Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File:                     DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier:          NVIcwqNWpFQGT9UV6rM1p/5+7yiTs8CVoDCIdvIXXEw=
Subject key identifier:   40:13:B4:D7:1A:7E:D4:B7:E5:F6:EC:82:FB:22:68:D7:43:10:69:FC
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer:       /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial:       0196BC374903546A580EF4325F05A0EFDF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number:          0ABE
Signing time:             Sat 10 May 2025 22:01:01 +0000
Manifest this update:     Sat 10 May 2025 22:01:01 +0000
Manifest next update:     Sun 11 May 2025 22:01:01 +0000
Files and hashes:         1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: 1AGa8T2eOeNppB+SpEQ0QwH7AqdCAa1qphhJTDoUkCY=)
                          2: IMYt28KGsc1J7qdCJ8FZoivbBms.roa (hash: Lt2Qrrojs7l5TEl9OlYCV0+zE4iekqC1xALJxPDqCnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:49:03:54:6a:58:0e:f4:32:5f:05:a0:ef:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
        Validity
            Not Before: May 10 22:01:01 2025 GMT
            Not After : May 11 22:01:01 2025 GMT
        Subject: CN=4013b4d71a7ed4b7e5f6ec82fb2268d7431069fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:f0:ff:04:a1:52:eb:d1:62:f3:d3:23:77:
                    25:9c:d8:8b:53:b2:27:26:15:83:f2:60:52:e7:ed:
                    92:5d:06:ad:aa:4d:ea:26:de:ba:32:71:18:cb:3b:
                    60:58:85:61:52:64:fe:ba:92:e1:7c:3b:00:79:c4:
                    4a:5f:9e:1e:bf:16:68:6a:3b:f3:ef:ab:aa:ca:fe:
                    aa:35:9a:bd:84:eb:e9:51:54:85:75:7e:24:62:9d:
                    80:fb:79:ba:d1:6b:5d:08:43:6c:bc:86:e4:69:67:
                    83:1b:85:aa:6c:82:ef:29:9f:a3:6e:b6:da:18:af:
                    12:56:1d:5c:59:fd:25:a4:95:5a:db:0f:7d:49:81:
                    7e:47:0f:f8:52:73:03:a9:d1:e5:7e:3b:79:5e:6b:
                    d6:33:28:09:b1:5e:8c:4b:05:3a:ff:93:35:6c:4f:
                    9f:55:67:9e:2f:af:d2:3f:85:b4:c9:6c:bc:12:0a:
                    9e:79:d7:78:30:f2:92:4f:ce:17:0f:5d:06:95:7e:
                    e4:c7:40:95:64:d4:32:20:f6:8a:9f:6f:79:d4:4a:
                    d8:ae:c2:dc:4f:d7:6d:a6:92:a8:6e:f5:c7:82:f6:
                    49:97:07:e6:9a:4e:10:6c:07:11:be:80:eb:4a:8d:
                    d6:08:c7:48:e6:ae:6b:a7:94:e9:bd:40:ad:78:75:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:13:B4:D7:1A:7E:D4:B7:E5:F6:EC:82:FB:22:68:D7:43:10:69:FC
            X509v3 Authority Key Identifier:
                keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:7b:25:e5:31:4f:66:62:dd:55:13:d6:d7:86:ba:7d:0f:
         04:84:d8:6c:11:26:e0:ce:e1:a7:f3:8e:35:b4:e9:ac:f4:f9:
         a7:17:fe:bd:45:fd:f8:b1:9f:f2:8d:85:4b:af:41:a2:85:2d:
         0d:78:b9:36:0c:f1:7b:03:b6:b4:4a:55:7b:63:18:f6:8c:0b:
         46:cb:05:95:b3:06:f1:ee:99:6c:89:08:05:83:74:cd:03:4c:
         31:61:c0:33:5a:50:42:f4:b9:06:77:13:af:0a:e0:db:a8:b0:
         be:ba:95:8c:95:74:75:8a:96:db:a7:a1:e3:90:79:06:63:fa:
         42:11:85:03:ac:4d:20:b0:42:c0:e4:0d:78:ad:a8:f0:e4:41:
         1e:4b:67:73:69:21:cf:2c:ec:9b:16:93:c3:ee:73:3a:fa:13:
         bf:a9:f7:38:4d:60:7a:ef:32:44:e9:62:3b:ee:6d:86:a7:07:
         1f:d5:64:b5:ce:2e:7a:78:e7:56:cf:c6:0a:d4:09:0f:69:e5:
         74:75:a8:86:45:01:51:61:3f:fe:11:1c:87:51:0a:c9:e5:fd:
         f0:a7:52:5e:9d:36:a1:a0:30:a4:b4:86:37:8c:cb:55:97:6d:
         61:4e:00:b6:b3:2c:ce:a8:f6:c3:f2:cd:8d:b9:13:6e:b4:0c:
         a8:1c:91:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8N0kDVGpYDvQyXwWg79+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0
YzU2Y2IwHhcNMjUwNTEwMjIwMTAxWhcNMjUwNTExMjIwMTAxWjAzMTEwLwYDVQQD
Eyg0MDEzYjRkNzFhN2VkNGI3ZTVmNmVjODJmYjIyNjhkNzQzMTA2OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtfw/wShUuvRYvPTI3clnNiLU7In
JhWD8mBS5+2SXQatqk3qJt66MnEYyztgWIVhUmT+upLhfDsAecRKX54evxZoajvz
76uqyv6qNZq9hOvpUVSFdX4kYp2A+3m60WtdCENsvIbkaWeDG4WqbILvKZ+jbrba
GK8SVh1cWf0lpJVa2w99SYF+Rw/4UnMDqdHlfjt5XmvWMygJsV6MSwU6/5M1bE+f
VWeeL6/SP4W0yWy8Egqeedd4MPKST84XD10GlX7kx0CVZNQyIPaKn2951ErYrsLc
T9dtppKobvXHgvZJlwfmmk4QbAcRvoDrSo3WCMdI5q5rp5TpvUCteHW0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEATtNcaftS35fbsgvsiaNdDEGn8MB8GA1UdIwQY
MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt
YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy
LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxx7JeUx
T2Zi3VUT1teGun0PBITYbBEm4M7hp/OONbTprPT5pxf+vUX9+LGf8o2FS69BooUt
DXi5NgzxewO2tEpVe2MY9owLRssFlbMG8e6ZbIkIBYN0zQNMMWHAM1pQQvS5BncT
rwrg26iwvrqVjJV0dYqW26eh45B5BmP6QhGFA6xNILBCwOQNeK2o8ORBHktnc2kh
zyzsmxaTw+5zOvoTv6n3OE1geu8yROliO+5thqcHH9Vktc4uenjnVs/GCtQJD2nl
dHWohkUBUWE//hEch1EKyeX98KdSXp02oaAwpLSGN4zLVZdtYU4AtrMszqj2w/LN
jbkTbrQMqByRVA==
-----END CERTIFICATE-----
Generated at Sun May 11 08:17:01 2025 by rpki-client