Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File:                     4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier:          AHkusr7yc5ko4Z6dpE+FYQ6awh+B1T+QUvIvBeU8sIY=
Subject key identifier:   17:D1:C9:A9:77:3A:E7:99:BE:7D:87:08:9F:5A:38:58:BE:35:6E:B3
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer:       /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial:       0196C201F9189F4C4459C7865F7C19C3E98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 01:00:31 +0000
Manifest this update:     Mon 12 May 2025 01:00:31 +0000
Manifest next update:     Tue 13 May 2025 01:00:31 +0000
Files and hashes:         1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: YO2sxU7gcATvy/M5B7xpU+RFDJstF2HSI0y6/21S3C0=)
                          2: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (hash: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:01:f9:18:9f:4c:44:59:c7:86:5f:7c:19:c3:e9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
        Validity
            Not Before: May 12 01:00:31 2025 GMT
            Not After : May 13 01:00:31 2025 GMT
        Subject: CN=17d1c9a9773ae799be7d87089f5a3858be356eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:4f:c1:18:c4:d7:8e:9a:29:c4:08:fa:87:
                    7a:b9:67:71:b0:b2:b3:2d:cd:04:c2:e2:7f:8e:97:
                    92:36:d7:2e:96:38:dd:8e:a1:30:9c:dc:a6:77:29:
                    48:5e:69:74:27:c7:ce:ba:ff:11:aa:08:d3:d6:19:
                    16:65:fa:43:d1:a3:20:6c:e8:ec:ac:2e:e0:3d:08:
                    37:3f:db:5b:7e:a8:b4:43:35:46:fc:93:11:75:14:
                    17:80:d6:70:1d:b1:e2:d3:5d:b2:a0:a0:1a:08:99:
                    f6:78:fa:93:f5:7b:46:47:5f:1c:91:0e:ec:12:9a:
                    b7:ab:bb:19:c3:b1:38:1b:25:90:77:4d:a4:26:d1:
                    ce:fa:aa:de:78:14:8e:1a:2d:1c:5e:13:92:d5:38:
                    11:3b:02:7a:a2:04:5a:e7:86:6f:84:34:7e:3f:35:
                    c4:c7:3b:7e:55:72:9b:73:1f:d1:43:dd:7d:b5:ff:
                    05:d8:de:5e:00:8b:2c:8b:28:4f:a2:2d:bf:e0:ed:
                    83:24:1d:84:7d:cf:6b:e1:42:c8:41:33:d6:e4:32:
                    74:ea:59:87:c5:d2:07:45:a9:fe:3f:3d:47:0a:8f:
                    2e:f3:63:49:7f:6b:68:ba:cb:c4:5b:4f:1c:14:7f:
                    99:16:bb:4b:5f:53:93:ae:0c:d8:16:bc:7f:29:72:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D1:C9:A9:77:3A:E7:99:BE:7D:87:08:9F:5A:38:58:BE:35:6E:B3
            X509v3 Authority Key Identifier:
                keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1e:95:a5:ff:84:72:2a:30:62:62:c3:32:6c:2e:84:20:e5:
         5a:4a:39:a9:a5:9e:79:0f:f7:19:7f:bc:f0:a6:d3:56:ac:17:
         0a:25:b6:93:9a:93:5e:c1:60:86:b2:e0:b7:73:e9:c6:60:d5:
         5a:e5:e2:cf:fc:25:68:c8:49:ed:95:ee:12:46:01:c0:e4:77:
         41:a5:ab:b6:bb:7c:60:53:7b:b2:92:7c:f7:7f:31:a7:22:bc:
         08:e7:02:36:c7:7e:fb:9e:bd:17:b0:12:74:76:5c:26:c7:34:
         52:e1:ca:b4:9c:ff:98:cd:d0:c7:b9:0c:b7:2e:17:77:f7:df:
         94:b3:da:f8:62:b1:66:36:e1:26:1c:7b:c7:19:e2:b8:1d:b1:
         4c:8c:64:85:3d:be:8a:70:ed:a2:44:bb:6a:a6:8c:34:4d:10:
         7f:09:fb:8b:31:69:4f:05:19:a7:8d:e3:1f:7f:f1:3d:aa:69:
         5e:4f:7d:29:09:ac:ca:91:30:d1:c7:26:32:0b:b7:7a:49:ab:
         7a:bb:dc:20:93:00:cd:66:d7:8d:9f:4f:5b:19:3a:f8:30:8d:
         42:7c:26:be:6f:55:21:37:ab:c4:86:3e:bb:c7:bd:15:4d:fa:
         13:27:57:7f:4c:22:ac:1b:a4:4f:f6:c3:25:cf:a8:07:db:9e:
         45:dc:c2:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAfkYn0xEWceGX3wZw+mKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDkzOWI4MzU5NWUyZWZiNjk0NTZiY2RmMjM4NjZhNTA3
OWY2ZjUwHhcNMjUwNTEyMDEwMDMxWhcNMjUwNTEzMDEwMDMxWjAzMTEwLwYDVQQD
EygxN2QxYzlhOTc3M2FlNzk5YmU3ZDg3MDg5ZjVhMzg1OGJlMzU2ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsExPwRjE146aKcQI+od6uWdxsLKz
Lc0EwuJ/jpeSNtculjjdjqEwnNymdylIXml0J8fOuv8RqgjT1hkWZfpD0aMgbOjs
rC7gPQg3P9tbfqi0QzVG/JMRdRQXgNZwHbHi012yoKAaCJn2ePqT9XtGR18ckQ7s
Epq3q7sZw7E4GyWQd02kJtHO+qreeBSOGi0cXhOS1TgROwJ6ogRa54ZvhDR+PzXE
xzt+VXKbcx/RQ919tf8F2N5eAIssiyhPoi2/4O2DJB2Efc9r4ULIQTPW5DJ06lmH
xdIHRan+Pz1HCo8u82NJf2tousvEW08cFH+ZFrtLX1OTrgzYFrx/KXJWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfRyal3OueZvn2HCJ9aOFi+NW6zMB8GA1UdIwQY
MBaAFOFJObg1leLvtpRWvN8jhmpQefb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTIt
Y2Q2MzBkYmMxZDE4LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTItY2Q2MzBkYmMxZDE4
LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnx6Vpf+E
ciowYmLDMmwuhCDlWko5qaWeeQ/3GX+88KbTVqwXCiW2k5qTXsFghrLgt3PpxmDV
WuXiz/wlaMhJ7ZXuEkYBwOR3QaWrtrt8YFN7spJ8938xpyK8COcCNsd++569F7AS
dHZcJsc0UuHKtJz/mM3Qx7kMty4Xd/fflLPa+GKxZjbhJhx7xxniuB2xTIxkhT2+
inDtokS7aqaMNE0Qfwn7izFpTwUZp43jH3/xPappXk99KQmsypEw0ccmMgu3ekmr
ervcIJMAzWbXjZ9PWxk6+DCNQnwmvm9VITerxIY+u8e9FU36EydXf0wirBukT/bD
Jc+oB9ueRdzCAQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:42:11 2025 by rpki-client