Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          dc+7GB/X7eVBX/61+ht0MDXq5VtrtO1WvcjH38MHCLU=
Subject key identifier:   41:DF:27:92:4F:FE:52:07:94:5C:19:30:C8:5B:83:D6:1B:3E:B4:EC
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       0196BD496D6FAC68726D426DC922AA8E1079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          1539
Signing time:             Sun 11 May 2025 03:00:28 +0000
Manifest this update:     Sun 11 May 2025 03:00:28 +0000
Manifest next update:     Mon 12 May 2025 03:00:28 +0000
Files and hashes:         1: 5juFOi12IlXtCkf2DtKHvFjQ7Jk.roa (hash: ww1Ap6yHRZv0yJoUDsvGuz2Z305tTs+DxDhKtXDBfFg=)
                          2: IKiqkrmFyojfs3_xOt7fZHFSlPM.roa (hash: A7gXKJoNQ0QRvI+SScjx1MnLDAh3sHJvpIH2WHgULw8=)
                          3: PtfamAIKc-wbnus8-5afpUvZHGU.roa (hash: h8WtMUiUF98qcvLvFpadosq7yztYyhy7KWS+4nBxrlg=)
                          4: U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa (hash: c6bEmKe9x58NR/VbAT8OhvrCDKKUEqAOtV7EWWPUmrc=)
                          5: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: ECWs2gAkUm6WUiBnuZ3zMpvPSUrHNFrr2dPQqq6Nu3U=)
                          6: rS6BwZvo3GfqDYx4UHFP382Hars.roa (hash: SFt6Clcvm0ncW0QPfJN10WZH+aRfPVixy7ab3a3BU/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:6d:6f:ac:68:72:6d:42:6d:c9:22:aa:8e:10:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: May 11 03:00:28 2025 GMT
            Not After : May 12 03:00:28 2025 GMT
        Subject: CN=41df27924ffe5207945c1930c85b83d61b3eb4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:91:fa:2a:2a:2d:d9:5c:77:01:85:0f:3d:
                    85:5a:cc:e1:53:3e:6e:ce:3d:12:1d:45:1a:c3:6b:
                    63:48:1b:1f:a8:23:53:9f:02:48:77:09:82:a4:45:
                    8c:5e:ed:c0:fc:3e:89:01:ab:ad:c8:d0:f1:86:d2:
                    d2:33:a4:65:c8:45:7e:a1:60:94:dd:f0:4a:cb:94:
                    92:ac:29:3f:7f:f8:05:1e:25:d2:c8:02:ba:53:0a:
                    0a:55:e1:67:ed:f9:a8:c3:e1:36:a7:83:bc:1f:ab:
                    4f:6a:83:c6:a2:3a:1a:d7:91:22:ea:f0:a3:0b:c0:
                    79:40:0b:7d:d4:4c:72:cd:da:9f:85:63:96:99:f3:
                    cf:39:70:7d:2b:f2:c5:e8:a5:d8:f1:30:2f:fe:22:
                    fd:a7:e3:cf:f9:8c:77:df:56:06:94:bd:d7:fb:e8:
                    5c:5d:16:11:29:f3:d8:57:3a:ac:7a:87:16:10:b2:
                    fe:65:2b:14:94:8e:f8:f1:05:c3:23:f3:a3:92:42:
                    fc:62:18:0e:84:53:e8:e4:d3:51:f5:03:9e:e2:79:
                    57:76:a2:01:bd:84:a2:ac:1f:b0:dd:d5:39:e3:86:
