Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          7kScomx/zxWF1FcFl52eamYbfiNILTYg8q2J/MSlVIw=
Subject key identifier:   25:17:C1:B1:81:AF:E1:27:26:5B:1A:0E:6E:2B:A1:DA:73:DA:6B:27
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       0196A19B8CC159AF56A8ED0C0DD63A649F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          1527
Signing time:             Mon 05 May 2025 18:00:47 +0000
Manifest this update:     Mon 05 May 2025 18:00:47 +0000
Manifest next update:     Tue 06 May 2025 18:00:47 +0000
Files and hashes:         1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: iEEFvX4TMk+/KIr4VY6oipBz71W7GVi72RUeSOQl81Y=)
                          2: Wrs6edZF_FheJS0JSp4oL-e56WQ.roa (hash: vV9mNOx2NnPdDR1+6XQLcqlbWprm1qsghkqsjFpy7rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:9b:8c:c1:59:af:56:a8:ed:0c:0d:d6:3a:64:9f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: May  5 18:00:47 2025 GMT
            Not After : May  6 18:00:47 2025 GMT
        Subject: CN=2517c1b181afe127265b1a0e6e2ba1da73da6b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:c4:f0:25:f8:e6:f7:a9:35:d1:4f:48:70:
                    5a:7a:b3:c6:59:9d:22:55:68:7d:8f:48:c4:68:da:
                    51:62:86:17:d8:af:a0:7e:47:7a:2c:7e:e8:2a:ff:
                    78:8f:16:ee:e4:b2:98:4e:b6:2a:68:eb:fa:27:58:
                    6e:95:68:46:d9:f5:b2:cf:14:a8:5f:ab:81:60:cb:
                    3e:1f:11:1f:d5:7a:37:51:3c:e1:76:76:ef:e1:52:
                    d6:36:11:15:ca:04:ec:cb:a6:d6:c5:2d:e7:e9:0a:
                    79:0d:24:67:b4:f1:7e:51:01:65:b1:90:25:ca:d8:
                    ae:c5:9c:f8:7b:f9:bc:67:1e:8c:62:8f:ee:43:6f:
                    9f:40:fe:4c:14:46:cc:b0:de:6b:61:a0:00:6a:46:
                    10:6f:03:fc:da:90:71:ec:95:3a:39:e3:a8:c9:5b:
                    23:9c:9e:27:77:24:08:bc:10:00:23:6e:b9:81:a8:
                    e8:3a:e3:53:68:9d:7e:83:58:72:97:17:e5:82:36:
                    a8:0c:10:96:e2:22:87:45:ef:95:e3:91:c7:dd:8a:
                    ed:dd:8f:d1:4f:60:62:2c:c1:85:6e:a4:e1:ad:8d:
                    a8:3e:05:96:72:9b:04:3c:f2:b7:ff:fe:24:1a:2d:
                    a7:55:d6:6d:5a:f2:4e:ca:5e:0f:d4:02:53:80:e2:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:C1:B1:81:AF:E1:27:26:5B:1A:0E:6E:2B:A1:DA:73:DA:6B:27
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:71:73:b0:ca:fc:c8:af:ed:a7:dd:54:68:43:ed:db:b1:28:
         83:e6:9e:70:69:45:ef:14:77:e2:7f:e5:55:78:9d:9a:1f:76:
         a8:8b:46:5f:94:14:05:b0:19:6e:e4:b1:c2:34:92:8b:26:fc:
         14:12:a5:f1:a4:c4:59:11:7f:b4:b6:21:aa:98:85:ae:7b:f2:
         80:23:55:5f:9c:6d:32:d0:01:9f:d9:d8:b3:6a:ad:d2:ad:e3:
         3f:d1:29:08:f2:2b:07:1f:93:0f:15:1a:29:9f:a8:f1:47:a2:
         49:4b:20:e5:62:79:e8:18:22:13:03:8d:7c:56:d3:ad:25:ce:
         37:a0:14:65:8e:bc:7a:2c:91:d2:ef:89:16:4a:e2:b0:c7:24:
         e3:ce:ce:1c:b3:86:d1:fe:37:49:6c:f3:c9:f3:7b:e0:a0:c6:
         75:31:42:57:0a:36:d5:51:14:1c:36:97:b5:01:44:7f:02:14:
         6c:fd:49:85:f7:12:6d:f4:09:b2:2e:95:04:88:80:df:17:1f:
         9d:0d:6f:e3:01:fb:9d:4b:e5:68:20:6c:86:f7:80:60:da:07:
         42:fc:42:ac:de:95:0a:f8:5d:20:52:8c:ae:14:48:31:f6:9e:
         0a:37:3b:e1:75:78:0f:3b:ce:75:6d:20:6e:54:7e:68:f3:36:
         b6:f6:b2:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahm4zBWa9WqO0MDdY6ZJ96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzZlOTg1NWY5YmNhMzAxN2ExMDEzN2I0NDNlZThjNTI4
Y2E5NTIwHhcNMjUwNTA1MTgwMDQ3WhcNMjUwNTA2MTgwMDQ3WjAzMTEwLwYDVQQD
EygyNTE3YzFiMTgxYWZlMTI3MjY1YjFhMGU2ZTJiYTFkYTczZGE2YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ffE8CX45vepNdFPSHBaerPGWZ0i
VWh9j0jEaNpRYoYX2K+gfkd6LH7oKv94jxbu5LKYTrYqaOv6J1hulWhG2fWyzxSo
X6uBYMs+HxEf1Xo3UTzhdnbv4VLWNhEVygTsy6bWxS3n6Qp5DSRntPF+UQFlsZAl
ytiuxZz4e/m8Zx6MYo/uQ2+fQP5MFEbMsN5rYaAAakYQbwP82pBx7JU6OeOoyVsj
nJ4ndyQIvBAAI265gajoOuNTaJ1+g1hylxflgjaoDBCW4iKHRe+V45HH3Yrt3Y/R
T2BiLMGFbqThrY2oPgWWcpsEPPK3//4kGi2nVdZtWvJOyl4P1AJTgOItRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUXwbGBr+EnJlsaDm4rodpz2msnMB8GA1UdIwQY
MBaAFDB26YVfm8owF6EBN7RD7oxSjKlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUt
N2Y3ODZiYjM0MzQ0LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUtN2Y3ODZiYjM0MzQ0
LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHFzsMr8
yK/tp91UaEPt27Eog+aecGlF7xR34n/lVXidmh92qItGX5QUBbAZbuSxwjSSiyb8
FBKl8aTEWRF/tLYhqpiFrnvygCNVX5xtMtABn9nYs2qt0q3jP9EpCPIrBx+TDxUa
KZ+o8UeiSUsg5WJ56BgiEwONfFbTrSXON6AUZY68eiyR0u+JFkrisMck487OHLOG
0f43SWzzyfN74KDGdTFCVwo21VEUHDaXtQFEfwIUbP1JhfcSbfQJsi6VBIiA3xcf
nQ1v4wH7nUvlaCBshveAYNoHQvxCrN6VCvhdIFKMrhRIMfaeCjc74XV4DzvOdW0g
blR+aPM2tvay6Q==
-----END CERTIFICATE-----
Generated at Tue May 6 00:03:06 2025 by rpki-client