Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File:                     TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier:          KPxZpfAxPlF+DzwCqBnkjsurkWLz0MgS849k5jCk3r8=
Subject key identifier:   EA:EB:6B:B9:FB:D6:D7:07:68:13:9C:D5:AF:F3:50:FF:53:BA:C7:AB
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer:       /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial:       019603AE53E050652AA37DB59F843E1757D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number:          0568
Signing time:             Sat 05 Apr 2025 02:01:18 +0000
Manifest this update:     Sat 05 Apr 2025 02:01:18 +0000
Manifest next update:     Sun 06 Apr 2025 02:01:18 +0000
Files and hashes:         1: SILoOgzFVVKXYr4BeO1iAtaShUA.roa (hash: dPpD4jLPayYBOVInoYbVqKqufem4sI8eQUfot03I5EY=)
                          2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: suinI4C9wS2oKrfhIXKKu2xUvLsD3hU6uh8R2J/uKnM=)
                          3: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 02:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:03:ae:53:e0:50:65:2a:a3:7d:b5:9f:84:3e:17:57:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
        Validity
            Not Before: Apr  5 02:01:18 2025 GMT
            Not After : Apr  6 02:01:18 2025 GMT
        Subject: CN=eaeb6bb9fbd6d70768139cd5aff350ff53bac7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:63:1a:b2:90:37:50:8e:78:0f:93:e5:f7:
                    fc:ab:64:e5:d6:16:9d:ac:72:9c:b8:c9:7c:e2:2b:
                    38:a2:ca:c0:cf:15:78:8a:e3:72:1b:0a:4a:39:6b:
                    4e:81:c6:a0:37:89:69:7e:13:a2:d5:f9:f7:8d:4e:
                    1b:67:22:5c:ce:7b:21:84:88:4f:a9:f3:e5:a8:97:
                    9f:75:aa:c3:5e:e0:5a:e2:93:46:ef:06:d5:ca:65:
                    23:59:14:f7:4a:7b:6b:38:7e:40:e0:60:07:ce:f8:
                    dc:1b:ff:3f:09:95:e6:c9:bd:f0:fb:aa:c6:66:d1:
                    04:12:84:c8:8d:07:26:e1:50:0e:d0:ed:77:4b:32:
                    89:1a:bf:64:82:1f:d7:16:dd:64:24:19:14:cc:62:
                    b9:00:6c:d4:3a:98:15:fc:f3:4d:99:ac:b2:df:d5:
                    e5:b4:81:82:64:d4:ce:26:f4:89:75:d6:12:2e:b6:
                    80:3e:01:75:94:96:41:61:9c:3d:4a:38:f4:16:22:
                    21:61:63:9d:e6:1a:5b:f6:5a:54:22:bd:fe:32:e4:
                    da:fc:50:3a:ff:46:9c:5c:e4:95:a3:e1:36:09:63:
                    68:56:c4:5e:4d:8b:58:1c:96:c8:32:c4:06:e2:9c:
                    fd:83:83:c0:81:fa:a5:25:5c:71:64:c2:a7:a0:34:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:6B:B9:FB:D6:D7:07:68:13:9C:D5:AF:F3:50:FF:53:BA:C7:AB
            X509v3 Authority Key Identifier:
                keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:88:c5:c1:23:c7:6b:fe:df:40:8e:e5:ee:3f:1b:4c:f8:6c:
         62:bf:b3:36:a7:a2:22:fd:31:fa:15:4c:c6:32:ed:b6:3e:a6:
         0b:00:e4:ba:de:58:ad:6f:a5:30:d8:82:97:4e:2b:b5:43:e4:
         29:8c:ab:62:b6:f3:f8:a5:64:3c:19:00:59:ee:52:2a:78:7c:
         d7:82:49:b1:83:ff:fb:a3:20:02:a5:54:17:5f:82:d0:3d:41:
         00:1f:fa:2e:6c:36:5f:db:12:ed:f9:53:18:d0:df:59:fc:54:
         ea:80:37:be:5b:cf:b9:e2:81:7a:a9:9b:cc:43:4c:94:e1:a8:
         3d:42:43:94:f8:47:d2:dc:b5:38:48:60:77:ed:13:e8:ec:72:
         c0:8b:77:47:a4:94:38:3a:88:f8:1c:1e:93:55:18:a5:63:47:
         7e:25:43:49:56:1e:52:c4:f3:23:2f:0d:fe:ab:48:dc:5c:54:
         b2:f0:14:fc:24:9f:7e:1c:71:ee:04:64:de:c2:2b:b6:ec:3d:
         65:f9:8b:33:b1:d0:3b:e2:80:9b:d0:4a:62:cb:eb:5d:b6:43:
         7f:5e:6b:b5:c3:dd:c2:6c:f6:17:ac:55:79:2a:d4:d8:86:01:
         72:29:33:2c:a1:1c:07:94:77:da:ec:28:d3:f3:26:78:18:b1:
         e8:30:dc:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYDrlPgUGUqo321n4Q+F1fWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0
YTlhMjYwHhcNMjUwNDA1MDIwMTE4WhcNMjUwNDA2MDIwMTE4WjAzMTEwLwYDVQQD
EyhlYWViNmJiOWZiZDZkNzA3NjgxMzljZDVhZmYzNTBmZjUzYmFjN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslljGrKQN1COeA+T5ff8q2Tl1had
rHKcuMl84is4osrAzxV4iuNyGwpKOWtOgcagN4lpfhOi1fn3jU4bZyJcznshhIhP
qfPlqJefdarDXuBa4pNG7wbVymUjWRT3SntrOH5A4GAHzvjcG/8/CZXmyb3w+6rG
ZtEEEoTIjQcm4VAO0O13SzKJGr9kgh/XFt1kJBkUzGK5AGzUOpgV/PNNmayy39Xl
tIGCZNTOJvSJddYSLraAPgF1lJZBYZw9Sjj0FiIhYWOd5hpb9lpUIr3+MuTa/FA6
/0acXOSVo+E2CWNoVsReTYtYHJbIMsQG4pz9g4PAgfqlJVxxZMKnoDSQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrra7n71tcHaBOc1a/zUP9TuserMB8GA1UdIwQY
MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt
OTI0MWZmNmVjM2JmLzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm
LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwojFwSPH
a/7fQI7l7j8bTPhsYr+zNqeiIv0x+hVMxjLttj6mCwDkut5YrW+lMNiCl04rtUPk
KYyrYrbz+KVkPBkAWe5SKnh814JJsYP/+6MgAqVUF1+C0D1BAB/6Lmw2X9sS7flT
GNDfWfxU6oA3vlvPueKBeqmbzENMlOGoPUJDlPhH0ty1OEhgd+0T6OxywIt3R6SU
ODqI+Bwek1UYpWNHfiVDSVYeUsTzIy8N/qtI3FxUsvAU/CSffhxx7gRk3sIrtuw9
ZfmLM7HQO+KAm9BKYsvrXbZDf15rtcPdwmz2F6xVeSrU2IYBcikzLKEcB5R32uwo
0/MmeBix6DDctg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:22 2025 by rpki-client