Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File:                     1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier:          FEp5kDWau2gRiCprcD9zOh8GdgiHHq+haOcxueM88Tw=
Subject key identifier:   26:39:1A:17:EF:34:D5:2D:D4:F6:EA:E5:0C:33:6A:5E:4B:F9:BE:F4
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       01964179F6ABCE678C09BE1A00C542A35AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number:          1500
Signing time:             Thu 17 Apr 2025 02:00:34 +0000
Manifest this update:     Thu 17 Apr 2025 02:00:34 +0000
Manifest next update:     Fri 18 Apr 2025 02:00:34 +0000
Files and hashes:         1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: idsVgxWAARncxuSGE4trQK3IL4K3iKjdaJh/q//nqs4=)
                          2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=)
                          3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=)
                          4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:79:f6:ab:ce:67:8c:09:be:1a:00:c5:42:a3:5a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: Apr 17 02:00:34 2025 GMT
            Not After : Apr 18 02:00:34 2025 GMT
        Subject: CN=26391a17ef34d52dd4f6eae50c336a5e4bf9bef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:e2:d6:d7:b8:aa:b9:ea:f0:66:ff:f4:45:
                    25:3c:fd:64:23:1b:8e:63:d7:ba:0f:36:72:64:79:
                    d4:6e:57:fc:22:49:22:02:56:82:4f:9c:93:aa:3f:
                    ad:c7:85:a2:94:10:47:f5:f3:13:29:81:8c:ca:c2:
                    bb:f7:59:bc:5a:ce:55:6d:07:f5:00:7f:8f:b6:15:
                    15:ab:a4:9f:37:e5:28:5d:3f:60:98:c1:7f:4e:b7:
                    64:b7:f1:b9:ad:92:e1:94:dc:7c:6d:25:5a:d6:bf:
                    2e:9f:ec:36:ab:e7:5b:61:7c:91:f6:6e:45:17:9f:
                    58:c8:d8:50:04:92:de:63:ad:19:41:60:2d:47:b7:
                    a7:f2:a4:17:64:64:bd:f3:ba:27:0b:12:10:12:c4:
                    68:8d:f1:f7:b9:18:72:8a:46:0d:e4:d1:48:f0:21:
                    9e:93:63:51:10:08:17:62:d8:2b:89:e5:db:21:00:
                    77:3f:8c:ae:3e:68:4f:50:df:3b:c9:b0:db:e9:9f:
                    78:35:c9:44:f6:00:db:51:60:3f:87:99:d5:3f:26:
                    10:f9:b0:8c:5e:ec:7e:0e:9a:2d:51:dd:bb:05:a9:
                    56:58:28:e6:e2:2c:1e:a8:2f:13:c3:0a:5f:d5:c6:
                    30:a5:70:e5:fc:28:b3:10:11:96:6e:b9:81:b0:eb:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:39:1A:17:EF:34:D5:2D:D4:F6:EA:E5:0C:33:6A:5E:4B:F9:BE:F4
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:51:74:0a:64:ec:09:78:ce:e4:9d:20:ab:ba:2a:2c:32:
         53:9a:97:55:94:91:3d:2e:15:73:95:a8:0f:35:0b:0b:ee:b5:
         d4:f2:40:8b:e7:36:9c:c5:4e:c9:c5:52:c2:d7:75:4e:5b:78:
         d1:03:b5:53:3c:67:54:e5:ac:d4:34:05:b2:3b:5c:40:68:1f:
         bc:fb:0b:9d:52:4c:bd:49:f1:2e:7a:9a:7c:36:d7:94:02:96:
         0c:9d:10:ef:d5:e7:f1:30:df:e6:4d:8b:9b:dd:4d:de:93:29:
         4d:2b:ba:c6:46:a9:5a:12:a1:0e:23:16:2e:9d:93:6a:34:54:
         f7:5a:c3:c7:5b:52:4f:33:4e:a8:de:f1:87:f1:e8:30:40:09:
         8f:57:2a:27:7f:99:29:b2:b4:2c:51:24:c7:dd:37:6d:59:0e:
         76:c5:b5:86:04:6d:6b:7e:52:91:f0:a0:5c:1f:39:b1:14:23:
         d9:80:0f:2c:41:90:75:ab:60:9d:36:3f:85:21:0a:91:f1:c8:
         41:6f:4a:b0:d8:0b:e6:9b:96:ae:35:55:98:92:06:2a:63:51:
         48:7b:f2:3b:75:9c:07:fb:ab:4c:c1:81:e8:b3:e0:e7:fd:4b:
         59:a4:2a:4d:35:2f:37:01:59:b2:94:11:83:f2:92:a9:12:66:
         6b:cf:2e:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBefarzmeMCb4aAMVCo1q5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3
MjFlNTUwHhcNMjUwNDE3MDIwMDM0WhcNMjUwNDE4MDIwMDM0WjAzMTEwLwYDVQQD
EygyNjM5MWExN2VmMzRkNTJkZDRmNmVhZTUwYzMzNmE1ZTRiZjliZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Xi1te4qrnq8Gb/9EUlPP1kIxuO
Y9e6DzZyZHnUblf8IkkiAlaCT5yTqj+tx4WilBBH9fMTKYGMysK791m8Ws5VbQf1
AH+PthUVq6SfN+UoXT9gmMF/Trdkt/G5rZLhlNx8bSVa1r8un+w2q+dbYXyR9m5F
F59YyNhQBJLeY60ZQWAtR7en8qQXZGS987onCxIQEsRojfH3uRhyikYN5NFI8CGe
k2NREAgXYtgrieXbIQB3P4yuPmhPUN87ybDb6Z94NclE9gDbUWA/h5nVPyYQ+bCM
Xux+DpotUd27BalWWCjm4iweqC8Twwpf1cYwpXDl/CizEBGWbrmBsOsHPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY5GhfvNNUt1Pbq5Qwzal5L+b70MB8GA1UdIwQY
MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt
NmQ2NTVjZDk0NDY4LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4
LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML9RdApk
7Al4zuSdIKu6KiwyU5qXVZSRPS4Vc5WoDzULC+611PJAi+c2nMVOycVSwtd1Tlt4
0QO1UzxnVOWs1DQFsjtcQGgfvPsLnVJMvUnxLnqafDbXlAKWDJ0Q79Xn8TDf5k2L
m91N3pMpTSu6xkapWhKhDiMWLp2TajRU91rDx1tSTzNOqN7xh/HoMEAJj1cqJ3+Z
KbK0LFEkx903bVkOdsW1hgRta35SkfCgXB85sRQj2YAPLEGQdatgnTY/hSEKkfHI
QW9KsNgL5puWrjVVmJIGKmNRSHvyO3WcB/urTMGB6LPg5/1LWaQqTTUvNwFZspQR
g/KSqRJma88u4g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:02:58 2025 by rpki-client