Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
File:                     EzGVE_0LkEFwYKIYt21iuOP7zFE.mft (raw, json)
Hash identifier:          Vxl2tcb+GFJAdB4gimXH3VDjzI6XlP/F5Ifh9KzE+Y4=
Subject key identifier:   1B:40:46:A2:F9:A1:08:2D:6D:C3:87:5F:49:C4:DC:34:2B:83:69:12
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Certificate issuer:       /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial:       0196BE5CAAFD500FD1D303F211B10BE89D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 08:01:06 +0000
Manifest this update:     Sun 11 May 2025 08:01:06 +0000
Manifest next update:     Mon 12 May 2025 08:01:06 +0000
Files and hashes:         1: EzGVE_0LkEFwYKIYt21iuOP7zFE.crl (hash: v7HUe/NN8M7PhokmoxYM2Vta6CR7YbJZqaG+12xK60s=)
                          2: yp0LdC7U734nh5SQEMIi7N8uoHI.roa (hash: yywu4U5iIGMPvffSUFMCkRN3B5n6pNurBpQSvtgjfYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:aa:fd:50:0f:d1:d3:03:f2:11:b1:0b:e8:9d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
        Validity
            Not Before: May 11 08:01:06 2025 GMT
            Not After : May 12 08:01:06 2025 GMT
        Subject: CN=1b4046a2f9a1082d6dc3875f49c4dc342b836912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:44:05:e9:3c:5a:b3:fa:98:d6:22:fb:55:
                    cb:57:1f:8e:9e:2d:3a:1b:c4:9f:92:51:bd:06:f7:
                    74:a7:3b:fc:33:19:40:eb:04:d7:08:5a:72:10:25:
                    4d:47:e5:01:c1:19:52:96:7e:48:b1:91:6b:76:6c:
                    04:1d:e6:aa:6c:ca:19:7d:a2:ff:ef:1b:c8:1b:65:
                    db:d6:f5:55:4d:d0:5c:21:33:54:42:63:7a:be:dd:
                    02:1b:74:7b:c7:63:4e:1d:a7:7d:e7:91:4d:c8:56:
                    ba:ba:f5:84:e0:65:e3:8c:c0:d8:71:ab:1d:48:01:
                    9f:26:d0:6d:97:09:dd:60:10:18:4c:3d:cd:d7:d4:
                    a4:88:6d:6f:71:a9:ce:27:2c:ee:93:e7:c7:8a:c1:
                    40:9e:44:78:58:f7:02:ae:ba:8d:b4:c2:53:a4:5e:
                    fd:d9:87:b8:be:c0:75:06:76:d5:93:b3:0c:73:5a:
                    eb:08:25:93:34:59:1b:1a:38:55:0c:0f:96:ad:a1:
                    c1:1a:1e:00:df:87:61:36:70:85:c1:bd:0f:36:b4:
                    13:80:74:03:9f:20:a7:b4:1d:93:77:c0:4a:3a:2c:
                    c8:27:ef:fb:65:f4:46:da:1e:c7:22:b0:7b:98:56:
                    29:34:df:90:2e:78:d1:4b:c5:19:19:22:22:9e:71:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:40:46:A2:F9:A1:08:2D:6D:C3:87:5F:49:C4:DC:34:2B:83:69:12
            X509v3 Authority Key Identifier:
                keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0b:17:a0:8a:2c:f4:03:d9:04:d6:ea:8e:c9:9d:c0:ed:50:
         dd:0e:f3:24:24:de:50:9f:00:97:83:b5:af:a2:fc:12:04:ca:
         0b:56:af:1c:86:e3:3b:a5:6b:7f:c5:ed:ad:e6:2a:84:c7:0a:
         69:9e:8b:40:c0:9e:3a:7c:a4:96:e2:6e:c5:c5:bb:08:8e:3e:
         1c:f4:19:2a:42:66:00:65:41:36:da:59:69:e6:84:12:47:eb:
         b5:bd:73:5f:3b:a7:88:1d:52:5e:96:38:7a:37:3c:ea:db:99:
         d6:df:fe:04:e7:6f:2a:42:8c:c9:31:df:52:f4:fc:dc:99:bc:
         9b:75:d4:a4:b1:f2:26:28:c3:3d:ec:50:c6:61:3a:f2:a8:eb:
         41:08:f7:d4:4b:15:ba:a4:74:c3:7a:cb:7c:40:71:cc:6d:c5:
         89:f2:f4:91:51:2a:ae:04:9e:86:da:aa:e0:29:40:98:e8:66:
         1a:1d:02:90:4f:0c:76:86:5f:19:93:c0:7c:25:b7:55:b3:fe:
         f5:64:88:02:d4:1a:0c:8a:24:c9:0f:ba:88:ee:2b:c8:c4:ed:
         4b:c4:26:a2:47:42:e8:99:96:56:a6:6a:35:e1:a4:a1:50:c0:
         85:e0:e8:94:16:6f:52:3a:1a:10:6d:bd:53:16:1f:56:26:42:
         42:bc:fb:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XKr9UA/R0wPyEbEL6J0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzE5NTEzZmQwYjkwNDE3MDYwYTIxOGI3NmQ2MmI4ZTNm
YmNjNTEwHhcNMjUwNTExMDgwMTA2WhcNMjUwNTEyMDgwMTA2WjAzMTEwLwYDVQQD
EygxYjQwNDZhMmY5YTEwODJkNmRjMzg3NWY0OWM0ZGMzNDJiODM2OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEVEBek8WrP6mNYi+1XLVx+Oni06
G8SfklG9Bvd0pzv8MxlA6wTXCFpyECVNR+UBwRlSln5IsZFrdmwEHeaqbMoZfaL/
7xvIG2Xb1vVVTdBcITNUQmN6vt0CG3R7x2NOHad955FNyFa6uvWE4GXjjMDYcasd
SAGfJtBtlwndYBAYTD3N19SkiG1vcanOJyzuk+fHisFAnkR4WPcCrrqNtMJTpF79
2Ye4vsB1BnbVk7MMc1rrCCWTNFkbGjhVDA+WraHBGh4A34dhNnCFwb0PNrQTgHQD
nyCntB2Td8BKOizIJ+/7ZfRG2h7HIrB7mFYpNN+QLnjRS8UZGSIinnHs9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtARqL5oQgtbcOHX0nE3DQrg2kSMB8GA1UdIwQY
MBaAFBMxlRP9C5BBcGCiGLdtYrjj+8xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAt
NDgxNzBiZTExMzMyLzEvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAtNDgxNzBiZTExMzMy
LzEvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQsXoIos
9APZBNbqjsmdwO1Q3Q7zJCTeUJ8Al4O1r6L8EgTKC1avHIbjO6Vrf8XtreYqhMcK
aZ6LQMCeOnykluJuxcW7CI4+HPQZKkJmAGVBNtpZaeaEEkfrtb1zXzuniB1SXpY4
ejc86tuZ1t/+BOdvKkKMyTHfUvT83Jm8m3XUpLHyJijDPexQxmE68qjrQQj31EsV
uqR0w3rLfEBxzG3FifL0kVEqrgSehtqq4ClAmOhmGh0CkE8MdoZfGZPAfCW3VbP+
9WSIAtQaDIokyQ+6iO4ryMTtS8QmokdC6JmWVqZqNeGkoVDAheDolBZvUjoaEG29
UxYfViZCQrz7Yg==
-----END CERTIFICATE-----
Generated at Sun May 11 16:02:34 2025 by rpki-client