Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier:          AfPZui7OQRCX+oLnOMIhbcpFP300SH369Ib6U/Ke4TI=
Subject key identifier:   8D:4F:D9:96:A4:BA:84:C0:C4:33:0E:17:12:2F:37:AE:C3:BE:9C:88
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       0196C5A81A5BF54207A131EDDC4B6EB59E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number:          1537
Signing time:             Mon 12 May 2025 18:00:50 +0000
Manifest this update:     Mon 12 May 2025 18:00:50 +0000
Manifest next update:     Tue 13 May 2025 18:00:50 +0000
Files and hashes:         1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: X48k18/itzAf6kpx+K3cw6SEkO7ykEBm0IT2yIahjL0=)
                          2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a8:1a:5b:f5:42:07:a1:31:ed:dc:4b:6e:b5:9e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: May 12 18:00:50 2025 GMT
            Not After : May 13 18:00:50 2025 GMT
        Subject: CN=8d4fd996a4ba84c0c4330e17122f37aec3be9c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:b8:11:30:69:ba:1b:55:6d:3a:02:fd:a6:
                    b2:76:4d:d3:e1:80:71:9c:4a:c1:16:b2:df:cc:94:
                    23:d0:74:5b:05:38:15:dc:a5:a3:a9:b8:c3:86:fd:
                    47:8a:e0:b2:b1:40:dd:d8:fd:5e:63:8e:c5:e6:a4:
                    52:51:2d:7f:c1:ff:14:3d:56:cb:47:1f:e6:df:b7:
                    15:fa:50:02:42:e7:61:3d:eb:70:09:77:73:83:5e:
                    09:fb:f0:44:66:3d:15:3d:ef:ee:bc:1d:04:97:6c:
                    ad:a7:bb:c6:68:07:8e:cc:0b:77:36:71:a9:e7:7e:
                    49:c3:b8:cc:ac:02:ae:f2:65:48:f1:cf:17:a7:6d:
                    6c:70:26:75:ce:a9:65:8e:42:ae:e3:ac:40:93:51:
                    21:b4:1e:2c:42:59:aa:4a:c7:fc:c3:7e:6c:56:ba:
                    2b:a4:9d:fe:09:65:1e:41:9d:36:f9:5f:16:01:d5:
                    c8:fe:a9:2b:1c:d7:be:f9:c9:ee:8e:af:45:c7:dc:
                    5f:44:e1:74:0c:fc:7f:7d:99:50:1b:6c:63:6e:e9:
                    d1:f4:a1:8a:9b:79:7b:ca:39:a9:99:4b:af:34:df:
                    37:32:9c:ad:d6:20:e9:38:ea:be:c0:32:ad:b3:c5:
                    70:30:2d:96:be:8b:59:42:c2:eb:d1:a1:ac:ea:e1:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4F:D9:96:A4:BA:84:C0:C4:33:0E:17:12:2F:37:AE:C3:BE:9C:88
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:41:74:3b:46:52:41:38:1e:9f:7f:85:f1:dd:2e:55:f4:83:
         5e:00:c2:98:06:a1:70:e0:7a:78:3f:aa:2c:f4:c3:33:ed:2e:
         d1:f8:17:b2:05:1a:b0:26:b2:5c:e9:16:cb:96:b6:92:67:d8:
         9d:15:41:00:05:06:f1:bd:8c:9a:4b:7b:da:a8:a7:f6:a3:63:
         4d:92:3d:3a:3b:f0:20:0d:a6:9f:f8:c4:ae:25:1d:a3:83:6d:
         a7:cb:ee:3e:8c:5c:09:62:96:0b:3b:0c:cb:6d:ff:60:07:42:
         a0:99:ad:4a:4c:28:19:c0:c7:45:c9:0e:8f:31:92:b5:d4:24:
         fe:d4:c9:ce:0d:44:a7:94:e1:c8:5b:f8:61:f4:3f:4d:38:6e:
         5c:57:2e:2c:e9:21:b3:41:d8:b4:bb:6e:e6:f7:db:31:c2:d4:
         b0:d7:79:0f:35:85:9f:73:8e:b0:39:51:c2:d7:50:32:4f:a9:
         91:f9:e3:43:87:c0:f4:c5:ca:9e:fa:44:c6:c4:0a:65:e7:06:
         3b:12:2e:8c:49:ae:52:c2:dd:51:0b:26:8b:24:2d:c2:39:85:
         44:68:84:ca:37:29:d1:e6:e7:7f:24:8d:8d:a1:71:41:67:3b:
         a6:27:b2:36:15:12:5d:4f:14:8b:a2:fc:8e:7e:93:c3:a7:20:
         e8:69:11:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqBpb9UIHoTHt3EtutZ55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3
Nzc3YTkwHhcNMjUwNTEyMTgwMDUwWhcNMjUwNTEzMTgwMDUwWjAzMTEwLwYDVQQD
Eyg4ZDRmZDk5NmE0YmE4NGMwYzQzMzBlMTcxMjJmMzdhZWMzYmU5Yzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGq4ETBpuhtVbToC/aaydk3T4YBx
nErBFrLfzJQj0HRbBTgV3KWjqbjDhv1HiuCysUDd2P1eY47F5qRSUS1/wf8UPVbL
Rx/m37cV+lACQudhPetwCXdzg14J+/BEZj0VPe/uvB0El2ytp7vGaAeOzAt3NnGp
535Jw7jMrAKu8mVI8c8Xp21scCZ1zqlljkKu46xAk1EhtB4sQlmqSsf8w35sVror
pJ3+CWUeQZ02+V8WAdXI/qkrHNe++cnujq9Fx9xfROF0DPx/fZlQG2xjbunR9KGK
m3l7yjmpmUuvNN83Mpyt1iDpOOq+wDKts8VwMC2WvotZQsLr0aGs6uGmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1P2ZakuoTAxDMOFxIvN67DvpyIMB8GA1UdIwQY
MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt
M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2
LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0F0O0ZS
QTgen3+F8d0uVfSDXgDCmAahcOB6eD+qLPTDM+0u0fgXsgUasCayXOkWy5a2kmfY
nRVBAAUG8b2Mmkt72qin9qNjTZI9OjvwIA2mn/jEriUdo4Ntp8vuPoxcCWKWCzsM
y23/YAdCoJmtSkwoGcDHRckOjzGStdQk/tTJzg1Ep5ThyFv4YfQ/TThuXFcuLOkh
s0HYtLtu5vfbMcLUsNd5DzWFn3OOsDlRwtdQMk+pkfnjQ4fA9MXKnvpExsQKZecG
OxIujEmuUsLdUQsmiyQtwjmFRGiEyjcp0ebnfySNjaFxQWc7pieyNhUSXU8Ui6L8
jn6Tw6cg6GkR2g==
-----END CERTIFICATE-----
Generated at Tue May 13 00:08:01 2025 by rpki-client