Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File:                     pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier:          RNMVaI7eBue1xKSM0pXMxCGb4LY3y+rpT+gSxT2RivM=
Subject key identifier:   0A:EF:53:4C:ED:EB:5A:2A:40:73:20:6B:4E:3B:9C:8F:5B:BE:65:4F
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer:       /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial:       0194C463636156A88C1E9E07B1F99435D454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number:          055F
Signing time:             Sun 02 Feb 2025 02:00:35 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:35 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:35 +0000
Files and hashes:         1: e4pYTgrST_OIh_0Qkxb1VUF6r3Y.roa (hash: CwIOS1Io6ZhDFcyydlZIo2WNdIO73K5UrPWTpvd7EH0=)
                          2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: grwQzr/So8SAtSkF9KG5uc/Kb9Kll7FGfOMXQUVZjsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:63:61:56:a8:8c:1e:9e:07:b1:f9:94:35:d4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
        Validity
            Not Before: Feb  2 02:00:35 2025 GMT
            Not After : Feb  3 02:00:35 2025 GMT
        Subject: CN=0aef534cedeb5a2a4073206b4e3b9c8f5bbe654f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:14:d4:4d:da:29:df:08:9b:c9:72:34:80:
                    6f:28:48:bf:a9:c3:dc:ff:2a:f6:b2:9a:9e:45:19:
                    ad:c6:06:fa:d2:43:38:3d:77:af:e1:b2:70:d1:9f:
                    41:e9:dc:17:90:b3:46:fb:90:08:32:89:e0:ed:f7:
                    1c:27:6e:9d:89:46:29:29:66:52:5b:16:43:7e:19:
                    ce:4a:35:5c:68:35:67:51:7b:f8:92:e7:9a:45:74:
                    08:9d:47:cf:14:3e:f6:e8:db:6a:40:1b:63:f4:fa:
                    f6:a4:25:dd:ce:58:21:65:92:0d:65:63:53:89:f0:
                    cd:64:66:bf:5a:e5:2a:9b:e0:aa:4f:5e:72:2a:a8:
                    fb:d2:43:b9:49:e5:14:53:3b:bb:0d:75:97:f4:03:
                    ac:a2:1e:63:5e:af:0a:fd:45:e2:db:a0:c6:af:40:
                    56:44:23:27:76:b0:ce:4f:23:b0:06:cf:d7:e6:6e:
                    7f:b8:01:16:33:00:52:e8:dd:69:a4:f0:b8:8c:a8:
                    e4:32:4f:7a:9f:32:9d:bd:3e:90:76:2c:46:f4:e6:
                    aa:f3:29:df:28:a7:b5:f3:be:f5:08:a0:e2:31:3b:
                    55:c2:fe:ea:db:19:27:5f:15:f5:d4:ab:26:1f:3e:
                    c3:73:6e:99:cf:7a:38:fe:4e:9d:63:e1:0d:e0:00:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EF:53:4C:ED:EB:5A:2A:40:73:20:6B:4E:3B:9C:8F:5B:BE:65:4F
            X509v3 Authority Key Identifier:
                keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:23:73:70:5b:6f:59:f7:73:30:97:04:0d:26:fd:25:cd:ed:
         da:15:e5:dd:44:70:d5:ac:20:4c:a4:14:b8:f5:f3:cf:88:45:
         20:49:9d:81:82:2b:01:36:7a:53:e0:b9:53:bb:a3:22:b5:7e:
         a8:42:4b:1f:3a:60:40:ca:2e:a0:f2:65:d5:37:f6:35:3a:0c:
         9f:d8:d1:e0:b6:11:a0:2d:94:3d:a4:af:74:92:44:13:d5:dc:
         d2:3d:4b:3a:88:a0:22:3d:15:5d:c5:67:98:1a:98:4e:a8:f2:
         fc:ca:ce:cb:02:ed:78:8e:ed:a9:3e:10:5f:60:f3:a5:06:9f:
         12:a9:a6:d4:f5:26:d1:25:6e:9e:78:2f:f0:8e:b4:c8:09:48:
         97:34:c4:44:7b:f7:9c:f7:ae:b1:78:00:98:60:5d:dd:79:cb:
         8f:1b:b7:74:53:ea:05:e3:e5:47:76:5f:39:bf:30:2e:8b:b7:
         f2:5f:f8:94:4e:73:dd:0f:2a:13:ca:c7:25:2d:b6:6d:d1:88:
         6d:0f:8b:35:36:f6:8f:73:b3:be:c6:e6:b1:a5:5d:02:02:80:
         4e:b4:fa:04:25:96:a6:34:9b:88:be:4d:27:d5:78:c5:86:92:
         b1:d5:32:2f:5a:19:de:2e:37:1f:93:7a:32:51:df:3b:ad:30:
         40:c2:36:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY2NhVqiMHp4HsfmUNdRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NTAwNDY2MWEwOWUyNjc1ZmMxNTk5ZDRlNDAwMjdkNzc4
YzQwNGMwHhcNMjUwMjAyMDIwMDM1WhcNMjUwMjAzMDIwMDM1WjAzMTEwLwYDVQQD
EygwYWVmNTM0Y2VkZWI1YTJhNDA3MzIwNmI0ZTNiOWM4ZjViYmU2NTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR0U1E3aKd8Im8lyNIBvKEi/qcPc
/yr2spqeRRmtxgb60kM4PXev4bJw0Z9B6dwXkLNG+5AIMong7fccJ26diUYpKWZS
WxZDfhnOSjVcaDVnUXv4kueaRXQInUfPFD726NtqQBtj9Pr2pCXdzlghZZINZWNT
ifDNZGa/WuUqm+CqT15yKqj70kO5SeUUUzu7DXWX9AOsoh5jXq8K/UXi26DGr0BW
RCMndrDOTyOwBs/X5m5/uAEWMwBS6N1ppPC4jKjkMk96nzKdvT6QdixG9Oaq8ynf
KKe18771CKDiMTtVwv7q2xknXxX11KsmHz7Dc26Zz3o4/k6dY+EN4ADPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArvU0zt61oqQHMga047nI9bvmVPMB8GA1UdIwQY
MBaAFKVQBGYaCeJnX8FZnU5AAn13jEBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODIt
M2Y3OGJjM2RlM2E4LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODItM2Y3OGJjM2RlM2E4
LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCNzcFtv
WfdzMJcEDSb9Jc3t2hXl3URw1awgTKQUuPXzz4hFIEmdgYIrATZ6U+C5U7ujIrV+
qEJLHzpgQMouoPJl1Tf2NToMn9jR4LYRoC2UPaSvdJJEE9Xc0j1LOoigIj0VXcVn
mBqYTqjy/MrOywLteI7tqT4QX2DzpQafEqmm1PUm0SVunngv8I60yAlIlzTERHv3
nPeusXgAmGBd3XnLjxu3dFPqBePlR3ZfOb8wLou38l/4lE5z3Q8qE8rHJS22bdGI
bQ+LNTb2j3OzvsbmsaVdAgKATrT6BCWWpjSbiL5NJ9V4xYaSsdUyL1oZ3i43H5N6
MlHfO60wQMI2Uw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:53 2025 by rpki-client