Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File:                     ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier:          prTWV3SGaAgRarOmTjgY/xbl1L/1JCZf8pOzjeQGoVE=
Subject key identifier:   60:E5:1F:9A:BE:53:AB:D6:53:E0:5C:BC:18:00:A9:75:FA:1C:21:9D
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer:       /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial:       0196BE5C6671F920EFBCA8CD44F829E811FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 08:00:48 +0000
Manifest this update:     Sun 11 May 2025 08:00:48 +0000
Manifest next update:     Mon 12 May 2025 08:00:48 +0000
Files and hashes:         1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
                          2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: mbLTydP/koD8sbVqIi6MLOrzafE6W9rzBlXX4Cv9wbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:66:71:f9:20:ef:bc:a8:cd:44:f8:29:e8:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
        Validity
            Not Before: May 11 08:00:48 2025 GMT
            Not After : May 12 08:00:48 2025 GMT
        Subject: CN=60e51f9abe53abd653e05cbc1800a975fa1c219d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:59:f0:92:be:8e:5f:30:6a:99:ae:76:36:
                    5d:03:fa:22:a2:91:c5:73:2c:50:5e:22:4a:37:bb:
                    c0:90:0e:4f:5c:ca:76:47:b9:c4:26:ac:f9:25:14:
                    a1:ef:ec:91:78:bd:3a:6f:8a:16:64:25:a8:b3:62:
                    ed:9c:17:a7:96:97:fb:f4:7f:24:45:41:c3:a5:7d:
                    3f:0f:ac:5c:01:d5:3c:5f:9b:c5:59:0e:a0:c2:83:
                    6e:c1:65:0f:7b:23:31:4f:79:35:49:50:d1:41:e0:
                    d3:9f:da:33:57:2f:07:94:c8:19:26:95:d8:17:41:
                    bd:54:13:4c:03:a5:53:37:4d:5b:b3:0c:11:bc:4c:
                    82:02:33:4f:82:99:4c:fe:d7:c5:ef:4f:99:13:33:
                    48:b0:9f:30:f1:ee:b8:9d:63:fb:fd:02:ec:aa:53:
                    03:5a:01:fc:ec:02:7b:a3:99:9d:ac:7b:95:09:61:
                    d4:7d:65:25:ff:3a:3d:2d:de:32:24:f0:5e:1a:0e:
                    d0:1b:f4:43:9a:2b:78:78:b7:c2:b8:a8:ef:12:f0:
                    cc:c3:0e:46:f6:71:80:3d:aa:01:b6:4d:5a:d5:04:
                    4b:28:c7:d4:7f:b8:55:6f:c1:c5:64:25:c1:ab:1a:
                    06:3e:c3:93:6b:61:a4:19:6a:bc:05:e9:37:ca:85:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E5:1F:9A:BE:53:AB:D6:53:E0:5C:BC:18:00:A9:75:FA:1C:21:9D
            X509v3 Authority Key Identifier:
                keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:4c:07:67:33:09:ca:58:9e:9b:ab:d7:88:32:27:df:50:
         c8:0c:c0:a6:7b:1d:67:dc:89:3d:b7:91:3d:29:15:ca:df:ee:
         05:3d:64:8e:fa:a6:63:f1:5f:5a:2b:b1:a1:0a:b4:c1:5b:8f:
         0e:1d:11:b9:74:1f:2f:07:28:0f:51:f7:c7:34:9e:4b:c9:f7:
         3e:b6:e5:1b:91:2c:5f:7d:8a:e4:eb:d9:76:20:62:a6:ed:9a:
         2c:34:56:25:84:6d:b2:43:a6:80:5b:94:b8:78:cc:fe:83:43:
         4c:e9:ed:fb:00:d3:19:ef:35:ce:06:b4:10:23:29:70:63:36:
         36:30:e3:8e:0c:a0:92:04:5b:2e:db:2f:00:db:2a:da:cb:2c:
         be:fe:3f:88:96:79:52:bc:31:87:4e:e7:e6:6a:55:60:4b:7a:
         9f:27:66:bf:00:60:e7:6b:0f:e2:04:09:25:4b:1a:16:ca:4e:
         e9:24:bf:27:f8:51:5f:12:ea:e9:81:08:42:e7:74:d1:2b:99:
         bd:32:79:6d:75:61:64:17:01:f5:9c:f6:76:a9:25:a5:74:39:
         99:c3:1d:79:cb:65:88:50:b0:9a:df:84:f6:96:1d:3a:52:99:
         b9:f5:f3:78:69:22:f4:1d:18:a7:fd:c4:d3:3f:91:7b:97:58:
         22:ab:45:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XGZx+SDvvKjNRPgp6BH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz
MjA3ZmMwHhcNMjUwNTExMDgwMDQ4WhcNMjUwNTEyMDgwMDQ4WjAzMTEwLwYDVQQD
Eyg2MGU1MWY5YWJlNTNhYmQ2NTNlMDVjYmMxODAwYTk3NWZhMWMyMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ipZ8JK+jl8wapmudjZdA/oiopHF
cyxQXiJKN7vAkA5PXMp2R7nEJqz5JRSh7+yReL06b4oWZCWos2LtnBenlpf79H8k
RUHDpX0/D6xcAdU8X5vFWQ6gwoNuwWUPeyMxT3k1SVDRQeDTn9ozVy8HlMgZJpXY
F0G9VBNMA6VTN01bswwRvEyCAjNPgplM/tfF70+ZEzNIsJ8w8e64nWP7/QLsqlMD
WgH87AJ7o5mdrHuVCWHUfWUl/zo9Ld4yJPBeGg7QG/RDmit4eLfCuKjvEvDMww5G
9nGAPaoBtk1a1QRLKMfUf7hVb8HFZCXBqxoGPsOTa2GkGWq8Bek3yoXE9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDlH5q+U6vWU+BcvBgAqXX6HCGdMB8GA1UdIwQY
MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt
MDJhYWM4YjU5NmRjLzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj
LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA9MB2cz
CcpYnpur14gyJ99QyAzApnsdZ9yJPbeRPSkVyt/uBT1kjvqmY/FfWiuxoQq0wVuP
Dh0RuXQfLwcoD1H3xzSeS8n3PrblG5EsX32K5OvZdiBipu2aLDRWJYRtskOmgFuU
uHjM/oNDTOnt+wDTGe81zga0ECMpcGM2NjDjjgygkgRbLtsvANsq2sssvv4/iJZ5
Urwxh07n5mpVYEt6nydmvwBg52sP4gQJJUsaFspO6SS/J/hRXxLq6YEIQud00SuZ
vTJ5bXVhZBcB9Zz2dqklpXQ5mcMdectliFCwmt+E9pYdOlKZufXzeGki9B0Yp/3E
0z+Re5dYIqtF2A==
-----END CERTIFICATE-----
Generated at Sun May 11 15:44:49 2025 by rpki-client