                    36:9e:a4:b5:f9:fe:61:3a:0f:b9:35:68:dd:01:e3:
                    31:cd:3f:56:76:a4:f8:a3:74:91:87:e6:a2:77:46:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DF:27:92:4F:FE:52:07:94:5C:19:30:C8:5B:83:D6:1B:3E:B4:EC
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:7b:69:d6:48:c7:29:78:42:cf:08:19:3d:f2:dd:c8:f1:
         e4:3d:0d:78:09:66:99:b7:1a:3a:ca:2c:b9:57:cf:8e:d7:db:
         27:4c:54:a3:02:03:12:76:33:8b:66:3a:6b:d2:79:af:94:17:
         7d:45:99:2a:b9:fc:3e:35:4e:f1:fe:ff:4c:60:4e:58:df:ef:
         6f:9b:b2:24:c8:1f:22:22:0e:96:0e:e6:f5:4c:6f:f3:3d:cc:
         f2:1e:db:a6:fa:47:99:06:4c:f6:62:81:42:f3:f1:4e:0b:18:
         de:1a:d6:b3:5b:d5:a9:a8:14:b9:aa:c7:ca:3b:cc:85:93:06:
         d3:98:83:20:d0:00:fd:01:42:4d:9d:eb:3f:db:5e:53:21:65:
         f9:d0:9e:08:f3:0a:fa:05:55:ce:7b:8f:96:8b:e4:27:85:a8:
         13:a1:b3:9a:69:b7:04:5d:46:57:a4:e0:59:98:a0:fc:5e:aa:
         50:b9:1d:c2:2e:67:bd:37:fe:80:d0:8e:6b:1c:ca:4f:53:f9:
         e1:55:e9:c1:ef:06:cb:d0:4a:63:52:db:84:b9:c6:f2:ef:9e:
         34:c6:7c:c1:33:10:42:6b:dc:92:42:25:cf:a5:55:67:d5:da:
         3b:4d:72:33:00:a8:a4:77:a0:5d:7b:24:6c:ab:96:b1:21:49:
         09:68:ed:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SW1vrGhybUJtySKqjhB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy
MDNiNzEwHhcNMjUwNTExMDMwMDI4WhcNMjUwNTEyMDMwMDI4WjAzMTEwLwYDVQQD
Eyg0MWRmMjc5MjRmZmU1MjA3OTQ1YzE5MzBjODViODNkNjFiM2ViNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPyR+ioqLdlcdwGFDz2FWszhUz5u
zj0SHUUaw2tjSBsfqCNTnwJIdwmCpEWMXu3A/D6JAautyNDxhtLSM6RlyEV+oWCU
3fBKy5SSrCk/f/gFHiXSyAK6UwoKVeFn7fmow+E2p4O8H6tPaoPGojoa15Ei6vCj
C8B5QAt91ExyzdqfhWOWmfPPOXB9K/LF6KXY8TAv/iL9p+PP+Yx331YGlL3X++hc
XRYRKfPYVzqseocWELL+ZSsUlI748QXDI/OjkkL8YhgOhFPo5NNR9QOe4nlXdqIB
vYSirB+w3dU544Y2nqS1+f5hOg+5NWjdAeMxzT9WdqT4o3SRh+aid0ZgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHfJ5JP/lIHlFwZMMhbg9YbPrTsMB8GA1UdIwQY
MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt
NDhlZjhlMTExNGU0LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0
LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoh57adZI
xyl4Qs8IGT3y3cjx5D0NeAlmmbcaOsosuVfPjtfbJ0xUowIDEnYzi2Y6a9J5r5QX
fUWZKrn8PjVO8f7/TGBOWN/vb5uyJMgfIiIOlg7m9Uxv8z3M8h7bpvpHmQZM9mKB
QvPxTgsY3hrWs1vVqagUuarHyjvMhZMG05iDINAA/QFCTZ3rP9teUyFl+dCeCPMK
+gVVznuPlovkJ4WoE6Gzmmm3BF1GV6TgWZig/F6qULkdwi5nvTf+gNCOaxzKT1P5
4VXpwe8Gy9BKY1LbhLnG8u+eNMZ8wTMQQmvckkIlz6VVZ9XaO01yMwCopHegXXsk
bKuWsSFJCWjtwQ==
-----END CERTIFICATE-----
Generated at Sun May 11 05:17:32 2025 by rpki-client