Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
File:                     EWU43_13zyOMTq65XKBUh8VnGrU.mft (raw, json)
Hash identifier:          F4FxtSZJi7od7GPQercmpEelhpDq8+2zYhcUDUoy0bA=
Subject key identifier:   C7:1C:34:02:63:A8:64:A2:84:CD:25:91:11:3F:43:22:0F:A2:75:39
Authority key identifier: 11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5
Certificate issuer:       /CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
Certificate serial:       019648C55BFB8A80AFE1EA353B0969B29443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
Manifest number:          12FD
Signing time:             Fri 18 Apr 2025 12:00:15 +0000
Manifest this update:     Fri 18 Apr 2025 12:00:15 +0000
Manifest next update:     Sat 19 Apr 2025 12:00:15 +0000
Files and hashes:         1: EWU43_13zyOMTq65XKBUh8VnGrU.crl (hash: xxU8EWZ2CqJNcwbdPrl5qRPKJeRtBsANngl2KgUlrbY=)
                          2: HuQC2jA885BU0j4_LL5scjkpAao.roa (hash: EvlRJMUXmvL4+uCrMnz97o0wOcJ1RwBXa983YUf2PO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:c5:5b:fb:8a:80:af:e1:ea:35:3b:09:69:b2:94:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
        Validity
            Not Before: Apr 18 12:00:15 2025 GMT
            Not After : Apr 19 12:00:15 2025 GMT
        Subject: CN=c71c340263a864a284cd2591113f43220fa27539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a7:da:15:6f:c2:10:b4:b1:99:b0:07:9e:e0:
                    16:fb:4e:04:cc:78:2c:3d:ab:47:25:7e:e8:ef:8d:
                    3a:89:2c:ab:65:ce:7e:34:82:d3:c0:37:25:45:76:
                    fd:62:10:54:d0:e1:9e:e9:b7:79:ac:7f:69:4c:65:
                    ec:cd:59:49:23:9a:0f:d5:3d:ed:3e:68:1d:dd:ee:
                    c6:62:b5:8f:22:31:e2:ba:dd:14:2a:91:e4:51:ff:
                    50:61:3d:7d:28:4b:11:f9:60:c5:c4:66:2c:ca:8d:
                    95:d2:8e:4f:8c:73:bf:5f:0f:ff:c7:39:41:c2:d5:
                    25:36:1f:2a:c0:26:19:f2:42:9b:2e:73:34:45:cd:
                    1f:d4:7d:ba:51:8a:d6:3d:12:80:6f:d2:88:f2:18:
                    1c:52:5d:3b:d1:9b:4a:01:f7:7a:7f:98:5b:eb:5e:
                    2e:db:c5:d4:97:5b:ce:6e:bc:89:80:00:ea:9e:c5:
                    9d:17:62:ed:18:c3:ce:7d:79:b6:57:ae:f7:e5:2a:
                    51:ce:47:39:fd:da:7d:b3:b5:bc:33:82:ae:ed:ba:
                    80:eb:08:ad:38:3a:c3:cf:92:07:3a:99:2b:97:89:
                    11:02:df:72:c4:6c:5a:77:33:84:92:6d:a6:73:ca:
                    e1:30:cb:64:87:7b:a2:b6:cf:ab:03:30:a5:d7:d2:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1C:34:02:63:A8:64:A2:84:CD:25:91:11:3F:43:22:0F:A2:75:39
            X509v3 Authority Key Identifier:
