Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File:                     1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier:          oqypJe1eq7mvjRsHWSihEFsbIQicqMFSDADj3hZvV6w=
Subject key identifier:   D7:3D:D9:32:5A:5F:C5:3C:8A:BE:F2:2A:E2:A7:69:89:D6:86:0D:06
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       0196BA11B265912D43EC8F55C36B1EF36272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number:          1542
Signing time:             Sat 10 May 2025 12:00:43 +0000
Manifest this update:     Sat 10 May 2025 12:00:43 +0000
Manifest next update:     Sun 11 May 2025 12:00:43 +0000
Files and hashes:         1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: jEJl9Qqd+F6HDd4ACCMOs2LxaYCGhYP59+1W3FBaa7s=)
                          2: PqhLYK9y6l-hcls-AteZg7ZowWc.roa (hash: 5kkmCBC611tewDVZOjvNR50HAAbuHCz11F3GzXw+Bh4=)
                          3: QecKb_80mIAAxxtjr9nCEvB6HF0.roa (hash: jhMDZBJq90fFjxjE7Y5j5TgVPh9pkkoV7GaQo4Rk7a8=)
                          4: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (hash: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=)
                          5: h5VC8VfOvh2FVI-sq1W-WF03wy0.roa (hash: 42Hph67k/LPhwRY52Y37tgXPme/FkjBrpaSNaay87u4=)
                          6: oQKx1duX2-5LImQ1xvyMHjuvy3g.roa (hash: dxqWqZp99XjGApMFv3ixy2jrNScfzpyezdH0iGmR45I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:11:b2:65:91:2d:43:ec:8f:55:c3:6b:1e:f3:62:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: May 10 12:00:43 2025 GMT
            Not After : May 11 12:00:43 2025 GMT
        Subject: CN=d73dd9325a5fc53c8abef22ae2a76989d6860d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:ad:a0:1c:ba:2f:7c:72:bd:62:d6:39:eb:
                    55:8c:ec:71:99:58:7d:4f:72:e3:c3:aa:90:d9:0b:
                    3a:ff:61:a3:28:c1:83:6a:36:90:c1:dd:aa:db:fd:
                    4b:7f:be:29:29:9e:c0:b9:17:8c:4e:ef:0d:a0:42:
                    8c:4c:9b:ff:77:bf:9a:c5:87:74:78:ce:76:09:ed:
                    ed:3e:e4:da:54:d2:ce:79:bc:2c:50:7e:34:c8:b7:
                    81:10:cd:98:ac:77:8b:e2:e0:4a:49:5d:a1:3a:f0:
                    d7:3e:16:5e:be:24:5b:b6:e1:16:b6:6b:b2:79:82:
                    ef:20:15:30:6a:d7:4d:c9:39:aa:bd:8f:02:af:c7:
                    ad:3f:59:9b:0c:ed:7b:3f:64:a8:57:90:c2:e6:ef:
                    7d:3c:bd:0a:fd:c4:c6:8e:51:cb:ef:67:09:2a:d7:
                    cf:9f:92:76:27:12:45:23:c0:33:b4:ad:36:6a:ee:
                    16:39:29:69:45:7f:c7:31:6a:b1:bc:20:14:74:0a:
                    01:92:c1:fc:2b:45:da:67:71:b1:80:04:4c:aa:29:
                    f1:5d:3b:2a:83:b2:5a:46:88:aa:08:a3:5c:0e:71:
                    43:a2:d4:ab:13:a3:85:8e:b6:4c:f3:ad:2f:f7:99:
                    38:48:dd:73:74:88:81:9b:61:6d:a0:de:49:89:71:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:D9:32:5A:5F:C5:3C:8A:BE:F2:2A:E2:A7:69:89:D6:86:0D:06
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:a3:d6:95:59:7d:44:01:9c:60:d9:8b:b9:0a:35:56:90:
         7e:02:e1:91:9b:d2:0b:59:8c:25:24:c5:ea:26:c8:17:be:05:
         73:fc:3d:ce:09:cd:fc:d6:cc:ef:14:1b:e9:f3:82:98:7c:71:
         0e:b9:e6:7d:e7:46:be:6a:dc:95:f6:8b:3c:1c:8c:16:4b:d0:
         45:a6:fe:0a:59:6c:eb:6f:95:8f:48:49:9c:3d:43:12:42:82:
         c2:1a:5c:be:b2:03:0c:1b:ae:21:76:b0:4f:19:2f:7f:1d:19:
         ff:d6:e1:90:e1:68:f7:fb:6c:a0:f6:2e:0b:d5:46:01:3d:f6:
         a1:b1:b5:9b:57:7b:55:88:3e:15:b9:f9:39:a5:22:ad:3b:8b:
         55:e9:21:11:65:ab:51:a6:41:02:34:f4:8e:c8:16:33:79:bd:
         82:33:7b:3b:59:ed:af:73:4f:ba:c2:27:f2:a6:cd:0a:76:3f:
         51:cc:6e:91:c7:0b:24:af:7e:e6:cc:61:0b:6e:4d:1c:da:36:
         a6:e1:76:27:47:4d:58:0c:e6:2b:4b:63:1f:c1:65:2e:28:36:
         60:25:e5:91:9c:2b:e6:b8:d5:68:de:e1:56:f5:75:9c:6e:58:
         ee:5f:6c:7d:78:53:44:73:cc:2d:48:ca:3e:ea:64:8c:52:c5:
         86:ee:04:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EbJlkS1D7I9Vw2se82JyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw
Y2Q1NmYwHhcNMjUwNTEwMTIwMDQzWhcNMjUwNTExMTIwMDQzWjAzMTEwLwYDVQQD
EyhkNzNkZDkzMjVhNWZjNTNjOGFiZWYyMmFlMmE3Njk4OWQ2ODYwZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cGtoBy6L3xyvWLWOetVjOxxmVh9
T3Ljw6qQ2Qs6/2GjKMGDajaQwd2q2/1Lf74pKZ7AuReMTu8NoEKMTJv/d7+axYd0
eM52Ce3tPuTaVNLOebwsUH40yLeBEM2YrHeL4uBKSV2hOvDXPhZeviRbtuEWtmuy
eYLvIBUwatdNyTmqvY8Cr8etP1mbDO17P2SoV5DC5u99PL0K/cTGjlHL72cJKtfP
n5J2JxJFI8AztK02au4WOSlpRX/HMWqxvCAUdAoBksH8K0XaZ3GxgARMqinxXTsq
g7JaRoiqCKNcDnFDotSrE6OFjrZM860v95k4SN1zdIiBm2FtoN5JiXFfoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc92TJaX8U8ir7yKuKnaYnWhg0GMB8GA1UdIwQY
MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct
ZDBjODJhM2NmNGI2LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2
LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgquj1pVZ
fUQBnGDZi7kKNVaQfgLhkZvSC1mMJSTF6ibIF74Fc/w9zgnN/NbM7xQb6fOCmHxx
DrnmfedGvmrclfaLPByMFkvQRab+Clls62+Vj0hJnD1DEkKCwhpcvrIDDBuuIXaw
Txkvfx0Z/9bhkOFo9/tsoPYuC9VGAT32obG1m1d7VYg+Fbn5OaUirTuLVekhEWWr
UaZBAjT0jsgWM3m9gjN7O1ntr3NPusIn8qbNCnY/UcxukccLJK9+5sxhC25NHNo2
puF2J0dNWAzmK0tjH8FlLig2YCXlkZwr5rjVaN7hVvV1nG5Y7l9sfXhTRHPMLUjK
PupkjFLFhu4EJQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:47:37 2025 by rpki-client