Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File:                     53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier:          MPvaE0P8K979yMtCYkUUWKcortVIcsprAtihk+aTk90=
Subject key identifier:   98:3F:84:D0:BB:92:F7:69:60:F3:7F:B5:55:05:77:FA:FC:67:99:58
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer:       /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial:       0196538044F58FA413951E53858E92525A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number:          0110
Signing time:             Sun 20 Apr 2025 14:00:37 +0000
Manifest this update:     Sun 20 Apr 2025 14:00:37 +0000
Manifest next update:     Mon 21 Apr 2025 14:00:37 +0000
Files and hashes:         1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: nkk/QlQ8//letTujHOAhw/Qnw8E1Dv+J2Ilnw1PdkQ4=)
                          2: MSnHBIOL0Bltj-Q0mkBqryaUsS4.roa (hash: R8xRgK2CEN6mE5gSyGtBAs14gnmUzJFq4i62UURLtRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:80:44:f5:8f:a4:13:95:1e:53:85:8e:92:52:5a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
        Validity
            Not Before: Apr 20 14:00:37 2025 GMT
            Not After : Apr 21 14:00:37 2025 GMT
        Subject: CN=983f84d0bb92f76960f37fb5550577fafc679958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:6b:0f:3d:88:7e:5a:c4:ef:6d:41:0b:c5:
                    a5:8b:e2:13:66:7c:5b:3c:0e:9f:5d:1c:4c:1f:62:
                    a7:9f:e0:0c:cc:cd:c5:e8:fe:9c:93:d5:8b:23:84:
                    a3:b3:94:76:20:b9:a2:15:39:3c:d7:9a:90:c9:3a:
                    3c:36:83:e1:79:b8:ca:c0:9c:d5:5f:ce:28:a8:f1:
                    db:91:83:0c:55:1a:91:3f:33:8f:13:f7:01:2e:2f:
                    eb:18:29:6c:92:55:85:35:fc:a6:c9:de:c3:58:7a:
                    c8:8d:b0:1b:8c:76:bd:52:6e:3c:b7:db:d9:d8:b9:
                    46:06:93:47:4d:54:66:f5:5c:5f:e0:5c:61:fc:a6:
                    68:55:04:8d:f5:80:8e:fd:13:bf:2c:05:84:9e:ed:
                    25:93:93:e8:83:f7:2c:19:0e:40:f3:e2:a0:f6:b5:
                    de:7d:10:71:74:ad:3f:08:9b:3e:e0:cd:9a:6b:91:
                    d2:e5:33:0c:8a:a4:ca:bf:4c:01:7a:0e:b9:63:42:
                    75:42:a6:c2:62:98:32:25:29:dd:9c:bb:2c:13:ca:
                    9b:ff:7e:c9:52:88:7b:34:98:eb:cf:bd:d2:2a:3f:
                    67:3f:f2:69:9e:d6:9a:3b:95:05:f5:55:a0:2f:55:
                    52:f5:6e:f4:b6:4c:63:a3:d6:03:b8:c8:12:a0:58:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3F:84:D0:BB:92:F7:69:60:F3:7F:B5:55:05:77:FA:FC:67:99:58
            X509v3 Authority Key Identifier:
                keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:27:37:c3:26:f4:36:39:02:d1:9c:a3:36:62:57:08:e1:75:
         15:86:e1:8c:ae:d5:8b:d2:70:94:66:f2:4b:51:16:91:af:29:
         a4:57:72:39:0a:60:e3:f4:8a:f9:73:fe:1c:27:c1:0f:d9:2a:
         9d:83:1d:6a:78:62:fa:f7:22:92:f0:d0:1f:c6:23:e0:18:57:
         fc:19:0b:93:64:ca:fb:29:15:e7:6b:84:de:23:41:18:09:6d:
         e1:e3:bd:80:a9:fe:ec:7f:c1:05:84:79:54:54:04:b3:46:0f:
         24:c1:fa:95:bd:8a:27:87:a5:19:fe:fa:d1:17:5c:3c:70:d9:
         2a:96:27:f0:2a:85:c0:01:2e:2f:1b:b2:54:7e:30:43:84:26:
         3e:ac:ea:fe:c2:ea:44:b0:0e:d8:7c:18:9a:09:e7:b4:68:cf:
         f9:1b:fd:5e:91:97:7e:32:74:93:c2:44:2f:8a:6f:ad:1b:c3:
         66:e9:fa:3d:6f:7b:7b:6d:dc:4c:de:78:76:ee:af:9b:c1:69:
         38:44:3b:e5:90:b3:cb:ff:b8:8b:a2:78:1b:38:54:4a:b6:46:
         e0:6a:5a:a7:8d:53:06:1e:64:33:38:58:0a:9e:41:9a:e5:a7:
         46:05:1c:b6:46:6b:8c:3f:8b:00:55:84:40:c7:a6:90:dd:3c:
         12:7d:f6:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgET1j6QTlR5ThY6SUlqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzZjNTE5ODBjNzUxZWE1ZTMxZGRkYWM4ZWY2MWZiNTZj
OTcwMGYwHhcNMjUwNDIwMTQwMDM3WhcNMjUwNDIxMTQwMDM3WjAzMTEwLwYDVQQD
Eyg5ODNmODRkMGJiOTJmNzY5NjBmMzdmYjU1NTA1NzdmYWZjNjc5OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbNrDz2IflrE721BC8Wli+ITZnxb
PA6fXRxMH2Knn+AMzM3F6P6ck9WLI4Sjs5R2ILmiFTk815qQyTo8NoPhebjKwJzV
X84oqPHbkYMMVRqRPzOPE/cBLi/rGClsklWFNfymyd7DWHrIjbAbjHa9Um48t9vZ
2LlGBpNHTVRm9Vxf4Fxh/KZoVQSN9YCO/RO/LAWEnu0lk5Pog/csGQ5A8+Kg9rXe
fRBxdK0/CJs+4M2aa5HS5TMMiqTKv0wBeg65Y0J1QqbCYpgyJSndnLssE8qb/37J
Uoh7NJjrz73SKj9nP/JpntaaO5UF9VWgL1VS9W70tkxjo9YDuMgSoFgLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg/hNC7kvdpYPN/tVUFd/r8Z5lYMB8GA1UdIwQY
MBaAFOd2xRmAx1HqXjHd2sjvYftWyXAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTkt
ZDdjMDA3NTBlZDk0LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTktZDdjMDA3NTBlZDk0
LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSc3wyb0
NjkC0ZyjNmJXCOF1FYbhjK7Vi9JwlGbyS1EWka8ppFdyOQpg4/SK+XP+HCfBD9kq
nYMdanhi+vcikvDQH8Yj4BhX/BkLk2TK+ykV52uE3iNBGAlt4eO9gKn+7H/BBYR5
VFQEs0YPJMH6lb2KJ4elGf760RdcPHDZKpYn8CqFwAEuLxuyVH4wQ4QmPqzq/sLq
RLAO2HwYmgnntGjP+Rv9XpGXfjJ0k8JEL4pvrRvDZun6PW97e23cTN54du6vm8Fp
OEQ75ZCzy/+4i6J4GzhUSrZG4Gpap41TBh5kMzhYCp5BmuWnRgUctkZrjD+LAFWE
QMemkN08En32Hw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:04:58 2025 by rpki-client