Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          VPOMwZeNTtzrDJjUaoSm4JsMr40pUHQmog/8PGJ9JNo=
Subject key identifier:   DD:BA:F6:13:EC:EA:7C:CD:0E:C8:54:A6:1C:DD:78:B1:5E:84:2E:C9
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       0196ABE84DB1B0C89F7C98258FC8728AFA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          14BC
Signing time:             Wed 07 May 2025 18:00:50 +0000
Manifest this update:     Wed 07 May 2025 18:00:50 +0000
Manifest next update:     Thu 08 May 2025 18:00:50 +0000
Files and hashes:         1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: wD06mYB1YGBnWnwTXPXDcJs71U5l1EuVKwg0oFy6mLI=)
                          2: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (hash: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e8:4d:b1:b0:c8:9f:7c:98:25:8f:c8:72:8a:fa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: May  7 18:00:50 2025 GMT
            Not After : May  8 18:00:50 2025 GMT
        Subject: CN=ddbaf613ecea7ccd0ec854a61cdd78b15e842ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:73:29:82:33:24:a5:db:93:16:94:e0:51:
                    84:1f:5c:a9:58:73:3a:28:37:e1:4b:19:0f:65:a1:
                    d8:d6:80:93:b1:c4:85:10:c8:b9:7f:d7:58:b4:f7:
                    db:16:bc:5a:c6:15:57:69:59:6e:04:fe:30:77:13:
                    74:36:76:ba:2d:7f:75:47:3e:a0:c1:5f:49:c1:3b:
                    ed:e1:e3:ab:62:d3:f5:11:98:07:68:c4:18:da:b8:
                    a7:73:5c:e0:d4:25:c2:75:6d:ce:31:18:fd:78:4d:
                    12:60:7d:f8:ac:bf:8f:92:ce:1a:ad:f9:e8:e0:67:
                    11:ef:b9:a4:3d:a3:f0:74:ec:ed:ad:ee:e3:e7:e0:
                    f3:7f:af:e5:f6:97:4d:4b:d8:8a:45:68:ff:44:d2:
                    76:99:48:39:a5:27:1c:67:97:1d:58:42:43:20:9e:
                    e5:69:ae:fd:53:4b:73:6f:71:1d:e5:4b:fb:7a:84:
                    e9:55:87:7e:29:d8:b4:c0:56:e3:19:ce:06:02:62:
                    10:f2:51:a4:49:29:bc:9a:57:3f:eb:60:ea:b6:be:
                    75:d3:3c:97:f5:e2:94:72:d2:1d:07:40:11:06:5c:
                    89:fd:97:57:7b:4e:0f:8d:f7:df:13:e0:62:01:9d:
                    ef:d4:37:11:44:dc:c1:60:e0:8c:ad:0e:13:4a:08:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BA:F6:13:EC:EA:7C:CD:0E:C8:54:A6:1C:DD:78:B1:5E:84:2E:C9
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:03:f8:a0:a4:4f:8c:73:63:60:e1:63:97:c2:fd:39:c8:ef:
         5e:47:91:33:3f:a5:55:b6:ad:36:b4:f6:ff:cf:c8:5b:49:d2:
         f1:7e:73:d5:bf:eb:f4:c2:0b:f0:31:c2:e6:76:55:32:c6:2e:
         39:74:9e:97:f0:3e:3d:2a:59:c8:12:7f:12:6c:61:55:6a:79:
         17:cf:df:a4:de:f5:f2:de:94:83:71:c3:e2:aa:8e:74:ca:14:
         19:c8:77:06:b8:df:d1:41:63:71:5b:69:3c:ec:77:56:8e:8b:
         a1:2d:60:f5:23:53:0c:10:10:b6:16:4e:62:6a:35:e8:f9:12:
         59:75:0a:6b:c1:40:24:38:86:de:30:e5:62:e8:de:2e:09:a9:
         7b:35:93:51:ec:7a:86:79:1a:d7:fe:eb:f7:51:2b:64:5d:e8:
         9b:2e:4b:40:e2:92:77:56:f8:98:21:8e:71:b1:09:43:79:fd:
         42:6c:80:79:5d:5d:e5:da:35:17:50:53:93:27:80:bd:67:a8:
         91:c4:8b:3d:30:a7:3c:f8:23:97:08:0c:9a:75:46:16:73:7f:
         1a:a2:7f:f4:97:30:b5:23:e7:13:3b:d7:cd:b6:37:97:22:f8:
         f5:da:e3:66:d1:76:ac:d1:88:dd:f6:e7:64:71:2f:1f:bb:13:
         9f:63:0f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZar6E2xsMiffJglj8hyivoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjdiYTgyMDdiODFjMWI0NzI2M2IxZmRlOGY3OWI5OTU5
NzAzN2QwHhcNMjUwNTA3MTgwMDUwWhcNMjUwNTA4MTgwMDUwWjAzMTEwLwYDVQQD
EyhkZGJhZjYxM2VjZWE3Y2NkMGVjODU0YTYxY2RkNzhiMTVlODQyZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VhzKYIzJKXbkxaU4FGEH1ypWHM6
KDfhSxkPZaHY1oCTscSFEMi5f9dYtPfbFrxaxhVXaVluBP4wdxN0Nna6LX91Rz6g
wV9JwTvt4eOrYtP1EZgHaMQY2rinc1zg1CXCdW3OMRj9eE0SYH34rL+Pks4arfno
4GcR77mkPaPwdOztre7j5+Dzf6/l9pdNS9iKRWj/RNJ2mUg5pSccZ5cdWEJDIJ7l
aa79U0tzb3Ed5Uv7eoTpVYd+Kdi0wFbjGc4GAmIQ8lGkSSm8mlc/62Dqtr510zyX
9eKUctIdB0ARBlyJ/ZdXe04PjfffE+BiAZ3v1DcRRNzBYOCMrQ4TSgj9MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN269hPs6nzNDshUphzdeLFehC7JMB8GA1UdIwQY
MBaAFD5nuoIHuBwbRyY7H96PebmVlwN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTIt
NGMyNWZjYmRlZGQxLzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTItNGMyNWZjYmRlZGQx
LzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwP4oKRP
jHNjYOFjl8L9OcjvXkeRMz+lVbatNrT2/8/IW0nS8X5z1b/r9MIL8DHC5nZVMsYu
OXSel/A+PSpZyBJ/EmxhVWp5F8/fpN718t6Ug3HD4qqOdMoUGch3Brjf0UFjcVtp
POx3Vo6LoS1g9SNTDBAQthZOYmo16PkSWXUKa8FAJDiG3jDlYujeLgmpezWTUex6
hnka1/7r91ErZF3omy5LQOKSd1b4mCGOcbEJQ3n9QmyAeV1d5do1F1BTkyeAvWeo
kcSLPTCnPPgjlwgMmnVGFnN/GqJ/9JcwtSPnEzvXzbY3lyL49drjZtF2rNGI3fbn
ZHEvH7sTn2MPnQ==
-----END CERTIFICATE-----
Generated at Wed May 7 22:30:23 2025 by rpki-client