Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File:                     2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier:          3VTnX025Hfm+nrqY4HBTX/j2ET956GfLJr/5BZ+Lq84=
Subject key identifier:   A9:30:AB:84:55:EE:CD:4D:0A:03:2A:50:39:A7:B0:26:EF:58:34:FC
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer:       /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial:       0196D7405B2A4B4C5C04A084C41077FF7A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number:          1548
Signing time:             Fri 16 May 2025 04:00:41 +0000
Manifest this update:     Fri 16 May 2025 04:00:41 +0000
Manifest next update:     Sat 17 May 2025 04:00:41 +0000
Files and hashes:         1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: ukpRLUH/4f7B012+b5QHDk3D3/uCPM6iUhNqfs6Z3Mo=)
                          2: bdqrLURz5G694Fm80xmKAo0IogU.roa (hash: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:40:5b:2a:4b:4c:5c:04:a0:84:c4:10:77:ff:7a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
        Validity
            Not Before: May 16 04:00:41 2025 GMT
            Not After : May 17 04:00:41 2025 GMT
        Subject: CN=a930ab8455eecd4d0a032a5039a7b026ef5834fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:0f:55:ce:68:8b:34:39:17:19:85:c9:0d:
                    2c:93:f7:9b:49:ec:83:92:38:cd:51:31:b3:14:57:
                    d7:28:94:11:04:77:ce:ab:db:55:fc:4d:ce:79:fe:
                    d1:8b:4f:c9:b4:6c:72:ad:5c:b1:5c:f0:b4:c6:33:
                    df:47:58:08:90:43:05:4a:9d:fd:cc:d8:6c:db:86:
                    c5:ad:3b:60:8e:1f:64:86:fb:17:7b:34:ee:78:80:
                    ce:23:06:58:4b:65:51:40:8a:e2:9f:99:ec:d7:dd:
                    94:ba:13:81:08:81:89:ae:be:48:f1:06:b3:9c:af:
                    f5:b3:1c:e7:e0:62:b2:1e:0c:fc:9c:b2:56:71:bc:
                    f9:8f:2d:02:31:36:8a:b5:4d:98:1c:ee:56:39:75:
                    c9:17:fb:7e:42:c3:69:2b:a7:28:f5:d7:2e:48:00:
                    c9:2d:49:93:81:ab:95:9e:c2:fb:ee:98:9c:4e:56:
                    0b:54:51:8a:6a:74:5b:11:aa:7a:3c:70:c8:e7:9f:
                    44:0c:e5:55:2c:38:43:7a:84:c6:3b:e3:6e:c5:6a:
                    43:fd:01:58:ad:03:ed:e6:f2:24:2e:ab:08:89:e2:
                    7a:49:0d:10:53:22:d4:3a:30:91:64:47:1b:c4:13:
                    50:68:36:3b:ae:57:5c:33:25:dd:ed:72:4f:cd:5f:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:30:AB:84:55:EE:CD:4D:0A:03:2A:50:39:A7:B0:26:EF:58:34:FC
            X509v3 Authority Key Identifier:
                keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:62:5e:c1:ac:03:f2:1d:b5:12:ff:f4:7c:6a:ef:77:36:
         ab:0e:aa:9f:28:35:b1:4a:8e:4c:c2:79:39:6d:f1:43:80:94:
         cd:da:a5:91:2a:4c:25:fd:61:f0:7f:b4:e4:ae:3a:29:3c:87:
         16:67:ac:0e:5a:f4:9e:32:84:e4:f0:d5:52:d0:53:39:62:df:
         d3:30:6a:63:4c:27:51:2e:07:e2:b3:86:1f:de:69:13:10:5e:
         27:a7:26:b6:40:e0:d3:23:3b:f2:56:fd:9f:d3:ed:9c:3a:bd:
         53:6b:27:8f:0f:67:5a:8c:62:68:66:1b:0c:2e:96:12:f7:b6:
         31:80:13:d1:fc:33:55:85:4d:e3:c5:aa:5f:74:93:a0:1c:04:
         fb:55:60:a4:ae:82:de:9e:ba:4d:f4:64:94:61:32:55:56:96:
         50:74:ab:2d:be:7d:9c:28:c9:22:92:07:98:9f:fb:76:d6:d2:
         6b:3b:e9:44:4b:b5:3e:07:6a:3e:79:d9:57:ce:d4:7b:d5:38:
         50:a5:8e:d0:e6:e6:21:ae:91:45:ed:48:0c:2c:ae:32:57:a4:
         4b:5d:00:e6:80:98:51:62:49:1a:09:58:80:72:9d:e1:63:2e:
         ac:f5:7d:bf:38:55:0c:bd:24:e5:d0:ee:8e:01:61:09:30:24:
         df:59:ce:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbXQFsqS0xcBKCExBB3/3qSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZjBhMzljZmFkZjkxMGY2YjEzMmFkMjI4ZTYwNjU2MTg4
N2EwNmMwHhcNMjUwNTE2MDQwMDQxWhcNMjUwNTE3MDQwMDQxWjAzMTEwLwYDVQQD
EyhhOTMwYWI4NDU1ZWVjZDRkMGEwMzJhNTAzOWE3YjAyNmVmNTgzNGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmIPVc5oizQ5FxmFyQ0sk/ebSeyD
kjjNUTGzFFfXKJQRBHfOq9tV/E3Oef7Ri0/JtGxyrVyxXPC0xjPfR1gIkEMFSp39
zNhs24bFrTtgjh9khvsXezTueIDOIwZYS2VRQIrin5ns192UuhOBCIGJrr5I8Qaz
nK/1sxzn4GKyHgz8nLJWcbz5jy0CMTaKtU2YHO5WOXXJF/t+QsNpK6co9dcuSADJ
LUmTgauVnsL77picTlYLVFGKanRbEap6PHDI559EDOVVLDhDeoTGO+NuxWpD/QFY
rQPt5vIkLqsIieJ6SQ0QUyLUOjCRZEcbxBNQaDY7rldcMyXd7XJPzV9hrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkwq4RV7s1NCgMqUDmnsCbvWDT8MB8GA1UdIwQY
MBaAFNrwo5z635EPaxMq0ijmBlYYh6BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMt
OTJiMjA3ZjY0MWIxLzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMtOTJiMjA3ZjY0MWIx
LzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6FiXsGs
A/IdtRL/9Hxq73c2qw6qnyg1sUqOTMJ5OW3xQ4CUzdqlkSpMJf1h8H+05K46KTyH
FmesDlr0njKE5PDVUtBTOWLf0zBqY0wnUS4H4rOGH95pExBeJ6cmtkDg0yM78lb9
n9PtnDq9U2snjw9nWoxiaGYbDC6WEve2MYAT0fwzVYVN48WqX3SToBwE+1VgpK6C
3p66TfRklGEyVVaWUHSrLb59nCjJIpIHmJ/7dtbSazvpREu1PgdqPnnZV87Ue9U4
UKWO0ObmIa6RRe1IDCyuMlekS10A5oCYUWJJGglYgHKd4WMurPV9vzhVDL0k5dDu
jgFhCTAk31nOrg==
-----END CERTIFICATE-----
Generated at Fri May 16 12:14:34 2025 by rpki-client