Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File:                     1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier:          RsxZL6Nfgplk3Px7pqApNYmtAcRSBUEOasnB0gUV150=
Subject key identifier:   25:91:2F:46:1F:D8:7F:0B:CF:16:48:16:F1:DD:D2:FC:F4:35:88:2D
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer:       /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial:       0196A91DE5C88DB14B771DB861C49E61B315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number:          0454
Signing time:             Wed 07 May 2025 05:00:30 +0000
Manifest this update:     Wed 07 May 2025 05:00:30 +0000
Manifest next update:     Thu 08 May 2025 05:00:30 +0000
Files and hashes:         1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: fOsZg169WlRelFSJHmCX1oxz47i41RkcbaB0IiQzB4U=)
                          2: sLxsX6Cbb-vY4bHw_tkYIvxMuQw.roa (hash: jzOX8F6aWJBmJnIobD4iFPA1Ti0n0pNTIWWWaqzxlUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:1d:e5:c8:8d:b1:4b:77:1d:b8:61:c4:9e:61:b3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
        Validity
            Not Before: May  7 05:00:30 2025 GMT
            Not After : May  8 05:00:30 2025 GMT
        Subject: CN=25912f461fd87f0bcf164816f1ddd2fcf435882d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:1a:8b:0c:70:18:08:94:f9:2e:46:45:42:
                    6b:29:c1:ce:df:37:1c:ff:50:35:31:91:95:cc:ef:
                    c5:29:ee:62:d2:a3:d5:57:27:75:dd:50:7d:e9:9f:
                    36:d2:7a:4b:bf:d2:c0:dd:d0:41:31:95:5f:4f:39:
                    ae:8f:f9:cf:38:f0:7d:bc:86:6d:b8:02:f2:3f:83:
                    ac:64:6e:b2:09:0e:00:58:a5:fd:59:a5:1f:10:cd:
                    57:e0:f6:c0:0f:ee:59:70:58:55:30:73:12:e0:75:
                    9b:b7:7b:ac:06:78:f4:68:da:94:c4:cd:3d:54:8d:
                    31:47:55:d8:ac:4e:2c:6b:55:f8:69:c0:e3:c5:89:
                    d6:9a:29:a6:79:52:4c:11:ea:b9:32:54:cd:5b:0d:
                    49:52:57:9c:13:d1:54:a5:e8:3e:63:e3:62:ac:16:
                    47:30:38:16:2e:bb:16:24:8d:f2:ae:35:4f:a1:de:
                    97:9e:16:cd:fe:44:89:ae:2d:03:86:76:0a:26:26:
                    7e:6f:e5:44:1b:07:68:21:9c:1b:2c:43:b7:d4:42:
                    2e:7e:29:6c:c8:8d:47:16:81:2e:0b:34:c1:b7:b2:
                    c7:a5:3c:2f:92:a2:13:30:bc:72:a7:c1:d8:c7:b7:
                    ce:38:2a:e5:f1:aa:08:1c:3c:94:68:a2:f5:4b:42:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:2F:46:1F:D8:7F:0B:CF:16:48:16:F1:DD:D2:FC:F4:35:88:2D
            X509v3 Authority Key Identifier:
                keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ec:64:14:2f:20:fb:de:9d:a0:86:d8:97:ec:e3:d5:e9:f9:
         e7:58:f5:29:e9:fd:ec:ca:15:af:51:85:8e:40:70:b4:89:38:
         3d:4b:c9:ad:45:e5:37:27:4d:16:6b:af:8e:f8:b2:08:2f:f8:
         4a:b4:3a:cb:c1:3e:c6:72:41:22:45:38:66:6b:47:81:02:6b:
         74:1d:63:bf:d4:83:8e:2b:15:42:c0:e1:d0:d2:8b:3c:30:dc:
         40:e4:56:04:f2:97:af:69:1e:5c:7d:bf:74:f7:54:b4:f0:87:
         c6:82:d2:44:c7:c9:90:67:70:dd:d6:f1:5c:14:04:18:75:45:
         d8:71:69:29:32:1a:e1:7e:22:ed:d5:2e:37:d5:12:6c:dd:e1:
         98:15:5d:23:2d:e7:6f:0a:6f:32:94:e0:fc:ac:18:bd:81:84:
         79:3c:b0:00:61:bd:4c:9f:eb:31:c3:90:82:ba:2c:b4:22:87:
         61:f5:43:56:7d:84:e3:68:96:6d:e8:ea:93:3b:b1:f3:a7:6b:
         0e:4a:d1:44:e3:df:86:74:66:4e:89:d7:03:10:92:18:e2:c3:
         6f:cb:ee:5b:2b:6d:35:72:b2:33:17:cd:1c:cd:a7:3c:e4:a5:
         83:16:02:8e:c8:bc:0a:d8:03:a7:f3:7f:77:66:08:7b:1c:5d:
         d4:ba:d5:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapHeXIjbFLdx24YcSeYbMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjUwNTA3MDUwMDMwWhcNMjUwNTA4MDUwMDMwWjAzMTEwLwYDVQQD
EygyNTkxMmY0NjFmZDg3ZjBiY2YxNjQ4MTZmMWRkZDJmY2Y0MzU4ODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttYaiwxwGAiU+S5GRUJrKcHO3zcc
/1A1MZGVzO/FKe5i0qPVVyd13VB96Z820npLv9LA3dBBMZVfTzmuj/nPOPB9vIZt
uALyP4OsZG6yCQ4AWKX9WaUfEM1X4PbAD+5ZcFhVMHMS4HWbt3usBnj0aNqUxM09
VI0xR1XYrE4sa1X4acDjxYnWmimmeVJMEeq5MlTNWw1JUlecE9FUpeg+Y+NirBZH
MDgWLrsWJI3yrjVPod6XnhbN/kSJri0DhnYKJiZ+b+VEGwdoIZwbLEO31EIufils
yI1HFoEuCzTBt7LHpTwvkqITMLxyp8HYx7fOOCrl8aoIHDyUaKL1S0JpGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWRL0Yf2H8LzxZIFvHd0vz0NYgtMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOxkFC8g
+96doIbYl+zj1en551j1Ken97MoVr1GFjkBwtIk4PUvJrUXlNydNFmuvjviyCC/4
SrQ6y8E+xnJBIkU4ZmtHgQJrdB1jv9SDjisVQsDh0NKLPDDcQORWBPKXr2keXH2/
dPdUtPCHxoLSRMfJkGdw3dbxXBQEGHVF2HFpKTIa4X4i7dUuN9USbN3hmBVdIy3n
bwpvMpTg/KwYvYGEeTywAGG9TJ/rMcOQgrostCKHYfVDVn2E42iWbejqkzux86dr
DkrRROPfhnRmTonXAxCSGOLDb8vuWyttNXKyMxfNHM2nPOSlgxYCjsi8CtgDp/N/
d2YIexxd1LrV7A==
-----END CERTIFICATE-----
Generated at Wed May 7 10:43:24 2025 by rpki-client