Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
File:                     1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json)
Hash identifier:          xIclFpanKhJcT5jRjzgsZh8N/hMdoQwAmSgpT07cpEI=
Subject key identifier:   09:C7:68:DF:B6:07:82:EA:51:33:E0:48:63:CD:97:BA:57:79:20:F0
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Certificate issuer:       /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial:       0196BDB78BF2AB0F21E2D29AE0979E26F707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 05:00:44 +0000
Manifest this update:     Sun 11 May 2025 05:00:44 +0000
Manifest next update:     Mon 12 May 2025 05:00:44 +0000
Files and hashes:         1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: Jdeum+e9aq9UYnSl4z6fVGGYRQnaGukfhPT7LroFtpc=)
                          2: vHVqwO_nqH9ZrYztprb6WC9Q2ng.roa (hash: hIMtMavbO55tW6Byt6lllDo5443jCsG0h73OMyjZ93A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:8b:f2:ab:0f:21:e2:d2:9a:e0:97:9e:26:f7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
        Validity
            Not Before: May 11 05:00:44 2025 GMT
            Not After : May 12 05:00:44 2025 GMT
        Subject: CN=09c768dfb60782ea5133e04863cd97ba577920f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:67:27:7d:94:d6:0e:5b:47:77:00:95:4f:
                    d6:dd:e9:da:1c:f1:4e:8d:e2:8e:10:a8:94:69:af:
                    85:7b:75:49:ad:66:3b:24:50:89:62:d3:8a:96:4c:
                    d3:a8:fa:7d:c6:06:bc:da:ca:bf:4a:ca:9d:03:42:
                    df:6e:c6:40:de:36:69:b0:cf:8f:d6:e6:0b:ab:b9:
                    30:45:0f:bd:ea:d4:0b:ca:1f:5b:91:38:50:a9:78:
                    77:7b:ab:0b:e1:3b:80:3e:06:03:7a:78:87:e8:a9:
                    f0:c0:22:3a:f9:4b:ce:9b:a6:8d:4f:40:22:09:ee:
                    80:d9:f9:5f:47:37:74:1d:ef:97:2d:80:1c:f6:65:
                    a0:ac:be:3b:2e:89:6d:a2:67:66:2f:2e:32:ce:85:
                    6f:10:da:36:05:11:50:17:5e:f6:9f:50:43:b9:87:
                    48:35:a0:5e:a2:7c:c0:be:a0:66:0e:25:3e:87:23:
                    99:0a:e0:db:e3:79:0c:77:22:46:a2:2d:31:a0:0d:
                    b5:bb:83:ba:20:dc:2c:ef:a1:e3:90:07:e3:54:15:
                    10:81:91:0e:60:48:17:c3:c8:c4:aa:19:ed:eb:e0:
                    84:e9:e9:e3:b2:64:cf:da:65:51:12:60:0c:2f:ed:
                    7f:98:82:7a:72:a9:ef:81:d4:b5:80:4d:a2:88:05:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:68:DF:B6:07:82:EA:51:33:E0:48:63:CD:97:BA:57:79:20:F0
            X509v3 Authority Key Identifier:
                keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:23:07:c9:1d:51:ad:da:40:31:bc:8a:1f:fc:00:b8:38:34:
         83:37:d9:df:6e:b1:b0:52:c0:d9:97:20:eb:fb:f6:62:03:4f:
         e3:c6:46:9c:d9:e3:f0:f0:1e:7a:ef:c9:97:79:01:bb:ee:40:
         99:aa:f5:24:48:69:5c:50:45:a4:c7:38:01:4e:59:6a:c6:ff:
         10:e5:01:ea:d2:81:e9:b6:4e:7c:fc:6c:d7:a4:a4:42:4a:63:
         f1:91:d6:05:aa:34:0d:ec:79:b6:e0:dc:ab:9d:5d:02:24:3e:
         a1:68:98:49:c2:71:19:15:89:09:d0:72:5b:50:30:4b:28:62:
         09:70:4e:81:bf:3d:22:d7:72:9d:bc:a3:4b:57:7a:e5:65:d7:
         41:a3:26:ae:64:66:4c:e0:87:49:21:30:e7:4b:36:20:45:e9:
         61:e2:24:23:c5:a7:f5:cc:2d:90:c9:d6:a2:09:72:27:0b:63:
         60:0e:d3:dd:e5:63:50:b2:82:ca:9b:ca:11:6b:f1:9c:fe:04:
         96:86:e4:26:af:7b:83:3a:6b:22:68:93:48:aa:f6:cc:f1:bb:
         5b:68:33:70:43:fe:66:e5:79:6e:b4:d4:b2:32:ea:eb:91:c4:
         05:2e:62:ae:7f:0d:1c:7e:51:83:6e:35:1a:f1:06:75:d1:7e:
         67:98:78:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9t4vyqw8h4tKa4JeeJvcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc0YzFjMDZjYmZkZTk0NjE0ZDY1YzdkMDVmNjE0YTZl
MjM5OTgwHhcNMjUwNTExMDUwMDQ0WhcNMjUwNTEyMDUwMDQ0WjAzMTEwLwYDVQQD
EygwOWM3NjhkZmI2MDc4MmVhNTEzM2UwNDg2M2NkOTdiYTU3NzkyMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0NnJ32U1g5bR3cAlU/W3enaHPFO
jeKOEKiUaa+Fe3VJrWY7JFCJYtOKlkzTqPp9xga82sq/SsqdA0LfbsZA3jZpsM+P
1uYLq7kwRQ+96tQLyh9bkThQqXh3e6sL4TuAPgYDeniH6KnwwCI6+UvOm6aNT0Ai
Ce6A2flfRzd0He+XLYAc9mWgrL47LoltomdmLy4yzoVvENo2BRFQF172n1BDuYdI
NaBeonzAvqBmDiU+hyOZCuDb43kMdyJGoi0xoA21u4O6INws76HjkAfjVBUQgZEO
YEgXw8jEqhnt6+CE6enjsmTP2mVREmAML+1/mIJ6cqnvgdS1gE2iiAUxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnHaN+2B4LqUTPgSGPNl7pXeSDwMB8GA1UdIwQY
MBaAFNRHTBwGy/3pRhTWXH0F9hSm4jmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUt
NWI2ODhhY2RiNjc2LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUtNWI2ODhhY2RiNjc2
LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyMHyR1R
rdpAMbyKH/wAuDg0gzfZ326xsFLA2Zcg6/v2YgNP48ZGnNnj8PAeeu/Jl3kBu+5A
mar1JEhpXFBFpMc4AU5Zasb/EOUB6tKB6bZOfPxs16SkQkpj8ZHWBao0Dex5tuDc
q51dAiQ+oWiYScJxGRWJCdByW1AwSyhiCXBOgb89ItdynbyjS1d65WXXQaMmrmRm
TOCHSSEw50s2IEXpYeIkI8Wn9cwtkMnWoglyJwtjYA7T3eVjULKCypvKEWvxnP4E
lobkJq97gzprImiTSKr2zPG7W2gzcEP+ZuV5brTUsjLq65HEBS5irn8NHH5Rg241
GvEGddF+Z5h4Zw==
-----END CERTIFICATE-----
Generated at Sun May 11 09:27:03 2025 by rpki-client