Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          4DgXJYeFPs6ZKjFGe1DDj5Dj6nYA2l8gsXPynEUQkOQ=
Subject key identifier:   65:07:95:A2:5D:65:F8:C4:D4:B1:FA:A9:45:BD:D3:F9:4A:5E:4D:5C
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       0196B89115B6066F33EE0178CC64DFF831C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1539
Signing time:             Sat 10 May 2025 05:00:38 +0000
Manifest this update:     Sat 10 May 2025 05:00:38 +0000
Manifest next update:     Sun 11 May 2025 05:00:38 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: feDv40ED8IjpeiRDq0VM/tWLWSOz9nTWpBKZRbvoOJ4=)
                          2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:15:b6:06:6f:33:ee:01:78:cc:64:df:f8:31:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: May 10 05:00:38 2025 GMT
            Not After : May 11 05:00:38 2025 GMT
        Subject: CN=650795a25d65f8c4d4b1faa945bdd3f94a5e4d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:a6:73:88:a5:aa:a3:0c:30:5a:bf:8f:6b:
                    63:68:f7:a3:ce:08:92:31:65:9a:79:99:35:90:a9:
                    61:79:ab:95:c1:0c:46:68:dc:e3:ee:df:17:ce:f3:
                    b4:8e:08:33:64:76:b4:e8:48:13:3e:ce:4f:25:2a:
                    ac:dd:c7:9d:16:5a:9e:ba:96:ac:72:cf:7f:65:0e:
                    b8:47:64:3c:15:72:75:dd:37:56:fa:9d:07:19:d5:
                    0b:01:a9:0d:88:16:81:f5:50:cb:fb:ba:b0:4b:0d:
                    c7:5b:09:a5:5a:85:23:62:72:c0:71:73:91:16:f8:
                    f4:16:87:e9:df:8d:80:0b:bd:d1:86:0d:86:94:11:
                    ca:87:a5:0a:bc:ea:53:88:48:64:19:c2:49:1c:06:
                    22:f0:bd:62:15:b9:6c:e5:9c:a9:f2:03:e3:f3:9e:
                    44:cd:0d:cf:9c:01:c5:c6:52:9b:00:0f:2e:32:8e:
                    76:cc:01:22:5a:c2:e2:7c:57:7c:f1:62:e9:91:aa:
                    8c:3a:4b:a5:a9:8d:20:fb:b9:69:86:0a:8d:86:2a:
                    1b:4f:da:7a:84:71:84:1a:7f:61:fb:2a:7c:59:13:
                    90:35:af:57:e1:6e:cb:81:5e:84:86:8d:7c:45:e3:
                    ba:56:d2:aa:6d:b4:15:61:71:16:27:99:c6:26:d0:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:07:95:A2:5D:65:F8:C4:D4:B1:FA:A9:45:BD:D3:F9:4A:5E:4D:5C
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:17:d3:34:d9:36:0f:a8:f3:fb:31:ee:82:59:dd:2f:cb:94:
         ea:2e:d3:ab:34:07:a0:cd:b9:10:87:25:5e:a2:da:fa:30:d4:
         57:7d:fd:d4:e3:9f:1f:ed:bc:da:f7:03:f4:0b:9b:06:e6:77:
         64:10:e0:1e:04:15:34:8f:92:d2:ed:0e:28:00:5d:39:8c:a4:
         ca:3f:78:b8:f6:94:a3:0f:82:97:1a:1f:40:01:30:92:ce:f4:
         9f:d7:bd:d5:3e:b8:38:78:14:00:cf:72:97:58:ce:c5:b7:08:
         85:99:e0:1e:0d:58:de:9c:ba:42:d6:81:31:81:c3:27:b4:e0:
         ef:c7:8c:86:18:40:04:3f:a2:c8:a1:cf:2a:4d:21:d4:0b:53:
         ce:44:86:10:7b:20:00:a1:d9:2f:11:07:a8:da:b1:a2:e4:e8:
         f9:78:70:08:f4:38:e4:1a:3b:e7:5e:ed:35:c0:e4:6b:48:30:
         4c:ac:ae:1b:59:56:2c:46:b8:54:b8:1b:e0:54:ac:8c:93:72:
         de:ea:e1:cb:db:62:1b:d5:ac:ae:e1:69:0d:81:fd:28:78:13:
         63:45:40:84:de:ed:09:01:5c:10:f7:61:a1:f5:f8:59:2e:8f:
         f4:4f:37:10:7a:0a:84:e4:52:17:36:c4:02:07:3b:7d:e9:1d:
         05:de:f0:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZa4kRW2Bm8z7gF4zGTf+DHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky
NTY2MTUwHhcNMjUwNTEwMDUwMDM4WhcNMjUwNTExMDUwMDM4WjAzMTEwLwYDVQQD
Eyg2NTA3OTVhMjVkNjVmOGM0ZDRiMWZhYTk0NWJkZDNmOTRhNWU0ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C6mc4ilqqMMMFq/j2tjaPejzgiS
MWWaeZk1kKlheauVwQxGaNzj7t8XzvO0jggzZHa06EgTPs5PJSqs3cedFlqeupas
cs9/ZQ64R2Q8FXJ13TdW+p0HGdULAakNiBaB9VDL+7qwSw3HWwmlWoUjYnLAcXOR
Fvj0Fofp342AC73Rhg2GlBHKh6UKvOpTiEhkGcJJHAYi8L1iFbls5Zyp8gPj855E
zQ3PnAHFxlKbAA8uMo52zAEiWsLifFd88WLpkaqMOkulqY0g+7lphgqNhiobT9p6
hHGEGn9h+yp8WROQNa9X4W7LgV6Eho18ReO6VtKqbbQVYXEWJ5nGJtB8QQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGUHlaJdZfjE1LH6qUW90/lKXk1cMB8GA1UdIwQY
MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh
LWJkMzdkYTBlNDQ3Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0
N2MvMS8xLTNuQ2J6RlhVMFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxfT
NNk2D6jz+zHuglndL8uU6i7TqzQHoM25EIclXqLa+jDUV3391OOfH+282vcD9Aub
BuZ3ZBDgHgQVNI+S0u0OKABdOYykyj94uPaUow+ClxofQAEwks70n9e91T64OHgU
AM9yl1jOxbcIhZngHg1Y3py6QtaBMYHDJ7Tg78eMhhhABD+iyKHPKk0h1AtTzkSG
EHsgAKHZLxEHqNqxouTo+XhwCPQ45Bo7517tNcDka0gwTKyuG1lWLEa4VLgb4FSs
jJNy3urhy9tiG9WsruFpDYH9KHgTY0VAhN7tCQFcEPdhofX4WS6P9E83EHoKhORS
FzbEAgc7fekdBd7wOg==
-----END CERTIFICATE-----
Generated at Sat May 10 07:01:56 2025 by rpki-client