Ox2PlsCArfAxGifmEfuqjyRe0E4.roa (hash: P6BNeUEGLL42TOaGFO8umGbX15BxZNmI6g3Fgb2PRFA=)
                          2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: FzR+KvvKUTlu+nX5wiNmaKBORcxmsq5cnkqxoZSrQ2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:38:42:26:17:3f:1e:f7:0e:fe:40:77:47:5e:d5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
        Validity
            Not Before: May  1 05:01:04 2025 GMT
            Not After : May  2 05:01:04 2025 GMT
        Subject: CN=be0b3a364f24cd69ae82d42ac1fcb4fac39b515a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:39:1e:21:a9:c0:48:e8:37:7a:6f:a9:e7:
                    4b:c2:9b:13:e8:f4:6c:e7:e2:b3:89:5b:89:a8:7a:
                    2d:54:54:1a:5a:a5:14:70:e8:cb:73:47:99:c4:a8:
                    fe:59:fb:43:bd:5b:67:fd:a0:3b:0c:2b:9f:20:9b:
                    22:f2:9e:d5:f8:54:31:e4:30:46:c0:5e:5f:08:78:
                    db:49:66:17:1a:47:e2:15:17:fc:ff:50:37:f3:65:
                    26:8b:02:b1:d7:7b:89:19:ec:69:53:11:cc:05:88:
                    1c:81:da:51:d4:0c:cd:27:f9:d4:fc:ad:17:c9:b6:
                    61:e8:68:b4:e2:29:f8:5e:a5:60:0b:0e:78:25:7f:
                    1d:ce:fb:09:24:a1:8b:09:34:9d:23:b8:25:61:d0:
                    73:5e:df:cf:10:47:a9:04:bc:0c:4c:57:fd:69:00:
                    f4:52:97:50:7e:fb:61:fe:8d:ff:f6:cc:ab:33:f2:
                    e2:a3:20:6f:5d:b4:86:c4:12:01:ef:31:e1:45:40:
                    4d:4c:1f:e3:12:81:21:1c:d8:3c:27:47:2c:19:55:
                    85:ef:28:92:04:bd:76:c2:ad:2f:af:c3:2c:40:c5:
                    66:c7:81:2f:f4:8e:1d:43:ef:23:29:39:38:de:81:
                    77:53:16:ec:0a:70:f1:88:2b:ae:9b:88:cf:34:e6:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:3A:36:4F:24:CD:69:AE:82:D4:2A:C1:FC:B4:FA:C3:9B:51:5A
            X509v3 Authority Key Identifier:
                keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:46:5f:59:7f:71:c2:6a:0b:4c:e3:9b:b6:82:c1:7f:f1:
         a4:8e:03:72:d6:00:bf:12:ab:fd:d6:e7:00:04:1b:60:4d:6c:
         8e:3b:80:ac:4f:9b:18:ef:8b:c1:4d:e9:f0:6c:93:16:25:ee:
         00:09:6f:0e:64:24:06:54:5c:40:cc:8b:71:a1:71:cc:dd:6a:
         3e:3b:48:66:0a:9f:3e:3e:51:52:de:77:08:0c:7b:17:e8:e4:
         c3:80:9d:98:15:b1:fb:75:f6:f4:c8:29:83:2f:13:62:21:b8:
         bb:49:4e:aa:b6:fb:04:8f:29:7a:3c:7a:8e:5d:a5:9e:1a:52:
         ab:bb:f8:9b:9c:4e:c8:54:1b:9a:88:86:19:4f:94:7b:f1:e8:
         00:4b:2b:f9:6a:c9:c5:05:1a:64:d2:5e:7b:3f:42:50:15:04:
         2f:7a:9b:88:b1:35:ad:2d:e1:75:b1:ea:55:1a:72:fb:33:4c:
         bc:fa:fc:ed:dd:ee:18:2f:1d:27:e3:b0:38:74:78:8e:e4:7d:
         1d:af:f0:18:af:17:60:ac:03:8e:64:05:47:fb:81:01:27:20:
         37:03:af:1e:51:4f:71:94:e3:df:2e:e9:00:0c:57:99:2e:b7:
         b3:b7:6f:6c:f8:0e:41:1a:9f:ca:2e:2e:6f:71:a7:41:fd:3b:
         04:3f:f1:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKOEImFz8e9w7+QHdHXtU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzcxZTY1Y2Y3YTNkMmUyZmMyYjhjYzNkNDNkNDVkMmIz
NTBkZjMwHhcNMjUwNTAxMDUwMTA0WhcNMjUwNTAyMDUwMTA0WjAzMTEwLwYDVQQD
EyhiZTBiM2EzNjRmMjRjZDY5YWU4MmQ0MmFjMWZjYjRmYWMzOWI1MTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R85HiGpwEjoN3pvqedLwpsT6PRs
5+KziVuJqHotVFQaWqUUcOjLc0eZxKj+WftDvVtn/aA7DCufIJsi8p7V+FQx5DBG
wF5fCHjbSWYXGkfiFRf8/1A382UmiwKx13uJGexpUxHMBYgcgdpR1AzNJ/nU/K0X
ybZh6Gi04in4XqVgCw54JX8dzvsJJKGLCTSdI7glYdBzXt/PEEepBLwMTFf9aQD0
UpdQfvth/o3/9syrM/LioyBvXbSGxBIB7zHhRUBNTB/jEoEhHNg8J0csGVWF7yiS
BL12wq0vr8MsQMVmx4Ev9I4dQ+8jKTk43oF3UxbsCnDxiCuum4jPNObW7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4LOjZPJM1proLUKsH8tPrDm1FaMB8GA1UdIwQY
MBaAFHjHHmXPej0uL8K4zD1D1F0rNQ3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEt
ODc4ODExMjdmY2JmLzEvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEtODc4ODExMjdmY2Jm
LzEvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrJGX1l/
ccJqC0zjm7aCwX/xpI4DctYAvxKr/dbnAAQbYE1sjjuArE+bGO+LwU3p8GyTFiXu
AAlvDmQkBlRcQMyLcaFxzN1qPjtIZgqfPj5RUt53CAx7F+jkw4CdmBWx+3X29Mgp
gy8TYiG4u0lOqrb7BI8pejx6jl2lnhpSq7v4m5xOyFQbmoiGGU+Ue/HoAEsr+WrJ
xQUaZNJeez9CUBUEL3qbiLE1rS3hdbHqVRpy+zNMvPr87d3uGC8dJ+OwOHR4juR9
Ha/wGK8XYKwDjmQFR/uBAScgNwOvHlFPcZTj3y7pAAxXmS63s7dvbPgOQRqfyi4u
b3GnQf07BD/x7Q==
-----END CERTIFICATE-----
Generated at Thu May 1 14:59:48 2025 by rpki-client