Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File:                     1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier:          3xaSc1LkGa5KycajLdBHnoW1KAiExBAXvjwpuECMmIA=
Subject key identifier:   01:41:E3:07:85:32:86:60:D1:F6:D5:8E:C9:2E:40:02:2F:CF:F6:C7
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       0196B2C5878629AB612B448D3587C78311A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number:          1531
Signing time:             Fri 09 May 2025 02:00:11 +0000
Manifest this update:     Fri 09 May 2025 02:00:11 +0000
Manifest next update:     Sat 10 May 2025 02:00:11 +0000
Files and hashes:         1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: MzcVXzjmzc+z8AVAbHD5a0Ofn4LnDI6lB7GQHw0e2AQ=)
                          2: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (hash: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=)
                          3: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (hash: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=)
                          4: 4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa (hash: kG5O2uK7FPMtHKZqn4oBt9q3T41tqnOK54SmBGsdGls=)
                          5: M13OT1H85As_Tv9wWN39JJmrGq4.roa (hash: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=)
                          6: XBvyNtAX_qyPJCtO1fGS20UqGjs.roa (hash: KHN56+uDjic5K6QfFI010t46UK2xFZQ5/zoeeWjaQBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:c5:87:86:29:ab:61:2b:44:8d:35:87:c7:83:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: May  9 02:00:11 2025 GMT
            Not After : May 10 02:00:11 2025 GMT
        Subject: CN=0141e30785328660d1f6d58ec92e40022fcff6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:d5:77:0d:d7:6f:34:db:bf:e5:0e:0a:2a:
                    ca:ab:c3:c9:97:b7:83:d8:eb:4f:e8:11:3e:ba:b3:
                    a0:c7:c6:28:4c:73:f7:b9:76:d3:36:0c:1a:e6:dd:
                    d3:7e:bc:a3:79:6f:18:7b:d0:55:0f:1a:45:98:11:
                    ff:27:00:d6:79:a7:04:5e:a9:a5:61:58:0c:ce:e8:
                    07:2c:2c:5d:03:cf:cc:f6:c8:1d:ff:55:02:99:ea:
                    38:36:39:66:f9:6b:f9:f4:3c:09:b2:c6:48:3e:09:
                    67:25:9f:ce:1b:c2:c8:38:79:3b:8c:6d:f0:55:d5:
                    67:75:5c:41:56:de:1a:9c:a9:e1:5f:66:cf:0c:8e:
                    47:48:3b:35:2d:69:b0:bc:dc:92:9b:d5:41:73:fb:
                    96:c9:88:60:29:7d:ba:65:ff:69:28:77:8b:75:b5:
                    bb:a8:26:aa:6e:e0:d5:72:b7:17:f0:79:78:0a:9d:
                    40:97:32:1c:2f:a4:de:1a:f1:5d:01:8f:1e:e2:94:
                    3f:c5:85:95:93:1a:e2:4e:26:d8:51:aa:35:3e:92:
                    3d:ac:41:c0:c8:8c:ef:ae:cb:3f:ff:32:81:f5:43:
                    e7:2a:a6:54:78:17:1c:26:8b:37:77:f8:07:82:b0:
                    d9:a2:ba:01:6c:03:4b:dd:e2:ec:f8:52:01:a9:46:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:E3:07:85:32:86:60:D1:F6:D5:8E:C9:2E:40:02:2F:CF:F6:C7
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:78:a9:43:70:36:ab:29:4d:e9:6e:cd:46:da:31:0d:73:f9:
         24:cb:af:c6:64:2e:1e:13:ee:ad:a3:56:0d:98:bc:da:4d:27:
         5a:21:83:23:03:61:86:f3:b8:b1:1c:76:fd:f5:c8:c9:f7:6b:
         68:4a:19:e6:ec:f7:3f:b7:6e:d4:33:90:21:3f:38:fd:5a:9d:
         d7:87:32:fd:ee:1a:8f:9b:5c:40:c2:7d:79:e0:e8:23:6f:6a:
         42:aa:40:ee:f6:ba:d8:a0:bd:5c:58:49:0b:32:3e:e6:bb:7c:
         0f:8f:3e:fa:7f:d0:62:ca:79:b9:f6:e6:19:c0:7c:64:4a:4e:
         75:73:a3:d8:c2:0c:97:0e:47:b4:1f:19:6b:fa:da:3c:71:09:
         7e:54:06:ee:0c:31:37:85:65:aa:ab:a7:52:94:fe:f0:ce:5b:
         08:96:69:a1:20:4c:74:32:4c:63:96:b7:36:f4:ad:4b:cd:68:
         17:e8:a7:35:af:20:37:01:c1:27:37:15:a7:ea:51:81:ed:59:
         68:2a:06:40:55:0e:e4:18:79:16:7c:83:77:2e:73:52:95:34:
         68:8e:1a:97:24:01:eb:63:7a:62:f8:e6:be:0a:d5:51:27:c9:
         74:a9:ad:af:ae:ea:ed:37:8b:2b:27:e6:c4:ad:0e:6f:24:92:
         54:bc:01:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZayxYeGKathK0SNNYfHgxGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3
OGRjNzEwHhcNMjUwNTA5MDIwMDExWhcNMjUwNTEwMDIwMDExWjAzMTEwLwYDVQQD
EygwMTQxZTMwNzg1MzI4NjYwZDFmNmQ1OGVjOTJlNDAwMjJmY2ZmNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9rVdw3XbzTbv+UOCirKq8PJl7eD
2OtP6BE+urOgx8YoTHP3uXbTNgwa5t3TfryjeW8Ye9BVDxpFmBH/JwDWeacEXqml
YVgMzugHLCxdA8/M9sgd/1UCmeo4Njlm+Wv59DwJssZIPglnJZ/OG8LIOHk7jG3w
VdVndVxBVt4anKnhX2bPDI5HSDs1LWmwvNySm9VBc/uWyYhgKX26Zf9pKHeLdbW7
qCaqbuDVcrcX8Hl4Cp1AlzIcL6TeGvFdAY8e4pQ/xYWVkxriTibYUao1PpI9rEHA
yIzvrss//zKB9UPnKqZUeBccJos3d/gHgrDZoroBbANL3eLs+FIBqUanuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAFB4weFMoZg0fbVjskuQAIvz/bHMB8GA1UdIwQY
MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi
LTZkOGZkMzMwZTlhYS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI2LzAzY2NlMy1lNjIwLTQ0ODMtYjA4Yi02ZDhmZDMzMGU5
YWEvMS8xLVBjOFhBODZFR3FMcDlfejQxeUJiUkI0M0hFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXip
Q3A2qylN6W7NRtoxDXP5JMuvxmQuHhPuraNWDZi82k0nWiGDIwNhhvO4sRx2/fXI
yfdraEoZ5uz3P7du1DOQIT84/Vqd14cy/e4aj5tcQMJ9eeDoI29qQqpA7va62KC9
XFhJCzI+5rt8D48++n/QYsp5ufbmGcB8ZEpOdXOj2MIMlw5HtB8Za/raPHEJflQG
7gwxN4VlqqunUpT+8M5bCJZpoSBMdDJMY5a3NvStS81oF+inNa8gNwHBJzcVp+pR
ge1ZaCoGQFUO5Bh5FnyDdy5zUpU0aI4alyQB62N6YvjmvgrVUSfJdKmtr67q7TeL
KyfmxK0ObySSVLwBkA==
-----END CERTIFICATE-----
Generated at Fri May 9 11:46:23 2025 by rpki-client