Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File:                     xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier:          o+F3zUzi52Cmn99pMvWtcQJL1WVF9pj0FKdy7iixK7M=
Subject key identifier:   57:49:1A:A3:43:E3:BF:6F:64:2D:36:13:60:B0:4D:92:A7:BF:7E:50
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer:       /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial:       0196A98BA6902B531F27AB0BF7D785B71499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number:          1529
Signing time:             Wed 07 May 2025 07:00:23 +0000
Manifest this update:     Wed 07 May 2025 07:00:23 +0000
Manifest next update:     Thu 08 May 2025 07:00:23 +0000
Files and hashes:         1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
                          2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: ckecW00JPcTeN9kQ8i+qwGm+O86/sS9s7E+fDZ7+Nlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:8b:a6:90:2b:53:1f:27:ab:0b:f7:d7:85:b7:14:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
        Validity
            Not Before: May  7 07:00:23 2025 GMT
            Not After : May  8 07:00:23 2025 GMT
        Subject: CN=57491aa343e3bf6f642d361360b04d92a7bf7e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:8f:43:04:60:41:01:d8:7d:e2:06:62:b7:
                    b8:b6:f5:c1:f4:28:b3:1a:79:c2:43:f9:f6:fc:7e:
                    a9:e4:07:5a:aa:20:fe:4c:1b:70:4c:10:59:ce:8f:
                    11:e9:f7:20:83:8b:12:91:df:1c:0c:75:f7:0e:31:
                    f6:a4:d5:0a:59:49:b7:7b:5b:cb:04:cd:bc:25:31:
                    0b:fe:ef:83:ca:0b:f4:11:e8:40:86:9c:cb:fb:1b:
                    bf:85:52:5d:b9:51:0d:a7:7a:40:52:5e:3d:6a:f8:
                    bd:22:66:e5:35:c8:36:cb:21:bf:82:e3:48:fa:ea:
                    9a:50:5d:6b:3f:fa:60:2c:88:8c:72:66:7d:07:d2:
                    19:27:28:17:e6:fc:d3:4d:dd:5d:96:fb:ff:6d:f1:
                    e9:e4:5c:29:ae:78:b1:70:84:58:0e:27:50:74:ff:
                    09:22:76:3d:f2:48:b7:a0:58:2e:4d:37:5c:68:2b:
                    fe:f8:34:7a:3f:bc:86:f2:93:4d:71:8f:45:dd:74:
                    11:d8:c3:a7:1c:e4:56:6a:f5:a0:02:62:74:b2:06:
                    e8:0f:3b:45:62:06:bd:1b:ec:93:89:82:46:80:25:
                    59:0a:ce:e2:aa:05:cb:8e:cf:72:12:d8:5d:b2:57:
                    12:b3:f9:0c:fc:0f:58:11:b8:48:d0:b3:55:80:dc:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:49:1A:A3:43:E3:BF:6F:64:2D:36:13:60:B0:4D:92:A7:BF:7E:50
            X509v3 Authority Key Identifier:
                keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:1d:8f:3a:f4:d1:fd:af:7a:29:d5:61:d1:34:bc:05:3f:
         86:e5:f7:89:75:ec:0b:89:57:0b:34:9e:a1:0c:25:64:2d:03:
         d0:f7:15:cc:df:f8:d6:a5:8b:63:0a:88:97:45:b2:47:5f:63:
         44:a6:87:7f:88:99:18:dd:80:c1:ce:ed:fb:29:a1:fb:83:72:
         35:b3:1b:46:28:ee:6a:a7:f8:68:d8:fb:47:2c:46:f3:20:57:
         da:25:00:5c:6c:87:85:17:03:04:26:b2:bf:63:1d:fe:1a:87:
         26:2a:39:3d:b8:31:a1:9d:e7:b0:3b:25:66:60:30:9d:af:c5:
         24:ec:b9:94:f2:a4:eb:5e:a0:c9:a3:71:48:3b:c1:20:50:27:
         20:29:8c:7b:c0:0b:8b:42:ff:9d:e7:39:ef:55:bc:ea:2c:8c:
         ee:ea:52:0c:c3:bd:a0:06:64:51:c0:b8:48:1e:0d:fb:c8:97:
         90:be:60:3d:f4:f1:bd:b0:d8:cd:d6:c1:e7:8b:76:b3:35:b5:
         db:f6:89:ea:bc:87:5a:67:bb:09:4d:bc:f7:bd:3e:e9:19:75:
         6b:4b:bc:79:cb:67:06:31:9e:26:ff:41:33:0a:63:84:da:57:
         a5:a6:67:2d:65:f0:93:62:7b:81:19:f2:da:d6:d8:0f:c4:9a:
         05:f3:5f:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapi6aQK1MfJ6sL99eFtxSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTA4NTAwNWQwZTQ0OWQzYmFmYTMxYzVjYjQyOWZmODlk
MmM0YjcwHhcNMjUwNTA3MDcwMDIzWhcNMjUwNTA4MDcwMDIzWjAzMTEwLwYDVQQD
Eyg1NzQ5MWFhMzQzZTNiZjZmNjQyZDM2MTM2MGIwNGQ5MmE3YmY3ZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSOPQwRgQQHYfeIGYre4tvXB9Ciz
GnnCQ/n2/H6p5AdaqiD+TBtwTBBZzo8R6fcgg4sSkd8cDHX3DjH2pNUKWUm3e1vL
BM28JTEL/u+Dygv0EehAhpzL+xu/hVJduVENp3pAUl49avi9ImblNcg2yyG/guNI
+uqaUF1rP/pgLIiMcmZ9B9IZJygX5vzTTd1dlvv/bfHp5FwprnixcIRYDidQdP8J
InY98ki3oFguTTdcaCv++DR6P7yG8pNNcY9F3XQR2MOnHORWavWgAmJ0sgboDztF
Yga9G+yTiYJGgCVZCs7iqgXLjs9yEthdslcSs/kM/A9YEbhI0LNVgNxH1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdJGqND479vZC02E2CwTZKnv35QMB8GA1UdIwQY
MBaAFMVQhQBdDkSdO6+jHFy0Kf+J0sS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMt
MjBhY2MzOGJjOGZmLzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMtMjBhY2MzOGJjOGZm
LzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7sdjzr0
0f2veinVYdE0vAU/huX3iXXsC4lXCzSeoQwlZC0D0PcVzN/41qWLYwqIl0WyR19j
RKaHf4iZGN2Awc7t+ymh+4NyNbMbRijuaqf4aNj7RyxG8yBX2iUAXGyHhRcDBCay
v2Md/hqHJio5PbgxoZ3nsDslZmAwna/FJOy5lPKk616gyaNxSDvBIFAnICmMe8AL
i0L/nec571W86iyM7upSDMO9oAZkUcC4SB4N+8iXkL5gPfTxvbDYzdbB54t2szW1
2/aJ6ryHWme7CU28970+6Rl1a0u8ectnBjGeJv9BMwpjhNpXpaZnLWXwk2J7gRny
2tbYD8SaBfNfHQ==
-----END CERTIFICATE-----
Generated at Wed May 7 11:58:30 2025 by rpki-client