Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
File:                     czFVtC-vxzVab8gJx9nM9bL4zcI.mft (raw, json)
Hash identifier:          ++e840s2+KGay2lbxJcQwAwMMDKhJYn/SF2F4sWzFO0=
Subject key identifier:   AC:0D:76:AF:11:E0:01:0C:B1:D5:01:78:FB:06:DA:2E:93:A7:B2:EA
Authority key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Certificate issuer:       /CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Certificate serial:       01969F088C42C94DA5276EB696667FF4DF7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
Manifest number:          044C
Signing time:             Mon 05 May 2025 06:00:59 +0000
Manifest this update:     Mon 05 May 2025 06:00:59 +0000
Manifest next update:     Tue 06 May 2025 06:00:59 +0000
Files and hashes:         1: czFVtC-vxzVab8gJx9nM9bL4zcI.crl (hash: J+R+hdu5Ixu0DXDsrHVN+jvSsv75TLHgTWk/2Y7NfuE=)
                          2: l0CnYB9TqdwdMbmMIDN6gmU04y4.roa (hash: uHgPuHlAwsjfMv6nb8pkc75mAM6+gk2FAGFMxkvLSjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:8c:42:c9:4d:a5:27:6e:b6:96:66:7f:f4:df:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
        Validity
            Not Before: May  5 06:00:59 2025 GMT
            Not After : May  6 06:00:59 2025 GMT
        Subject: CN=ac0d76af11e0010cb1d50178fb06da2e93a7b2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1f:e1:4c:86:1a:00:ba:bb:d6:1a:09:19:66:
                    f3:40:9e:ac:b3:90:15:16:e4:3b:a9:20:94:8a:b8:
                    7c:45:53:d1:1f:9b:83:a9:91:8d:14:6c:bd:f7:7d:
                    48:6f:9a:dc:e7:a2:fe:7c:bf:fd:10:a5:9f:cc:4a:
                    3f:65:69:55:10:9a:c6:76:17:02:de:8c:af:bf:b3:
                    ed:c6:6e:d3:0f:86:6e:fd:bc:10:73:ae:5b:13:5b:
                    a0:01:01:9d:a3:5e:f3:46:7c:c3:22:60:ec:e8:e7:
                    26:c6:f3:6d:7b:0f:ef:b0:09:01:f0:00:8f:8e:30:
                    9d:86:a2:00:93:82:fd:38:63:2e:0b:68:23:85:04:
                    c2:92:88:a5:2a:f9:47:51:63:23:1c:e1:62:75:dc:
                    fe:79:2d:e2:d6:d6:4b:e4:1a:f9:85:ba:7d:b0:ba:
                    3a:46:85:f0:3e:31:5e:44:b3:ef:e6:e0:47:d9:f0:
                    ff:a4:e4:59:cf:c5:7d:e5:7f:d2:bd:71:95:b4:e7:
                    37:3a:32:a8:9b:0a:9d:8b:9c:f5:78:e8:ba:22:4c:
                    a2:56:75:f4:13:2f:0f:fe:7d:11:fc:0e:07:30:ce:
                    85:3f:13:8b:35:60:20:77:72:ec:9d:5d:ca:86:47:
                    09:59:bb:07:37:51:99:7f:48:fb:e7:9b:25:1d:58:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:76:AF:11:E0:01:0C:B1:D5:01:78:FB:06:DA:2E:93:A7:B2:EA
            X509v3 Authority Key Identifier:
