Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          NdLWPqonvl6AQ5pKjb8tnOBH3QhSHhlrMiG9Kj9LqZM=
Subject key identifier:   D0:2E:96:19:F8:CB:3C:1D:EF:A9:D5:BF:76:24:91:8B:38:EC:F4:3F
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       01964AB3D729877DD9F3852513461977A907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          14F7
Signing time:             Fri 18 Apr 2025 21:00:22 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:22 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:22 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: +aoCy0LfuyFN/PhONDxroP+tHmjdvm6K8SGhoWaAlws=)
                          2: gsCygs_SprevwXUwS8ZnM-EYuKU.roa (hash: l1XeBh5SOrL7OGe08dB0VGh4WiJBpNY8AdAQ14ebdBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b3:d7:29:87:7d:d9:f3:85:25:13:46:19:77:a9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Apr 18 21:00:22 2025 GMT
            Not After : Apr 19 21:00:22 2025 GMT
        Subject: CN=d02e9619f8cb3c1defa9d5bf7624918b38ecf43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:3e:5d:00:fa:02:82:53:38:6c:3f:18:ff:
                    3f:ad:da:45:b5:01:13:6a:d3:25:da:be:d8:4a:dd:
                    6f:51:ed:06:d8:a2:f4:23:1b:c6:7e:6f:58:8a:6f:
                    f8:39:43:30:26:cc:02:7c:06:70:72:eb:2d:08:97:
                    c4:94:e6:51:e3:d7:9c:0d:6e:7f:bb:21:37:69:ac:
                    f7:3b:f7:df:6e:b0:b4:2d:92:18:b7:47:cd:41:7b:
                    bd:05:63:97:d7:95:a3:ab:f5:2c:50:f7:8b:03:7a:
                    2d:a7:6a:4f:bd:51:51:4c:29:e7:44:3f:f0:a9:3c:
                    f7:e3:43:c7:9e:f3:b1:84:b5:bd:3c:f2:cf:be:20:
                    85:8f:73:6f:e7:48:5e:59:74:b0:c4:ef:39:95:1f:
                    96:43:6d:07:0e:42:91:fd:47:7b:d0:d9:fe:e3:43:
                    8a:5d:ab:af:0f:e2:42:3f:ba:56:06:4e:84:73:39:
                    10:19:58:c8:16:a9:ee:8f:f4:9b:f2:e5:38:23:0e:
                    c0:62:5d:af:c0:92:04:ec:dc:69:be:7a:99:4c:2b:
                    11:ca:28:53:f2:db:2d:2d:d0:ab:ac:40:9f:e6:d0:
                    5a:54:8f:f4:59:0a:64:32:7f:b8:99:90:98:7c:48:
                    99:23:fb:96:af:98:92:6c:44:bb:7b:f9:4e:b4:f4:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:96:19:F8:CB:3C:1D:EF:A9:D5:BF:76:24:91:8B:38:EC:F4:3F
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:ef:e8:88:d5:86:03:4c:3a:d1:a6:8b:ed:f1:94:f9:d3:
         60:a6:13:da:5f:2a:8a:ab:c1:01:9d:9d:60:3d:d7:2b:b1:46:
         91:b4:fd:0d:b0:19:a1:b7:87:6b:d4:51:ac:05:f5:9d:40:c4:
         55:44:fe:a9:80:ab:a2:43:71:1a:11:63:49:3d:52:d6:6b:02:
         3b:96:f6:2a:d3:66:9f:fb:f6:56:69:c3:40:f1:91:1d:8e:cd:
         72:1b:b6:bc:f0:99:72:68:e4:ad:ff:34:de:79:82:c3:6c:69:
         41:c5:e5:f3:f5:9e:c5:29:c0:8e:c6:a9:f8:92:0e:66:cc:cf:
         05:fc:22:cd:0b:a2:8e:e6:30:96:03:07:93:16:07:8e:32:65:
         99:bb:c4:09:f1:91:b3:fe:c2:5f:10:9a:58:71:75:83:c5:ba:
         32:3d:74:ba:5f:eb:8e:72:d4:f7:b9:a6:66:b9:cb:75:26:f6:
         e1:e3:9b:73:e9:9f:d3:bf:96:99:64:0a:7c:1f:52:5e:25:67:
         b5:e5:38:7a:6d:51:a6:da:1a:48:82:d6:ec:3d:78:0f:69:02:
         c8:89:aa:b1:b3:d7:f8:b7:41:a1:b6:3e:71:0e:17:dd:94:ae:
         82:73:69:23:4d:f5:00:d5:b9:01:96:9b:51:cd:6e:85:90:4d:
         42:78:0d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKs9cph33Z84UlE0YZd6kHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm
MWNjZTEwHhcNMjUwNDE4MjEwMDIyWhcNMjUwNDE5MjEwMDIyWjAzMTEwLwYDVQQD
EyhkMDJlOTYxOWY4Y2IzYzFkZWZhOWQ1YmY3NjI0OTE4YjM4ZWNmNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqac+XQD6AoJTOGw/GP8/rdpFtQET
atMl2r7YSt1vUe0G2KL0IxvGfm9Yim/4OUMwJswCfAZwcustCJfElOZR49ecDW5/
uyE3aaz3O/ffbrC0LZIYt0fNQXu9BWOX15Wjq/UsUPeLA3otp2pPvVFRTCnnRD/w
qTz340PHnvOxhLW9PPLPviCFj3Nv50heWXSwxO85lR+WQ20HDkKR/Ud70Nn+40OK
XauvD+JCP7pWBk6EczkQGVjIFqnuj/Sb8uU4Iw7AYl2vwJIE7NxpvnqZTCsRyihT
8tstLdCrrECf5tBaVI/0WQpkMn+4mZCYfEiZI/uWr5iSbES7e/lOtPTo6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAulhn4yzwd76nVv3YkkYs47PQ/MB8GA1UdIwQY
MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt
NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3
LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO7v6IjV
hgNMOtGmi+3xlPnTYKYT2l8qiqvBAZ2dYD3XK7FGkbT9DbAZobeHa9RRrAX1nUDE
VUT+qYCrokNxGhFjST1S1msCO5b2KtNmn/v2VmnDQPGRHY7Nchu2vPCZcmjkrf80
3nmCw2xpQcXl8/WexSnAjsap+JIOZszPBfwizQuijuYwlgMHkxYHjjJlmbvECfGR
s/7CXxCaWHF1g8W6Mj10ul/rjnLU97mmZrnLdSb24eObc+mf07+WmWQKfB9SXiVn
teU4em1RptoaSILW7D14D2kCyImqsbPX+LdBobY+cQ4X3ZSugnNpI031ANW5AZab
Uc1uhZBNQngN6g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:33 2025 by rpki-client