Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
File:                     UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json)
Hash identifier:          ACch7aXusttTBaPRKhoZFvKZ63EjcydKUMeAqcYd0XU=
Subject key identifier:   0A:7B:B8:B1:A9:87:2F:79:FE:4A:94:FC:E7:8C:5D:F2:F4:95:8B:32
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Certificate issuer:       /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial:       0196BB5B0579F010C972B715518774C80AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 18:00:26 +0000
Manifest this update:     Sat 10 May 2025 18:00:26 +0000
Manifest next update:     Sun 11 May 2025 18:00:26 +0000
Files and hashes:         1: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: EfDNoPQn5TNz+BQcOGqN1heWy1X+2bEZCdmkG0DZeYs=)
                          2: kgy9uroMpZcNrgZQHiOHzstivPY.roa (hash: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:05:79:f0:10:c9:72:b7:15:51:87:74:c8:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
        Validity
            Not Before: May 10 18:00:26 2025 GMT
            Not After : May 11 18:00:26 2025 GMT
        Subject: CN=0a7bb8b1a9872f79fe4a94fce78c5df2f4958b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:fb:94:ac:5f:fa:b1:8d:41:bf:dd:5b:6c:
                    1d:00:f6:29:e0:ed:64:d2:3f:19:40:c6:50:39:2f:
                    36:cb:bc:ac:d4:dc:17:34:7d:bb:39:1b:09:0a:d6:
                    91:0b:e8:e4:3e:91:5f:ea:22:18:68:7a:a4:f2:64:
                    77:92:31:62:12:f4:36:8c:28:58:1b:db:62:1f:96:
                    81:37:11:93:1e:29:fb:9e:00:40:a0:31:92:00:66:
                    4a:57:25:3e:1c:47:3c:a7:f1:e4:87:c7:ca:81:c0:
                    a6:c0:1c:5f:96:15:2a:41:14:fc:e7:c7:6c:f6:74:
                    63:8d:05:87:ef:81:25:b6:2d:f7:87:54:7b:ad:2a:
                    d7:10:9c:c6:93:2a:c3:fb:69:74:00:40:43:c7:4d:
                    a2:30:7b:eb:8c:20:6c:6d:ff:6d:b2:e1:a6:02:9c:
                    af:1d:6b:43:e9:61:7e:76:b4:93:17:bc:76:10:2e:
                    aa:cb:77:8d:9b:ad:b9:7e:e3:6b:92:c5:e6:14:9a:
                    48:4a:02:d5:85:36:63:f3:5c:b0:49:0c:7a:25:66:
                    e2:0c:f0:6a:70:14:fd:01:df:26:72:e8:d2:6d:88:
                    99:aa:39:cd:3c:8b:be:b2:8e:c1:f9:49:2a:91:49:
                    39:d3:e1:44:0e:84:c5:f0:e0:bd:72:53:1d:3e:85:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:B8:B1:A9:87:2F:79:FE:4A:94:FC:E7:8C:5D:F2:F4:95:8B:32
            X509v3 Authority Key Identifier:
                keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:04:e4:ee:5f:3c:c8:3d:20:59:23:00:b4:a1:7d:4c:3b:
         c9:36:d5:73:9c:2f:0b:45:4b:92:1f:ef:19:fc:5d:87:5f:80:
         31:f3:1f:5a:56:6e:50:05:44:d5:d7:9d:3a:15:90:5c:2b:88:
         04:3a:b7:18:24:e1:2a:3b:79:c2:4d:7c:2c:e1:b1:fd:f5:c4:
         ab:5c:36:10:a5:cc:df:69:da:23:24:b8:9e:e8:17:02:67:2c:
         0b:6d:6b:e2:af:59:5f:7c:d3:01:d8:49:e7:d7:96:97:a4:00:
         35:23:df:a6:c5:62:a4:cb:b5:37:84:46:fc:8c:74:d4:2d:30:
         ae:ac:ad:6c:68:d5:e4:b7:ee:f7:68:37:f7:2b:d2:f3:ae:7a:
         69:7b:6c:05:a5:b9:0b:67:29:65:f6:f1:df:a0:9f:b7:ca:d1:
         be:32:cc:a9:b1:47:ad:1b:ce:2e:31:97:09:7a:b4:f0:25:4f:
         b1:f7:e1:8c:3e:c3:18:76:95:86:35:3b:ec:e6:2b:fa:ac:11:
         f2:fe:e6:b3:e8:91:bc:aa:3b:af:fd:83:a1:db:94:16:58:f1:
         e1:0c:00:2c:b4:b7:1c:ed:99:ec:0f:78:d3:9c:bd:73:2f:b8:
         42:f6:7c:d1:d2:53:c8:f5:ae:59:10:09:51:54:7d:aa:ba:0b:
         a2:f0:c0:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WwV58BDJcrcVUYd0yAqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzI0ZWE3YmI5ZWQ1OGQ4ZDdiODVkNWQxY2RjMGZlNDNi
Y2UyMzYwHhcNMjUwNTEwMTgwMDI2WhcNMjUwNTExMTgwMDI2WjAzMTEwLwYDVQQD
EygwYTdiYjhiMWE5ODcyZjc5ZmU0YTk0ZmNlNzhjNWRmMmY0OTU4YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/L7lKxf+rGNQb/dW2wdAPYp4O1k
0j8ZQMZQOS82y7ys1NwXNH27ORsJCtaRC+jkPpFf6iIYaHqk8mR3kjFiEvQ2jChY
G9tiH5aBNxGTHin7ngBAoDGSAGZKVyU+HEc8p/Hkh8fKgcCmwBxflhUqQRT858ds
9nRjjQWH74Elti33h1R7rSrXEJzGkyrD+2l0AEBDx02iMHvrjCBsbf9tsuGmApyv
HWtD6WF+drSTF7x2EC6qy3eNm625fuNrksXmFJpISgLVhTZj81ywSQx6JWbiDPBq
cBT9Ad8mcujSbYiZqjnNPIu+so7B+UkqkUk50+FEDoTF8OC9clMdPoXtQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp7uLGphy95/kqU/OeMXfL0lYsyMB8GA1UdIwQY
MBaAFFMyTqe7ntWNjXuF1dHNwP5DvOI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEt
Mjg4ZmNkZjBjZDBiLzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEtMjg4ZmNkZjBjZDBi
LzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpsE5O5f
PMg9IFkjALShfUw7yTbVc5wvC0VLkh/vGfxdh1+AMfMfWlZuUAVE1dedOhWQXCuI
BDq3GCThKjt5wk18LOGx/fXEq1w2EKXM32naIyS4nugXAmcsC21r4q9ZX3zTAdhJ
59eWl6QANSPfpsVipMu1N4RG/Ix01C0wrqytbGjV5Lfu92g39yvS8656aXtsBaW5
C2cpZfbx36Cft8rRvjLMqbFHrRvOLjGXCXq08CVPsffhjD7DGHaVhjU77OYr+qwR
8v7ms+iRvKo7r/2DoduUFljx4QwALLS3HO2Z7A9405y9cy+4QvZ80dJTyPWuWRAJ
UVR9qroLovDAJw==
-----END CERTIFICATE-----
Generated at Sun May 11 02:12:50 2025 by rpki-client