Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          0T5uRGwjrpMSylbM4NgGSEgeDlWXYOI9g7L0dIbWfOg=
Subject key identifier:   4A:9B:DC:2A:A3:3A:BB:C2:9A:BA:82:08:C8:2E:6E:3D:AB:A7:57:8B
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       0195903D6517618230A35BE41A5B26F16B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          1498
Signing time:             Thu 13 Mar 2025 16:01:37 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:37 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:37 +0000
Files and hashes:         1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: BidXQ/HTbKyuBfbCZdupJi16BzA8KgLmltFmIyvxfWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:65:17:61:82:30:a3:5b:e4:1a:5b:26:f1:6b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: Mar 13 16:01:37 2025 GMT
            Not After : Mar 14 16:01:37 2025 GMT
        Subject: CN=4a9bdc2aa33abbc29aba8208c82e6e3daba7578b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:f9:4e:e2:b7:e7:f6:ae:a7:78:14:b1:59:
                    f9:aa:19:f6:8d:b2:85:b3:e3:6e:e7:84:9a:88:d9:
                    08:73:28:d1:23:05:22:43:66:2a:91:1b:bd:e6:dc:
                    02:a1:08:d2:3b:30:64:91:52:1d:94:66:44:c8:43:
                    b2:4f:02:9b:ef:c5:bf:02:a9:f8:e1:5f:db:60:df:
                    51:b0:f8:a7:38:77:08:eb:fd:8c:82:b0:fe:93:cc:
                    7a:15:f4:cf:fb:dc:a7:1d:95:fd:91:8c:e7:70:03:
                    44:2e:b3:39:ff:d5:f8:6f:11:bd:60:e8:3c:20:46:
                    ca:78:5e:c1:65:c9:01:5a:18:e0:be:42:96:55:7f:
                    5e:9e:c7:89:31:7e:af:df:90:86:79:a4:8c:a8:46:
                    2d:85:3b:3f:d8:c3:e9:5c:b3:fb:40:98:16:bf:e7:
                    7d:db:a4:39:bc:5b:8b:c8:ca:fc:f2:9f:c3:eb:25:
                    7b:bf:45:b6:85:0f:f5:83:e0:3a:dd:90:2a:15:5d:
                    24:69:18:3a:69:8b:1e:de:90:70:31:e1:01:90:ed:
                    11:e4:a2:cc:c8:21:c2:2b:b8:36:6c:1b:19:2a:66:
                    d4:e8:7c:7d:c4:b4:c9:83:f7:c1:92:17:af:24:64:
                    75:ea:4d:d3:e9:1f:f2:86:39:6e:be:d7:c1:60:60:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9B:DC:2A:A3:3A:BB:C2:9A:BA:82:08:C8:2E:6E:3D:AB:A7:57:8B
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:87:93:05:f6:2c:5c:dd:fe:74:26:0c:92:c9:c2:5a:25:27:
         78:c9:0f:ce:0b:16:70:4c:06:fb:3b:58:b0:18:7e:a0:0d:ca:
         0d:f7:3f:94:32:b3:52:16:0a:e8:3f:98:11:a4:1e:07:3d:a9:
         99:49:2a:5e:1f:cf:82:92:30:7f:2d:6f:ff:61:3a:44:d1:50:
         06:30:84:4a:05:df:2a:01:2a:f9:66:a5:a5:ab:74:cc:c2:de:
         d6:8d:5b:df:73:a3:7a:04:e5:93:ae:62:17:13:24:bc:7b:eb:
         01:96:a9:be:0c:ff:bf:e1:a1:32:dd:bb:4b:9f:71:22:38:f2:
         76:3f:eb:5f:a2:f3:b2:2b:49:b2:36:a0:b9:08:bb:3e:7e:21:
         c5:24:7b:4a:d7:e3:72:bd:bc:75:60:2e:81:4c:96:5e:03:b2:
         a5:f5:f5:8e:d8:39:54:ab:26:ba:82:a2:44:8a:78:79:a7:0f:
         a3:de:34:18:4d:c6:85:1f:f9:89:63:3e:a8:14:d7:1a:17:28:
         d4:17:f2:a2:27:7c:3a:49:dd:88:f2:1e:1c:6d:7b:b1:cd:ef:
         fa:0f:36:f5:84:49:2d:fe:d2:c1:3b:3b:13:d9:da:3f:4e:2b:
         24:47:41:23:67:c0:da:34:97:a1:33:58:bd:76:3a:2c:a1:5d:
         40:31:a9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPWUXYYIwo1vkGlsm8WtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk
YzA4OWMwHhcNMjUwMzEzMTYwMTM3WhcNMjUwMzE0MTYwMTM3WjAzMTEwLwYDVQQD
Eyg0YTliZGMyYWEzM2FiYmMyOWFiYTgyMDhjODJlNmUzZGFiYTc1NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWX5TuK35/aup3gUsVn5qhn2jbKF
s+Nu54SaiNkIcyjRIwUiQ2YqkRu95twCoQjSOzBkkVIdlGZEyEOyTwKb78W/Aqn4
4V/bYN9RsPinOHcI6/2MgrD+k8x6FfTP+9ynHZX9kYzncANELrM5/9X4bxG9YOg8
IEbKeF7BZckBWhjgvkKWVX9enseJMX6v35CGeaSMqEYthTs/2MPpXLP7QJgWv+d9
26Q5vFuLyMr88p/D6yV7v0W2hQ/1g+A63ZAqFV0kaRg6aYse3pBwMeEBkO0R5KLM
yCHCK7g2bBsZKmbU6Hx9xLTJg/fBkhevJGR16k3T6R/yhjluvtfBYGCBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqb3CqjOrvCmrqCCMgubj2rp1eLMB8GA1UdIwQY
MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt
MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz
LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4eTBfYs
XN3+dCYMksnCWiUneMkPzgsWcEwG+ztYsBh+oA3KDfc/lDKzUhYK6D+YEaQeBz2p
mUkqXh/PgpIwfy1v/2E6RNFQBjCESgXfKgEq+Walpat0zMLe1o1b33OjegTlk65i
FxMkvHvrAZapvgz/v+GhMt27S59xIjjydj/rX6LzsitJsjaguQi7Pn4hxSR7Stfj
cr28dWAugUyWXgOypfX1jtg5VKsmuoKiRIp4eacPo940GE3GhR/5iWM+qBTXGhco
1Bfyoid8OkndiPIeHG17sc3v+g829YRJLf7SwTs7E9naP04rJEdBI2fA2jSXoTNY
vXY6LKFdQDGpjQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:42:01 2025 by rpki-client