Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          rRz/hPO+/KeXQYVBA8aWnqXPYrkLO6X8nTSVdMURL7s=
Subject key identifier:   A3:D9:DB:F3:D1:58:AA:4C:61:BB:6E:A9:0A:A9:2F:C8:EA:5C:BC:89
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       0196C2A725E60F571CD483E78D5E777B5366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 04:00:56 +0000
Manifest this update:     Mon 12 May 2025 04:00:56 +0000
Manifest next update:     Tue 13 May 2025 04:00:56 +0000
Files and hashes:         1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
                          2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: jSCLAhHKlXiSVoteQFoAQIfcYTCe6yD3BcEOxF79k6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a7:25:e6:0f:57:1c:d4:83:e7:8d:5e:77:7b:53:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: May 12 04:00:56 2025 GMT
            Not After : May 13 04:00:56 2025 GMT
        Subject: CN=a3d9dbf3d158aa4c61bb6ea90aa92fc8ea5cbc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:22:62:89:3c:d7:9d:f2:ff:10:85:9a:11:
                    e3:3c:dc:ac:c9:ee:50:bf:2a:95:e1:a0:04:1f:c7:
                    8b:b0:87:a0:2d:41:77:6c:ad:bc:c2:91:b0:99:57:
                    99:f1:a9:43:49:43:35:f9:b0:49:b0:e6:2d:67:37:
                    3a:13:75:d7:b6:13:23:06:e0:f4:4c:f9:fb:b4:2c:
                    43:70:c4:7b:0f:80:9b:06:04:01:9e:76:c9:37:91:
                    16:e5:96:0f:3b:42:4d:48:66:7c:71:14:4f:e5:57:
                    3a:71:75:e1:1b:e6:58:06:c9:a7:26:15:f7:95:ba:
                    ce:7f:06:25:e5:a2:7a:95:f0:86:db:aa:4c:c9:8c:
                    7e:eb:b9:7d:a0:c3:8e:45:04:35:db:9a:d9:ff:a5:
                    ac:b7:40:fe:86:50:62:09:e0:20:21:a3:37:19:d4:
                    4d:e1:4f:ca:2f:7e:a5:fd:96:c8:47:00:0a:48:a9:
                    2c:49:a0:5f:e5:a4:77:ad:28:c6:bb:e9:45:0f:99:
                    83:6f:c5:41:b8:87:b3:2a:9a:5e:50:38:8f:c1:73:
                    1c:46:9c:ab:dd:7f:fc:dc:7f:cd:eb:06:cd:cc:e4:
                    0d:92:05:4a:85:b3:95:df:e8:7e:c1:07:9d:60:bd:
                    85:99:d5:64:57:f9:98:8e:11:7c:57:ae:b5:c3:5e:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:DB:F3:D1:58:AA:4C:61:BB:6E:A9:0A:A9:2F:C8:EA:5C:BC:89
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:18:5a:13:2a:a0:77:bf:31:f4:d6:29:0c:f6:36:80:37:a4:
         19:16:d5:be:36:ae:fd:4b:cb:f4:74:07:4d:98:b9:e8:1f:1c:
         78:b9:dd:62:53:8e:cf:97:a1:dc:58:42:98:e1:5c:c2:74:fb:
         09:8c:80:86:cb:94:f9:a4:c8:f9:68:80:f0:15:75:9a:77:9c:
         94:ef:ed:a8:ce:a7:ab:62:00:aa:d5:90:57:46:5f:cd:73:b6:
         49:ac:b2:d2:db:4a:10:54:82:2d:c8:d4:88:06:0b:e2:c7:11:
         d6:8c:c1:b4:18:c7:1c:65:e8:8d:41:ba:23:f6:96:aa:7c:cf:
         37:ad:21:31:de:97:b1:a2:a3:a3:5e:84:69:21:9c:e8:55:c1:
         7e:24:59:c4:12:00:2b:b0:90:13:0f:b7:9b:15:34:f2:2e:64:
         51:01:78:b0:91:0f:9c:08:8c:1e:56:61:31:4a:43:dc:c5:19:
         83:72:46:c1:c4:04:25:0a:11:8d:2c:f4:5c:77:72:35:48:f5:
         d0:06:91:3c:aa:84:81:8e:66:49:b8:ee:c2:ff:77:11:58:0c:
         2a:86:8e:9a:0a:f4:f8:fa:c5:39:38:b3:f6:06:4c:89:72:23:
         18:9a:e3:6e:b0:41:9f:26:2e:ef:1a:0d:2d:5c:7d:67:1f:8e:
         70:6c:54:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpyXmD1cc1IPnjV53e1NmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTVhOWU4ZWYyN2UzMDI3MjkzZWY4NGZiOGY4ZDMwZmFi
NmU2ZDYwHhcNMjUwNTEyMDQwMDU2WhcNMjUwNTEzMDQwMDU2WjAzMTEwLwYDVQQD
EyhhM2Q5ZGJmM2QxNThhYTRjNjFiYjZlYTkwYWE5MmZjOGVhNWNiYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooEiYok8153y/xCFmhHjPNysye5Q
vyqV4aAEH8eLsIegLUF3bK28wpGwmVeZ8alDSUM1+bBJsOYtZzc6E3XXthMjBuD0
TPn7tCxDcMR7D4CbBgQBnnbJN5EW5ZYPO0JNSGZ8cRRP5Vc6cXXhG+ZYBsmnJhX3
lbrOfwYl5aJ6lfCG26pMyYx+67l9oMOORQQ125rZ/6Wst0D+hlBiCeAgIaM3GdRN
4U/KL36l/ZbIRwAKSKksSaBf5aR3rSjGu+lFD5mDb8VBuIezKppeUDiPwXMcRpyr
3X/83H/N6wbNzOQNkgVKhbOV3+h+wQedYL2FmdVkV/mYjhF8V661w16/1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPZ2/PRWKpMYbtuqQqpL8jqXLyJMB8GA1UdIwQY
MBaAFHWlqejvJ+MCcpPvhPuPjTD6tubWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzct
ZWI2ZjlkZjA0NWIyLzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzctZWI2ZjlkZjA0NWIy
LzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBhaEyqg
d78x9NYpDPY2gDekGRbVvjau/UvL9HQHTZi56B8ceLndYlOOz5eh3FhCmOFcwnT7
CYyAhsuU+aTI+WiA8BV1mneclO/tqM6nq2IAqtWQV0ZfzXO2Sayy0ttKEFSCLcjU
iAYL4scR1ozBtBjHHGXojUG6I/aWqnzPN60hMd6XsaKjo16EaSGc6FXBfiRZxBIA
K7CQEw+3mxU08i5kUQF4sJEPnAiMHlZhMUpD3MUZg3JGwcQEJQoRjSz0XHdyNUj1
0AaRPKqEgY5mSbjuwv93EVgMKoaOmgr0+PrFOTiz9gZMiXIjGJrjbrBBnyYu7xoN
LVx9Zx+OcGxUnQ==
-----END CERTIFICATE-----
Generated at Mon May 12 14:29:33 2025 by rpki-client