Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File:                     pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier:          zm0B6ZZTEVhQdtwjy/ZTO/iq1zkxnFr/eSRAhxMdU5Y=
Subject key identifier:   6D:8E:52:88:A5:36:B6:F5:C4:9B:55:50:7F:3A:C9:07:26:53:CB:DC
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer:       /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial:       01965C83689C15A2ED16A69650CC12F6A9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number:          01C7
Signing time:             Tue 22 Apr 2025 08:00:37 +0000
Manifest this update:     Tue 22 Apr 2025 08:00:37 +0000
Manifest next update:     Wed 23 Apr 2025 08:00:37 +0000
Files and hashes:         1: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: ZMaeFkXljeZ9cPwfJ93K354bON94FtrSn1SbeRL2wlg=)
                          2: yNyV4cceOnlRqYhPeAllARW73Jw.roa (hash: 8x/01ij81KHBd33TvjxnJ5OVDsgBIBKqbtRkLV2shYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:83:68:9c:15:a2:ed:16:a6:96:50:cc:12:f6:a9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
        Validity
            Not Before: Apr 22 08:00:37 2025 GMT
            Not After : Apr 23 08:00:37 2025 GMT
        Subject: CN=6d8e5288a536b6f5c49b55507f3ac9072653cbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:17:7a:1c:53:38:0a:e3:9e:80:c5:3d:e7:
                    51:7b:ec:89:08:08:ed:a6:0c:5c:e3:40:b5:f1:74:
                    f7:65:5f:2b:8e:69:39:12:96:40:d7:75:59:d5:44:
                    5d:2c:af:d1:e3:6d:0e:1b:14:4a:30:ef:2c:97:0c:
                    0d:2b:9f:cb:f1:2b:3b:d7:60:b8:71:5e:7b:97:48:
                    08:75:68:6e:7c:65:d9:fc:95:81:d8:d0:b3:21:9e:
                    97:94:c2:e0:6f:42:d8:6a:66:0c:c1:44:22:c3:9a:
                    19:70:f7:ed:b9:a8:da:66:cd:15:90:20:0b:3b:28:
                    44:3e:f2:9f:be:30:87:8a:4e:6e:b3:06:47:ce:df:
                    66:8c:17:f0:ec:8f:9e:b6:86:19:84:0c:fe:f6:72:
                    bd:6e:16:ac:62:42:6f:53:33:6f:b9:93:e8:24:90:
                    cc:1c:5d:bc:3d:49:c2:39:d3:32:8c:32:50:ef:57:
                    c7:ad:37:a1:ae:3b:84:18:0f:38:12:0a:a8:32:6c:
                    18:ea:6c:4f:1f:ec:a4:e8:c3:52:66:7b:3e:b4:e1:
                    46:dd:4b:48:f6:d6:68:bb:d1:0f:22:b4:c4:e5:62:
                    1b:3e:19:7c:d8:bb:c8:9f:cb:69:1f:a4:00:3f:30:
                    4f:67:a9:92:62:9e:21:99:35:cf:b1:74:49:bc:da:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8E:52:88:A5:36:B6:F5:C4:9B:55:50:7F:3A:C9:07:26:53:CB:DC
            X509v3 Authority Key Identifier:
                keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:5c:d0:38:83:58:15:37:be:05:1d:75:3b:e1:07:01:b8:0d:
         2a:b8:61:91:32:8c:0d:91:8c:21:d7:1d:6c:f9:fb:26:d9:ae:
         5a:07:96:4a:eb:e6:bd:7b:18:95:b7:79:d0:49:e2:e7:af:bb:
         0f:6e:c8:0d:1c:3e:c6:15:ca:68:30:1e:25:ce:ac:ac:3e:22:
         c3:d7:42:af:cf:e7:86:eb:50:00:4d:4f:20:a2:2e:4e:0f:74:
         00:22:f9:2b:b4:2e:8e:2a:b4:24:e0:e2:7d:e7:d3:5c:83:7f:
         da:c6:a9:9b:d3:d0:dc:ff:fb:ef:66:c1:86:ed:e4:a3:77:9d:
         77:eb:a6:90:18:cc:42:61:a9:64:57:ed:8c:a7:e3:f8:8d:94:
         33:2b:bc:6c:c5:ef:34:6a:84:82:9c:80:ea:0d:1b:3a:80:0e:
         73:ea:d4:08:f2:6c:0c:33:46:90:d8:ac:20:8e:fa:60:da:15:
         05:aa:55:10:e7:59:0d:36:c4:44:78:cd:7d:b5:31:ed:21:a9:
         bc:30:74:ec:9c:b6:79:c6:8d:82:26:ee:9d:31:ad:c6:0b:ba:
         20:0c:dd:34:6b:89:31:61:75:05:2b:3e:a6:9b:d8:7e:e6:03:
         d7:76:03:db:61:9f:d9:12:af:73:11:fc:cf:97:65:a6:3e:18:
         07:aa:de:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcg2icFaLtFqaWUMwS9qnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NzYyMTgyMTg0NDg4ZTdmNzg3MTIyYTcxODA5OTdjZThl
OTBkNGMwHhcNMjUwNDIyMDgwMDM3WhcNMjUwNDIzMDgwMDM3WjAzMTEwLwYDVQQD
Eyg2ZDhlNTI4OGE1MzZiNmY1YzQ5YjU1NTA3ZjNhYzkwNzI2NTNjYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlsXehxTOArjnoDFPedRe+yJCAjt
pgxc40C18XT3ZV8rjmk5EpZA13VZ1URdLK/R420OGxRKMO8slwwNK5/L8Ss712C4
cV57l0gIdWhufGXZ/JWB2NCzIZ6XlMLgb0LYamYMwUQiw5oZcPftuajaZs0VkCAL
OyhEPvKfvjCHik5uswZHzt9mjBfw7I+etoYZhAz+9nK9bhasYkJvUzNvuZPoJJDM
HF28PUnCOdMyjDJQ71fHrTehrjuEGA84EgqoMmwY6mxPH+yk6MNSZns+tOFG3UtI
9tZou9EPIrTE5WIbPhl82LvIn8tpH6QAPzBPZ6mSYp4hmTXPsXRJvNq2mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2OUoilNrb1xJtVUH86yQcmU8vcMB8GA1UdIwQY
MBaAFKZ2IYIYRIjn94cSKnGAmXzo6Q1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAt
ZWQ2MGJhYjc1NzJmLzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAtZWQ2MGJhYjc1NzJm
LzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxFzQOINY
FTe+BR11O+EHAbgNKrhhkTKMDZGMIdcdbPn7JtmuWgeWSuvmvXsYlbd50Eni56+7
D27IDRw+xhXKaDAeJc6srD4iw9dCr8/nhutQAE1PIKIuTg90ACL5K7Qujiq0JODi
fefTXIN/2sapm9PQ3P/772bBhu3ko3edd+umkBjMQmGpZFftjKfj+I2UMyu8bMXv
NGqEgpyA6g0bOoAOc+rUCPJsDDNGkNisII76YNoVBapVEOdZDTbERHjNfbUx7SGp
vDB07Jy2ecaNgibunTGtxgu6IAzdNGuJMWF1BSs+ppvYfuYD13YD22Gf2RKvcxH8
z5dlpj4YB6rexw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:58:36 2025 by rpki-client