Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File:                     _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier:          jYAPVumWnLA2kAuKJmXh1LGwQqFEBSdcFrHIaLSjpNw=
Subject key identifier:   01:50:5C:D8:D6:5A:F9:E2:99:C2:07:0D:7A:F9:15:6C:95:58:F9:FD
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer:       /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial:       0196A16425EEE84C3BE8AFDE86F3FF9D55DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number:          0B59
Signing time:             Mon 05 May 2025 17:00:17 +0000
Manifest this update:     Mon 05 May 2025 17:00:17 +0000
Manifest next update:     Tue 06 May 2025 17:00:17 +0000
Files and hashes:         1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
                          2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: svY+dgSGcHwUVZvQ4FGsc2jkKmPm2PracPVDgTVq1Ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:25:ee:e8:4c:3b:e8:af:de:86:f3:ff:9d:55:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
        Validity
            Not Before: May  5 17:00:17 2025 GMT
            Not After : May  6 17:00:17 2025 GMT
        Subject: CN=01505cd8d65af9e299c2070d7af9156c9558f9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:16:2e:7b:d5:b6:7d:e9:f3:2d:10:2f:95:
                    0a:d4:e8:22:f7:6e:f8:15:48:29:de:d4:ad:1c:95:
                    68:b8:fb:5b:7b:8e:15:43:23:a9:27:0f:71:26:a3:
                    99:5f:6b:77:a1:25:92:7a:93:b8:e8:cf:c0:f8:25:
                    52:8c:03:39:3a:c8:c5:22:58:b6:2f:87:a4:86:f1:
                    10:67:79:d9:b5:19:d2:d7:da:06:c6:0e:93:11:83:
                    a8:44:e9:c9:43:14:b2:cc:ae:96:a3:4e:db:58:db:
                    66:91:57:cd:e4:d8:f9:2e:0f:63:9e:4a:d7:dd:09:
                    b6:c9:8e:21:d6:51:d5:f4:c0:c7:25:e7:fd:b6:b3:
                    00:09:c3:00:d0:7e:f1:83:63:cf:d8:73:48:97:1a:
                    31:5d:61:0d:ea:4e:e4:55:32:43:49:81:4b:fb:1e:
                    d5:c1:a6:db:54:a5:2b:09:61:3a:17:7e:ec:ed:70:
                    53:66:da:4f:2c:af:38:c2:f4:d0:54:8b:0b:f3:51:
                    cc:0f:55:a5:a9:13:fe:08:b1:2c:8d:d6:3c:0f:f0:
                    f3:eb:4f:2a:62:73:6d:0b:07:ac:96:4f:3a:de:17:
                    3b:f2:64:f4:cd:55:29:f5:a2:23:7d:8e:d5:b3:3e:
                    74:fd:be:84:a5:e7:4d:77:ff:a1:10:64:5c:6d:c6:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:50:5C:D8:D6:5A:F9:E2:99:C2:07:0D:7A:F9:15:6C:95:58:F9:FD
            X509v3 Authority Key Identifier:
                keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:09:f3:d8:73:b8:f8:84:10:74:3d:2f:5a:f8:5d:06:72:
         e8:33:10:13:aa:8d:69:f8:fc:36:ad:66:1e:2a:f5:94:6a:e2:
         ce:47:22:e0:a7:5f:8c:1f:81:ea:de:cd:51:8c:ed:92:b1:10:
         42:d1:42:e5:5f:39:db:45:12:01:59:b5:02:6e:b3:05:cd:15:
         76:1b:b4:81:68:0c:5a:b0:59:ec:da:be:be:a8:6a:b8:56:c2:
         e3:db:bb:4b:d7:92:6e:39:22:ca:b9:0d:bc:c3:5c:9f:ac:1d:
         58:3f:69:7a:33:07:10:7a:16:91:ee:81:0e:d3:a6:c1:15:76:
         1f:58:5b:a0:26:91:93:fc:b9:f6:17:82:ab:4f:49:c3:63:81:
         9f:13:e7:9b:9a:5b:ce:c3:68:d5:45:38:6b:bb:d4:2a:04:2f:
         d1:5c:57:8a:30:da:27:c4:eb:b5:96:2b:35:43:95:8e:a6:53:
         2c:f9:39:25:64:43:af:ad:95:9c:94:5b:d2:0e:90:80:23:fa:
         20:9a:c6:08:8a:32:a7:58:80:36:f2:5a:ed:29:d2:96:70:17:
         c4:93:03:88:5d:3c:6a:b2:97:40:84:13:1b:d5:23:69:22:f3:
         8c:07:f8:e0:a6:21:f1:0d:41:1e:2b:9d:42:9b:2e:2b:7f:3d:
         eb:6a:71:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZCXu6Ew76K/ehvP/nVXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMmUyMmNjMTU4NTllZDRhMDc4NGJmZDA4NTg0YjNjOGZi
MjlmOWEwHhcNMjUwNTA1MTcwMDE3WhcNMjUwNTA2MTcwMDE3WjAzMTEwLwYDVQQD
EygwMTUwNWNkOGQ2NWFmOWUyOTljMjA3MGQ3YWY5MTU2Yzk1NThmOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0MWLnvVtn3p8y0QL5UK1Ogi9274
FUgp3tStHJVouPtbe44VQyOpJw9xJqOZX2t3oSWSepO46M/A+CVSjAM5OsjFIli2
L4ekhvEQZ3nZtRnS19oGxg6TEYOoROnJQxSyzK6Wo07bWNtmkVfN5Nj5Lg9jnkrX
3Qm2yY4h1lHV9MDHJef9trMACcMA0H7xg2PP2HNIlxoxXWEN6k7kVTJDSYFL+x7V
wabbVKUrCWE6F37s7XBTZtpPLK84wvTQVIsL81HMD1WlqRP+CLEsjdY8D/Dz608q
YnNtCweslk863hc78mT0zVUp9aIjfY7Vsz50/b6EpedNd/+hEGRcbcbuCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFQXNjWWvnimcIHDXr5FWyVWPn9MB8GA1UdIwQY
MBaAFP4uIswVhZ7UoHhL/QhYSzyPsp+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQt
ODA2MGM1MDNkODZlLzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQtODA2MGM1MDNkODZl
LzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOsJ89hz
uPiEEHQ9L1r4XQZy6DMQE6qNafj8Nq1mHir1lGrizkci4KdfjB+B6t7NUYztkrEQ
QtFC5V8520USAVm1Am6zBc0Vdhu0gWgMWrBZ7Nq+vqhquFbC49u7S9eSbjkiyrkN
vMNcn6wdWD9pejMHEHoWke6BDtOmwRV2H1hboCaRk/y59heCq09Jw2OBnxPnm5pb
zsNo1UU4a7vUKgQv0VxXijDaJ8TrtZYrNUOVjqZTLPk5JWRDr62VnJRb0g6QgCP6
IJrGCIoyp1iANvJa7SnSlnAXxJMDiF08arKXQIQTG9UjaSLzjAf44KYh8Q1BHiud
QpsuK38962pxuQ==
-----END CERTIFICATE-----
Generated at Tue May 6 00:16:08 2025 by rpki-client