Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          n5pK/ps6l6/xqpP+BMfI6jfwDqqsmHT+ezhPzLMUqW4=
Subject key identifier:   4B:75:66:9A:1F:4B:7C:89:05:0D:1A:6E:78:70:33:AD:CB:C5:0A:3C
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       01969D881608FC0F15B49F5C119211B6A438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          0333
Signing time:             Sun 04 May 2025 23:01:03 +0000
Manifest this update:     Sun 04 May 2025 23:01:03 +0000
Manifest next update:     Mon 05 May 2025 23:01:03 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: pLOI9tsUV9q7wmZQ4HwUvm3gN0fJTTQsYQAGAk/bnKc=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:88:16:08:fc:0f:15:b4:9f:5c:11:92:11:b6:a4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: May  4 23:01:03 2025 GMT
            Not After : May  5 23:01:03 2025 GMT
        Subject: CN=4b75669a1f4b7c89050d1a6e787033adcbc50a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:58:a5:89:70:dc:8f:5f:d7:33:00:f3:61:
                    f1:da:a9:e8:ec:25:4e:3d:65:0a:60:35:dc:08:01:
                    43:be:dc:99:8a:c0:16:c2:5a:21:c8:d3:13:68:03:
                    20:bb:a7:83:ee:ef:96:d2:12:af:07:cc:b4:a4:33:
                    ca:6c:25:71:f9:1f:32:a3:8d:06:bb:ea:d3:41:5e:
                    21:54:5b:8d:e3:17:e2:59:c7:df:11:e7:b6:a5:b5:
                    8a:53:49:40:74:ea:c2:eb:df:3a:09:67:6c:4c:3d:
                    15:b0:a2:bb:2a:17:1a:91:08:bf:31:82:03:02:a6:
                    ac:e1:28:8d:28:f1:91:2f:52:e2:23:a2:c2:43:dd:
                    cb:fe:d6:80:81:a6:e8:d7:48:9b:fe:6a:6c:88:d2:
                    18:e4:ce:75:76:5d:b3:48:ba:a9:cd:bc:3f:81:76:
                    6b:15:18:8c:ff:04:f5:98:9d:2e:da:9e:ab:af:5a:
                    b3:96:10:be:a4:de:bc:07:56:21:70:c6:34:3e:48:
                    a9:f6:68:fb:9e:05:23:38:6b:44:b2:83:c1:01:55:
                    3c:e8:2a:09:a4:5a:28:60:7d:6e:14:d8:b3:d9:a8:
                    6b:d9:5a:c8:40:6b:99:c8:9b:66:9c:46:8b:f9:5a:
                    74:50:7b:90:98:38:9d:c7:40:7a:52:b3:55:a4:dc:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:75:66:9A:1F:4B:7C:89:05:0D:1A:6E:78:70:33:AD:CB:C5:0A:3C
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:f1:c3:dc:77:b6:f1:ea:05:f9:30:b9:29:b9:e7:f2:37:
         b5:cb:06:60:3f:f1:0c:40:94:b4:e0:7f:63:a2:50:8f:a3:26:
         69:e0:c8:5b:84:89:c7:96:4d:89:3e:9c:c2:bd:57:c7:61:73:
         24:f7:af:5b:3a:f7:6b:a3:9b:d1:65:3e:ee:ab:30:ca:0f:3e:
         c3:c3:32:0a:43:39:1d:63:99:90:78:21:e2:e7:13:c4:92:56:
         b7:70:b3:99:e6:c6:ce:bb:13:82:7e:66:44:6f:5f:f2:a3:b7:
         b2:40:41:3b:fc:a8:bb:88:b2:95:da:ec:a3:27:de:0a:e4:1c:
         b2:f1:62:0b:b1:03:ea:0d:b2:dc:97:c1:7e:0d:3b:3c:44:7f:
         37:4b:5b:20:01:21:a3:9c:bb:3e:9c:4f:31:40:95:ef:f1:55:
         14:38:ba:f4:3a:a1:4f:b8:2a:91:6c:87:86:20:27:42:ad:b2:
         2b:84:e3:97:8e:36:2e:a2:ab:81:3a:1e:e2:89:e8:ae:17:da:
         b3:3d:f5:c5:f2:42:99:56:aa:52:13:a8:c6:0d:79:de:51:e6:
         e6:48:99:f6:08:b3:85:89:19:82:d2:a8:82:f4:37:60:a9:bc:
         77:54:05:65:e1:20:55:54:d1:b3:6f:20:2f:a8:97:ac:84:64:
         c5:7d:1b:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadiBYI/A8VtJ9cEZIRtqQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZjBkODk1MGMwZmRiNDFkZmQ1N2M1OTQ4MjgyNTIwNjEx
YzE2YzMwHhcNMjUwNTA0MjMwMTAzWhcNMjUwNTA1MjMwMTAzWjAzMTEwLwYDVQQD
Eyg0Yjc1NjY5YTFmNGI3Yzg5MDUwZDFhNmU3ODcwMzNhZGNiYzUwYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNpYpYlw3I9f1zMA82Hx2qno7CVO
PWUKYDXcCAFDvtyZisAWwlohyNMTaAMgu6eD7u+W0hKvB8y0pDPKbCVx+R8yo40G
u+rTQV4hVFuN4xfiWcffEee2pbWKU0lAdOrC6986CWdsTD0VsKK7KhcakQi/MYID
Aqas4SiNKPGRL1LiI6LCQ93L/taAgabo10ib/mpsiNIY5M51dl2zSLqpzbw/gXZr
FRiM/wT1mJ0u2p6rr1qzlhC+pN68B1YhcMY0Pkip9mj7ngUjOGtEsoPBAVU86CoJ
pFooYH1uFNiz2ahr2VrIQGuZyJtmnEaL+Vp0UHuQmDidx0B6UrNVpNwQBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt1ZpofS3yJBQ0abnhwM63LxQo8MB8GA1UdIwQY
MBaAFHjw2JUMD9tB39V8WUgoJSBhHBbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVBEWWxRd1AyMEhmMVh4WlNDZ2xJR0VjRnNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMjY3ZjAtOWVmYi00NGFmLWEwNmEt
NjFkZGJmMWMzNDliLzEvZVBEWWxRd1AyMEhmMVh4WlNDZ2xJR0VjRnNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hMjY3ZjAtOWVmYi00NGFmLWEwNmEtNjFkZGJmMWMzNDli
LzEvZVBEWWxRd1AyMEhmMVh4WlNDZ2xJR0VjRnNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9nxw9x3
tvHqBfkwuSm55/I3tcsGYD/xDECUtOB/Y6JQj6MmaeDIW4SJx5ZNiT6cwr1Xx2Fz
JPevWzr3a6Ob0WU+7qswyg8+w8MyCkM5HWOZkHgh4ucTxJJWt3CzmebGzrsTgn5m
RG9f8qO3skBBO/you4iyldrsoyfeCuQcsvFiC7ED6g2y3JfBfg07PER/N0tbIAEh
o5y7PpxPMUCV7/FVFDi69DqhT7gqkWyHhiAnQq2yK4Tjl442LqKrgToe4onorhfa
sz31xfJCmVaqUhOoxg153lHm5kiZ9gizhYkZgtKogvQ3YKm8d1QFZeEgVVTRs28g
L6iXrIRkxX0bfw==
-----END CERTIFICATE-----
Generated at Mon May 5 09:14:50 2025 by rpki-client