Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File:                     4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier:          3NhqxPLPwvOWYFrpYeOds5oW0FaGMfZXkCVbUOl8l+o=
Subject key identifier:   1A:53:F7:2A:E3:31:91:C8:EB:3E:F9:07:34:BA:BA:16:BB:4B:04:30
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer:       /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial:       0196C2025FD7460F9FBE7FB8AD4219F41492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number:          0E75
Signing time:             Mon 12 May 2025 01:00:57 +0000
Manifest this update:     Mon 12 May 2025 01:00:57 +0000
Manifest next update:     Tue 13 May 2025 01:00:57 +0000
Files and hashes:         1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: boz3KEyBTdDzd3mSGjcENOfjZMhyOeZbpoHM4WS0y/g=)
                          2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:5f:d7:46:0f:9f:be:7f:b8:ad:42:19:f4:14:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
        Validity
            Not Before: May 12 01:00:57 2025 GMT
            Not After : May 13 01:00:57 2025 GMT
        Subject: CN=1a53f72ae33191c8eb3ef90734baba16bb4b0430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:22:5e:c0:a4:45:54:f8:1f:23:c5:dd:ef:
                    65:b2:cb:62:9f:53:af:ba:4f:f4:46:00:fa:be:f6:
                    c9:fd:3a:f6:a8:1f:5b:c0:11:02:10:eb:37:98:4f:
                    d8:1e:73:eb:f7:a8:39:44:7e:f2:16:63:3e:ea:1e:
                    16:34:75:97:8b:f6:21:1b:7b:e4:c5:c9:62:8a:a4:
                    24:83:97:fd:8b:52:d2:85:c1:c5:40:ca:92:d6:e7:
                    50:13:9f:e6:84:65:59:b7:13:9f:88:ea:69:0d:3b:
                    67:dd:40:d9:33:fb:92:de:c7:7d:f1:5d:2a:1f:3e:
                    8d:6e:15:a6:0c:1f:dd:14:1b:fb:3d:44:74:59:46:
                    5e:51:85:9c:83:70:f0:a3:4f:f9:de:e8:98:f6:ae:
                    15:e5:83:c6:3a:26:4f:cc:31:98:b2:57:0f:6f:2c:
                    87:73:a5:3f:e1:85:9c:d3:a1:e5:59:fb:c9:71:51:
                    f0:22:10:6d:6e:db:98:bb:6e:ea:6c:7b:5d:0e:cb:
                    62:6a:e7:eb:f2:a5:c6:7e:a3:33:f6:2b:4f:6c:88:
                    b8:ee:03:d4:73:76:3a:d0:c5:3b:14:e9:47:21:27:
                    54:c6:f0:d7:70:97:39:f5:ff:0b:ea:d9:d9:7b:1a:
                    2a:53:dd:9b:62:df:67:f9:c7:3b:fa:b2:e3:48:6c:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:53:F7:2A:E3:31:91:C8:EB:3E:F9:07:34:BA:BA:16:BB:4B:04:30
            X509v3 Authority Key Identifier:
                keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:d2:b4:19:df:6b:df:8e:84:15:00:ea:9d:fc:54:32:89:
         09:0a:e6:16:e3:09:54:28:5d:e9:c4:4e:bc:ab:50:37:9c:6a:
         ef:67:44:e1:98:e9:4b:00:c9:b5:46:ee:b3:b4:77:e0:aa:af:
         da:a1:f8:1f:da:dd:8a:b3:f7:c4:29:18:c4:f1:9b:d7:30:28:
         2a:f4:df:30:d2:e0:1c:dd:18:90:45:1e:79:3f:3c:60:7f:fd:
         c7:36:aa:d4:cd:b4:36:5c:94:81:5c:2a:1c:13:04:02:34:75:
         f4:08:20:cb:04:89:fd:3f:1d:94:f8:47:d7:39:2f:81:5e:85:
         ee:09:6b:cd:c4:b4:57:19:2e:63:a5:15:ae:61:c2:f4:89:08:
         99:5c:ee:0e:c9:ba:a9:19:14:52:06:93:a2:3a:31:0b:21:7c:
         c9:fd:d8:11:04:c9:3a:53:b2:30:ee:4b:ad:4c:f3:a6:dd:2d:
         62:5a:ff:9b:cc:10:cf:50:18:26:b6:28:b9:60:d4:86:aa:aa:
         0f:a8:2d:25:d7:b0:73:0b:2e:74:d2:d6:b8:ee:ae:98:01:a4:
         24:b7:57:fc:e2:33:80:56:d6:ad:56:ad:c7:20:14:e9:35:7c:
         ea:69:40:2a:66:cc:a9:03:30:55:2c:33:4c:cd:17:3f:c2:40:
         19:6d:ec:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAl/XRg+fvn+4rUIZ9BSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZWExNGQxMzQzYjk5MjUwNmJlZTZjM2Q5MGUxOWE2OTc5
OGIwMTgwHhcNMjUwNTEyMDEwMDU3WhcNMjUwNTEzMDEwMDU3WjAzMTEwLwYDVQQD
EygxYTUzZjcyYWUzMzE5MWM4ZWIzZWY5MDczNGJhYmExNmJiNGIwNDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjoiXsCkRVT4HyPF3e9lsstin1Ov
uk/0RgD6vvbJ/Tr2qB9bwBECEOs3mE/YHnPr96g5RH7yFmM+6h4WNHWXi/YhG3vk
xcliiqQkg5f9i1LShcHFQMqS1udQE5/mhGVZtxOfiOppDTtn3UDZM/uS3sd98V0q
Hz6NbhWmDB/dFBv7PUR0WUZeUYWcg3Dwo0/53uiY9q4V5YPGOiZPzDGYslcPbyyH
c6U/4YWc06HlWfvJcVHwIhBtbtuYu27qbHtdDstiaufr8qXGfqMz9itPbIi47gPU
c3Y60MU7FOlHISdUxvDXcJc59f8L6tnZexoqU92bYt9n+cc7+rLjSGyMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpT9yrjMZHI6z75BzS6uha7SwQwMB8GA1UdIwQY
MBaAFOPqFNE0O5klBr7mw9kOGaaXmLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQt
ZDRhNGYzNDcxN2YwLzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQtZDRhNGYzNDcxN2Yw
LzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATN3StBnf
a9+OhBUA6p38VDKJCQrmFuMJVChd6cROvKtQN5xq72dE4ZjpSwDJtUbus7R34Kqv
2qH4H9rdirP3xCkYxPGb1zAoKvTfMNLgHN0YkEUeeT88YH/9xzaq1M20NlyUgVwq
HBMEAjR19AggywSJ/T8dlPhH1zkvgV6F7glrzcS0VxkuY6UVrmHC9IkImVzuDsm6
qRkUUgaTojoxCyF8yf3YEQTJOlOyMO5LrUzzpt0tYlr/m8wQz1AYJrYouWDUhqqq
D6gtJdewcwsudNLWuO6umAGkJLdX/OIzgFbWrVatxyAU6TV86mlAKmbMqQMwVSwz
TM0XP8JAGW3sZQ==
-----END CERTIFICATE-----
Generated at Mon May 12 11:19:23 2025 by rpki-client