Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File:                     erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier:          K/t3JICeAFyo4TW8Rosg7MJA1QTbU626Fu79VUQUk+A=
Subject key identifier:   35:B1:C4:5A:1B:D6:E9:52:35:76:67:8E:3C:D7:74:15:71:E6:50:A7
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer:       /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial:       0196549336705FE739874E45D51140098239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number:          14B9
Signing time:             Sun 20 Apr 2025 19:00:55 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:55 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:55 +0000
Files and hashes:         1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
                          2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: 8/afhBfVnL2tdkkACdR0WZzAEsoxfFEMZPjQuF0ZzSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:93:36:70:5f:e7:39:87:4e:45:d5:11:40:09:82:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
        Validity
            Not Before: Apr 20 19:00:55 2025 GMT
            Not After : Apr 21 19:00:55 2025 GMT
        Subject: CN=35b1c45a1bd6e9523576678e3cd7741571e650a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:1d:95:9e:8f:0a:10:5d:24:75:25:d6:69:
                    a5:be:b3:e3:74:b8:98:19:b8:a5:2f:bd:c1:26:b5:
                    01:86:51:ad:80:15:54:ea:f4:ce:4f:6e:ab:1c:8b:
                    5f:2c:cf:d1:9e:f9:b3:35:38:5c:b4:97:06:55:f7:
                    47:5c:c7:27:19:25:06:03:b4:02:97:89:36:a9:c3:
                    ee:2c:81:98:ff:da:c3:a6:c4:3b:75:be:9a:9f:73:
                    76:20:5a:e4:2d:a5:df:bc:4a:79:ed:14:22:70:b5:
                    38:32:59:9e:fa:1a:4d:44:1f:ed:af:f4:fc:23:a3:
                    e5:7b:13:fd:e5:1a:a6:d3:c6:54:da:f8:3a:bc:0c:
                    5b:a2:f0:47:a2:6b:0b:12:47:21:6e:29:1a:bf:00:
                    2e:b0:d2:ac:31:38:72:e9:f3:71:a8:fa:2f:eb:69:
                    61:82:86:96:4e:e4:b3:92:cc:60:b4:57:0d:f2:a9:
                    94:66:b4:3f:78:f8:9f:98:eb:73:32:92:34:05:ba:
                    15:bd:49:95:4e:0e:56:9c:58:3b:83:b7:97:40:a1:
                    a9:34:82:aa:b1:f9:af:b2:6f:1f:3b:42:9d:cc:ab:
                    00:82:dd:4e:b1:56:ea:b1:c5:dd:6c:54:76:e5:88:
                    5d:1f:3d:81:06:14:18:1a:e4:8f:9e:c4:47:e6:34:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:C4:5A:1B:D6:E9:52:35:76:67:8E:3C:D7:74:15:71:E6:50:A7
            X509v3 Authority Key Identifier:
                keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a4:10:b3:89:39:cc:3c:d3:dd:83:e8:3c:4e:2f:94:d0:71:
         72:3a:47:36:47:b4:62:8c:4f:b6:c9:72:4e:ac:46:54:8b:cd:
         72:65:31:07:0f:b8:dd:12:60:ed:e6:06:b4:fa:29:37:c3:05:
         8a:79:f2:dd:09:94:68:0d:d4:94:d3:56:ea:47:64:8b:4d:e0:
         a5:ca:e3:36:db:d0:bf:03:fb:21:a6:6e:a1:57:08:21:e3:6d:
         ce:15:6a:15:ab:7d:bc:82:e0:b2:19:78:a8:a4:d8:d5:fb:40:
         29:c1:a9:04:bf:e3:0e:24:b6:0c:5e:d1:1a:15:d0:0a:d7:d7:
         44:e6:13:04:78:10:42:a1:69:9a:bf:f3:ec:06:57:ec:45:b9:
         97:87:54:2c:9c:90:16:4c:0a:f6:74:57:03:e1:0f:3a:18:13:
         75:5c:2a:09:a5:fa:40:09:17:2c:6b:8f:43:92:b0:a7:98:bd:
         d6:34:78:67:f8:cc:fe:00:f2:78:fa:15:94:48:c9:6b:1e:0e:
         f5:38:3d:bb:63:86:7c:0c:4c:57:9a:f6:25:4b:b9:91:2e:d7:
         25:d6:db:91:19:d9:91:90:13:e4:4b:59:45:a7:97:87:35:80:
         79:e1:ec:bc:d5:dc:f1:37:fd:b6:e2:11:23:cc:cc:fa:44:7a:
         a0:31:72:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkzZwX+c5h05F1RFACYI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjc0YjAxMzA3ZjljM2ZhNzU2MTk2Mzg0MTczMTE1ZTY2
ZTZjNTUwHhcNMjUwNDIwMTkwMDU1WhcNMjUwNDIxMTkwMDU1WjAzMTEwLwYDVQQD
EygzNWIxYzQ1YTFiZDZlOTUyMzU3NjY3OGUzY2Q3NzQxNTcxZTY1MGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV4dlZ6PChBdJHUl1mmlvrPjdLiY
GbilL73BJrUBhlGtgBVU6vTOT26rHItfLM/RnvmzNThctJcGVfdHXMcnGSUGA7QC
l4k2qcPuLIGY/9rDpsQ7db6an3N2IFrkLaXfvEp57RQicLU4Mlme+hpNRB/tr/T8
I6PlexP95Rqm08ZU2vg6vAxbovBHomsLEkchbikavwAusNKsMThy6fNxqPov62lh
goaWTuSzksxgtFcN8qmUZrQ/ePifmOtzMpI0BboVvUmVTg5WnFg7g7eXQKGpNIKq
sfmvsm8fO0KdzKsAgt1OsVbqscXdbFR25YhdHz2BBhQYGuSPnsRH5jRiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWxxFob1ulSNXZnjjzXdBVx5lCnMB8GA1UdIwQY
MBaAFHq3SwEwf5w/p1YZY4QXMRXmbmxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAt
OWY1Zjc4MzUyNjAwLzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAtOWY1Zjc4MzUyNjAw
LzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaQQs4k5
zDzT3YPoPE4vlNBxcjpHNke0YoxPtslyTqxGVIvNcmUxBw+43RJg7eYGtPopN8MF
inny3QmUaA3UlNNW6kdki03gpcrjNtvQvwP7IaZuoVcIIeNtzhVqFat9vILgshl4
qKTY1ftAKcGpBL/jDiS2DF7RGhXQCtfXROYTBHgQQqFpmr/z7AZX7EW5l4dULJyQ
FkwK9nRXA+EPOhgTdVwqCaX6QAkXLGuPQ5Kwp5i91jR4Z/jM/gDyePoVlEjJax4O
9Tg9u2OGfAxMV5r2JUu5kS7XJdbbkRnZkZAT5EtZRaeXhzWAeeHsvNXc8Tf9tuIR
I8zM+kR6oDFyeQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:51:14 2025 by rpki-client