Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File:                     dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier:          uhY1Lm+mzaoVGZBD7PuOHHJwZ7RtO10S2TibiMuFOyE=
Subject key identifier:   EB:33:4B:62:33:4D:B2:33:0B:0E:C9:BF:4A:A5:09:66:0E:F9:06:AC
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer:       /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial:       01963763FB06F5D938C8D4AB34733F5DC8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number:          14EF
Signing time:             Tue 15 Apr 2025 03:00:21 +0000
Manifest this update:     Tue 15 Apr 2025 03:00:21 +0000
Manifest next update:     Wed 16 Apr 2025 03:00:21 +0000
Files and hashes:         1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
                          2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: IHki2sY+oRP0f1qCe+skzj+HFnO1j8dFMOaG4g3wpw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:37:63:fb:06:f5:d9:38:c8:d4:ab:34:73:3f:5d:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
        Validity
            Not Before: Apr 15 03:00:21 2025 GMT
            Not After : Apr 16 03:00:21 2025 GMT
        Subject: CN=eb334b62334db2330b0ec9bf4aa509660ef906ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:19:bd:d8:1f:bf:80:9c:fe:1d:ec:51:f4:
                    75:3d:1d:a6:8d:d5:e8:0b:76:66:4c:cd:6a:da:05:
                    00:bd:d4:40:48:ea:2c:69:48:a9:9b:10:fb:9e:b1:
                    6f:e5:0f:fe:ec:37:4f:50:6f:bd:6a:98:b3:32:3f:
                    66:b8:00:81:7e:79:00:e8:08:be:ba:10:62:ef:cb:
                    14:8b:5d:40:8e:cc:bd:41:3b:3a:20:19:dc:cd:a6:
                    5e:55:75:3e:b0:59:6d:a3:64:8f:28:00:e9:fb:1f:
                    77:83:66:84:a2:de:db:26:1f:9d:be:af:f5:80:1c:
                    c9:43:68:79:3c:76:1c:eb:26:2c:60:b2:ce:e0:38:
                    e3:f8:29:68:03:5c:3a:b1:2a:9b:53:99:f3:c0:1c:
                    f7:54:f2:8c:61:b2:17:6a:48:72:f4:40:8b:d1:71:
                    7e:72:a7:0f:dd:a3:39:78:be:5f:0c:f0:e4:73:9a:
                    35:8d:23:14:98:6f:43:c2:6f:1a:77:8b:70:18:9b:
                    60:e3:2f:08:02:29:f3:98:52:8b:fa:90:7e:c1:9c:
                    11:c1:84:cb:3b:9e:ce:14:25:12:35:6c:e0:67:8f:
                    d9:e1:27:fa:6d:65:98:14:ef:6d:58:45:b1:87:76:
                    23:16:93:48:31:e6:eb:2b:0d:ff:dc:e5:f3:34:31:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:33:4B:62:33:4D:B2:33:0B:0E:C9:BF:4A:A5:09:66:0E:F9:06:AC
            X509v3 Authority Key Identifier:
                keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c7:75:69:b6:25:df:7a:4c:29:c3:9d:92:a6:33:07:e2:84:
         0a:8a:59:15:f5:d0:d3:e1:10:00:b7:e1:d3:ec:61:d1:8a:7d:
         ad:9c:a7:1d:df:78:cc:a9:f8:eb:d8:9b:49:84:e6:ac:5a:5a:
         5d:c9:bd:3f:c7:ad:d0:f8:c8:f1:7c:cc:38:ff:ac:6e:76:6a:
         35:2b:76:56:b1:74:1b:92:ed:0a:01:d5:08:0e:31:be:26:6d:
         99:5b:01:ec:f5:92:b2:cf:d3:1d:3f:ee:39:70:21:2d:98:9c:
         46:4e:99:ed:b0:e9:e8:c7:fe:92:ca:70:bf:8c:a1:e4:81:ce:
         ce:81:50:07:73:1b:bc:07:7e:49:3e:ec:85:8c:27:9e:44:1e:
         ae:8d:ce:6f:99:65:ec:1d:86:69:73:6c:bd:ca:0a:ae:9f:fa:
         b2:e6:3d:b8:d0:5d:e1:31:da:f1:b8:2a:dd:cf:bd:cc:7c:e7:
         77:c3:4b:56:dc:fb:ae:c1:66:fa:21:5a:d6:a0:b2:20:53:77:
         ae:dc:2a:fc:63:8a:4d:10:d3:6a:07:05:fe:4e:c7:a9:c0:47:
         c5:99:17:ba:61:6e:8a:af:e6:67:e4:a7:9e:e4:72:b1:2e:07:
         0d:77:54:ce:d2:e4:64:1a:53:c3:fd:04:3e:02:34:e4:58:20:
         43:2a:9d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY3Y/sG9dk4yNSrNHM/XcjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi
NjBkZGEwHhcNMjUwNDE1MDMwMDIxWhcNMjUwNDE2MDMwMDIxWjAzMTEwLwYDVQQD
EyhlYjMzNGI2MjMzNGRiMjMzMGIwZWM5YmY0YWE1MDk2NjBlZjkwNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBMZvdgfv4Cc/h3sUfR1PR2mjdXo
C3ZmTM1q2gUAvdRASOosaUipmxD7nrFv5Q/+7DdPUG+9apizMj9muACBfnkA6Ai+
uhBi78sUi11Ajsy9QTs6IBnczaZeVXU+sFlto2SPKADp+x93g2aEot7bJh+dvq/1
gBzJQ2h5PHYc6yYsYLLO4Djj+CloA1w6sSqbU5nzwBz3VPKMYbIXakhy9ECL0XF+
cqcP3aM5eL5fDPDkc5o1jSMUmG9Dwm8ad4twGJtg4y8IAinzmFKL+pB+wZwRwYTL
O57OFCUSNWzgZ4/Z4Sf6bWWYFO9tWEWxh3YjFpNIMebrKw3/3OXzNDFAcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOszS2IzTbIzCw7Jv0qlCWYO+QasMB8GA1UdIwQY
MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt
YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi
LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMd1abYl
33pMKcOdkqYzB+KECopZFfXQ0+EQALfh0+xh0Yp9rZynHd94zKn469ibSYTmrFpa
Xcm9P8et0PjI8XzMOP+sbnZqNSt2VrF0G5LtCgHVCA4xviZtmVsB7PWSss/THT/u
OXAhLZicRk6Z7bDp6Mf+kspwv4yh5IHOzoFQB3MbvAd+ST7shYwnnkQero3Ob5ll
7B2GaXNsvcoKrp/6suY9uNBd4THa8bgq3c+9zHznd8NLVtz7rsFm+iFa1qCyIFN3
rtwq/GOKTRDTagcF/k7HqcBHxZkXumFuiq/mZ+SnnuRysS4HDXdUztLkZBpTw/0E
PgI05FggQyqd6w==
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:22:37 2025 by rpki-client