Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File:                     U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier:          neoiHFXINyLYF1odOKQnxNZJgvbN3Gtw8MgNGWv0vuw=
Subject key identifier:   5D:B5:57:2C:DF:65:D7:61:53:46:6F:07:0A:C5:07:8B:4C:64:71:9C
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer:       /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial:       019607C218172A8CD3D599FEDD528F2C4E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number:          066A
Signing time:             Sat 05 Apr 2025 21:01:22 +0000
Manifest this update:     Sat 05 Apr 2025 21:01:22 +0000
Manifest next update:     Sun 06 Apr 2025 21:01:22 +0000
Files and hashes:         1: PrynGxhd3fBYSysYytSLlNvgiPU.roa (hash: c1xBK/MstkcP/5fvaGRoD60yvfbDsZTSPuvQcmy7U14=)
                          2: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (hash: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=)
                          3: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: P1tN+AKRvHdbZWuAlj3zQqb3s1BDaYegYZfaBua6x/0=)
                          4: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (hash: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:07:c2:18:17:2a:8c:d3:d5:99:fe:dd:52:8f:2c:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
        Validity
            Not Before: Apr  5 21:01:22 2025 GMT
            Not After : Apr  6 21:01:22 2025 GMT
        Subject: CN=5db5572cdf65d76153466f070ac5078b4c64719c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:7f:bb:bd:33:d2:97:fd:0d:3b:8f:2b:2c:
                    e4:71:22:ad:ad:e8:c2:01:49:2b:1c:4a:c8:bb:d8:
                    4e:22:bc:7b:d0:93:1d:c1:28:5e:6d:c8:15:c4:3d:
                    6c:1a:1c:b5:fc:00:e5:f9:5c:b5:6f:46:f2:1b:9e:
                    48:80:1e:65:9e:92:6e:db:4d:60:74:6a:0d:a2:dc:
                    aa:fd:e0:1d:bc:38:4e:09:77:99:50:c7:f0:87:8c:
                    12:9e:47:a1:8e:8b:3a:84:51:81:33:60:11:47:89:
                    f0:33:2e:70:62:54:42:58:0f:ca:59:b9:79:c2:6d:
                    87:e4:45:51:53:ae:67:de:8d:fc:9e:5e:8f:ce:fd:
                    3d:b7:5c:97:af:cf:7f:1b:e9:46:18:a1:06:98:be:
                    0f:fe:46:a4:29:35:fe:2d:79:89:b3:bc:ef:48:38:
                    61:55:89:51:17:db:6d:64:a4:88:6e:df:ac:c9:26:
                    3b:52:1d:dc:22:ca:96:08:8d:cc:3b:38:ea:0c:91:
                    e9:b2:6a:4b:9a:3d:e9:d1:06:09:56:19:cb:03:86:
                    2b:dd:ec:18:df:c5:6d:4d:34:b5:db:53:df:17:4a:
                    dd:de:c3:27:3a:a5:7f:fa:33:9c:5f:b8:a9:d1:12:
                    0c:ee:1a:1f:c8:44:79:50:1c:bd:a7:05:e0:4f:d8:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B5:57:2C:DF:65:D7:61:53:46:6F:07:0A:C5:07:8B:4C:64:71:9C
            X509v3 Authority Key Identifier:
                keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:02:8c:d5:91:5f:a7:36:fb:9e:41:ec:0b:53:90:74:15:
         aa:88:2a:c0:4b:a2:7e:5c:1d:be:1a:5b:98:c6:38:2a:fa:82:
         27:94:81:06:68:8c:12:46:e1:26:6a:55:7d:c8:b5:61:91:30:
         04:15:1f:eb:fa:32:8a:7d:f5:f5:25:b7:fa:4e:33:5e:ad:4c:
         51:ce:da:48:9f:8a:6e:dd:e1:eb:32:d5:e8:82:9b:34:b8:65:
         67:32:4d:31:d8:0e:94:71:ab:bb:a0:c3:5d:e1:ab:93:9a:38:
         bd:9d:18:73:44:a0:52:9c:93:73:1b:a3:8c:5f:c6:e4:bb:5a:
         dd:52:45:5f:75:de:a5:5b:e3:1a:c8:ff:a7:99:d6:52:79:63:
         5e:af:83:6e:0b:ec:bb:c9:32:cd:b0:05:72:1d:51:fa:dd:63:
         a9:0a:38:8b:28:b4:b2:ff:ac:fd:2c:1a:f4:ad:88:c6:65:ec:
         d5:7c:21:81:2b:93:8a:b2:98:b8:27:bd:b2:05:95:b2:f8:e9:
         a4:04:44:4d:ad:fb:d5:45:41:5e:11:89:6d:88:98:86:82:70:
         c8:71:ac:ab:a5:cb:e6:f5:ca:17:1b:85:12:b9:0c:d9:39:00:
         f4:f5:8d:e3:83:37:7e:c5:e8:f3:7b:6c:00:89:ce:9f:dc:45:
         41:88:5f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYHwhgXKozT1Zn+3VKPLE4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw
N2UyMjEwHhcNMjUwNDA1MjEwMTIyWhcNMjUwNDA2MjEwMTIyWjAzMTEwLwYDVQQD
Eyg1ZGI1NTcyY2RmNjVkNzYxNTM0NjZmMDcwYWM1MDc4YjRjNjQ3MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7d/u70z0pf9DTuPKyzkcSKtrejC
AUkrHErIu9hOIrx70JMdwShebcgVxD1sGhy1/ADl+Vy1b0byG55IgB5lnpJu201g
dGoNotyq/eAdvDhOCXeZUMfwh4wSnkehjos6hFGBM2ARR4nwMy5wYlRCWA/KWbl5
wm2H5EVRU65n3o38nl6Pzv09t1yXr89/G+lGGKEGmL4P/kakKTX+LXmJs7zvSDhh
VYlRF9ttZKSIbt+sySY7Uh3cIsqWCI3MOzjqDJHpsmpLmj3p0QYJVhnLA4Yr3ewY
38VtTTS121PfF0rd3sMnOqV/+jOcX7ip0RIM7hofyER5UBy9pwXgT9hWiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF21VyzfZddhU0ZvBwrFB4tMZHGcMB8GA1UdIwQY
MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt
NWUzNmQxYjA4MjVlLzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl
LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8ICjNWR
X6c2+55B7AtTkHQVqogqwEuiflwdvhpbmMY4KvqCJ5SBBmiMEkbhJmpVfci1YZEw
BBUf6/oyin319SW3+k4zXq1MUc7aSJ+Kbt3h6zLV6IKbNLhlZzJNMdgOlHGru6DD
XeGrk5o4vZ0Yc0SgUpyTcxujjF/G5Lta3VJFX3XepVvjGsj/p5nWUnljXq+Dbgvs
u8kyzbAFch1R+t1jqQo4iyi0sv+s/Swa9K2IxmXs1XwhgSuTirKYuCe9sgWVsvjp
pARETa371UVBXhGJbYiYhoJwyHGsq6XL5vXKFxuFErkM2TkA9PWN44M3fsXo83ts
AInOn9xFQYhfrg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:17:34 2025 by rpki-client