Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File:                     hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier:          4slaAU51o6D/oNR8NzLOBn/F9Ag6tarb23p0RlDmdXo=
Subject key identifier:   A3:5D:85:A0:A5:27:67:D4:25:1A:D1:15:75:88:0C:E2:88:F2:AD:9F
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer:       /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial:       019653B75762643A7EE77CDB3260D0BA4792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number:          05A6
Signing time:             Sun 20 Apr 2025 15:00:46 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:46 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:46 +0000
Files and hashes:         1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: z3eOaANE+hPVN28ZHAE/ZjqTUeQMtDL0oBnkMmJKJys=)
                          2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b7:57:62:64:3a:7e:e7:7c:db:32:60:d0:ba:47:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
        Validity
            Not Before: Apr 20 15:00:46 2025 GMT
            Not After : Apr 21 15:00:46 2025 GMT
        Subject: CN=a35d85a0a52767d4251ad11575880ce288f2ad9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:0c:c8:96:1c:e1:28:3e:86:db:92:0d:a7:
                    a3:c0:35:49:7d:13:1b:8e:17:9c:63:ee:f6:e5:16:
                    1a:b8:54:22:dd:9c:9f:db:2b:9b:ec:99:a5:dd:2b:
                    ab:66:8a:b5:f9:3a:93:09:55:75:dc:d0:83:62:75:
                    c3:a4:5b:14:36:34:d6:d7:93:2c:a8:ed:e6:df:50:
                    12:47:cc:bd:2c:a8:25:24:ba:98:04:2f:90:22:2b:
                    79:26:ff:5d:bf:e3:c1:cb:7f:25:63:c7:ca:82:06:
                    99:70:58:c7:89:87:62:e6:a0:aa:8a:68:be:d6:17:
                    02:5d:65:ac:e3:29:25:3d:24:52:0f:a7:7c:47:88:
                    f5:0f:c5:53:68:00:df:23:6e:03:38:f7:95:fc:ea:
                    e0:65:8b:1e:65:7d:2e:75:5c:7d:c6:75:cc:27:1c:
                    8b:34:0a:0a:fc:b1:21:5e:02:54:c4:20:a1:67:cb:
                    98:f5:8d:4c:13:bf:65:43:e6:de:a9:ed:bf:d4:5d:
                    96:54:cc:23:11:ad:08:17:cc:84:5f:48:6b:90:4b:
                    6b:63:16:bb:8a:0a:99:cf:99:a8:04:fb:78:c7:2e:
                    2e:7d:06:d7:00:a9:6a:c8:fc:de:c6:c7:a7:07:cf:
                    8f:d2:fa:f4:de:ad:23:6d:f4:66:5e:e3:75:bb:dc:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5D:85:A0:A5:27:67:D4:25:1A:D1:15:75:88:0C:E2:88:F2:AD:9F
            X509v3 Authority Key Identifier:
                keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b8:8f:2e:34:a9:f5:fd:66:8a:ce:33:9b:28:bc:b7:ae:79:
         c7:23:f2:dc:2e:cf:63:eb:38:44:23:c4:b2:90:cf:c0:6c:a7:
         5b:87:be:57:3a:33:84:a2:5e:5a:53:0b:f0:92:08:56:dc:45:
         ba:0f:cd:31:ab:4c:a5:4d:11:1d:92:39:99:68:85:bb:e2:25:
         49:59:7b:ae:76:e0:5d:52:5a:1a:27:e3:40:30:06:bc:47:d3:
         1b:4a:7e:8b:c0:db:45:17:07:df:36:70:67:38:da:46:fb:ba:
         05:8b:75:a8:c8:24:9b:aa:55:1b:36:3c:e1:1e:86:72:3b:62:
         85:12:02:19:1a:06:a0:12:6f:e4:e1:e2:25:90:4d:0c:d6:4d:
         cb:88:23:c9:76:80:3f:67:52:19:6d:03:2c:ad:7d:d8:b0:41:
         20:4b:10:99:f0:dd:67:c6:9b:5f:3e:8b:bc:59:d2:b7:c0:39:
         6c:17:d4:70:ec:fc:49:1a:7c:a7:59:e5:30:e8:9f:d2:72:e3:
         43:67:c4:31:f8:53:9b:6a:b2:7e:0d:c4:99:dc:8e:ad:36:47:
         f2:b6:4f:b8:3a:a0:1c:d6:c0:0c:b7:b5:c1:f5:7b:0e:19:b2:
         e0:d0:71:10:d6:3f:a2:24:54:2a:68:bc:0e:c1:57:4c:0c:f4:
         da:7d:0d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt1diZDp+53zbMmDQukeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx
ZWU1MzcwHhcNMjUwNDIwMTUwMDQ2WhcNMjUwNDIxMTUwMDQ2WjAzMTEwLwYDVQQD
EyhhMzVkODVhMGE1Mjc2N2Q0MjUxYWQxMTU3NTg4MGNlMjg4ZjJhZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHAMyJYc4Sg+htuSDaejwDVJfRMb
jhecY+725RYauFQi3Zyf2yub7Jml3SurZoq1+TqTCVV13NCDYnXDpFsUNjTW15Ms
qO3m31ASR8y9LKglJLqYBC+QIit5Jv9dv+PBy38lY8fKggaZcFjHiYdi5qCqimi+
1hcCXWWs4yklPSRSD6d8R4j1D8VTaADfI24DOPeV/OrgZYseZX0udVx9xnXMJxyL
NAoK/LEhXgJUxCChZ8uY9Y1ME79lQ+beqe2/1F2WVMwjEa0IF8yEX0hrkEtrYxa7
igqZz5moBPt4xy4ufQbXAKlqyPzexsenB8+P0vr03q0jbfRmXuN1u9zPqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNdhaClJ2fUJRrRFXWIDOKI8q2fMB8GA1UdIwQY
MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt
MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2
LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAriPLjSp
9f1mis4zmyi8t655xyPy3C7PY+s4RCPEspDPwGynW4e+VzozhKJeWlML8JIIVtxF
ug/NMatMpU0RHZI5mWiFu+IlSVl7rnbgXVJaGifjQDAGvEfTG0p+i8DbRRcH3zZw
ZzjaRvu6BYt1qMgkm6pVGzY84R6GcjtihRICGRoGoBJv5OHiJZBNDNZNy4gjyXaA
P2dSGW0DLK192LBBIEsQmfDdZ8abXz6LvFnSt8A5bBfUcOz8SRp8p1nlMOif0nLj
Q2fEMfhTm2qyfg3EmdyOrTZH8rZPuDqgHNbADLe1wfV7Dhmy4NBxENY/oiRUKmi8
DsFXTAz02n0NOA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:53 2025 by rpki-client