Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File:                     ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier:          2xN2CkrOkNc6BbzTsiI4riEcoELBIjuZVJAMhsw59Ck=
Subject key identifier:   2A:CF:BE:2A:BA:C3:35:37:EB:E9:0C:5C:7E:78:AB:C5:4F:E0:48:B3
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer:       /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial:       01964BFDF3F65A605F1FA16E025BDC74FDB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 03:00:56 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:56 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:56 +0000
Files and hashes:         1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
                          2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: pD77aheZTA7g+2O4qnbw04OlvF/Rtr69LMO9C+Gj6KU=)
                          3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
                          4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:f3:f6:5a:60:5f:1f:a1:6e:02:5b:dc:74:fd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
        Validity
            Not Before: Apr 19 03:00:56 2025 GMT
            Not After : Apr 20 03:00:56 2025 GMT
        Subject: CN=2acfbe2abac33537ebe90c5c7e78abc54fe048b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:8f:47:62:4d:bf:fc:61:47:e2:80:a0:7d:
                    1b:b0:31:c3:f5:6e:00:d1:39:24:1f:ac:f1:5f:98:
                    2b:b0:ab:3b:2b:62:41:54:f1:ed:2f:b8:9a:7e:73:
                    ee:b0:fc:cd:59:d2:39:c3:12:b2:98:26:3e:f5:f7:
                    be:30:5b:70:29:67:85:e9:d1:6f:9d:d2:56:1d:72:
                    73:96:99:b1:84:0e:4a:8f:08:20:20:41:a3:cc:e1:
                    70:f9:83:95:47:d1:f9:a9:77:e8:32:d9:52:9a:a0:
                    e8:cd:8a:ba:86:72:d2:71:e6:24:f9:f4:4a:a2:21:
                    8d:1d:44:aa:19:6e:47:76:75:1d:5c:f4:c0:f0:6d:
                    12:33:e9:c8:c2:6a:5a:af:4d:7b:e7:91:a7:d4:66:
                    e9:57:81:60:93:ea:28:2b:ca:48:13:db:41:a4:24:
                    45:a0:0a:8e:12:57:0e:31:ea:42:f3:41:32:53:e0:
                    87:05:49:cc:c7:db:f6:35:38:28:07:22:52:b9:d9:
                    7d:70:a0:b1:89:16:7b:59:85:11:91:61:3e:7d:05:
                    07:73:96:cc:f6:7c:60:6f:8a:c9:a4:6a:b8:07:2e:
                    75:aa:64:1c:d7:fe:fb:20:35:b4:48:7c:a7:d9:36:
                    22:df:99:eb:60:1a:17:e6:ef:11:44:ee:69:bd:dc:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CF:BE:2A:BA:C3:35:37:EB:E9:0C:5C:7E:78:AB:C5:4F:E0:48:B3
            X509v3 Authority Key Identifier:
                keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:4e:6e:97:0b:38:68:bf:f8:19:68:53:d9:83:65:46:ad:71:
         85:a7:45:a3:1f:f4:f4:f8:ee:49:be:76:30:d4:22:b8:e6:a9:
         35:d5:c1:ef:ec:9f:99:96:0c:d1:6e:82:f1:a7:c3:c2:4e:81:
         29:73:8c:cc:20:1d:29:53:2a:70:8a:af:50:e6:4a:ba:1e:f0:
         f1:68:bd:a7:ac:ff:4b:c2:ea:e0:f9:98:2d:22:d9:f7:56:c0:
         54:33:29:a0:cc:28:22:47:db:2a:b8:e9:2a:21:17:94:6c:e1:
         c6:6f:7c:df:c3:db:b7:59:c3:f5:26:5a:c0:ab:53:3c:4f:1a:
         f0:6f:21:89:6f:b1:28:f3:2a:98:02:cc:a5:e9:69:4f:c3:1c:
         be:4f:d8:71:01:fb:cd:f4:34:a0:92:8d:c1:57:c8:80:91:79:
         53:68:81:10:c5:de:9d:72:19:39:12:61:bd:3c:6d:69:4c:2f:
         e1:86:7b:1d:15:17:70:5e:98:60:3f:bc:f3:2b:f3:ae:51:1e:
         fc:5d:45:e0:b2:2c:12:bd:f1:72:db:e3:e0:67:e5:f5:6f:be:
         a2:ca:30:ca:e6:01:fb:f2:75:a8:39:33:fd:ba:2d:8f:b0:b9:
         28:05:af:36:dd:c1:68:05:1e:ed:bb:dd:63:b7:60:e3:5f:39:
         4c:25:d4:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/fP2WmBfH6FuAlvcdP20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzg1ZTg2MTY3ZDVjY2MyMmZkODU4OTI1NjBhZTc2MGI1
ZjI4OTgwHhcNMjUwNDE5MDMwMDU2WhcNMjUwNDIwMDMwMDU2WjAzMTEwLwYDVQQD
EygyYWNmYmUyYWJhYzMzNTM3ZWJlOTBjNWM3ZTc4YWJjNTRmZTA0OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H2PR2JNv/xhR+KAoH0bsDHD9W4A
0TkkH6zxX5grsKs7K2JBVPHtL7iafnPusPzNWdI5wxKymCY+9fe+MFtwKWeF6dFv
ndJWHXJzlpmxhA5KjwggIEGjzOFw+YOVR9H5qXfoMtlSmqDozYq6hnLSceYk+fRK
oiGNHUSqGW5HdnUdXPTA8G0SM+nIwmpar01755Gn1GbpV4Fgk+ooK8pIE9tBpCRF
oAqOElcOMepC80EyU+CHBUnMx9v2NTgoByJSudl9cKCxiRZ7WYURkWE+fQUHc5bM
9nxgb4rJpGq4By51qmQc1/77IDW0SHyn2TYi35nrYBoX5u8RRO5pvdx3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrPviq6wzU36+kMXH54q8VP4EizMB8GA1UdIwQY
MBaAFHs4XoYWfVzMIv2FiSVgrnYLXyiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmIt
ZWE3ODhhZDMyOTZhLzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmItZWE3ODhhZDMyOTZh
LzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1k5ulws4
aL/4GWhT2YNlRq1xhadFox/09PjuSb52MNQiuOapNdXB7+yfmZYM0W6C8afDwk6B
KXOMzCAdKVMqcIqvUOZKuh7w8Wi9p6z/S8Lq4PmYLSLZ91bAVDMpoMwoIkfbKrjp
KiEXlGzhxm9838Pbt1nD9SZawKtTPE8a8G8hiW+xKPMqmALMpelpT8Mcvk/YcQH7
zfQ0oJKNwVfIgJF5U2iBEMXenXIZORJhvTxtaUwv4YZ7HRUXcF6YYD+88yvzrlEe
/F1F4LIsEr3xctvj4Gfl9W++osowyuYB+/J1qDkz/botj7C5KAWvNt3BaAUe7bvd
Y7dg4185TCXU5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:42 2025 by rpki-client