Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File:                     5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier:          wMd3FD8QnJxNep1cwCqkVTb72+dIU+cC9msjUczAuYs=
Subject key identifier:   07:49:54:56:39:C1:9F:C2:8B:CA:C1:9D:E7:59:9A:BF:49:20:8F:CB
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer:       /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial:       01964A7D87214EF7D734FE3B88A42CEBABEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number:          14F7
Signing time:             Fri 18 Apr 2025 20:01:02 +0000
Manifest this update:     Fri 18 Apr 2025 20:01:02 +0000
Manifest next update:     Sat 19 Apr 2025 20:01:02 +0000
Files and hashes:         1: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (hash: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=)
                          2: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: pUZXMYbZ3J7hH09gOlbf1mi1K9ODKxqG4gwUobOi5Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:87:21:4e:f7:d7:34:fe:3b:88:a4:2c:eb:ab:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
        Validity
            Not Before: Apr 18 20:01:02 2025 GMT
            Not After : Apr 19 20:01:02 2025 GMT
        Subject: CN=0749545639c19fc28bcac19de7599abf49208fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:50:87:43:32:73:ba:95:33:13:00:b5:31:
                    3c:ac:70:d7:dd:1b:0e:a4:6a:21:0b:ed:14:dd:1a:
                    4e:9e:77:8b:3a:cd:8e:ee:f9:cc:ae:9d:ed:3a:c6:
                    40:47:9b:f2:23:28:f4:40:4e:d2:8f:fd:fe:3f:04:
                    e7:3f:00:de:fd:25:8c:72:b2:11:29:68:c2:5d:d6:
                    78:b7:89:1b:52:cc:0a:d2:05:9a:fc:9b:12:77:d4:
                    07:ec:9f:9b:48:5a:4c:d5:46:8c:4e:48:9c:11:47:
                    4f:3e:d9:ba:de:24:0a:c4:9b:fc:d7:5d:83:c7:fe:
                    f5:f7:0f:ad:30:50:df:8e:5f:e3:c8:1b:07:70:26:
                    ec:95:d3:ee:24:d0:21:a2:fe:d3:b1:12:98:6f:96:
                    e4:52:18:ec:97:0e:1d:ca:f6:ae:4a:6b:4b:3f:6e:
                    d5:90:05:0d:ff:e3:fc:7b:33:15:a2:cb:21:ab:8b:
                    a1:8e:cc:a9:20:ac:70:60:aa:5d:15:c1:4e:be:1a:
                    6b:5c:5a:a7:30:aa:3d:46:73:c4:5e:ee:b6:3e:7d:
                    2e:a7:58:77:be:16:a6:09:2f:97:2d:4a:42:31:26:
                    08:60:bf:d2:b7:5f:77:d7:35:bf:10:2d:6b:2b:e5:
                    0f:2d:a0:02:26:f8:c1:9c:fa:f2:8f:66:36:92:a8:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:49:54:56:39:C1:9F:C2:8B:CA:C1:9D:E7:59:9A:BF:49:20:8F:CB
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:eb:62:7c:ba:f5:ce:7b:f3:27:92:6e:10:95:5b:93:fc:
         ee:3f:6d:4c:32:c0:b8:6a:a9:59:3b:70:cc:a9:ba:1c:95:94:
         1c:a5:6a:da:af:3d:f3:db:a5:01:11:47:43:22:10:e6:5c:c4:
         12:a3:ca:5e:2c:58:6f:7e:cd:a9:00:d9:ac:d0:1d:c4:97:2f:
         13:e0:79:a6:0f:88:ca:55:e5:14:e8:4d:71:b4:f7:a7:82:32:
         e2:ac:ca:da:13:60:67:41:ff:a3:c3:e7:d2:f0:3d:d2:6a:55:
         43:13:27:bb:6f:3e:9e:8d:72:34:bf:7e:e0:58:4a:02:03:05:
         83:ca:24:7c:81:be:4e:e6:43:57:bc:9e:b7:fb:02:3b:c3:fc:
         2a:0a:fb:f0:96:f1:93:c3:80:ca:a3:7d:22:fe:cd:0f:50:1d:
         2f:05:3d:d7:38:40:dc:d8:5d:91:ca:52:42:e0:89:bf:75:be:
         f3:5f:4c:70:05:cf:3f:9f:2a:61:94:b6:d4:31:28:45:99:83:
         fd:71:3d:9d:03:fd:21:9d:a9:11:63:bc:dd:bb:db:bc:f1:e7:
         5d:0d:3f:bb:85:90:72:a2:3b:73:95:18:ee:35:b8:a5:bc:00:
         91:8f:22:07:7c:53:1f:4d:11:32:cb:e4:f3:7d:1d:21:0d:0b:
         bf:f5:0c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfYchTvfXNP47iKQs66vuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzY3YjUxZTZiNDgyYjllN2E3NDgzNjYyYTVkYmVlMWI4
ZDg1YTAwHhcNMjUwNDE4MjAwMTAyWhcNMjUwNDE5MjAwMTAyWjAzMTEwLwYDVQQD
EygwNzQ5NTQ1NjM5YzE5ZmMyOGJjYWMxOWRlNzU5OWFiZjQ5MjA4ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY5Qh0Myc7qVMxMAtTE8rHDX3RsO
pGohC+0U3RpOnneLOs2O7vnMrp3tOsZAR5vyIyj0QE7Sj/3+PwTnPwDe/SWMcrIR
KWjCXdZ4t4kbUswK0gWa/JsSd9QH7J+bSFpM1UaMTkicEUdPPtm63iQKxJv8112D
x/719w+tMFDfjl/jyBsHcCbsldPuJNAhov7TsRKYb5bkUhjslw4dyvauSmtLP27V
kAUN/+P8ezMVosshq4uhjsypIKxwYKpdFcFOvhprXFqnMKo9RnPEXu62Pn0up1h3
vhamCS+XLUpCMSYIYL/St1931zW/EC1rK+UPLaACJvjBnPryj2Y2kqg+kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdJVFY5wZ/Ci8rBnedZmr9JII/LMB8GA1UdIwQY
MBaAFOR2e1HmtIK556dINmKl2+4bjYWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgt
YmRiZTE2ODA2NjE2LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgtYmRiZTE2ODA2NjE2
LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX7rYny6
9c578yeSbhCVW5P87j9tTDLAuGqpWTtwzKm6HJWUHKVq2q8989ulARFHQyIQ5lzE
EqPKXixYb37NqQDZrNAdxJcvE+B5pg+IylXlFOhNcbT3p4Iy4qzK2hNgZ0H/o8Pn
0vA90mpVQxMnu28+no1yNL9+4FhKAgMFg8okfIG+TuZDV7yet/sCO8P8Kgr78Jbx
k8OAyqN9Iv7ND1AdLwU91zhA3NhdkcpSQuCJv3W+819McAXPP58qYZS21DEoRZmD
/XE9nQP9IZ2pEWO83bvbvPHnXQ0/u4WQcqI7c5UY7jW4pbwAkY8iB3xTH00RMsvk
830dIQ0Lv/UMUw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:00 2025 by rpki-client