Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          nK3TEDrXwjf9ok0QdUuwa0gu97xJOD/HkpmelRK+ask=
Subject key identifier:   F5:2D:C9:93:E0:E5:2F:10:85:5D:A0:10:B7:09:56:F5:57:82:A1:04
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       019644E8AF141B9F71E04BDAC17E10D23E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          073C
Signing time:             Thu 17 Apr 2025 18:00:21 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:21 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:21 +0000
Files and hashes:         1: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=)
                          2: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: rTWHz4ohrUELh+pdRsGW3bwL4QfQKZTYL646rNisX3U=)
                          3: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=)
                          4: m3FPA0gDGVnI8PjPCwmDJXS3am4.roa (hash: iJU0JEqNybrVIOi6Wb4fvKKuySMZyuaXFdEyadAN0OM=)
                          5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:af:14:1b:9f:71:e0:4b:da:c1:7e:10:d2:3e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Apr 17 18:00:21 2025 GMT
            Not After : Apr 18 18:00:21 2025 GMT
        Subject: CN=f52dc993e0e52f10855da010b70956f55782a104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:00:71:c8:68:ba:50:dd:f9:77:51:7f:14:
                    0e:32:6f:8d:c5:d6:2a:a8:91:f2:9e:38:08:e7:c7:
                    b8:5a:76:de:69:06:16:34:ad:41:4d:16:a9:42:17:
                    46:c7:50:a9:9e:13:be:f2:b6:03:a0:1a:d7:dd:55:
                    7d:39:17:30:6d:51:78:91:e0:9a:10:37:e0:7d:7c:
                    e4:56:19:2b:fc:43:8c:64:ab:cf:31:e2:b3:80:f5:
                    1a:d0:54:2a:35:61:f5:07:e7:b8:f5:14:16:20:cd:
                    f0:3d:06:7c:a3:fe:48:91:a2:ea:d3:70:86:a4:80:
                    96:55:93:90:8e:68:4b:9b:3c:9a:15:50:7e:75:f9:
                    7c:68:ec:29:85:5b:43:6c:a7:9e:79:ac:13:96:15:
                    1b:01:36:07:c4:36:8d:90:04:b9:0b:3a:a7:a6:52:
                    de:c9:d9:e5:38:f0:e6:8a:f3:07:af:91:eb:60:e4:
                    e6:d3:eb:99:f5:a4:5b:0c:2c:e4:8f:5a:07:6d:cc:
                    18:80:64:7c:f6:3b:a5:a1:d2:96:ed:47:22:4b:fa:
                    f2:d3:34:4e:31:9d:e3:6c:c1:04:93:c5:e6:ab:79:
                    af:b0:27:75:30:c8:2a:06:5d:d8:fe:df:37:a2:44:
                    bd:09:cb:fe:8b:b4:be:22:1a:56:df:b7:e2:60:bf:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2D:C9:93:E0:E5:2F:10:85:5D:A0:10:B7:09:56:F5:57:82:A1:04
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:55:77:24:e2:a2:8a:1c:39:24:76:3c:df:79:d8:e4:ed:
         48:59:52:3a:19:c8:4f:37:93:3d:6f:3f:56:a2:47:09:24:06:
         39:81:a2:0e:ce:28:50:17:fc:51:3c:a0:f4:3d:7f:ab:d2:e3:
         ab:09:f6:4a:b1:f5:3f:05:b7:c5:85:e1:bd:05:2c:c5:1c:f0:
         5a:64:b6:f4:a5:67:db:16:a0:38:74:40:41:58:e0:43:1b:16:
         45:c9:c4:1e:9d:6c:49:83:9e:bd:37:a8:35:1e:62:45:d0:17:
         92:92:ae:16:69:cc:d0:f5:a4:e2:12:51:2d:0c:5f:61:ae:83:
         a5:c7:0b:49:67:71:b5:7b:da:dc:32:e1:79:78:8c:25:5b:bd:
         07:46:6c:75:2e:1f:87:f1:d4:5a:f8:7f:ea:6c:5b:81:f7:9d:
         72:2a:73:02:f4:4d:69:61:1e:50:6a:47:03:ce:70:53:63:ae:
         31:89:80:9a:a0:dd:c4:fc:01:bb:24:16:62:71:f8:9d:c0:51:
         4b:b3:20:4b:cc:6f:2a:9c:71:92:55:5b:f3:ed:5c:fa:85:e4:
         57:5d:9c:f3:af:b3:32:59:44:de:59:58:36:59:63:b9:a0:14:
         9f:f6:1f:4b:fb:f3:55:e3:e1:57:aa:c9:17:bb:fb:69:08:98:
         51:52:a1:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6K8UG59x4EvawX4Q0j5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjUwNDE3MTgwMDIxWhcNMjUwNDE4MTgwMDIxWjAzMTEwLwYDVQQD
EyhmNTJkYzk5M2UwZTUyZjEwODU1ZGEwMTBiNzA5NTZmNTU3ODJhMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxYAcchoulDd+XdRfxQOMm+NxdYq
qJHynjgI58e4WnbeaQYWNK1BTRapQhdGx1CpnhO+8rYDoBrX3VV9ORcwbVF4keCa
EDfgfXzkVhkr/EOMZKvPMeKzgPUa0FQqNWH1B+e49RQWIM3wPQZ8o/5IkaLq03CG
pICWVZOQjmhLmzyaFVB+dfl8aOwphVtDbKeeeawTlhUbATYHxDaNkAS5CzqnplLe
ydnlOPDmivMHr5HrYOTm0+uZ9aRbDCzkj1oHbcwYgGR89julodKW7UciS/ry0zRO
MZ3jbMEEk8Xmq3mvsCd1MMgqBl3Y/t83okS9Ccv+i7S+IhpW37fiYL8AEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUtyZPg5S8QhV2gELcJVvVXgqEEMB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqBVdyTi
ooocOSR2PN952OTtSFlSOhnITzeTPW8/VqJHCSQGOYGiDs4oUBf8UTyg9D1/q9Lj
qwn2SrH1PwW3xYXhvQUsxRzwWmS29KVn2xagOHRAQVjgQxsWRcnEHp1sSYOevTeo
NR5iRdAXkpKuFmnM0PWk4hJRLQxfYa6DpccLSWdxtXva3DLheXiMJVu9B0ZsdS4f
h/HUWvh/6mxbgfedcipzAvRNaWEeUGpHA85wU2OuMYmAmqDdxPwBuyQWYnH4ncBR
S7MgS8xvKpxxklVb8+1c+oXkV12c86+zMllE3llYNlljuaAUn/YfS/vzVePhV6rJ
F7v7aQiYUVKhqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:33 2025 by rpki-client