Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File:                     S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier:          wry/berbD07lexHvAw8OdGWoVqOJRp3IfXYuNsiadVE=
Subject key identifier:   56:16:87:A4:E3:AD:23:C5:DC:D4:37:FB:E0:D7:32:CF:58:44:54:B6
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer:       /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial:       0196C6159ECA267A973C21A068364E445991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 20:00:27 +0000
Manifest this update:     Mon 12 May 2025 20:00:27 +0000
Manifest next update:     Tue 13 May 2025 20:00:27 +0000
Files and hashes:         1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: 2hjyZI5WK+FnLFJRMsBHGnOU8cTn8taksF7dgvDp+mA=)
                          2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
                          3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:15:9e:ca:26:7a:97:3c:21:a0:68:36:4e:44:59:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
        Validity
            Not Before: May 12 20:00:27 2025 GMT
            Not After : May 13 20:00:27 2025 GMT
        Subject: CN=561687a4e3ad23c5dcd437fbe0d732cf584454b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:e8:66:3f:ee:a2:f5:8a:5b:80:f3:63:be:
                    10:ad:70:fc:19:40:b2:c3:2b:53:f4:8e:c1:b2:93:
                    22:d8:4e:39:82:f3:dc:70:28:94:92:90:73:3a:d9:
                    4e:bf:a6:cc:e5:84:13:62:4f:1d:90:62:2d:1a:83:
                    bf:3b:c7:01:b0:ec:be:a4:6e:e7:64:fb:38:98:a8:
                    ce:80:5e:08:8b:ef:f6:c4:e8:e9:a6:3b:bc:95:82:
                    18:3d:b9:36:c7:1c:4a:eb:34:6a:1c:6b:5b:07:9a:
                    cf:bc:77:94:f8:ab:61:74:44:60:0a:56:7f:ab:89:
                    3e:f8:7a:dd:22:ad:d5:31:03:9e:a9:46:1c:85:39:
                    97:74:d8:50:59:96:8b:be:87:77:fa:f4:64:6b:ab:
                    90:96:aa:05:73:c0:34:b9:5c:b3:47:70:f3:73:59:
                    9b:4b:cb:c5:2a:56:75:2e:a9:a2:0a:c6:57:1d:83:
                    eb:70:fa:69:bd:6d:b8:ea:e0:56:cd:07:49:76:3f:
                    f7:a3:50:b0:a6:51:4b:55:06:64:bd:6e:0a:ac:63:
                    28:5a:44:1b:bf:f2:0f:23:a0:73:3c:80:37:2e:89:
                    04:ed:4c:46:49:a0:d1:03:4e:2f:97:9e:3f:57:da:
                    b2:f7:97:ed:97:a1:8b:11:29:9c:17:fb:de:f4:91:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:87:A4:E3:AD:23:C5:DC:D4:37:FB:E0:D7:32:CF:58:44:54:B6
            X509v3 Authority Key Identifier:
                keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:4c:45:b1:ad:29:03:d1:51:22:9c:10:57:53:69:f9:00:59:
         09:bc:7c:8d:4a:e5:3b:60:58:e9:e4:8a:0a:54:c7:f6:99:59:
         aa:e0:48:2a:34:5a:68:f1:96:e2:16:5b:40:01:66:a1:55:7f:
         f8:54:21:a0:73:6a:f8:d9:d0:08:e6:74:e4:cc:a6:08:1a:b5:
         9a:b4:b9:d9:fb:8c:ef:69:fa:71:2c:0c:54:f3:01:e1:1a:6d:
         d6:ec:b2:56:a5:bf:e8:06:d2:07:40:62:7d:04:0d:be:ac:aa:
         3b:c2:50:bb:1b:a0:53:6b:cf:75:0b:16:7c:84:d4:0e:c4:dd:
         12:ef:2a:34:27:03:62:c3:72:8f:fc:8d:5f:06:0e:e3:a8:72:
         16:fd:63:3e:8c:14:fe:a8:b0:2b:3d:e6:49:7a:eb:1d:dd:0c:
         35:c1:ca:8a:49:2e:5f:ab:94:e3:f8:8f:f9:04:a9:97:76:ce:
         62:82:7f:e8:8d:eb:d3:b6:e0:32:a5:75:62:15:f4:e2:de:23:
         fa:bd:2d:74:9f:5d:9d:36:63:0d:47:13:23:9d:00:5e:83:19:
         77:5b:e4:4a:62:93:81:25:9f:ac:90:78:c2:d4:6e:14:30:fb:
         50:b6:04:b7:b3:21:2a:f5:e4:05:c9:cb:26:fe:6a:33:92:ab:
         81:4f:08:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFZ7KJnqXPCGgaDZORFmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjNmYjhmZjhkZGFmZGE4OWRiMzk3MDVmNzhmNjQxOGVm
ZDFmZWQwHhcNMjUwNTEyMjAwMDI3WhcNMjUwNTEzMjAwMDI3WjAzMTEwLwYDVQQD
Eyg1NjE2ODdhNGUzYWQyM2M1ZGNkNDM3ZmJlMGQ3MzJjZjU4NDQ1NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW3oZj/uovWKW4DzY74QrXD8GUCy
wytT9I7BspMi2E45gvPccCiUkpBzOtlOv6bM5YQTYk8dkGItGoO/O8cBsOy+pG7n
ZPs4mKjOgF4Ii+/2xOjppju8lYIYPbk2xxxK6zRqHGtbB5rPvHeU+KthdERgClZ/
q4k++HrdIq3VMQOeqUYchTmXdNhQWZaLvod3+vRka6uQlqoFc8A0uVyzR3Dzc1mb
S8vFKlZ1LqmiCsZXHYPrcPppvW246uBWzQdJdj/3o1CwplFLVQZkvW4KrGMoWkQb
v/IPI6BzPIA3LokE7UxGSaDRA04vl54/V9qy95ftl6GLESmcF/ve9JHQLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYWh6TjrSPF3NQ3++DXMs9YRFS2MB8GA1UdIwQY
MBaAFEvz+4/43a/aids5cF949kGO/R/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19QN2pfamRyOXFKMnpsd1gzajJRWTc5SC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83Yjg1MTMtZjE4OS00MzMwLWI2ZjAt
ZDBkMjU4ZTRiNDM1LzEvU19QN2pfamRyOXFKMnpsd1gzajJRWTc5SC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83Yjg1MTMtZjE4OS00MzMwLWI2ZjAtZDBkMjU4ZTRiNDM1
LzEvU19QN2pfamRyOXFKMnpsd1gzajJRWTc5SC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvkxFsa0p
A9FRIpwQV1Np+QBZCbx8jUrlO2BY6eSKClTH9plZquBIKjRaaPGW4hZbQAFmoVV/
+FQhoHNq+NnQCOZ05MymCBq1mrS52fuM72n6cSwMVPMB4Rpt1uyyVqW/6AbSB0Bi
fQQNvqyqO8JQuxugU2vPdQsWfITUDsTdEu8qNCcDYsNyj/yNXwYO46hyFv1jPowU
/qiwKz3mSXrrHd0MNcHKikkuX6uU4/iP+QSpl3bOYoJ/6I3r07bgMqV1YhX04t4j
+r0tdJ9dnTZjDUcTI50AXoMZd1vkSmKTgSWfrJB4wtRuFDD7ULYEt7MhKvXkBcnL
Jv5qM5KrgU8IMQ==
-----END CERTIFICATE-----
Generated at Tue May 13 01:46:02 2025 by rpki-client