Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          u9wgMxbcDmVdg9gt69agEszOygdzO9mK299gZ5OCUGo=
Subject key identifier:   47:46:64:95:1E:5A:D6:A9:98:B0:90:7E:3F:13:65:79:D2:35:87:8B
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       0196451FD666E61317E1B6AA2E57B63DDC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          0DB6
Signing time:             Thu 17 Apr 2025 19:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:36 +0000
Files and hashes:         1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: TPfny7P3KSEy02DxFYlw333WKu9ssiOsc7Sfvmz2TAU=)
                          2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=)
                          3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=)
                          4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:d6:66:e6:13:17:e1:b6:aa:2e:57:b6:3d:dc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Apr 17 19:00:36 2025 GMT
            Not After : Apr 18 19:00:36 2025 GMT
        Subject: CN=474664951e5ad6a998b0907e3f136579d235878b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:58:32:a9:cf:73:d2:dd:36:9f:c2:f6:ce:
                    63:53:a6:46:a0:93:0a:bd:89:51:df:c4:a3:fd:13:
                    91:b8:78:25:d6:9e:4c:f3:01:09:11:b3:48:5b:bb:
                    48:67:de:67:52:22:48:1b:7a:fe:a9:b7:4c:62:e1:
                    14:29:71:eb:77:55:79:28:fe:f3:6c:02:09:14:37:
                    59:07:12:81:02:c5:d2:3a:fa:26:98:20:8c:17:aa:
                    f7:6e:aa:66:67:ec:f9:fc:66:63:17:6d:2a:13:5b:
                    68:7c:6e:c6:97:37:71:bc:1f:14:88:df:79:39:b8:
                    e8:db:ad:47:90:1b:31:07:b7:7e:3a:30:f4:7c:21:
                    98:83:15:94:30:ba:a5:bf:d5:fa:11:5f:4c:1f:9d:
                    d5:35:2a:c2:0b:18:bc:dd:6f:a2:b8:bc:87:59:a7:
                    89:19:45:39:72:05:80:e8:db:67:c9:13:d3:6b:e4:
                    be:ac:85:7e:0b:2d:28:d2:94:f8:86:96:f2:25:92:
                    8a:bd:b8:08:b5:98:40:a6:be:48:f1:96:02:7f:9e:
                    50:87:8f:e6:d2:9f:3d:78:f1:81:45:87:c2:2e:d7:
                    2a:67:fa:88:a4:58:41:19:ab:06:35:a1:b7:ab:65:
                    40:4d:5c:d7:d5:e7:42:b3:7f:58:06:1c:37:2e:e1:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:46:64:95:1E:5A:D6:A9:98:B0:90:7E:3F:13:65:79:D2:35:87:8B
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a0:c4:0d:df:31:f5:12:2f:b9:b9:79:53:ee:23:e5:ad:90:
         20:54:ed:55:7b:ee:93:3d:9e:5e:c2:ea:95:f8:80:3c:64:c0:
         ea:1e:d4:5b:1a:b3:c2:0d:c4:7f:f9:02:ba:7c:b0:ae:f3:18:
         cd:4f:26:9f:54:ec:c6:2c:35:73:c4:b5:2f:70:48:97:e2:35:
         bb:f6:e9:af:af:5c:d5:7b:7d:e0:26:82:30:36:35:7e:72:15:
         93:1e:ae:e3:1f:53:12:13:86:1c:79:c3:fe:5b:51:14:91:28:
         ed:16:40:ad:a9:f8:78:2a:2a:d9:6f:6b:c3:59:8e:d0:01:9c:
         93:1b:31:d4:58:85:97:2e:c9:39:91:8e:a4:a2:b4:bb:82:93:
         a1:46:77:b6:e9:83:a3:34:7f:e3:b5:27:94:01:cd:74:66:88:
         cc:6b:42:a1:c7:a1:89:fc:ba:05:18:d7:b8:f1:15:fc:02:43:
         ca:54:0b:bb:42:31:c5:27:9e:a3:67:7b:c5:d4:75:a2:ee:42:
         a6:fd:ca:a7:cf:bd:8b:44:e9:5c:6a:28:35:20:8f:75:25:4e:
         c4:e4:d9:25:fb:e5:b5:7a:0d:c2:f9:5c:68:71:c7:b7:f9:af:
         ad:f6:9d:b6:fc:43:9c:7c:e1:b4:99:7d:f3:76:4f:c0:bc:a1:
         8d:97:66:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFH9Zm5hMX4baqLle2PdwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjUwNDE3MTkwMDM2WhcNMjUwNDE4MTkwMDM2WjAzMTEwLwYDVQQD
Eyg0NzQ2NjQ5NTFlNWFkNmE5OThiMDkwN2UzZjEzNjU3OWQyMzU4NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AJYMqnPc9LdNp/C9s5jU6ZGoJMK
vYlR38Sj/RORuHgl1p5M8wEJEbNIW7tIZ95nUiJIG3r+qbdMYuEUKXHrd1V5KP7z
bAIJFDdZBxKBAsXSOvommCCMF6r3bqpmZ+z5/GZjF20qE1tofG7GlzdxvB8UiN95
Objo261HkBsxB7d+OjD0fCGYgxWUMLqlv9X6EV9MH53VNSrCCxi83W+iuLyHWaeJ
GUU5cgWA6NtnyRPTa+S+rIV+Cy0o0pT4hpbyJZKKvbgItZhApr5I8ZYCf55Qh4/m
0p89ePGBRYfCLtcqZ/qIpFhBGasGNaG3q2VATVzX1edCs39YBhw3LuExzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdGZJUeWtapmLCQfj8TZXnSNYeLMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqDEDd8x
9RIvubl5U+4j5a2QIFTtVXvukz2eXsLqlfiAPGTA6h7UWxqzwg3Ef/kCunywrvMY
zU8mn1Tsxiw1c8S1L3BIl+I1u/bpr69c1Xt94CaCMDY1fnIVkx6u4x9TEhOGHHnD
/ltRFJEo7RZAran4eCoq2W9rw1mO0AGckxsx1FiFly7JOZGOpKK0u4KToUZ3tumD
ozR/47UnlAHNdGaIzGtCocehify6BRjXuPEV/AJDylQLu0IxxSeeo2d7xdR1ou5C
pv3Kp8+9i0TpXGooNSCPdSVOxOTZJfvltXoNwvlcaHHHt/mvrfadtvxDnHzhtJl9
83ZPwLyhjZdmQg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:04:23 2025 by rpki-client