Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File:                     ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier:          aGgVkKXDwcHpSABZSk6JpHt09L9pTGzj0Ygf45Q8GVU=
Subject key identifier:   66:0F:22:BF:08:2D:2A:8D:C5:92:59:2F:B4:0A:92:AF:95:F2:9A:2C
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer:       /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial:       0196556ECDFF0A641C70126762856AA1E0F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number:          0181
Signing time:             Sun 20 Apr 2025 23:00:47 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:47 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:47 +0000
Files and hashes:         1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: fNOBi8mT3fkyZcc6qLY0yWrTwVjAMHxrAhKoZ3kTOFA=)
                          2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:cd:ff:0a:64:1c:70:12:67:62:85:6a:a1:e0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
        Validity
            Not Before: Apr 20 23:00:47 2025 GMT
            Not After : Apr 21 23:00:47 2025 GMT
        Subject: CN=660f22bf082d2a8dc592592fb40a92af95f29a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:f4:66:24:42:2b:19:99:0b:8e:ed:40:dc:
                    32:ef:24:09:70:c1:be:99:e6:49:48:2e:6f:ec:ba:
                    99:30:d2:a7:f7:71:fb:b8:48:50:6a:d3:4f:d2:b6:
                    90:a8:b1:80:e7:ee:82:b5:52:25:f5:86:e2:26:f3:
                    67:88:5c:67:1c:2b:35:55:98:a8:49:49:bd:c1:1e:
                    a7:89:4c:2f:32:bb:a2:d2:18:df:9f:4b:39:30:8c:
                    01:32:6d:1f:52:01:44:c8:f2:84:b8:ed:c8:50:70:
                    3c:d6:fe:85:b8:e1:8e:72:35:3a:2d:29:3c:57:f4:
                    3d:34:6c:3d:f7:fa:c9:ee:7f:80:3b:f5:12:02:a1:
                    13:da:d4:61:4f:cf:15:85:66:b2:ed:63:c3:1e:4c:
                    ad:b5:3b:4b:b1:c8:b9:ec:a9:5c:19:10:1e:14:3a:
                    cb:c5:c9:4d:76:cd:2a:ed:20:48:5b:1d:9b:36:34:
                    58:99:20:81:0f:0b:fe:d8:22:70:08:14:d9:13:5b:
                    d3:99:10:5f:2b:8d:0c:43:0d:16:0b:88:92:8e:10:
                    bd:54:14:20:e0:65:fb:00:5c:b8:1c:55:52:c0:2f:
                    38:8a:15:65:f4:d4:c6:de:d7:b0:71:03:7d:c4:d5:
                    05:13:58:f6:0d:8c:b4:59:c1:68:1f:3d:fe:ba:01:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:22:BF:08:2D:2A:8D:C5:92:59:2F:B4:0A:92:AF:95:F2:9A:2C
            X509v3 Authority Key Identifier:
                keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:e8:ee:10:57:1b:ae:1f:43:99:2a:2b:cd:3a:e1:1b:15:
         eb:26:af:13:e5:b2:07:71:fe:72:1e:a7:fc:60:9b:dd:da:47:
         86:59:07:f0:98:0d:66:3a:9c:9d:7c:a0:a1:88:bb:cd:d3:ad:
         2d:20:26:17:b7:fd:e2:e9:b5:81:3a:3e:5d:b5:76:28:8a:03:
         d4:78:20:47:94:20:57:02:ee:59:a0:1e:f9:fe:83:73:db:8f:
         f6:e2:c8:0b:66:a2:c6:b6:03:c0:b9:b3:2a:de:49:aa:83:f4:
         e0:53:0d:2b:54:fd:90:8b:18:e7:4a:ed:fb:82:46:1e:b1:38:
         78:00:83:fe:0e:b1:51:12:10:6b:7c:71:dd:ea:3a:8c:76:9b:
         dd:c7:0b:e3:d9:0e:88:31:f0:f5:0c:0b:12:0d:12:89:2b:cc:
         0c:de:1b:6d:58:e9:96:0a:40:d8:22:9f:19:78:ab:0e:74:97:
         e8:6c:d4:a5:e6:d8:c0:50:7e:2d:45:b1:3c:a0:9e:b4:31:e6:
         42:00:80:3c:14:ad:82:8a:a5:56:83:ab:15:76:41:07:ec:94:
         a1:f5:6b:8b:ba:e3:61:9b:c5:97:bd:fa:33:a9:e7:c1:86:5c:
         78:e4:7a:3b:74:60:03:e3:bc:99:eb:e4:62:e9:f2:7a:41:67:
         0f:fa:00:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbs3/CmQccBJnYoVqoeD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjU4YWUwYzI2YzY1YTZhNjk2NmYzZjdlNjk4NjMzYjkx
NDM0MjYwHhcNMjUwNDIwMjMwMDQ3WhcNMjUwNDIxMjMwMDQ3WjAzMTEwLwYDVQQD
Eyg2NjBmMjJiZjA4MmQyYThkYzU5MjU5MmZiNDBhOTJhZjk1ZjI5YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV/0ZiRCKxmZC47tQNwy7yQJcMG+
meZJSC5v7LqZMNKn93H7uEhQatNP0raQqLGA5+6CtVIl9YbiJvNniFxnHCs1VZio
SUm9wR6niUwvMrui0hjfn0s5MIwBMm0fUgFEyPKEuO3IUHA81v6FuOGOcjU6LSk8
V/Q9NGw99/rJ7n+AO/USAqET2tRhT88VhWay7WPDHkyttTtLsci57KlcGRAeFDrL
xclNds0q7SBIWx2bNjRYmSCBDwv+2CJwCBTZE1vTmRBfK40MQw0WC4iSjhC9VBQg
4GX7AFy4HFVSwC84ihVl9NTG3tewcQN9xNUFE1j2DYy0WcFoHz3+ugEN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYPIr8ILSqNxZJZL7QKkq+V8posMB8GA1UdIwQY
MBaAFBAliuDCbGWmppZvP35phjO5FDQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYt
ZWY3ZThkNDQzNGYzLzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYtZWY3ZThkNDQzNGYz
LzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMHo7hBX
G64fQ5kqK8064RsV6yavE+WyB3H+ch6n/GCb3dpHhlkH8JgNZjqcnXygoYi7zdOt
LSAmF7f94um1gTo+XbV2KIoD1HggR5QgVwLuWaAe+f6Dc9uP9uLIC2aixrYDwLmz
Kt5JqoP04FMNK1T9kIsY50rt+4JGHrE4eACD/g6xURIQa3xx3eo6jHab3ccL49kO
iDHw9QwLEg0SiSvMDN4bbVjplgpA2CKfGXirDnSX6GzUpebYwFB+LUWxPKCetDHm
QgCAPBStgoqlVoOrFXZBB+yUofVri7rjYZvFl736M6nnwYZceOR6O3RgA+O8mevk
YunyekFnD/oAUw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:43 2025 by rpki-client