Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File:                     _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier:          OgKwE9c+Ee7D4tcMhLwb1xnJ9n1q2UMk1IJFT3gjZmA=
Subject key identifier:   9D:AE:0A:6A:2D:AB:89:73:42:16:F2:87:50:00:FE:5F:A4:29:77:A6
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       019638404D611FE676BEC63623B714D9537A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number:          129F
Signing time:             Tue 15 Apr 2025 07:01:00 +0000
Manifest this update:     Tue 15 Apr 2025 07:01:00 +0000
Manifest next update:     Wed 16 Apr 2025 07:01:00 +0000
Files and hashes:         1: Jaf-Nc0O1GOCePBZlGQ18UYp4xo.roa (hash: 4lquctxZybthnn7HIcusM8tbPg35K5u3vKHWESNtRoo=)
                          2: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: KOITo1LV0c2QR164pxlM1X7DvM8G1jeoNAKCBwV0scg=)
                          3: f7S9xAXMtoHXIWXeQsykpctQxNM.roa (hash: Q4hA/wIKEkwP/Vj65aZ2uO4MqJnj/mjQP7x/ZVfd3Uc=)
                          4: xThsddYizU9zce14GHgo8DJEm0M.roa (hash: xTnNSblE9F5a4BVdVV24fpOa0j64fQcjoHWF3jqeK84=)
                          5: xuTFaPBZlRCNPxPmstQBZKmKPnU.roa (hash: sRHH2//YW4/9Ra0qA3kCbbxZqx+E6+W61I8MRO4kS6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:40:4d:61:1f:e6:76:be:c6:36:23:b7:14:d9:53:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Apr 15 07:01:00 2025 GMT
            Not After : Apr 16 07:01:00 2025 GMT
        Subject: CN=9dae0a6a2dab89734216f2875000fe5fa42977a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:3c:63:fa:ce:d2:64:79:c2:89:4a:f6:9e:
                    10:6f:d8:c3:01:ba:91:0a:09:3a:4b:a3:8e:ed:9c:
                    3e:b5:b2:33:da:33:41:e6:59:43:15:a9:c5:ba:16:
                    24:0f:66:30:e1:0c:1d:7e:32:a7:2a:4a:c6:21:d3:
                    30:f4:a1:95:bc:10:25:78:86:20:c4:3a:63:98:48:
                    0e:fd:1a:4a:47:db:7c:d9:21:b7:ee:d0:16:cc:c1:
                    d6:34:d4:b4:92:02:8a:4e:6f:4c:45:a2:b3:2a:46:
                    4b:f2:e4:d5:fe:cf:57:8e:18:79:f2:69:32:0f:5e:
                    83:ac:38:35:7c:0c:57:0c:4a:b9:3e:76:35:c9:58:
                    98:cb:76:fc:f4:07:ab:97:24:b7:ad:0f:88:a9:09:
                    c8:b1:18:b8:2c:08:9f:f1:df:53:4f:65:b1:35:df:
                    51:9d:06:28:dc:1e:1d:c8:4b:9d:65:24:5a:10:d8:
                    a3:98:c0:ee:d3:09:32:fa:bc:9a:90:54:54:77:0a:
                    64:6a:bf:0b:7b:36:a1:c1:39:87:69:ef:24:15:86:
                    d4:12:19:c2:dc:22:ba:29:53:20:9e:da:f3:b3:48:
                    a0:7d:aa:7e:f7:16:13:d3:4e:65:3c:b0:73:a4:68:
                    1d:92:62:60:57:d2:ff:17:fc:ba:7f:07:12:19:48:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:0A:6A:2D:AB:89:73:42:16:F2:87:50:00:FE:5F:A4:29:77:A6
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:8e:5c:fa:bd:67:73:2b:9c:45:11:1b:c6:6b:1a:4b:18:
         e5:e2:12:4c:c3:a3:e3:29:8a:ca:f4:87:7a:81:bb:13:48:ba:
         eb:f5:f1:29:0f:4a:af:67:24:aa:77:ae:75:59:90:b8:3f:bc:
         85:2d:d7:35:d8:07:73:f9:6f:cb:f8:50:eb:77:04:b6:e8:b9:
         61:6f:3f:e1:44:98:68:39:7c:bb:7e:73:e5:ec:a9:32:86:b6:
         52:0c:9f:29:b9:c1:19:a3:98:bd:e0:f2:ab:0b:14:06:6b:d7:
         ac:7b:3f:22:6f:97:5d:f0:71:4b:da:0d:80:57:6a:2a:e9:8a:
         38:5e:64:78:7d:64:cb:e7:bb:79:1e:25:fb:6f:65:03:1d:7f:
         a0:01:00:7d:7f:e7:3f:16:c2:aa:4e:2d:9a:cc:95:28:32:4c:
         0a:86:5b:83:4e:f9:cb:3c:d5:87:82:c2:de:be:d2:57:11:51:
         44:b7:74:fe:34:80:eb:e0:c9:49:b3:8d:e2:03:cd:9b:16:78:
         85:24:03:9c:94:24:35:b4:8f:89:eb:c3:ed:62:44:b0:e8:0e:
         fb:8f:25:c5:4b:80:d3:be:41:0e:16:09:55:d5:b3:91:9f:54:
         00:db:06:47:ba:39:98:c8:45:4a:ad:aa:77:d0:ab:68:fc:10:
         6c:49:30:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY4QE1hH+Z2vsY2I7cU2VN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh
NGFlNDEwHhcNMjUwNDE1MDcwMTAwWhcNMjUwNDE2MDcwMTAwWjAzMTEwLwYDVQQD
Eyg5ZGFlMGE2YTJkYWI4OTczNDIxNmYyODc1MDAwZmU1ZmE0Mjk3N2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeg8Y/rO0mR5wolK9p4Qb9jDAbqR
Cgk6S6OO7Zw+tbIz2jNB5llDFanFuhYkD2Yw4QwdfjKnKkrGIdMw9KGVvBAleIYg
xDpjmEgO/RpKR9t82SG37tAWzMHWNNS0kgKKTm9MRaKzKkZL8uTV/s9Xjhh58mky
D16DrDg1fAxXDEq5PnY1yViYy3b89AerlyS3rQ+IqQnIsRi4LAif8d9TT2WxNd9R
nQYo3B4dyEudZSRaENijmMDu0wky+ryakFRUdwpkar8LezahwTmHae8kFYbUEhnC
3CK6KVMgntrzs0igfap+9xYT005lPLBzpGgdkmJgV9L/F/y6fwcSGUhKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2uCmotq4lzQhbyh1AA/l+kKXemMB8GA1UdIwQY
MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt
MWIxMzYyYjliNmEyLzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy
LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbCOXPq9
Z3MrnEURG8ZrGksY5eISTMOj4ymKyvSHeoG7E0i66/XxKQ9Kr2ckqneudVmQuD+8
hS3XNdgHc/lvy/hQ63cEtui5YW8/4USYaDl8u35z5eypMoa2UgyfKbnBGaOYveDy
qwsUBmvXrHs/Im+XXfBxS9oNgFdqKumKOF5keH1ky+e7eR4l+29lAx1/oAEAfX/n
PxbCqk4tmsyVKDJMCoZbg075yzzVh4LC3r7SVxFRRLd0/jSA6+DJSbON4gPNmxZ4
hSQDnJQkNbSPievD7WJEsOgO+48lxUuA075BDhYJVdWzkZ9UANsGR7o5mMhFSq2q
d9CraPwQbEkwpg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 10:19:05 2025 by rpki-client