                keyid:73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:53:46:81:f3:91:58:97:bb:07:15:37:39:e0:06:4f:8e:
         e3:a2:be:c7:64:ea:2c:ea:a0:81:f1:1b:37:5d:a6:27:c7:c3:
         d9:ee:36:8b:93:cb:f0:87:9c:24:bf:42:c2:04:f9:82:2f:56:
         a6:95:51:bc:24:73:51:a7:2c:03:0c:27:33:d3:40:1c:c9:ec:
         af:8b:36:cf:10:34:3b:ad:96:67:f6:fb:05:89:2e:ec:23:30:
         24:18:8e:ba:51:53:bd:07:d2:8c:ba:9a:f1:a8:ea:c6:d8:3e:
         c3:d9:e1:38:3d:e7:57:2d:7a:43:fb:a4:51:08:d1:c5:46:83:
         72:2c:b2:e3:45:cb:bc:4a:fc:9b:83:e5:de:b8:f6:86:f2:80:
         9a:14:5c:5c:92:a2:42:4b:e4:39:60:f7:42:58:ca:a0:48:ca:
         15:72:ae:14:9d:3d:0f:b8:32:40:86:e5:80:cc:5d:d6:75:98:
         62:0d:06:9a:8a:73:f7:b9:f7:66:d8:2c:aa:72:ab:8f:89:1f:
         fb:39:c4:9f:f4:32:8b:06:de:19:7d:f3:24:99:14:bb:e6:6c:
         7c:f4:1f:71:6f:14:98:c5:ba:fd:1c:a5:44:07:3d:a4:11:a0:
         2e:7f:5c:f1:ba:16:01:1f:2a:d3:7f:b8:be:29:c0:27:1d:fa:
         25:c3:b4:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCIxCyU2lJ262lmZ/9N96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzE1NWI0MmZhZmM3MzU1YTZmYzgwOWM3ZDljY2Y1YjJm
OGNkYzIwHhcNMjUwNTA1MDYwMDU5WhcNMjUwNTA2MDYwMDU5WjAzMTEwLwYDVQQD
EyhhYzBkNzZhZjExZTAwMTBjYjFkNTAxNzhmYjA2ZGEyZTkzYTdiMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B/hTIYaALq71hoJGWbzQJ6ss5AV
FuQ7qSCUirh8RVPRH5uDqZGNFGy9931Ib5rc56L+fL/9EKWfzEo/ZWlVEJrGdhcC
3oyvv7Ptxm7TD4Zu/bwQc65bE1ugAQGdo17zRnzDImDs6OcmxvNtew/vsAkB8ACP
jjCdhqIAk4L9OGMuC2gjhQTCkoilKvlHUWMjHOFiddz+eS3i1tZL5Br5hbp9sLo6
RoXwPjFeRLPv5uBH2fD/pORZz8V95X/SvXGVtOc3OjKomwqdi5z1eOi6IkyiVnX0
Ey8P/n0R/A4HMM6FPxOLNWAgd3LsnV3KhkcJWbsHN1GZf0j755slHVgR4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwNdq8R4AEMsdUBePsG2i6Tp7LqMB8GA1UdIwQY
MBaAFHMxVbQvr8c1Wm/ICcfZzPWy+M3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pGVnRDLXZ4elZhYjhnSng5bk05Ykw0emNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80Y2VmZjAtMGFlNC00MTRjLWEwZjYt
ZTUxZTZlZjVkM2IxLzEvY3pGVnRDLXZ4elZhYjhnSng5bk05Ykw0emNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80Y2VmZjAtMGFlNC00MTRjLWEwZjYtZTUxZTZlZjVkM2Ix
LzEvY3pGVnRDLXZ4elZhYjhnSng5bk05Ykw0emNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE5TRoHz
kViXuwcVNzngBk+O46K+x2TqLOqggfEbN12mJ8fD2e42i5PL8IecJL9CwgT5gi9W
ppVRvCRzUacsAwwnM9NAHMnsr4s2zxA0O62WZ/b7BYku7CMwJBiOulFTvQfSjLqa
8ajqxtg+w9nhOD3nVy16Q/ukUQjRxUaDciyy40XLvEr8m4Pl3rj2hvKAmhRcXJKi
QkvkOWD3QljKoEjKFXKuFJ09D7gyQIblgMxd1nWYYg0Gmopz97n3ZtgsqnKrj4kf
+znEn/QyiwbeGX3zJJkUu+ZsfPQfcW8UmMW6/RylRAc9pBGgLn9c8boWAR8q03+4
vinAJx36JcO0og==
-----END CERTIFICATE-----
Generated at Mon May 5 13:28:55 2025 by rpki-client