Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          PKhti/QFtLhlkZ0SmXRK9eYfQYcZqWur+91C74J/HLg=
Subject key identifier:   F9:99:1C:34:97:E7:B1:E7:77:5F:7D:A7:D2:C8:8A:7B:56:6A:5B:71
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       0196A2094B457BEED31FD97BBFAB67559DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          0D3E
Signing time:             Mon 05 May 2025 20:00:40 +0000
Manifest this update:     Mon 05 May 2025 20:00:40 +0000
Manifest next update:     Tue 06 May 2025 20:00:40 +0000
Files and hashes:         1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: CgH9xeQFVR41+lY6yfhvJmOLJVv+LjyVCZjrgnLcwG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:09:4b:45:7b:ee:d3:1f:d9:7b:bf:ab:67:55:9d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: May  5 20:00:40 2025 GMT
            Not After : May  6 20:00:40 2025 GMT
        Subject: CN=f9991c3497e7b1e7775f7da7d2c88a7b566a5b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:5c:8d:2a:d2:07:5e:7d:14:84:3e:9b:f5:
                    25:93:0c:51:d6:9e:81:87:c5:77:b9:3d:54:a4:1a:
                    83:ed:36:da:64:a7:07:21:b2:1f:1c:0e:59:69:96:
                    12:06:0c:1e:db:5d:a4:a5:d9:7c:09:b3:4e:ce:ba:
                    3e:6f:53:e8:5b:98:af:b3:5a:4b:6a:1b:84:39:07:
                    43:53:da:70:3d:31:5a:72:fb:0f:b2:44:aa:d2:3c:
                    7a:81:18:2e:86:96:17:0d:e7:6f:9b:de:97:a5:7a:
                    aa:7a:05:aa:35:84:8b:61:84:48:89:80:32:0c:44:
                    55:d7:46:6a:1d:91:88:d2:6e:da:51:7b:b1:b5:38:
                    04:4d:c5:3e:b0:0f:39:ea:ce:c9:ec:99:22:45:95:
                    7c:a8:33:62:31:b6:7a:f0:6b:29:e7:3f:f0:d7:16:
                    d7:e2:13:ff:db:41:91:93:94:5b:e8:2d:ce:8f:bc:
                    f3:3c:49:8b:f2:c6:d5:89:3d:5b:2d:38:b3:5c:10:
                    16:5a:c8:47:90:73:1b:ee:1d:10:ed:9b:99:70:bc:
                    d8:87:93:23:ce:7f:43:2f:bb:42:47:f1:d4:a3:9a:
                    fd:05:05:5d:9a:9e:e4:b7:34:43:b3:3e:72:65:31:
                    0e:78:d2:87:60:97:a4:f2:10:ab:42:4e:16:95:f7:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:99:1C:34:97:E7:B1:E7:77:5F:7D:A7:D2:C8:8A:7B:56:6A:5B:71
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:81:60:7f:fa:25:b9:6c:52:58:79:c0:8a:eb:e1:99:70:
         0e:58:ba:be:2e:a5:37:df:76:b0:6c:72:33:7b:25:ac:f3:b7:
         75:51:41:8d:cd:4a:06:db:e1:73:eb:c0:bb:5f:c3:34:7e:c6:
         3b:e2:3b:f6:34:e9:ee:bf:99:d4:af:77:05:f0:5a:b3:52:46:
         8e:4d:bc:0b:b7:d9:ff:e8:41:22:17:97:7c:bf:f0:0e:e5:bd:
         8f:6f:e7:55:b1:8a:05:65:33:9b:39:1e:e4:ba:40:cc:a0:b2:
         af:c9:93:9b:2e:c1:64:00:d2:4d:11:52:90:80:c2:c7:46:0b:
         fe:16:d0:b9:4d:87:e3:97:d1:98:e1:80:2a:c3:9a:de:cd:65:
         6d:1a:8f:f4:76:5d:df:4d:85:29:53:43:96:58:62:37:24:e8:
         0a:31:3b:54:13:26:1c:ff:68:19:93:fe:9c:05:3c:30:a5:e2:
         4b:7a:23:f0:28:cc:8f:1a:21:fe:7b:44:b1:2f:11:dc:77:51:
         54:30:48:b1:ac:dc:cb:e2:b7:94:cb:45:1e:6e:dc:69:d4:05:
         bc:8c:bb:b7:d1:15:07:eb:ca:57:a8:2e:74:f3:5e:2c:66:73:
         f3:3e:cd:69:b7:19:f6:23:f4:62:fa:8d:2d:e6:29:97:20:bc:
         51:dd:33:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiCUtFe+7TH9l7v6tnVZ2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjUwNTA1MjAwMDQwWhcNMjUwNTA2MjAwMDQwWjAzMTEwLwYDVQQD
EyhmOTk5MWMzNDk3ZTdiMWU3Nzc1ZjdkYTdkMmM4OGE3YjU2NmE1YjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0clcjSrSB159FIQ+m/UlkwxR1p6B
h8V3uT1UpBqD7TbaZKcHIbIfHA5ZaZYSBgwe212kpdl8CbNOzro+b1PoW5ivs1pL
ahuEOQdDU9pwPTFacvsPskSq0jx6gRguhpYXDedvm96XpXqqegWqNYSLYYRIiYAy
DERV10ZqHZGI0m7aUXuxtTgETcU+sA856s7J7JkiRZV8qDNiMbZ68Gsp5z/w1xbX
4hP/20GRk5Rb6C3Oj7zzPEmL8sbViT1bLTizXBAWWshHkHMb7h0Q7ZuZcLzYh5Mj
zn9DL7tCR/HUo5r9BQVdmp7ktzRDsz5yZTEOeNKHYJek8hCrQk4Wlfc6AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmZHDSX57Hnd199p9LIintWaltxMB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebaBYH/6
JblsUlh5wIrr4ZlwDli6vi6lN992sGxyM3slrPO3dVFBjc1KBtvhc+vAu1/DNH7G
O+I79jTp7r+Z1K93BfBas1JGjk28C7fZ/+hBIheXfL/wDuW9j2/nVbGKBWUzmzke
5LpAzKCyr8mTmy7BZADSTRFSkIDCx0YL/hbQuU2H45fRmOGAKsOa3s1lbRqP9HZd
302FKVNDllhiNyToCjE7VBMmHP9oGZP+nAU8MKXiS3oj8CjMjxoh/ntEsS8R3HdR
VDBIsazcy+K3lMtFHm7cadQFvIy7t9EVB+vKV6gudPNeLGZz8z7NabcZ9iP0YvqN
LeYplyC8Ud0zRg==
-----END CERTIFICATE-----
Generated at Mon May 5 22:23:34 2025 by rpki-client