Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File:                     E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier:          aIf/1HMbagankIvfQRllmTupL474JcqUkVxAg/tFgsg=
Subject key identifier:   6E:05:A2:E6:5B:72:3A:9F:8B:E6:B8:39:26:D1:6C:74:2B:E7:40:5C
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer:       /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial:       01965123EF65DA871C43CC224E75ACBA8A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number:          026D
Signing time:             Sun 20 Apr 2025 03:00:31 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:31 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:31 +0000
Files and hashes:         1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: Iv0aEhZfhrPhEpPRRW7KcvZhRWIqHsDc0Xx8VNoBrOY=)
                          2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:23:ef:65:da:87:1c:43:cc:22:4e:75:ac:ba:8a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
        Validity
            Not Before: Apr 20 03:00:31 2025 GMT
            Not After : Apr 21 03:00:31 2025 GMT
        Subject: CN=6e05a2e65b723a9f8be6b83926d16c742be7405c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:57:d5:8d:8a:41:89:5a:ce:17:a0:03:3c:
                    d0:d1:c1:d4:78:47:c2:f3:b2:61:d1:74:fa:d4:bd:
                    07:39:7e:39:6b:48:d7:74:da:ad:f9:b9:8b:c1:0a:
                    c6:9e:39:2d:e8:a4:64:4f:c5:24:83:29:da:ad:89:
                    00:dd:78:a6:f1:dc:f5:9b:1e:d1:1d:51:5b:5f:12:
                    2b:d8:15:f5:31:38:96:bd:d5:af:9c:72:1e:ee:52:
                    53:51:90:d3:0f:ac:ca:f7:ca:8d:a7:c3:be:a9:7b:
                    8b:1f:50:4f:18:a0:7c:05:9f:68:0c:d5:51:7d:9f:
                    2f:bf:43:cb:f5:31:69:e6:ec:2c:09:45:bb:eb:55:
                    74:7e:15:00:9d:3a:b6:71:9f:03:b8:22:8c:f6:3c:
                    43:ca:1a:81:f2:1d:c2:8b:17:11:d5:b3:2f:86:53:
                    cf:00:42:58:4e:5c:81:5d:ef:75:60:cc:4f:36:3a:
                    88:76:f8:da:16:64:57:ae:31:6f:ac:84:7a:0c:7b:
                    f8:12:cc:f7:6f:b0:55:c1:73:08:a1:0e:88:03:d9:
                    b0:f5:9f:40:b1:80:fd:13:10:ab:87:08:12:46:35:
                    95:70:43:bd:37:cb:44:50:d2:7b:5c:48:26:28:76:
                    dd:83:d8:c3:b9:89:85:fc:f1:bd:8d:33:1c:c0:b5:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:A2:E6:5B:72:3A:9F:8B:E6:B8:39:26:D1:6C:74:2B:E7:40:5C
            X509v3 Authority Key Identifier:
                keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:16:9d:77:e5:3f:ec:da:83:48:23:2e:08:f2:83:e7:3f:d6:
         3d:c8:34:8e:86:7c:3c:4e:84:47:b9:3c:80:c9:80:4d:a6:9b:
         af:4e:ef:0a:1e:ac:b4:8c:86:56:1a:11:b6:33:a4:d9:23:8e:
         fc:f4:c5:21:17:c6:2e:a6:74:4b:88:03:a7:d4:72:0d:ab:19:
         5d:8b:f9:46:ae:75:84:65:fd:90:82:01:9d:fa:31:5f:75:bb:
         ad:67:4e:ba:4c:2f:c2:ed:60:59:dd:0d:b5:13:2c:10:fd:eb:
         f5:11:0e:4a:ce:a0:c1:c1:7b:df:98:7c:44:4e:3f:27:ca:4e:
         fa:36:fd:86:46:6b:51:8e:f3:9d:e0:66:68:7a:cc:56:8e:4f:
         07:82:22:5f:37:3e:1c:01:e0:d4:0d:6c:13:c9:b2:bf:48:c1:
         6a:28:4f:57:5b:ce:cb:c4:8b:0e:64:ff:8a:8e:d8:d2:76:1f:
         56:36:af:5a:9a:fd:21:25:f4:2c:58:de:a2:ad:7c:48:1f:ed:
         e0:49:8d:74:a6:3a:18:c8:b5:21:88:84:b3:47:9e:76:d0:ab:
         31:a0:a9:8b:79:25:1c:3f:7c:2d:1d:7a:7a:f3:ee:5f:37:ea:
         3e:bc:c7:b6:f8:19:94:ce:87:4e:7e:d8:87:d4:83:0a:c6:8b:
         ee:9e:ff:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRI+9l2occQ8wiTnWsuopYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmYyM2NhYmE3ZTAxZjY4MWU3M2RmYWIxNzQzZmY2NDc4
ZGRjZWQwHhcNMjUwNDIwMDMwMDMxWhcNMjUwNDIxMDMwMDMxWjAzMTEwLwYDVQQD
Eyg2ZTA1YTJlNjViNzIzYTlmOGJlNmI4MzkyNmQxNmM3NDJiZTc0MDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMpX1Y2KQYlazhegAzzQ0cHUeEfC
87Jh0XT61L0HOX45a0jXdNqt+bmLwQrGnjkt6KRkT8UkgynarYkA3Xim8dz1mx7R
HVFbXxIr2BX1MTiWvdWvnHIe7lJTUZDTD6zK98qNp8O+qXuLH1BPGKB8BZ9oDNVR
fZ8vv0PL9TFp5uwsCUW761V0fhUAnTq2cZ8DuCKM9jxDyhqB8h3CixcR1bMvhlPP
AEJYTlyBXe91YMxPNjqIdvjaFmRXrjFvrIR6DHv4Esz3b7BVwXMIoQ6IA9mw9Z9A
sYD9ExCrhwgSRjWVcEO9N8tEUNJ7XEgmKHbdg9jDuYmF/PG9jTMcwLVX/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4FouZbcjqfi+a4OSbRbHQr50BcMB8GA1UdIwQY
MBaAFBP/I8q6fgH2gec9+rF0P/ZHjdztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yOGE2OGMtZmI1ZS00ODYwLTk0YjQt
NjM5NzgwZTkzOWU1LzEvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8yOGE2OGMtZmI1ZS00ODYwLTk0YjQtNjM5NzgwZTkzOWU1
LzEvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRadd+U/
7NqDSCMuCPKD5z/WPcg0joZ8PE6ER7k8gMmATaabr07vCh6stIyGVhoRtjOk2SOO
/PTFIRfGLqZ0S4gDp9RyDasZXYv5Rq51hGX9kIIBnfoxX3W7rWdOukwvwu1gWd0N
tRMsEP3r9REOSs6gwcF735h8RE4/J8pO+jb9hkZrUY7zneBmaHrMVo5PB4IiXzc+
HAHg1A1sE8myv0jBaihPV1vOy8SLDmT/io7Y0nYfVjavWpr9ISX0LFjeoq18SB/t
4EmNdKY6GMi1IYiEs0eedtCrMaCpi3klHD98LR16evPuXzfqPrzHtvgZlM6HTn7Y
h9SDCsaL7p7/KA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:12:58 2025 by rpki-client