                keyid:11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6c:1c:ad:20:dc:17:53:07:7b:c3:f2:87:a1:da:e5:6d:6d:
         fa:7f:e0:00:95:ee:96:e5:bf:da:4d:16:26:0d:e0:42:a9:c2:
         61:60:c5:ab:82:27:38:7c:ff:e9:f9:6f:ed:fe:13:24:6e:2b:
         83:7a:00:0d:3e:3b:7f:95:f9:10:75:ee:18:21:d1:51:d7:75:
         34:e7:f7:9a:8c:1c:a2:11:ce:8c:b0:0a:36:3c:e0:2b:95:99:
         0c:2b:f3:c5:cb:fb:cb:af:59:13:10:c8:8c:d0:7d:ca:ce:90:
         db:34:51:e6:ab:1a:77:bb:19:5e:ef:48:d3:e2:1d:d1:98:ed:
         8a:96:b8:12:21:35:33:94:80:fe:05:be:db:e5:ed:7f:2b:a4:
         de:0b:67:6b:b7:24:1d:1e:5f:fc:b3:09:5a:3f:31:ae:4f:10:
         26:26:27:2b:a7:32:6e:73:c2:32:cc:bf:4c:e1:8f:4c:89:bf:
         d6:84:c8:8e:bb:5a:5c:0f:4b:36:70:b8:95:90:5e:e7:98:d4:
         a1:52:27:58:89:70:09:f2:54:3a:19:f8:d3:de:03:d6:a4:ae:
         f3:c6:bb:b2:a8:75:ff:fa:e2:dd:01:eb:91:fe:b6:c7:2e:51:
         c2:32:1a:6a:39:18:50:72:70:8f:b6:30:47:b6:e3:4e:d3:be:
         23:7d:5f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIxVv7ioCv4eo1OwlpspRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNjUzOGRmZmQ3N2NmMjM4YzRlYWViOTVjYTA1NDg3YzU2
NzFhYjUwHhcNMjUwNDE4MTIwMDE1WhcNMjUwNDE5MTIwMDE1WjAzMTEwLwYDVQQD
EyhjNzFjMzQwMjYzYTg2NGEyODRjZDI1OTExMTNmNDMyMjBmYTI3NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjafaFW/CELSxmbAHnuAW+04EzHgs
PatHJX7o7406iSyrZc5+NILTwDclRXb9YhBU0OGe6bd5rH9pTGXszVlJI5oP1T3t
Pmgd3e7GYrWPIjHiut0UKpHkUf9QYT19KEsR+WDFxGYsyo2V0o5PjHO/Xw//xzlB
wtUlNh8qwCYZ8kKbLnM0Rc0f1H26UYrWPRKAb9KI8hgcUl070ZtKAfd6f5hb614u
28XUl1vObryJgADqnsWdF2LtGMPOfXm2V6735SpRzkc5/dp9s7W8M4Ku7bqA6wit
ODrDz5IHOpkrl4kRAt9yxGxadzOEkm2mc8rhMMtkh3uits+rAzCl19IuxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMccNAJjqGSihM0lkRE/QyIPonU5MB8GA1UdIwQY
MBaAFBFlON/9d88jjE6uuVygVIfFZxq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVdVNDNfMTN6eU9NVHE2NVhLQlVoOFZuR3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kZThkODItOGUwYS00NDUyLWI4OWEt
NjUwOGMxZjRhNDQ1LzEvRVdVNDNfMTN6eU9NVHE2NVhLQlVoOFZuR3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kZThkODItOGUwYS00NDUyLWI4OWEtNjUwOGMxZjRhNDQ1
LzEvRVdVNDNfMTN6eU9NVHE2NVhLQlVoOFZuR3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmwcrSDc
F1MHe8Pyh6Ha5W1t+n/gAJXuluW/2k0WJg3gQqnCYWDFq4InOHz/6flv7f4TJG4r
g3oADT47f5X5EHXuGCHRUdd1NOf3mowcohHOjLAKNjzgK5WZDCvzxcv7y69ZExDI
jNB9ys6Q2zRR5qsad7sZXu9I0+Id0Zjtipa4EiE1M5SA/gW+2+Xtfyuk3gtna7ck
HR5f/LMJWj8xrk8QJiYnK6cybnPCMsy/TOGPTIm/1oTIjrtaXA9LNnC4lZBe55jU
oVInWIlwCfJUOhn4094D1qSu88a7sqh1//ri3QHrkf62xy5RwjIaajkYUHJwj7Yw
R7bjTtO+I31faw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:43:58 2025 by rpki-client