Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          Vuoxx8XZ+MGQpYKzCH8j5EhYAmALfwn5mMdMajJ/u3w=
Subject key identifier:   80:74:81:E0:E3:53:2F:56:40:82:FA:2E:D7:B7:0A:8B:43:0D:A1:13
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       01958BF25D08016FAEE1752CB134E23EB35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 20:01:11 +0000
Manifest this update:     Wed 12 Mar 2025 20:01:11 +0000
Manifest next update:     Thu 13 Mar 2025 20:01:11 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: zZT7OXUGg9jZldpU/VIKNSm/5lUbLikpzj2+5BgoVwo=)
                          2: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (hash: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:f2:5d:08:01:6f:ae:e1:75:2c:b1:34:e2:3e:b3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Mar 12 20:01:11 2025 GMT
            Not After : Mar 13 20:01:11 2025 GMT
        Subject: CN=807481e0e3532f564082fa2ed7b70a8b430da113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:55:94:2a:57:a6:96:a3:ed:cb:b3:ef:5b:bb:
                    d2:d5:77:a2:42:18:22:5e:e3:4f:35:f2:55:ed:b2:
                    73:a4:d7:50:f3:f7:7d:ea:ee:6e:0b:8b:96:f5:db:
                    c9:90:47:cd:91:23:8f:63:b3:6d:55:d6:30:13:50:
                    b8:39:9e:d3:e8:53:3d:33:b0:ae:7a:a4:85:5f:74:
                    f9:01:ac:e8:84:80:14:0c:64:b3:12:3e:71:30:5c:
                    e3:cd:a5:d7:7b:f2:2c:71:29:82:3c:3e:b4:85:0c:
                    6d:40:8a:4c:61:68:eb:e7:6e:90:d0:c7:2a:76:2a:
                    cf:c2:55:0a:eb:c0:4b:78:ae:51:e0:ef:e1:d3:c6:
                    42:0f:fe:0e:a6:a5:c0:cc:ce:7c:fe:9d:19:3b:dd:
                    38:57:86:bb:e6:c5:e1:1b:79:4c:5b:a9:7c:35:bd:
                    f5:44:21:b4:a6:04:84:cb:d2:a7:b8:60:d7:a0:2b:
                    69:ca:71:3b:8f:82:5b:f5:11:4b:dc:05:2f:e9:ca:
                    4f:4d:d7:a2:4e:80:ca:23:99:b1:ff:fc:34:03:b6:
                    1f:16:c5:81:db:2b:fb:b1:98:77:de:1f:c0:c2:59:
                    f0:a7:cd:78:83:be:2a:72:df:37:f8:ce:ea:89:64:
                    08:25:fa:69:f3:cf:64:83:41:40:14:a5:39:47:0c:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:81:E0:E3:53:2F:56:40:82:FA:2E:D7:B7:0A:8B:43:0D:A1:13
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:4c:be:98:74:19:71:36:1b:11:46:6e:3d:19:18:0c:cd:
         08:66:2e:30:b7:63:62:34:bd:98:ed:59:cd:78:38:3a:67:e2:
         99:42:50:c7:34:64:c0:eb:c6:a0:55:ba:5a:73:e5:56:02:a1:
         df:be:8e:23:57:9b:5b:f0:15:b4:d5:cb:8b:bd:2a:99:22:b7:
         3f:c5:f9:98:ae:58:7b:92:4c:ed:60:91:8c:a3:5a:6a:c1:7d:
         a2:02:e0:dc:80:03:74:04:6a:91:75:ae:26:ca:8e:2b:fe:0e:
         63:7f:3e:db:97:fc:14:ba:5c:85:be:e0:3e:2a:4e:2d:d3:86:
         cb:95:ee:29:05:1a:a4:57:e3:ab:2d:21:7c:a1:89:16:7f:53:
         09:b6:c0:4f:8b:c8:85:b2:3f:bd:ab:3a:49:6c:0a:4f:8e:26:
         f5:12:ee:25:b0:f6:0e:d5:aa:fe:37:f8:42:c7:e8:72:3a:a3:
         b3:f7:9c:85:8e:29:d2:55:ae:8e:10:94:44:e2:5d:cc:a3:1f:
         c2:30:63:15:76:30:c6:fc:16:d5:40:91:82:b9:a7:80:2a:a7:
         71:f9:20:c6:3b:43:2e:82:29:fe:34:2d:e9:51:f1:16:a8:f5:
         ea:63:e9:9a:52:59:ec:71:75:b1:17:51:a6:4d:48:64:4a:aa:
         61:dc:fd:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8l0IAW+u4XUssTTiPrNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjZlMGU1MTYyODU1NGNkOTI2MzRiNzExYWI3NThmODQ2
N2M0ODUwHhcNMjUwMzEyMjAwMTExWhcNMjUwMzEzMjAwMTExWjAzMTEwLwYDVQQD
Eyg4MDc0ODFlMGUzNTMyZjU2NDA4MmZhMmVkN2I3MGE4YjQzMGRhMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41WUKlemlqPty7PvW7vS1XeiQhgi
XuNPNfJV7bJzpNdQ8/d96u5uC4uW9dvJkEfNkSOPY7NtVdYwE1C4OZ7T6FM9M7Cu
eqSFX3T5AazohIAUDGSzEj5xMFzjzaXXe/IscSmCPD60hQxtQIpMYWjr526Q0Mcq
dirPwlUK68BLeK5R4O/h08ZCD/4OpqXAzM58/p0ZO904V4a75sXhG3lMW6l8Nb31
RCG0pgSEy9KnuGDXoCtpynE7j4Jb9RFL3AUv6cpPTdeiToDKI5mx//w0A7YfFsWB
2yv7sZh33h/Awlnwp814g74qct83+M7qiWQIJfpp889kg0FAFKU5RwxhIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB0geDjUy9WQIL6Lte3CotDDaETMB8GA1UdIwQY
MBaAFOVm4OUWKFVM2SY0txGrdY+EZ8SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5Zjct
ZTI5NmNmZDk3MjA5LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5ZjctZTI5NmNmZDk3MjA5
LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMBMvph0
GXE2GxFGbj0ZGAzNCGYuMLdjYjS9mO1ZzXg4OmfimUJQxzRkwOvGoFW6WnPlVgKh
376OI1ebW/AVtNXLi70qmSK3P8X5mK5Ye5JM7WCRjKNaasF9ogLg3IADdARqkXWu
JsqOK/4OY38+25f8FLpchb7gPipOLdOGy5XuKQUapFfjqy0hfKGJFn9TCbbAT4vI
hbI/vas6SWwKT44m9RLuJbD2DtWq/jf4Qsfocjqjs/echY4p0lWujhCUROJdzKMf
wjBjFXYwxvwW1UCRgrmngCqncfkgxjtDLoIp/jQt6VHxFqj16mPpmlJZ7HF1sRdR
pk1IZEqqYdz9ug==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:21 2025 by rpki-client