Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File:                     Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier:          m91B6Rwxsg2Sc5GH469YXpSbjlAAt11WJN4yxfD0xo4=
Subject key identifier:   EF:5C:C2:D6:16:25:F4:B7:DA:C3:0A:FE:44:F6:3E:7D:3C:20:D5:19
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer:       /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial:       0196A05192C7F04DC8882D9190FBBAE9077B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number:          0287
Signing time:             Mon 05 May 2025 12:00:22 +0000
Manifest this update:     Mon 05 May 2025 12:00:22 +0000
Manifest next update:     Tue 06 May 2025 12:00:22 +0000
Files and hashes:         1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: 4XUvaPcO1cZbIIkchnMhXNesR1gv+PEY793mQcoiNsc=)
                          2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:51:92:c7:f0:4d:c8:88:2d:91:90:fb:ba:e9:07:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
        Validity
            Not Before: May  5 12:00:22 2025 GMT
            Not After : May  6 12:00:22 2025 GMT
        Subject: CN=ef5cc2d61625f4b7dac30afe44f63e7d3c20d519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:cf:54:34:bc:c4:1a:8e:ae:c9:a4:8d:54:
                    df:8e:02:95:88:b7:43:57:56:35:16:a3:62:b4:15:
                    4a:9a:5c:e3:51:2a:ea:78:b7:e7:46:b3:a0:c9:b9:
                    85:5c:b0:fe:64:a9:66:a7:21:41:e9:81:51:1b:1d:
                    3e:79:57:48:ff:92:07:bf:c9:5b:dc:ff:79:f8:39:
                    bd:37:4e:c2:de:0d:a7:2d:7b:d9:bb:3e:fe:f2:fe:
                    76:9a:bd:a7:fb:a0:f2:84:dd:09:86:b7:19:8c:04:
                    36:4e:8e:44:c9:a2:8f:49:b3:4a:84:38:84:d1:42:
                    4d:84:3a:31:e2:ff:b3:eb:c6:bf:7b:f0:8f:69:db:
                    fa:0c:d3:45:30:bf:11:4f:c6:6a:0b:dc:84:d9:e0:
                    df:fa:c9:77:e1:ac:30:8e:fa:08:d6:1a:1f:50:78:
                    9b:16:de:67:50:0a:ad:ed:25:73:d1:8a:81:b5:d8:
                    aa:4d:67:89:6d:96:e7:a5:57:c0:9f:7e:61:40:23:
                    f6:34:ef:1b:83:ea:7d:4d:43:be:0e:be:32:ae:41:
                    d8:d3:f6:0d:55:3a:2e:e9:1a:d4:87:02:f5:6a:65:
                    6e:bf:15:27:27:12:9f:69:60:98:05:eb:1c:8c:f6:
                    a5:3a:c1:a1:18:2b:e3:09:86:b5:82:cc:81:86:47:
                    0e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5C:C2:D6:16:25:F4:B7:DA:C3:0A:FE:44:F6:3E:7D:3C:20:D5:19
            X509v3 Authority Key Identifier:
                keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:5d:d8:28:9b:66:52:f2:56:39:a1:55:ac:aa:bc:d9:95:04:
         35:07:51:1f:e1:fb:3e:85:4f:b4:cc:19:3a:d7:bb:e3:ec:fd:
         49:19:79:4e:cc:f4:75:30:bb:62:d5:0c:c1:34:c5:4e:3c:e1:
         25:34:ba:54:fd:3b:c9:c8:b0:d2:3d:e4:6e:ce:3e:ca:96:c1:
         2c:c7:48:f8:71:99:8e:1e:36:cf:a8:9f:4d:ec:93:23:cb:45:
         63:5f:b3:80:a6:50:d9:97:81:19:dc:2c:7a:58:6d:9a:fe:52:
         8f:59:3b:6a:21:a2:f7:c6:39:4b:3c:6d:df:b7:02:4c:d2:90:
         3c:cc:d5:e6:96:91:23:fc:81:d3:b6:0a:0c:9d:ed:9c:de:3f:
         73:56:32:d8:31:2b:4f:8f:bd:4b:c3:0c:48:dc:34:67:44:de:
         5b:45:0f:45:42:3d:71:04:97:1b:44:63:5b:bc:7e:09:7c:c5:
         84:e6:10:57:97:24:7e:93:ec:12:28:61:be:86:c9:11:0b:fe:
         8b:be:d7:44:2f:4b:ef:fe:21:40:5a:57:c6:47:d3:32:e8:7c:
         fb:02:3a:78:b9:89:03:a4:ce:c1:36:40:4d:fd:21:5b:0b:16:
         95:23:61:96:b8:d8:17:45:eb:5a:4c:53:43:2b:3b:87:b0:8d:
         16:2a:1a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagUZLH8E3IiC2RkPu66Qd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi
YmM0OWMwHhcNMjUwNTA1MTIwMDIyWhcNMjUwNTA2MTIwMDIyWjAzMTEwLwYDVQQD
EyhlZjVjYzJkNjE2MjVmNGI3ZGFjMzBhZmU0NGY2M2U3ZDNjMjBkNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0TPVDS8xBqOrsmkjVTfjgKViLdD
V1Y1FqNitBVKmlzjUSrqeLfnRrOgybmFXLD+ZKlmpyFB6YFRGx0+eVdI/5IHv8lb
3P95+Dm9N07C3g2nLXvZuz7+8v52mr2n+6DyhN0JhrcZjAQ2To5EyaKPSbNKhDiE
0UJNhDox4v+z68a/e/CPadv6DNNFML8RT8ZqC9yE2eDf+sl34awwjvoI1hofUHib
Ft5nUAqt7SVz0YqBtdiqTWeJbZbnpVfAn35hQCP2NO8bg+p9TUO+Dr4yrkHY0/YN
VTou6RrUhwL1amVuvxUnJxKfaWCYBescjPalOsGhGCvjCYa1gsyBhkcOXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9cwtYWJfS32sMK/kT2Pn08INUZMB8GA1UdIwQY
MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzV3YKJtm
UvJWOaFVrKq82ZUENQdRH+H7PoVPtMwZOte74+z9SRl5Tsz0dTC7YtUMwTTFTjzh
JTS6VP07yciw0j3kbs4+ypbBLMdI+HGZjh42z6ifTeyTI8tFY1+zgKZQ2ZeBGdws
elhtmv5Sj1k7aiGi98Y5Szxt37cCTNKQPMzV5paRI/yB07YKDJ3tnN4/c1Yy2DEr
T4+9S8MMSNw0Z0TeW0UPRUI9cQSXG0RjW7x+CXzFhOYQV5ckfpPsEihhvobJEQv+
i77XRC9L7/4hQFpXxkfTMuh8+wI6eLmJA6TOwTZATf0hWwsWlSNhlrjYF0XrWkxT
Qys7h7CNFioadw==
-----END CERTIFICATE-----
Generated at Mon May 5 16:36:46 2025 by rpki-client