Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File:                     grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier:          +tslHArWLdy3gxKflkLe9WDmBhGc+GJBv3yKSSZAZGY=
Subject key identifier:   B3:2F:14:3F:85:69:B7:97:34:3F:FC:E3:73:A5:C1:6F:5F:C0:64:CF
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer:       /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial:       01969D87AFA36D5464EFB45E4FBD1C0E359F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number:          0CBC
Signing time:             Sun 04 May 2025 23:00:37 +0000
Manifest this update:     Sun 04 May 2025 23:00:37 +0000
Manifest next update:     Mon 05 May 2025 23:00:37 +0000
Files and hashes:         1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
                          2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: NqVdByQgM00uR9JOwHDaFhdkKn49u/LICkQqUHR00Gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:af:a3:6d:54:64:ef:b4:5e:4f:bd:1c:0e:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
        Validity
            Not Before: May  4 23:00:37 2025 GMT
            Not After : May  5 23:00:37 2025 GMT
        Subject: CN=b32f143f8569b797343ffce373a5c16f5fc064cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:87:95:e1:bd:32:f0:bc:d3:bb:12:ca:e5:
                    b5:aa:6d:c8:b8:35:82:0b:a7:04:a3:02:cf:61:3f:
                    fb:d8:7e:fa:8b:b5:31:f6:f0:55:80:48:1b:ad:32:
                    d5:e2:7d:75:d5:17:0e:9b:0a:d0:79:4d:ff:d2:f5:
                    c7:77:2b:b4:d4:5f:b4:bb:3e:01:20:70:b0:c0:6f:
                    2a:e7:d7:83:da:3f:99:15:60:c5:4e:00:86:a3:9e:
                    33:69:04:2b:7f:1f:bb:4d:f2:1f:1a:13:3a:5d:fb:
                    51:b7:07:3c:67:32:96:da:8f:02:2d:73:83:2f:81:
                    6b:4f:7d:74:c3:a1:ec:81:b8:eb:be:65:88:f3:69:
                    e1:ba:8a:04:e3:66:e2:9b:3a:c0:43:f9:b8:cb:36:
                    09:0a:02:46:98:f6:37:03:d3:9c:65:0e:bf:5d:fe:
                    6f:b7:67:b4:5d:69:22:ef:54:03:34:13:08:38:55:
                    ff:16:c1:42:ee:18:41:3b:37:8b:e1:5c:c1:94:63:
                    bd:a9:c1:9f:ea:9f:69:3a:ef:c8:12:a1:86:88:18:
                    cd:aa:2f:28:93:e1:92:d2:87:c3:48:c2:0f:e6:8b:
                    9b:64:8c:c8:9c:30:e9:2d:8c:12:6f:6d:a2:1f:bc:
                    1d:26:a1:ce:da:b4:88:7f:1b:55:df:c0:41:c4:99:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2F:14:3F:85:69:B7:97:34:3F:FC:E3:73:A5:C1:6F:5F:C0:64:CF
            X509v3 Authority Key Identifier:
                keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:99:cb:f4:79:59:91:8e:2d:57:4a:d0:df:a1:5d:12:1e:
         d3:1c:c6:bb:7a:58:a4:b4:ba:f7:5f:9d:83:93:4c:bb:8a:d9:
         5b:3e:e5:c5:be:10:fc:61:c7:25:5d:dd:59:35:b2:72:0f:4f:
         2f:32:fb:ff:f7:e6:21:b2:1f:ce:cb:fe:98:36:c5:6b:be:82:
         e3:18:09:a2:36:56:21:31:6a:f1:56:59:32:a1:43:a0:85:30:
         3d:6b:73:68:7d:5b:44:40:82:2b:82:53:d4:e3:62:14:d9:42:
         c3:c9:e8:f2:9a:62:b3:85:5d:73:04:80:f4:61:91:52:80:f7:
         71:d2:c3:a7:f5:20:fb:27:ea:70:49:96:62:f0:98:6e:a8:a0:
         ab:5b:0b:63:7a:ce:ee:a7:de:2c:e2:bd:0d:8d:f3:c3:41:50:
         7b:a9:50:62:c1:bc:30:3a:89:b6:0b:88:df:8a:7b:4f:14:ef:
         76:7d:21:63:cb:02:a2:86:79:5d:42:62:ff:1b:e0:34:de:49:
         c8:f4:81:3f:09:cd:65:d9:8b:c1:e5:6c:38:72:85:8f:53:fd:
         d6:09:e3:14:64:ee:72:a8:32:36:3f:62:40:79:e1:59:ce:38:
         91:94:c0:5d:f7:fb:df:40:6b:95:a1:be:46:ff:ea:4a:2f:0d:
         12:5d:63:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh6+jbVRk77ReT70cDjWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjEyZWNmYjIyZjI5ZDYwYTNlMzFiNzlmMzYyZGQ2MGMy
ZDRjMTAwHhcNMjUwNTA0MjMwMDM3WhcNMjUwNTA1MjMwMDM3WjAzMTEwLwYDVQQD
EyhiMzJmMTQzZjg1NjliNzk3MzQzZmZjZTM3M2E1YzE2ZjVmYzA2NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25+HleG9MvC807sSyuW1qm3IuDWC
C6cEowLPYT/72H76i7Ux9vBVgEgbrTLV4n111RcOmwrQeU3/0vXHdyu01F+0uz4B
IHCwwG8q59eD2j+ZFWDFTgCGo54zaQQrfx+7TfIfGhM6XftRtwc8ZzKW2o8CLXOD
L4FrT310w6HsgbjrvmWI82nhuooE42bimzrAQ/m4yzYJCgJGmPY3A9OcZQ6/Xf5v
t2e0XWki71QDNBMIOFX/FsFC7hhBOzeL4VzBlGO9qcGf6p9pOu/IEqGGiBjNqi8o
k+GS0ofDSMIP5oubZIzInDDpLYwSb22iH7wdJqHO2rSIfxtV38BBxJmYFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMvFD+FabeXND/843OlwW9fwGTPMB8GA1UdIwQY
MBaAFIKxLs+yLynWCj4xt582LdYMLUwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEt
MmIwZWFiM2QzZDM3LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEtMmIwZWFiM2QzZDM3
LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofmZy/R5
WZGOLVdK0N+hXRIe0xzGu3pYpLS691+dg5NMu4rZWz7lxb4Q/GHHJV3dWTWycg9P
LzL7//fmIbIfzsv+mDbFa76C4xgJojZWITFq8VZZMqFDoIUwPWtzaH1bRECCK4JT
1ONiFNlCw8no8ppis4VdcwSA9GGRUoD3cdLDp/Ug+yfqcEmWYvCYbqigq1sLY3rO
7qfeLOK9DY3zw0FQe6lQYsG8MDqJtguI34p7TxTvdn0hY8sCooZ5XUJi/xvgNN5J
yPSBPwnNZdmLweVsOHKFj1P91gnjFGTucqgyNj9iQHnhWc44kZTAXff730BrlaG+
Rv/qSi8NEl1jWQ==
-----END CERTIFICATE-----
Generated at Mon May 5 06:06:39 2025 by rpki-client