Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File:                     0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier:          JICMsqqKXbwvU9VspNifjV3/3EzBKA5FkDhJNnl0YkM=
Subject key identifier:   1B:89:45:C1:62:DF:A0:3D:2D:C7:D0:0A:94:30:91:C6:11:C6:52:ED
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer:       /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial:       0196A4D3F0F277C8BBF4C7C87E006FC70C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number:          0C75
Signing time:             Tue 06 May 2025 09:01:15 +0000
Manifest this update:     Tue 06 May 2025 09:01:15 +0000
Manifest next update:     Wed 07 May 2025 09:01:15 +0000
Files and hashes:         1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: /ylujid8bsCPiL+1PSVqzXzsCovkAGTFi1wvW21PtXU=)
                          2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:d3:f0:f2:77:c8:bb:f4:c7:c8:7e:00:6f:c7:0c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
        Validity
            Not Before: May  6 09:01:15 2025 GMT
            Not After : May  7 09:01:15 2025 GMT
        Subject: CN=1b8945c162dfa03d2dc7d00a943091c611c652ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:0e:84:4f:a0:3f:a3:40:fa:3e:e5:b0:4e:
                    59:de:11:2e:55:5a:4a:10:fe:75:a4:4a:ee:b3:fe:
                    53:a9:f7:ef:2e:0d:5c:ef:a9:0c:17:12:c5:8e:02:
                    62:84:ec:cf:55:f4:d6:bc:01:ba:5e:da:2d:73:ca:
                    1e:f4:29:93:5c:a5:c3:a2:37:24:93:df:67:06:7d:
                    2c:7e:2b:14:d1:a1:26:76:52:a0:38:82:41:f5:82:
                    86:32:23:e2:58:2d:fd:e9:27:4e:09:ff:00:b7:1d:
                    bb:9b:86:28:c0:bc:06:fc:83:3b:c4:80:36:c4:39:
                    7e:c0:ff:ba:69:e1:99:5d:3c:cd:92:9b:0e:1c:9a:
                    13:ce:de:46:fe:d7:f7:d5:1c:25:7d:37:b3:c9:b6:
                    9a:19:f9:09:50:b7:d6:ec:07:32:20:da:f3:99:3b:
                    9e:33:b8:b2:a6:ef:f3:64:46:6c:7b:67:ca:41:92:
                    0b:57:1b:d5:72:4a:63:75:4c:de:ae:9f:18:c0:66:
                    6d:5d:ee:fe:47:e0:fb:55:f5:4a:26:aa:85:4b:8c:
                    35:1f:97:e4:ef:50:c0:b1:a9:01:d4:8b:08:d8:fd:
                    70:b6:c3:58:8b:3d:78:f9:11:29:73:bd:b3:6a:9c:
                    81:cf:16:17:34:17:ab:a4:e6:8d:c0:00:75:44:8b:
                    3a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:89:45:C1:62:DF:A0:3D:2D:C7:D0:0A:94:30:91:C6:11:C6:52:ED
            X509v3 Authority Key Identifier:
                keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5a:44:cb:34:51:d6:0a:fa:b6:06:d9:64:bd:9d:01:7e:38:
         03:48:d0:a0:28:f0:a4:5c:b9:b7:c0:7b:4e:80:42:82:16:36:
         61:9b:b6:1b:8f:fd:1b:3d:1b:a1:ca:23:47:20:3d:03:42:7e:
         c0:b5:c3:c4:6c:b3:31:ae:1a:aa:6b:ff:d8:62:2c:07:89:7a:
         e5:31:e1:2b:d8:2a:8c:cf:40:15:fd:b9:36:91:61:e0:f0:74:
         89:50:b3:9f:e2:df:42:fd:72:0f:6b:1c:15:73:b0:9d:e4:bd:
         b5:ed:0f:9a:40:60:6b:f5:f5:45:84:a6:33:39:49:2c:34:40:
         72:9c:89:84:74:64:e4:41:99:e5:88:12:38:1f:5b:3b:0b:73:
         62:b4:55:72:d5:52:af:ee:f1:35:32:a2:e5:76:c8:44:ce:b7:
         25:d1:59:c6:e4:fb:1a:07:68:92:e3:f0:5d:07:21:8f:7a:57:
         bf:d1:fa:03:1b:77:0f:33:cc:13:2f:bb:e6:12:da:6a:7b:f5:
         9f:e8:44:13:72:f0:fc:1c:3e:67:31:05:90:40:30:44:00:c5:
         01:ee:31:dc:62:2f:eb:2e:f7:4a:cd:25:23:fb:ab:72:03:7f:
         3c:ab:1d:81:3d:27:a3:72:6a:da:8a:36:4b:ac:87:1d:95:5d:
         38:d1:3c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZak0/Dyd8i79MfIfgBvxwxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2
NjBiOTUwHhcNMjUwNTA2MDkwMTE1WhcNMjUwNTA3MDkwMTE1WjAzMTEwLwYDVQQD
EygxYjg5NDVjMTYyZGZhMDNkMmRjN2QwMGE5NDMwOTFjNjExYzY1MmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLIOhE+gP6NA+j7lsE5Z3hEuVVpK
EP51pErus/5TqffvLg1c76kMFxLFjgJihOzPVfTWvAG6Xtotc8oe9CmTXKXDojck
k99nBn0sfisU0aEmdlKgOIJB9YKGMiPiWC396SdOCf8Atx27m4YowLwG/IM7xIA2
xDl+wP+6aeGZXTzNkpsOHJoTzt5G/tf31RwlfTezybaaGfkJULfW7AcyINrzmTue
M7iypu/zZEZse2fKQZILVxvVckpjdUzerp8YwGZtXe7+R+D7VfVKJqqFS4w1H5fk
71DAsakB1IsI2P1wtsNYiz14+REpc72zapyBzxYXNBerpOaNwAB1RIs63QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuJRcFi36A9LcfQCpQwkcYRxlLtMB8GA1UdIwQY
MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt
ZmRjMWRjZGEyOTYxLzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx
LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklpEyzRR
1gr6tgbZZL2dAX44A0jQoCjwpFy5t8B7ToBCghY2YZu2G4/9Gz0bocojRyA9A0J+
wLXDxGyzMa4aqmv/2GIsB4l65THhK9gqjM9AFf25NpFh4PB0iVCzn+LfQv1yD2sc
FXOwneS9te0PmkBga/X1RYSmMzlJLDRAcpyJhHRk5EGZ5YgSOB9bOwtzYrRVctVS
r+7xNTKi5XbIRM63JdFZxuT7GgdokuPwXQchj3pXv9H6Axt3DzPMEy+75hLaanv1
n+hEE3Lw/Bw+ZzEFkEAwRADFAe4x3GIv6y73Ss0lI/urcgN/PKsdgT0no3Jq2oo2
S6yHHZVdONE87Q==
-----END CERTIFICATE-----
Generated at Tue May 6 10:50:29 2025 by rpki-client