Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File:                     1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier:          XT5vWn53aLQgHt01zIBvFui5/A9C1l7iqUy5Q8d27Kk=
Subject key identifier:   15:2B:53:36:15:DE:DF:A7:1C:3A:1A:F1:89:89:A7:96:60:CA:B5:1B
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer:       /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial:       019652DB51FACF9596753D757172231BF878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number:          0C97
Signing time:             Sun 20 Apr 2025 11:00:27 +0000
Manifest this update:     Sun 20 Apr 2025 11:00:27 +0000
Manifest next update:     Mon 21 Apr 2025 11:00:27 +0000
Files and hashes:         1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: An/lZkuCDCB6nrilTNG7DvvNzdZm+kFjN/0KQFBHmH0=)
                          2: ejFgtEL_yvwBtcTkPUKqVp7iqdE.roa (hash: 91fqX0EGnVHzpPjrAaOzm7AgDnbWTA0eBRKoj2PIzpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:db:51:fa:cf:95:96:75:3d:75:71:72:23:1b:f8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
        Validity
            Not Before: Apr 20 11:00:27 2025 GMT
            Not After : Apr 21 11:00:27 2025 GMT
        Subject: CN=152b533615dedfa71c3a1af18989a79660cab51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:96:3b:83:18:68:24:1a:62:8d:54:25:e2:
                    17:89:09:77:c1:6f:24:3e:84:84:3b:bd:9c:a1:06:
                    37:c6:6a:45:44:21:34:bd:87:35:16:3a:e5:c8:e0:
                    b3:91:8b:3c:bb:32:36:5e:61:1a:9e:ad:11:29:c3:
                    64:58:0f:28:b8:b5:bd:ab:ba:89:95:65:16:cf:ae:
                    d8:d2:fe:72:5d:e3:3a:75:4e:44:1a:5e:f9:90:0b:
                    f3:f2:d1:06:6b:7f:fa:d8:fc:3d:e8:3a:ab:00:35:
                    07:78:f6:4e:1c:a1:e0:c1:85:f7:ee:48:08:62:97:
                    be:f5:67:be:a7:ab:2f:84:83:52:f6:27:d1:11:7a:
                    d6:1d:d1:bd:93:3a:cf:3a:07:7c:4f:38:8b:02:2c:
                    36:c3:66:ac:c5:00:10:f9:af:96:a1:83:69:2c:95:
                    29:78:86:1a:fc:2a:bf:60:03:ec:f2:1e:68:36:03:
                    cc:09:a4:fb:81:8b:df:34:94:d0:e7:04:7a:15:f4:
                    a9:43:af:6f:12:04:19:88:38:56:20:7a:58:16:de:
                    14:a4:06:aa:ab:79:8c:76:1e:d4:77:1e:8e:fb:38:
                    ec:62:e8:12:6c:ed:7b:b3:c1:84:4e:04:af:d7:05:
                    17:a3:ae:de:6a:f0:01:68:5a:ee:07:83:a8:a7:c5:
                    22:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2B:53:36:15:DE:DF:A7:1C:3A:1A:F1:89:89:A7:96:60:CA:B5:1B
            X509v3 Authority Key Identifier:
                keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:41:7f:c3:25:51:21:f2:b3:12:1b:83:e1:b3:83:e6:dd:
         a9:fa:69:21:21:71:71:21:f3:c2:8c:b1:6d:75:e4:e0:12:ca:
         30:a2:ba:9d:f0:6c:ef:9e:89:36:81:1e:08:f8:c9:d2:9c:51:
         93:ef:40:83:9a:36:e8:df:73:5e:00:00:56:d7:e8:a3:7c:4e:
         1f:01:cb:61:5c:7f:14:57:0f:6d:bc:67:76:50:bc:55:e5:95:
         ea:32:20:ab:c7:fe:58:b8:91:0b:07:8b:cc:82:0f:4f:3b:05:
         a9:20:e4:6c:7f:13:3d:ea:cb:24:b2:87:27:8e:da:bd:36:99:
         b7:58:b0:05:aa:14:9e:23:ea:35:10:fc:6a:15:84:b5:d3:1c:
         7b:45:40:35:9d:2c:d6:0e:e4:b1:81:f7:5f:fb:0a:ac:2e:04:
         34:5d:17:e6:1a:ba:46:21:65:67:e5:53:6c:06:6f:99:43:dd:
         cd:ca:2d:81:fa:66:8b:c8:05:2c:ae:4e:59:ca:d2:da:60:25:
         5d:53:26:34:b6:ea:7f:05:05:51:16:a8:72:9a:71:07:1b:80:
         b1:5e:56:12:8c:99:2e:59:8a:01:54:00:72:fc:20:b5:84:9c:
         b8:c8:df:98:ab:ff:ad:f9:80:2a:60:9d:3d:54:c3:39:1c:a8:
         ab:df:00:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZS21H6z5WWdT11cXIjG/h4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGE0MTc3NDc2NWE0Y2RiMDUwZDgyYWYxMWJhN2QyZDU0
YjZlMTMwHhcNMjUwNDIwMTEwMDI3WhcNMjUwNDIxMTEwMDI3WjAzMTEwLwYDVQQD
EygxNTJiNTMzNjE1ZGVkZmE3MWMzYTFhZjE4OTg5YTc5NjYwY2FiNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMGWO4MYaCQaYo1UJeIXiQl3wW8k
PoSEO72coQY3xmpFRCE0vYc1FjrlyOCzkYs8uzI2XmEanq0RKcNkWA8ouLW9q7qJ
lWUWz67Y0v5yXeM6dU5EGl75kAvz8tEGa3/62Pw96DqrADUHePZOHKHgwYX37kgI
Ype+9We+p6svhINS9ifREXrWHdG9kzrPOgd8TziLAiw2w2asxQAQ+a+WoYNpLJUp
eIYa/Cq/YAPs8h5oNgPMCaT7gYvfNJTQ5wR6FfSpQ69vEgQZiDhWIHpYFt4UpAaq
q3mMdh7Udx6O+zjsYugSbO17s8GETgSv1wUXo67eavABaFruB4Oop8Ui4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBUrUzYV3t+nHDoa8YmJp5ZgyrUbMB8GA1UdIwQY
MBaAFPraQXdHZaTNsFDYKvEbp9LVS24TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10cEJkMGRscE0yd1VOZ3E4UnVuMHRWTGJoTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJh
LTZiOWRjYTljNGVjZS8xLzEtdHBCZDBkbHBNMndVTmdxOFJ1bjB0VkxiaE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzllNjdmNS1lNTgwLTQ2ODYtYjgyYS02YjlkY2E5YzRl
Y2UvMS8xLXRwQmQwZGxwTTJ3VU5ncThSdW4wdFZMYmhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeRB
f8MlUSHysxIbg+Gzg+bdqfppISFxcSHzwoyxbXXk4BLKMKK6nfBs756JNoEeCPjJ
0pxRk+9Ag5o26N9zXgAAVtfoo3xOHwHLYVx/FFcPbbxndlC8VeWV6jIgq8f+WLiR
CweLzIIPTzsFqSDkbH8TPerLJLKHJ47avTaZt1iwBaoUniPqNRD8ahWEtdMce0VA
NZ0s1g7ksYH3X/sKrC4ENF0X5hq6RiFlZ+VTbAZvmUPdzcotgfpmi8gFLK5OWcrS
2mAlXVMmNLbqfwUFURaocppxBxuAsV5WEoyZLlmKAVQAcvwgtYScuMjfmKv/rfmA
KmCdPVTDORyoq98AlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:40 2025 by rpki-client