Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File:                     2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier:          AqwZsejHly2YehsOwvDQZsdz5a8zkNRCcIYLJgKQ8dg=
Subject key identifier:   DA:DC:42:D7:FA:7A:F5:8B:FE:FC:94:F4:A3:9B:11:BA:58:97:8E:19
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer:       /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial:       01969ED12486C917C9B9B880ACA4393DB2B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number:          1077
Signing time:             Mon 05 May 2025 05:00:28 +0000
Manifest this update:     Mon 05 May 2025 05:00:28 +0000
Manifest next update:     Tue 06 May 2025 05:00:28 +0000
Files and hashes:         1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: KAjbdRhfZiqeSNoVXQJJSgxxKSequ8+Sz6V+uBT60QI=)
                          2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:d1:24:86:c9:17:c9:b9:b8:80:ac:a4:39:3d:b2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
        Validity
            Not Before: May  5 05:00:28 2025 GMT
            Not After : May  6 05:00:28 2025 GMT
        Subject: CN=dadc42d7fa7af58bfefc94f4a39b11ba58978e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bc:49:e3:42:9d:6a:00:3c:43:e4:72:32:62:
                    41:04:d5:da:b1:1a:e4:c7:d4:ea:f8:b4:3f:b5:5a:
                    f2:bd:8c:28:a4:2a:7e:3b:0a:a7:a7:e1:53:e2:c4:
                    81:60:f0:68:85:e0:b8:a0:de:86:b2:0e:57:ac:c2:
                    54:c9:99:9e:14:a8:88:d2:ac:33:bd:36:61:dd:98:
                    46:18:29:5b:dd:3c:5b:fe:14:1e:79:ea:b9:05:e3:
                    92:01:4a:1a:ec:5e:14:20:08:78:15:00:f7:51:0c:
                    c7:1f:4e:80:a2:d1:9e:09:b9:87:ff:50:20:1d:d0:
                    c4:88:6e:f0:ef:e5:b1:90:e3:62:9c:13:55:75:a2:
                    de:34:c4:7f:24:29:7f:33:ec:52:31:30:c9:49:57:
                    7e:0f:83:48:1f:fc:c5:d4:93:33:69:f9:f4:7f:db:
                    8e:bb:93:1e:d2:d9:93:3a:b9:17:b8:72:18:c3:53:
                    70:ea:7d:b1:c6:69:ab:e3:08:f2:4f:cd:c3:84:9d:
                    d7:a2:98:02:5e:1a:aa:bb:ef:70:e0:a7:21:51:9c:
                    96:5a:79:60:8e:ad:fb:eb:9f:ea:61:72:80:b0:dc:
                    f2:b6:db:5a:a8:ab:85:84:88:a9:8e:34:50:c6:77:
                    75:e1:4d:84:79:12:f3:60:77:c8:6a:a2:1d:40:34:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DC:42:D7:FA:7A:F5:8B:FE:FC:94:F4:A3:9B:11:BA:58:97:8E:19
            X509v3 Authority Key Identifier:
                keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:b7:2f:66:d6:b1:38:c7:f4:3b:e4:9a:e9:13:1b:03:8d:
         fd:fa:6a:76:18:c0:d0:95:27:de:7b:be:0d:1f:33:b9:5e:6d:
         38:7e:9a:3f:61:9d:72:8c:79:6b:e9:89:15:c1:76:8f:22:14:
         bb:7a:18:a8:2e:83:b9:58:d3:9e:b5:4d:51:ae:c3:2c:a8:9f:
         f8:67:64:68:92:2d:2c:42:95:24:30:5e:51:61:93:e7:2b:c4:
         ab:01:ea:b2:8f:6c:c0:b1:e2:0d:00:72:ad:d6:69:b0:d8:8f:
         97:76:02:d2:72:21:74:24:62:3e:e1:18:3f:0d:c9:b2:a6:80:
         82:ef:91:60:fa:d6:58:58:97:f3:3a:7d:2d:05:81:3b:76:38:
         d8:09:63:b6:1e:e5:8b:b9:1c:26:2d:35:13:80:fd:20:26:98:
         4b:10:f1:3c:3b:87:b6:e3:5a:0f:93:f5:4d:94:14:b2:be:ff:
         42:fa:d3:22:b8:46:83:be:07:99:b1:6d:91:25:9e:8e:e7:d2:
         8e:f9:0b:d9:0d:f0:17:2a:b8:a2:e4:e5:c0:d4:19:23:e5:c4:
         0d:fe:d2:22:9d:ee:af:56:29:4f:07:c4:73:b0:61:ee:d8:7b:
         ca:66:4d:5f:c5:53:21:86:6e:e5:17:eb:06:46:a1:3c:1d:91:
         31:c6:03:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0SSGyRfJubiArKQ5PbK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjUwNTA1MDUwMDI4WhcNMjUwNTA2MDUwMDI4WjAzMTEwLwYDVQQD
EyhkYWRjNDJkN2ZhN2FmNThiZmVmYzk0ZjRhMzliMTFiYTU4OTc4ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LxJ40KdagA8Q+RyMmJBBNXasRrk
x9Tq+LQ/tVryvYwopCp+Owqnp+FT4sSBYPBoheC4oN6Gsg5XrMJUyZmeFKiI0qwz
vTZh3ZhGGClb3Txb/hQeeeq5BeOSAUoa7F4UIAh4FQD3UQzHH06AotGeCbmH/1Ag
HdDEiG7w7+WxkONinBNVdaLeNMR/JCl/M+xSMTDJSVd+D4NIH/zF1JMzafn0f9uO
u5Me0tmTOrkXuHIYw1Nw6n2xxmmr4wjyT83DhJ3XopgCXhqqu+9w4KchUZyWWnlg
jq3765/qYXKAsNzytttaqKuFhIipjjRQxnd14U2EeRLzYHfIaqIdQDQUOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrcQtf6evWL/vyU9KObEbpYl44ZMB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+e3L2bW
sTjH9DvkmukTGwON/fpqdhjA0JUn3nu+DR8zuV5tOH6aP2Gdcox5a+mJFcF2jyIU
u3oYqC6DuVjTnrVNUa7DLKif+GdkaJItLEKVJDBeUWGT5yvEqwHqso9swLHiDQBy
rdZpsNiPl3YC0nIhdCRiPuEYPw3JsqaAgu+RYPrWWFiX8zp9LQWBO3Y42Aljth7l
i7kcJi01E4D9ICaYSxDxPDuHtuNaD5P1TZQUsr7/QvrTIrhGg74HmbFtkSWejufS
jvkL2Q3wFyq4ouTlwNQZI+XEDf7SIp3ur1YpTwfEc7Bh7th7ymZNX8VTIYZu5Rfr
BkahPB2RMcYDbg==
-----END CERTIFICATE-----
Generated at Mon May 5 10:50:22 2025 by rpki-client