Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          TcA6qKXzMbJrBnpouMRiraQgOtsKapBmal1A+p4nRho=
Subject key identifier:   D8:7A:E4:22:96:7C:45:3C:3E:80:6F:77:A2:C9:88:84:99:5C:69:30
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       0196A19B7506EF421AFA2FA8A6DB7334E7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          10A4
Signing time:             Mon 05 May 2025 18:00:41 +0000
Manifest this update:     Mon 05 May 2025 18:00:41 +0000
Manifest next update:     Tue 06 May 2025 18:00:41 +0000
Files and hashes:         1: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: 6/SlO/wJ67JTveF/t+5tg7N1ekzGniFU+F79+vi35Yg=)
                          2: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (hash: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=)
                          3: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (hash: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=)
                          4: foMqTIfk3NGRU1ECjEYc0FzWeHQ.roa (hash: 8/tSFYSbydeBOM5cDt+MQjefx680IbM6wdc9EqGW/uQ=)
                          5: qOJSirqIZF030lDaiDlLOLszAqo.roa (hash: cceSZV5tbmDVcXVgGl8UFbkLxF9VVoz+OhMvXa1/dFw=)
                          6: zAPwb7bovDcweikHvlN-q4fyaQM.roa (hash: B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:9b:75:06:ef:42:1a:fa:2f:a8:a6:db:73:34:e7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: May  5 18:00:41 2025 GMT
            Not After : May  6 18:00:41 2025 GMT
        Subject: CN=d87ae422967c453c3e806f77a2c98884995c6930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:2d:43:a7:80:60:fa:7d:7e:db:e5:13:63:
                    00:e1:97:33:37:4a:01:0d:37:a7:d8:95:ab:49:3e:
                    a3:71:fd:3e:ec:4e:4b:61:55:1a:bf:49:fc:bc:3f:
                    6c:7b:23:9d:cd:e9:20:39:d5:09:cc:66:84:41:20:
                    51:6d:4a:83:39:93:c6:fd:df:f0:e7:e3:87:f1:7a:
                    44:f9:11:13:c5:3f:c2:9e:80:ab:3e:d0:49:ba:40:
                    dd:d1:04:98:e6:6f:78:9f:a7:58:9e:f7:ff:8f:b3:
                    82:6c:3d:e1:47:71:ea:48:b0:85:4d:0f:d1:d8:bd:
                    3d:c6:ec:c7:e0:61:fe:e6:cb:b9:d6:07:06:45:ad:
                    47:e9:9d:b0:b0:9a:f3:ab:14:35:8e:d8:72:26:51:
                    c1:e6:f0:d3:f1:59:65:58:d8:19:3f:30:1b:0c:ec:
                    3c:d0:26:a9:92:66:44:db:67:0c:41:7a:cc:b0:73:
                    c5:7f:e4:f0:92:20:47:0c:8d:a1:13:bb:e0:7a:f0:
                    61:07:48:27:5a:1b:f0:09:5f:e7:9c:b9:42:c9:77:
                    62:32:4c:8d:c2:c8:80:04:56:e8:61:67:7d:84:73:
                    56:4a:7d:c4:3d:63:df:28:2a:e2:e4:85:40:7d:56:
                    f9:4e:7a:67:c1:0a:9d:90:f1:d4:10:c0:88:b7:6f:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7A:E4:22:96:7C:45:3C:3E:80:6F:77:A2:C9:88:84:99:5C:69:30
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:74:6d:69:c9:0b:fc:a5:15:8b:96:62:78:e2:11:17:b9:a3:
         32:c8:d9:ef:c9:8e:0c:df:fd:ec:20:c1:e0:6f:ca:16:ee:16:
         50:d7:b3:70:59:04:06:a0:85:48:d3:22:6b:d1:98:31:00:8f:
         eb:05:8f:f7:a6:05:a2:3f:e9:f8:4d:38:62:5e:2b:1a:a9:5f:
         a8:c3:bc:a5:5f:27:da:f3:51:a4:f7:89:8a:fc:5a:7d:c8:9e:
         5c:f0:da:7e:33:a6:1b:3e:b9:cd:e9:db:18:bb:81:4f:2b:f8:
         6c:f2:00:c0:ff:0a:5c:9d:e4:8e:7a:05:bf:5d:e7:21:72:66:
         1d:17:f4:bd:53:9f:86:36:fd:30:48:b4:40:29:94:39:fd:93:
         6b:54:7f:cb:54:44:4b:10:73:95:f9:7a:8f:1b:0b:3c:2a:e2:
         8e:41:fe:30:70:64:31:b2:35:87:59:a9:db:53:c6:e6:04:f1:
         b8:a7:8b:a5:99:b1:41:df:0e:5c:cb:6b:1f:03:2e:02:8b:06:
         f8:b9:d8:0d:b8:53:f5:b0:26:62:e8:04:a2:54:df:51:f1:da:
         a3:5f:8e:ab:67:de:e3:92:e6:0f:e6:2f:d1:f5:00:e7:45:a0:
         ac:f5:da:e1:ef:e3:b7:f4:42:9e:f1:68:a0:4e:39:5c:56:d5:
         76:d6:aa:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahm3UG70Ia+i+opttzNOfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2
Y2Y3NjgwHhcNMjUwNTA1MTgwMDQxWhcNMjUwNTA2MTgwMDQxWjAzMTEwLwYDVQQD
EyhkODdhZTQyMjk2N2M0NTNjM2U4MDZmNzdhMmM5ODg4NDk5NWM2OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoQtQ6eAYPp9ftvlE2MA4ZczN0oB
DTen2JWrST6jcf0+7E5LYVUav0n8vD9seyOdzekgOdUJzGaEQSBRbUqDOZPG/d/w
5+OH8XpE+RETxT/CnoCrPtBJukDd0QSY5m94n6dYnvf/j7OCbD3hR3HqSLCFTQ/R
2L09xuzH4GH+5su51gcGRa1H6Z2wsJrzqxQ1jthyJlHB5vDT8VllWNgZPzAbDOw8
0CapkmZE22cMQXrMsHPFf+TwkiBHDI2hE7vgevBhB0gnWhvwCV/nnLlCyXdiMkyN
wsiABFboYWd9hHNWSn3EPWPfKCri5IVAfVb5TnpnwQqdkPHUEMCIt289qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh65CKWfEU8PoBvd6LJiISZXGkwMB8GA1UdIwQY
MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt
MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm
LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXRtackL
/KUVi5ZieOIRF7mjMsjZ78mODN/97CDB4G/KFu4WUNezcFkEBqCFSNMia9GYMQCP
6wWP96YFoj/p+E04Yl4rGqlfqMO8pV8n2vNRpPeJivxafcieXPDafjOmGz65zenb
GLuBTyv4bPIAwP8KXJ3kjnoFv13nIXJmHRf0vVOfhjb9MEi0QCmUOf2Ta1R/y1RE
SxBzlfl6jxsLPCrijkH+MHBkMbI1h1mp21PG5gTxuKeLpZmxQd8OXMtrHwMuAosG
+LnYDbhT9bAmYugEolTfUfHao1+Oq2fe45LmD+Yv0fUA50WgrPXa4e/jt/RCnvFo
oE45XFbVdtaqNA==
-----END CERTIFICATE-----
Generated at Mon May 5 19:56:28 2025 by rpki-client