Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File:                     5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier:          NrWOP/14TyEEMIAr96RFSfacyeE2OsZFkxPz361k/qM=
Subject key identifier:   7D:E6:69:EE:EA:CE:CD:DC:EE:59:5D:CF:6E:4B:F1:81:45:37:C5:FC
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer:       /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial:       01964E5A592F84021FC70073F22140E704BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number:          0BD1
Signing time:             Sat 19 Apr 2025 14:01:05 +0000
Manifest this update:     Sat 19 Apr 2025 14:01:05 +0000
Manifest next update:     Sun 20 Apr 2025 14:01:05 +0000
Files and hashes:         1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: epuw4Xmmja+nFp3FgsWRHVtOjZJT8ak3IXbk5GHfAdU=)
                          2: q_FuKEatt0zR6PfM8hStM_OAEUA.roa (hash: 2y3NDWHhYWGNF2joY5nRoFi6Rxr80fn/VSsCMypexYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:5a:59:2f:84:02:1f:c7:00:73:f2:21:40:e7:04:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
        Validity
            Not Before: Apr 19 14:01:05 2025 GMT
            Not After : Apr 20 14:01:05 2025 GMT
        Subject: CN=7de669eeeacecddcee595dcf6e4bf1814537c5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:1f:17:7c:80:94:16:ac:90:03:5f:67:41:
                    3b:fe:98:15:95:ad:cc:e5:1b:d3:5a:f4:6b:ea:eb:
                    f4:a0:89:1b:27:94:10:41:57:4d:a7:f1:7e:1c:9f:
                    5a:3d:5e:1c:c9:93:4a:50:1c:61:46:35:d0:3b:ba:
                    6d:98:61:dc:15:0b:96:7b:3f:8b:3a:84:7c:a4:e2:
                    5e:8c:48:76:33:f6:7f:2e:49:f0:0e:e2:74:0f:40:
                    5b:43:ba:62:d8:14:c3:46:17:97:3a:f8:c0:74:fa:
                    44:c8:21:5a:52:ac:11:2e:2d:21:27:73:72:7a:1e:
                    e0:f6:5b:c6:39:65:a4:21:3d:6e:98:ff:a6:9e:d5:
                    d5:98:44:79:f2:97:11:8c:e7:e0:c8:e1:af:fc:8a:
                    8c:0d:f1:26:e6:6e:66:ac:29:20:38:f7:26:50:10:
                    a7:7a:67:51:5b:8a:b6:90:3b:61:27:82:ad:8a:ab:
                    4a:6a:1d:b6:29:e3:96:44:ba:72:d4:cb:06:8d:47:
                    89:35:1c:cb:66:f1:88:e3:4c:57:17:40:79:e0:7e:
                    4a:80:e9:d1:60:bf:77:4c:6d:aa:f9:a4:e0:ea:ef:
                    c9:a7:95:a7:27:ba:a5:cf:c5:df:e4:fc:37:7c:0e:
                    88:7a:63:ea:7c:c4:51:74:72:a3:80:9f:c4:af:51:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E6:69:EE:EA:CE:CD:DC:EE:59:5D:CF:6E:4B:F1:81:45:37:C5:FC
            X509v3 Authority Key Identifier:
                keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:19:cb:0c:eb:e5:28:80:aa:d2:99:e9:97:e4:f7:84:36:44:
         6c:e6:73:6e:b0:6f:61:f1:a3:22:85:eb:e2:0d:ce:5f:99:cf:
         e5:00:9e:d3:82:0f:f7:29:fa:90:c3:f2:d4:e8:7b:90:38:6e:
         68:66:a5:36:f4:8f:ce:de:f4:1a:01:68:22:bf:27:35:d9:18:
         c8:2c:83:e5:22:e3:02:8b:b8:de:06:92:8a:b5:c4:e6:48:c8:
         de:ff:cd:57:9f:70:c6:21:ad:83:99:80:de:04:7a:fb:f4:f2:
         8d:df:9a:b4:10:cd:40:a7:c7:e1:40:36:6f:5e:7e:40:b5:99:
         03:60:09:f2:a7:bd:d7:a4:1f:e1:c3:79:e9:3c:1d:b2:2f:6a:
         2d:c2:21:68:49:35:ee:d9:5f:8b:aa:a9:17:a0:38:48:3a:1a:
         25:0a:83:4e:26:87:d1:f8:40:e2:08:0f:34:34:9d:8a:09:dc:
         ba:0e:6b:e1:df:ba:f8:36:08:a9:b2:eb:9a:4f:8c:f2:eb:ea:
         89:ff:8d:d1:5f:c6:9a:8b:c5:6f:99:6d:e7:28:7a:c4:4f:e6:
         e8:d5:b5:be:fd:2f:fd:87:f5:48:ad:6c:7c:bc:8d:85:b2:20:
         5a:0b:03:55:fb:4d:00:50:77:43:5f:f5:3c:4b:24:f4:39:29:
         44:25:07:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWlkvhAIfxwBz8iFA5wS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGEzM2E1OGZiNDc2MzRkNjE0ZWMwOWE2ODk4ZGUwZjU4
MDA2ZmUwHhcNMjUwNDE5MTQwMTA1WhcNMjUwNDIwMTQwMTA1WjAzMTEwLwYDVQQD
Eyg3ZGU2NjllZWVhY2VjZGRjZWU1OTVkY2Y2ZTRiZjE4MTQ1MzdjNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS0fF3yAlBaskANfZ0E7/pgVla3M
5RvTWvRr6uv0oIkbJ5QQQVdNp/F+HJ9aPV4cyZNKUBxhRjXQO7ptmGHcFQuWez+L
OoR8pOJejEh2M/Z/LknwDuJ0D0BbQ7pi2BTDRheXOvjAdPpEyCFaUqwRLi0hJ3Ny
eh7g9lvGOWWkIT1umP+mntXVmER58pcRjOfgyOGv/IqMDfEm5m5mrCkgOPcmUBCn
emdRW4q2kDthJ4KtiqtKah22KeOWRLpy1MsGjUeJNRzLZvGI40xXF0B54H5KgOnR
YL93TG2q+aTg6u/Jp5WnJ7qlz8Xf5Pw3fA6IemPqfMRRdHKjgJ/Er1GnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3mae7qzs3c7lldz25L8YFFN8X8MB8GA1UdIwQY
MBaAFOTaM6WPtHY01hTsCaaJjeD1gAb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMt
NmNlNjAyMjZhOWU4LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMtNmNlNjAyMjZhOWU4
LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRnLDOvl
KICq0pnpl+T3hDZEbOZzbrBvYfGjIoXr4g3OX5nP5QCe04IP9yn6kMPy1Oh7kDhu
aGalNvSPzt70GgFoIr8nNdkYyCyD5SLjAou43gaSirXE5kjI3v/NV59wxiGtg5mA
3gR6+/Tyjd+atBDNQKfH4UA2b15+QLWZA2AJ8qe916Qf4cN56Twdsi9qLcIhaEk1
7tlfi6qpF6A4SDoaJQqDTiaH0fhA4ggPNDSdigncug5r4d+6+DYIqbLrmk+M8uvq
if+N0V/GmovFb5lt5yh6xE/m6NW1vv0v/Yf1SK1sfLyNhbIgWgsDVftNAFB3Q1/1
PEsk9DkpRCUHOA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:08 2025 by rpki-client