Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File:                     Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier:          a09XJTKHCemdlZKXliPzdczcS6wYu7hw4r0A/tlupP8=
Subject key identifier:   51:F5:D6:8E:4B:7C:F9:9A:30:4E:12:2B:64:0B:2F:5D:6C:0E:C3:65
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer:       /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial:       019644449CD73B9D2C0FB18D7789288F9446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 15:01:09 +0000
Manifest this update:     Thu 17 Apr 2025 15:01:09 +0000
Manifest next update:     Fri 18 Apr 2025 15:01:09 +0000
Files and hashes:         1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
                          2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: I2WKmHBwDskAsV1ShgzWQH1p7GH3nuFb+ghy7geFH0o=)
                          3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:9c:d7:3b:9d:2c:0f:b1:8d:77:89:28:8f:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
        Validity
            Not Before: Apr 17 15:01:09 2025 GMT
            Not After : Apr 18 15:01:09 2025 GMT
        Subject: CN=51f5d68e4b7cf99a304e122b640b2f5d6c0ec365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:ce:2b:5d:7c:9b:18:e7:49:a6:b6:5a:45:
                    43:72:92:49:7d:2b:44:e1:aa:b6:1b:7b:98:5d:ca:
                    c9:11:57:a0:78:57:47:fb:62:f0:99:f1:64:f8:59:
                    17:3c:1c:4c:13:0b:cd:40:a3:11:49:37:96:e2:2d:
                    13:8f:44:50:a8:00:cc:a7:13:81:8d:88:80:92:c9:
                    39:ec:f1:44:dc:b6:09:b8:ea:55:a8:52:00:8a:0f:
                    50:9e:61:45:dc:58:7d:b6:0f:67:96:96:26:d2:2d:
                    ff:bf:28:6b:ea:89:45:a8:67:46:f1:43:fd:2b:9f:
                    85:50:4b:7c:ad:e6:60:ff:36:c5:37:ac:3e:85:f8:
                    fe:00:45:37:b7:de:ed:00:fb:e5:c8:a2:ad:80:10:
                    c0:8c:9a:67:4d:c2:7d:c5:f0:c6:0f:90:4a:7e:32:
                    99:a2:06:ac:76:2f:30:25:f2:a2:bd:b3:df:fe:6f:
                    7b:48:24:3f:56:9b:ae:c2:ee:ce:7a:0d:06:db:a8:
                    95:29:8d:5e:1d:1b:b0:0a:2a:b2:ae:1c:7e:2c:91:
                    cd:50:2c:4e:93:7b:83:38:cb:d2:f1:48:18:42:7a:
                    3b:e9:d4:bb:98:a8:b1:d2:07:12:01:af:de:0b:d7:
                    2a:2c:03:76:25:f4:97:8e:a1:07:67:d2:d1:5d:2e:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F5:D6:8E:4B:7C:F9:9A:30:4E:12:2B:64:0B:2F:5D:6C:0E:C3:65
            X509v3 Authority Key Identifier:
                keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cb:98:24:05:c9:24:64:4a:de:9b:b5:0e:f7:6d:fb:74:20:
         6c:37:15:6c:58:0f:05:8a:cf:55:52:f2:07:92:7b:45:8d:1b:
         52:bf:8e:c8:d7:12:51:87:45:a3:7f:cb:e4:63:82:35:0c:75:
         96:81:f4:f3:b9:69:e1:2e:1a:58:ce:53:87:93:19:71:9e:33:
         68:64:f6:3d:0d:b7:c9:a9:c3:66:14:5e:85:d7:a0:16:04:4b:
         69:81:4b:28:3d:d4:8c:e4:bd:7d:e7:fb:9a:9e:b2:3f:ac:eb:
         e2:71:8f:71:e6:87:52:00:44:99:d6:67:a8:32:c7:9f:2c:e1:
         59:98:b5:69:68:7a:1a:c1:99:43:0b:90:35:b5:73:81:b3:1e:
         02:16:01:5a:70:91:f0:9f:e4:be:17:5b:85:8e:b7:e5:a8:db:
         cd:77:35:86:83:e7:ad:fb:6e:fe:68:cf:58:7b:bf:e9:49:4a:
         62:1c:3c:4c:ba:ca:af:bf:b7:df:f7:49:24:ad:db:55:20:fa:
         09:53:68:18:cf:47:97:5b:72:ee:00:8b:76:3b:3a:6c:41:fa:
         cf:4e:2d:7d:9f:b4:4b:25:16:05:f6:a2:cb:bf:e6:f0:d1:0f:
         0c:86:9e:86:50:38:8b:86:f6:39:eb:c6:c2:99:37:77:d3:84:
         9c:01:9f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERJzXO50sD7GNd4koj5RGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjczYjY4NjFjZjdjZjQ2NDZjYzVlMDQyNzVkNjYxNzYz
NWYwN2IwHhcNMjUwNDE3MTUwMTA5WhcNMjUwNDE4MTUwMTA5WjAzMTEwLwYDVQQD
Eyg1MWY1ZDY4ZTRiN2NmOTlhMzA0ZTEyMmI2NDBiMmY1ZDZjMGVjMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7jOK118mxjnSaa2WkVDcpJJfStE
4aq2G3uYXcrJEVegeFdH+2LwmfFk+FkXPBxMEwvNQKMRSTeW4i0Tj0RQqADMpxOB
jYiAksk57PFE3LYJuOpVqFIAig9QnmFF3Fh9tg9nlpYm0i3/vyhr6olFqGdG8UP9
K5+FUEt8reZg/zbFN6w+hfj+AEU3t97tAPvlyKKtgBDAjJpnTcJ9xfDGD5BKfjKZ
ogasdi8wJfKivbPf/m97SCQ/Vpuuwu7Oeg0G26iVKY1eHRuwCiqyrhx+LJHNUCxO
k3uDOMvS8UgYQno76dS7mKix0gcSAa/eC9cqLAN2JfSXjqEHZ9LRXS6h2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH11o5LfPmaME4SK2QLL11sDsNlMB8GA1UdIwQY
MBaAFD8nO2hhz3z0ZGzF4EJ11mF2NfB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEt
OGI3YzU3YzU2MjE1LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEtOGI3YzU3YzU2MjE1
LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksuYJAXJ
JGRK3pu1Dvdt+3QgbDcVbFgPBYrPVVLyB5J7RY0bUr+OyNcSUYdFo3/L5GOCNQx1
loH087lp4S4aWM5Th5MZcZ4zaGT2PQ23yanDZhRehdegFgRLaYFLKD3UjOS9fef7
mp6yP6zr4nGPceaHUgBEmdZnqDLHnyzhWZi1aWh6GsGZQwuQNbVzgbMeAhYBWnCR
8J/kvhdbhY635ajbzXc1hoPnrftu/mjPWHu/6UlKYhw8TLrKr7+33/dJJK3bVSD6
CVNoGM9Hl1ty7gCLdjs6bEH6z04tfZ+0SyUWBfaiy7/m8NEPDIaehlA4i4b2OevG
wpk3d9OEnAGfSQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:54 2025 by rpki-client