Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File:                     0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier:          6R7MkiHTrjobGkF249a4jNMKjSA+ZdvmzT5W9rJwcdM=
Subject key identifier:   9C:AF:C2:A2:9F:E5:38:DA:35:3E:58:26:18:29:58:41:98:AF:99:17
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer:       /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial:       01964CA2AAFEC8DD8B735846944CFC4BC320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number:          5C
Signing time:             Sat 19 Apr 2025 06:00:51 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:51 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:51 +0000
Files and hashes:         1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: DUzeX9eRyI1zlKEnxxfhUknbbtEvp81C5w4E240vvgY=)
                          2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:aa:fe:c8:dd:8b:73:58:46:94:4c:fc:4b:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
        Validity
            Not Before: Apr 19 06:00:51 2025 GMT
            Not After : Apr 20 06:00:51 2025 GMT
        Subject: CN=9cafc2a29fe538da353e58261829584198af9917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:3c:61:6a:0b:1f:56:59:62:e9:c1:89:5d:
                    0c:61:66:fe:d5:b6:8a:20:9c:45:89:d8:1d:09:42:
                    6b:94:65:fc:d9:d0:67:aa:08:d7:44:58:4e:e5:dc:
                    91:96:18:3c:a9:0c:5c:72:85:ca:99:09:79:32:18:
                    20:0e:01:80:06:f3:ea:07:eb:4d:06:75:86:cb:3f:
                    5c:66:0d:74:2a:90:13:e6:32:25:d8:2a:d3:33:5d:
                    83:ab:55:db:f7:5b:05:cb:87:da:90:cf:41:53:ff:
                    3c:76:e1:c7:fa:d1:80:bb:78:6b:5a:49:c3:d0:0d:
                    61:40:f3:83:93:c8:4a:62:97:f3:3d:ea:83:04:d7:
                    c8:4f:b1:77:17:ca:1e:b8:6e:71:6d:ff:16:b0:25:
                    c3:47:36:e5:8e:92:eb:b4:19:4f:8e:ae:22:8f:1d:
                    f0:b0:7e:0e:49:6f:0e:83:85:06:e5:62:48:99:78:
                    1f:92:bf:29:2a:2a:87:d0:80:39:6a:ef:ed:67:33:
                    8b:78:9a:b1:9a:43:f3:09:dd:24:85:ac:4b:15:70:
                    8f:96:27:9e:46:c9:eb:f2:3b:78:c4:0f:30:8b:ba:
                    18:f9:3b:31:7e:25:fb:1d:38:a3:2c:c4:bf:39:ae:
                    3d:fc:1f:94:a2:cd:b2:40:ac:80:ed:d2:d6:b3:2a:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:C2:A2:9F:E5:38:DA:35:3E:58:26:18:29:58:41:98:AF:99:17
            X509v3 Authority Key Identifier:
                keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:85:95:e8:9b:bc:f1:9d:41:44:c7:07:5f:9c:e0:43:6f:c6:
         58:f7:02:a9:e0:89:0e:25:00:8c:06:f4:19:d6:81:64:03:60:
         45:c0:55:cb:b7:27:2c:aa:5d:ca:2b:4a:bc:f6:18:66:b0:e2:
         5a:cd:14:1b:1c:4f:6f:87:50:da:5c:83:af:e3:9d:30:8f:ea:
         a6:d6:e3:73:60:0c:ec:c1:8f:6d:0c:1d:3b:ff:bd:40:6a:46:
         d1:2b:0a:4b:97:b9:8d:15:cd:00:c1:4a:07:64:45:64:14:e9:
         51:b2:96:b4:c6:53:1c:39:64:d0:10:88:a9:9f:87:05:f2:e6:
         7a:ea:3e:ae:99:df:12:53:8f:2a:cb:7a:6c:8a:56:55:95:c4:
         02:2d:41:05:df:3e:a6:85:f8:e3:25:ba:03:24:b6:45:a6:5c:
         7f:40:e5:f7:f5:08:1c:99:3b:8a:78:de:b0:a3:20:8a:76:58:
         dc:2e:46:b0:9c:58:3e:a1:b0:69:ae:88:d9:c6:74:e1:21:8e:
         b1:f0:27:9e:03:f9:17:53:50:7c:bc:ae:03:11:ed:85:43:cd:
         a2:ba:34:05:b2:d0:01:3e:9b:65:54:a2:ba:67:56:0a:17:30:
         06:6f:c1:cc:86:da:89:1b:f8:38:fc:55:f2:07:7c:e9:c4:f1:
         43:18:65:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMoqr+yN2Lc1hGlEz8S8MgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl
NThhOTIwHhcNMjUwNDE5MDYwMDUxWhcNMjUwNDIwMDYwMDUxWjAzMTEwLwYDVQQD
Eyg5Y2FmYzJhMjlmZTUzOGRhMzUzZTU4MjYxODI5NTg0MTk4YWY5OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtA8YWoLH1ZZYunBiV0MYWb+1baK
IJxFidgdCUJrlGX82dBnqgjXRFhO5dyRlhg8qQxccoXKmQl5MhggDgGABvPqB+tN
BnWGyz9cZg10KpAT5jIl2CrTM12Dq1Xb91sFy4fakM9BU/88duHH+tGAu3hrWknD
0A1hQPODk8hKYpfzPeqDBNfIT7F3F8oeuG5xbf8WsCXDRzbljpLrtBlPjq4ijx3w
sH4OSW8Og4UG5WJImXgfkr8pKiqH0IA5au/tZzOLeJqxmkPzCd0khaxLFXCPliee
Rsnr8jt4xA8wi7oY+TsxfiX7HTijLMS/Oa49/B+Uos2yQKyA7dLWsypnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyvwqKf5TjaNT5YJhgpWEGYr5kXMB8GA1UdIwQY
MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt
OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk
LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIWV6Ju8
8Z1BRMcHX5zgQ2/GWPcCqeCJDiUAjAb0GdaBZANgRcBVy7cnLKpdyitKvPYYZrDi
Ws0UGxxPb4dQ2lyDr+OdMI/qptbjc2AM7MGPbQwdO/+9QGpG0SsKS5e5jRXNAMFK
B2RFZBTpUbKWtMZTHDlk0BCIqZ+HBfLmeuo+rpnfElOPKst6bIpWVZXEAi1BBd8+
poX44yW6AyS2RaZcf0Dl9/UIHJk7injesKMginZY3C5GsJxYPqGwaa6I2cZ04SGO
sfAnngP5F1NQfLyuAxHthUPNoro0BbLQAT6bZVSiumdWChcwBm/BzIbaiRv4OPxV
8gd86cTxQxhl+A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:49:01 2025 by rpki-client