Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
File:                     G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json)
Hash identifier:          RHXVQdKBZBeT+5YM1ycPuwG6Lge+l4Caa5fEZ3rmyFU=
Subject key identifier:   50:AE:38:9A:8E:BD:0F:2B:03:DE:05:AC:05:14:E0:8E:CE:1C:AC:19
Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
Certificate issuer:       /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Certificate serial:       01965011B22FBCC5F7F7F8BE949F16BDEC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
Manifest number:          05E1
Signing time:             Sat 19 Apr 2025 22:00:59 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:59 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:59 +0000
Files and hashes:         1: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: vLhfykChAt0ctn/3FNi5V3PJu4OT5k928YdhObIDRJY=)
                          2: m-RL63I77tnbUHaZReiKcRHtR58.roa (hash: VHqfyzr+g1S2KroF/o4QYcY/QOnFZTun+jLqscdqvBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:b2:2f:bc:c5:f7:f7:f8:be:94:9f:16:bd:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
        Validity
            Not Before: Apr 19 22:00:59 2025 GMT
            Not After : Apr 20 22:00:59 2025 GMT
        Subject: CN=50ae389a8ebd0f2b03de05ac0514e08ece1cac19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:35:2e:b2:3f:e1:f9:ea:62:84:74:8c:8d:
                    98:e4:63:61:25:bf:46:6b:c3:40:c4:72:1e:24:52:
                    85:3c:31:bf:de:ea:59:de:58:02:0f:45:79:75:f7:
                    ba:b2:2b:04:5a:fd:aa:1e:72:c7:06:49:b1:6e:b2:
                    39:db:98:28:2c:5a:35:2b:64:13:df:77:2c:26:7c:
                    44:e9:3e:50:d0:d4:d6:c7:10:b9:b7:ea:b5:ca:67:
                    a5:b7:17:fd:78:63:02:52:2f:39:ee:32:e5:eb:06:
                    23:20:ac:ce:fc:15:64:d0:e7:6c:82:7f:7c:74:3b:
                    0f:68:37:80:b2:44:ac:a2:83:0d:4f:db:71:67:2a:
                    32:b1:9a:ec:b7:eb:61:ab:47:49:14:b0:03:04:47:
                    eb:92:0f:3e:17:53:a6:94:9a:99:8a:0c:8f:66:f8:
                    45:1b:bd:b1:ae:7b:35:c7:a4:c3:c3:bf:a5:53:88:
                    80:14:07:80:e3:82:a3:c1:fa:2a:bf:26:24:90:98:
                    86:4f:7b:76:61:4c:3d:a3:b2:38:d9:18:48:7d:97:
                    33:fe:dc:a1:c6:84:7e:cf:2a:8e:bd:2e:a9:13:57:
                    c8:a5:98:79:52:a9:e2:0d:11:48:2a:20:38:01:ea:
                    99:07:f5:31:62:76:ea:7b:15:91:ad:63:0e:e5:bd:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:38:9A:8E:BD:0F:2B:03:DE:05:AC:05:14:E0:8E:CE:1C:AC:19
            X509v3 Authority Key Identifier:
                keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:82:27:7f:23:c1:81:8e:59:a9:63:59:cd:18:80:bc:14:54:
         b0:20:7e:9e:c7:30:a6:d2:d5:1b:b6:8e:9c:e9:88:61:de:e5:
         14:4f:da:0f:c5:ea:1b:24:05:15:72:6a:9a:a9:4d:39:c6:a1:
         9a:70:dd:d7:48:f6:35:59:dd:b3:0d:d1:f0:5b:9a:2d:47:08:
         0c:8c:ba:f1:f8:11:ac:3b:99:ea:29:94:d1:d5:e2:35:c7:fd:
         7a:47:71:f7:1b:e2:b8:1f:46:7b:43:20:a9:83:4c:dd:42:cb:
         02:62:4a:7d:8a:89:a5:03:0e:b7:f5:30:5b:a6:e0:d4:78:62:
         72:56:c5:32:2c:be:6a:2c:1d:02:2d:2b:aa:0c:be:96:38:c0:
         53:6b:50:30:86:2c:1c:bd:7c:54:45:5d:46:c8:35:ea:7e:fc:
         a4:c3:0c:7a:26:56:34:08:ea:79:43:50:dc:bd:87:ad:b7:fe:
         4c:f2:ef:4b:44:64:ac:59:02:a5:b5:e8:8b:41:e9:2e:73:4f:
         d4:6c:1c:b5:2e:b3:ca:6a:71:56:d7:8d:fd:f6:50:6f:54:07:
         5e:d6:ee:3c:91:04:3f:d3:84:d4:a4:ab:89:98:dd:11:b1:ae:
         15:ba:02:91:d3:f9:26:ad:12:e8:fa:b1:94:35:94:00:2e:a5:
         b0:b1:6d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEbIvvMX39/i+lJ8WveyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTQ0MzdjOTJjMWUwOGIwNmUwNzc2MTg3Yzc4ODRkZDUx
YzBlMzgwHhcNMjUwNDE5MjIwMDU5WhcNMjUwNDIwMjIwMDU5WjAzMTEwLwYDVQQD
Eyg1MGFlMzg5YThlYmQwZjJiMDNkZTA1YWMwNTE0ZTA4ZWNlMWNhYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1s1LrI/4fnqYoR0jI2Y5GNhJb9G
a8NAxHIeJFKFPDG/3upZ3lgCD0V5dfe6sisEWv2qHnLHBkmxbrI525goLFo1K2QT
33csJnxE6T5Q0NTWxxC5t+q1ymeltxf9eGMCUi857jLl6wYjIKzO/BVk0Odsgn98
dDsPaDeAskSsooMNT9txZyoysZrst+thq0dJFLADBEfrkg8+F1OmlJqZigyPZvhF
G72xrns1x6TDw7+lU4iAFAeA44KjwfoqvyYkkJiGT3t2YUw9o7I42RhIfZcz/tyh
xoR+zyqOvS6pE1fIpZh5UqniDRFIKiA4AeqZB/UxYnbqexWRrWMO5b1uvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCuOJqOvQ8rA94FrAUU4I7OHKwZMB8GA1UdIwQY
MBaAFBtUQ3ySweCLBuB3YYfHiE3VHA44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjIt
NTE1ZWUxNTcwMjU5LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjItNTE1ZWUxNTcwMjU5
LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIInfyPB
gY5ZqWNZzRiAvBRUsCB+nscwptLVG7aOnOmIYd7lFE/aD8XqGyQFFXJqmqlNOcah
mnDd10j2NVndsw3R8FuaLUcIDIy68fgRrDuZ6imU0dXiNcf9ekdx9xviuB9Ge0Mg
qYNM3ULLAmJKfYqJpQMOt/UwW6bg1HhiclbFMiy+aiwdAi0rqgy+ljjAU2tQMIYs
HL18VEVdRsg16n78pMMMeiZWNAjqeUNQ3L2Hrbf+TPLvS0RkrFkCpbXoi0HpLnNP
1GwctS6zympxVteN/fZQb1QHXtbuPJEEP9OE1KSriZjdEbGuFboCkdP5Jq0S6Pqx
lDWUAC6lsLFt4w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:39 2025 by rpki-client