Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File:                     U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier:          QvsfwnJOdRU/ukLPW9njhT95gsGfkzRdFUlsmNhz2jA=
Subject key identifier:   E6:4F:3E:09:16:E8:FF:5B:E6:D4:19:90:24:60:0A:02:C5:87:DE:13
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer:       /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial:       0196556E7C069391B20D554E73078FA5BA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 23:00:26 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:26 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:26 +0000
Files and hashes:         1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 03VoBitl7F1CRXRefszVuo2mBp2yB2YYSUV02LK72qo=)
                          2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:7c:06:93:91:b2:0d:55:4e:73:07:8f:a5:ba:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
        Validity
            Not Before: Apr 20 23:00:26 2025 GMT
            Not After : Apr 21 23:00:26 2025 GMT
        Subject: CN=e64f3e0916e8ff5be6d4199024600a02c587de13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:08:f2:6c:1d:8f:7f:60:4f:d2:ac:41:45:
                    72:59:4b:fb:76:b6:5b:b9:ef:42:e8:f7:ce:27:3e:
                    f3:51:66:2d:5a:7c:15:ae:df:36:5c:f8:f1:0c:4c:
                    6a:d4:59:d8:b2:0f:fe:ef:27:df:1d:c8:84:9e:38:
                    d3:56:c9:c9:3f:ee:e5:6e:ae:2c:b3:1a:fc:9c:fd:
                    ac:be:46:4d:a7:6e:d8:3e:6e:84:a1:f6:b1:90:8a:
                    80:d0:89:28:33:cf:71:1f:80:a0:c8:39:92:52:55:
                    2d:fa:e9:10:54:89:4f:af:3d:84:7e:67:b4:15:2b:
                    15:f3:14:c3:6b:ba:17:6e:15:a9:fa:cd:59:1d:8e:
                    fe:7c:cb:71:76:a2:0d:2a:67:83:73:d1:b3:0b:c9:
                    3e:33:06:57:5e:8b:62:7e:47:31:f1:ff:84:9c:32:
                    f9:aa:ae:7f:59:10:90:ba:e0:ff:48:07:3a:11:9f:
                    f9:11:09:28:b4:7c:ae:02:40:69:93:07:ae:6d:12:
                    da:bb:85:00:f5:79:28:b4:d9:32:ce:ce:5a:e2:7a:
                    73:52:ef:14:41:10:33:ac:6a:b4:da:7d:ef:58:12:
                    db:1c:02:c2:2d:ef:c2:2d:56:64:43:90:f1:36:e0:
                    ec:69:58:a4:5a:13:00:54:8f:ef:78:53:8b:35:1d:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:3E:09:16:E8:FF:5B:E6:D4:19:90:24:60:0A:02:C5:87:DE:13
            X509v3 Authority Key Identifier:
                keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:d7:73:42:6b:64:19:c3:61:03:c2:58:85:c0:21:10:06:
         f4:c2:eb:be:83:58:65:8f:40:0f:36:fc:be:a9:d3:a8:e8:17:
         8a:84:06:c3:1b:38:23:da:61:c4:4d:ca:ec:be:e6:bc:a5:c8:
         87:46:78:8e:0e:98:ef:6b:76:a6:94:6d:64:3c:93:66:07:15:
         36:c1:d8:bd:20:91:84:0b:ef:55:ef:7b:90:01:94:13:59:f3:
         e0:c8:bb:f0:da:a0:5b:f7:95:12:79:a8:89:03:45:7c:74:7a:
         78:2b:3a:c6:55:a7:de:d9:ee:96:38:98:26:97:ac:76:39:31:
         d2:97:c4:fa:54:0a:8a:76:d4:21:7d:ce:ea:dd:04:c3:2a:d4:
         fc:39:be:4b:8f:aa:c8:6f:28:ea:bb:c0:d1:54:5f:25:df:53:
         1b:db:ce:30:bc:9f:8d:c1:91:1e:0f:90:20:8a:f1:a8:05:93:
         a0:d0:d7:e3:75:7e:78:b5:36:fd:88:ce:b5:de:67:04:e7:fc:
         3d:80:4c:66:88:ef:fd:4e:30:47:58:13:60:8d:a4:ca:12:7a:
         91:cc:a3:14:e6:2a:3b:a7:94:6d:f8:81:2a:b3:36:ef:9f:e3:
         7f:fd:5b:71:48:f7:01:1a:d2:4a:4a:2a:75:1a:36:9d:58:11:
         80:eb:4f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbnwGk5GyDVVOcwePpbpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl
OWMxOWYwHhcNMjUwNDIwMjMwMDI2WhcNMjUwNDIxMjMwMDI2WjAzMTEwLwYDVQQD
EyhlNjRmM2UwOTE2ZThmZjViZTZkNDE5OTAyNDYwMGEwMmM1ODdkZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvAI8mwdj39gT9KsQUVyWUv7drZb
ue9C6PfOJz7zUWYtWnwVrt82XPjxDExq1FnYsg/+7yffHciEnjjTVsnJP+7lbq4s
sxr8nP2svkZNp27YPm6EofaxkIqA0IkoM89xH4CgyDmSUlUt+ukQVIlPrz2Efme0
FSsV8xTDa7oXbhWp+s1ZHY7+fMtxdqINKmeDc9GzC8k+MwZXXotifkcx8f+EnDL5
qq5/WRCQuuD/SAc6EZ/5EQkotHyuAkBpkweubRLau4UA9XkotNkyzs5a4npzUu8U
QRAzrGq02n3vWBLbHALCLe/CLVZkQ5DxNuDsaVikWhMAVI/veFOLNR2FaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZPPgkW6P9b5tQZkCRgCgLFh94TMB8GA1UdIwQY
MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt
MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5
LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcLXc0Jr
ZBnDYQPCWIXAIRAG9MLrvoNYZY9ADzb8vqnTqOgXioQGwxs4I9phxE3K7L7mvKXI
h0Z4jg6Y72t2ppRtZDyTZgcVNsHYvSCRhAvvVe97kAGUE1nz4Mi78NqgW/eVEnmo
iQNFfHR6eCs6xlWn3tnuljiYJpesdjkx0pfE+lQKinbUIX3O6t0EwyrU/Dm+S4+q
yG8o6rvA0VRfJd9TG9vOMLyfjcGRHg+QIIrxqAWToNDX43V+eLU2/YjOtd5nBOf8
PYBMZojv/U4wR1gTYI2kyhJ6kcyjFOYqO6eUbfiBKrM275/jf/1bcUj3ARrSSkoq
dRo2nVgRgOtPIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:32 2025 by rpki-client