Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File:                     4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier:          NLi9kMN3gn/crOROhbQEqIVLUOc3AxcISniVQQFa+Mg=
Subject key identifier:   80:34:C8:FD:8C:AB:36:60:17:41:11:74:A0:46:EC:02:B0:62:DF:DA
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer:       /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial:       01958B4D4A467D98C2BA1F96DC3BC053F943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number:          13E9
Signing time:             Wed 12 Mar 2025 17:00:53 +0000
Manifest this update:     Wed 12 Mar 2025 17:00:53 +0000
Manifest next update:     Thu 13 Mar 2025 17:00:53 +0000
Files and hashes:         1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: xG6L2SmIxwM8XKOwk3CxISSE0eb4M0Hmp81XAL26k28=)
                          2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:4a:46:7d:98:c2:ba:1f:96:dc:3b:c0:53:f9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
        Validity
            Not Before: Mar 12 17:00:53 2025 GMT
            Not After : Mar 13 17:00:53 2025 GMT
        Subject: CN=8034c8fd8cab366017411174a046ec02b062dfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:b8:f8:59:6a:40:66:d7:62:8c:26:ef:35:
                    73:47:2f:57:c9:c6:10:77:3c:cb:cb:84:eb:e1:46:
                    99:d3:f8:e6:93:37:c1:67:a4:0f:b1:9a:9c:69:ae:
                    e9:7a:e6:80:2e:25:cd:93:93:a8:f5:ce:4b:f1:15:
                    fa:86:50:67:18:53:74:0e:15:f0:7b:59:45:dc:0f:
                    fb:95:86:27:83:32:43:ed:fb:55:7a:b7:53:9f:43:
                    6c:13:e4:05:4a:2b:a4:52:69:1a:9d:96:99:8a:1c:
                    d9:85:19:38:aa:30:a7:29:d9:8f:8c:b4:0e:5e:78:
                    1a:96:17:4b:6e:f9:b8:0b:c9:82:b9:1f:c8:64:16:
                    c9:3d:56:1c:22:40:e8:02:f0:b9:79:1f:b4:32:97:
                    53:99:64:cf:37:47:57:bb:22:41:9e:81:d2:e6:89:
                    e4:c1:9c:0c:6d:ec:14:f8:73:91:55:b6:99:67:dc:
                    0a:73:d4:ea:7f:94:7a:3a:ab:01:bd:54:85:c7:7c:
                    01:a7:a0:37:ec:89:52:84:cd:d2:b9:eb:6b:18:99:
                    d6:1e:bf:c6:5a:b7:42:52:fc:96:3b:43:c2:19:ca:
                    3e:d9:92:68:0c:bf:d0:56:a6:48:13:3c:8b:4e:36:
                    12:8c:f6:2d:02:36:11:5a:82:ed:de:94:6e:f3:7e:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:C8:FD:8C:AB:36:60:17:41:11:74:A0:46:EC:02:B0:62:DF:DA
            X509v3 Authority Key Identifier:
                keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:94:18:5a:32:3f:24:5e:10:2d:7a:57:4c:4f:ff:b5:37:cd:
         a2:88:da:20:ef:de:33:97:c5:95:7a:81:7c:aa:02:a9:2a:69:
         1d:f7:47:81:15:0b:b3:fe:76:5c:65:ed:d0:9e:88:2b:35:dd:
         48:21:4c:87:90:e5:e6:77:44:43:bb:a0:66:b4:8d:91:d1:33:
         91:5b:f6:44:ef:b2:6f:bf:b2:a0:84:22:e6:f0:ef:e4:7d:7f:
         6c:e4:4c:79:5d:dd:9e:8c:cd:60:70:0d:c3:97:41:55:af:a6:
         77:dd:d6:ba:6e:8b:85:b7:87:69:29:54:19:b2:5e:d4:a4:dc:
         eb:f9:ad:83:f4:03:66:f1:51:71:c4:b9:3c:07:14:65:67:42:
         30:61:97:94:82:17:1a:46:08:b6:4a:39:35:3f:89:59:af:26:
         9b:01:41:0d:40:c1:c5:a3:37:2f:7b:8e:95:65:58:4b:73:4b:
         47:09:c6:d3:75:10:f4:86:5d:1a:5e:25:e9:b4:66:f7:23:ae:
         b4:43:6a:ab:b2:51:9d:90:8c:2f:a6:f5:e9:65:2a:fa:3c:bc:
         32:c4:c3:63:eb:a7:99:4b:72:af:5c:35:81:ec:81:de:f4:39:
         76:79:cb:1e:d1:dd:be:d6:a2:1e:a1:7e:fd:5a:46:31:be:00:
         5f:81:d0:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTUpGfZjCuh+W3DvAU/lDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2QzZmI2YTg2M2FjMGZhNGQxZmVlZmUzYWVjMzllZDhk
Mzg5NWMwHhcNMjUwMzEyMTcwMDUzWhcNMjUwMzEzMTcwMDUzWjAzMTEwLwYDVQQD
Eyg4MDM0YzhmZDhjYWIzNjYwMTc0MTExNzRhMDQ2ZWMwMmIwNjJkZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGa4+FlqQGbXYowm7zVzRy9XycYQ
dzzLy4Tr4UaZ0/jmkzfBZ6QPsZqcaa7peuaALiXNk5Oo9c5L8RX6hlBnGFN0DhXw
e1lF3A/7lYYngzJD7ftVerdTn0NsE+QFSiukUmkanZaZihzZhRk4qjCnKdmPjLQO
XngalhdLbvm4C8mCuR/IZBbJPVYcIkDoAvC5eR+0MpdTmWTPN0dXuyJBnoHS5onk
wZwMbewU+HORVbaZZ9wKc9Tqf5R6OqsBvVSFx3wBp6A37IlShM3SuetrGJnWHr/G
WrdCUvyWO0PCGco+2ZJoDL/QVqZIEzyLTjYSjPYtAjYRWoLt3pRu837EMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA0yP2MqzZgF0ERdKBG7AKwYt/aMB8GA1UdIwQY
MBaAFOE9P7aoY6wPpNH+7+Ouw57Y04lcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEt
YTM5ZTAwOTYyN2VmLzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEtYTM5ZTAwOTYyN2Vm
LzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJQYWjI/
JF4QLXpXTE//tTfNoojaIO/eM5fFlXqBfKoCqSppHfdHgRULs/52XGXt0J6IKzXd
SCFMh5Dl5ndEQ7ugZrSNkdEzkVv2RO+yb7+yoIQi5vDv5H1/bORMeV3dnozNYHAN
w5dBVa+md93Wum6LhbeHaSlUGbJe1KTc6/mtg/QDZvFRccS5PAcUZWdCMGGXlIIX
GkYItko5NT+JWa8mmwFBDUDBxaM3L3uOlWVYS3NLRwnG03UQ9IZdGl4l6bRm9yOu
tENqq7JRnZCML6b16WUq+jy8MsTDY+unmUtyr1w1geyB3vQ5dnnLHtHdvtaiHqF+
/VpGMb4AX4HQqw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:36 2025 by rpki-client