Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File:                     1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier:          CmN5Qu0JPM/RcJRj3ZM3ZHtVzDUFFM6sJGhgyHZetKc=
Subject key identifier:   05:F1:B0:96:14:1D:E7:6D:38:AF:5E:5D:3A:F0:40:0B:F7:63:AA:1B
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer:       /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial:       0196B8FEA96D6B630633E99D7679AB7F38ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number:          1536
Signing time:             Sat 10 May 2025 07:00:19 +0000
Manifest this update:     Sat 10 May 2025 07:00:19 +0000
Manifest next update:     Sun 11 May 2025 07:00:19 +0000
Files and hashes:         1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: aaZfoDV2FPUzadLeuV/bh3nSYLEO0Lwrf1ovQbPnaYc=)
                          2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
                          3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:fe:a9:6d:6b:63:06:33:e9:9d:76:79:ab:7f:38:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
        Validity
            Not Before: May 10 07:00:19 2025 GMT
            Not After : May 11 07:00:19 2025 GMT
        Subject: CN=05f1b096141de76d38af5e5d3af0400bf763aa1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:28:16:d6:f9:fa:c9:a0:17:d2:56:27:78:
                    d6:90:17:c1:0e:f8:3e:ed:f6:a1:1e:fb:61:ac:ee:
                    ab:92:2a:dc:35:a2:8b:48:16:44:ab:cb:77:e3:e3:
                    e4:69:ca:7b:17:da:8a:02:85:27:ff:f9:b5:47:db:
                    b4:a2:1b:08:5a:23:5c:cb:f2:a6:cd:f0:93:07:a4:
                    bb:94:d0:8d:e6:97:48:a8:bd:62:9e:a3:13:de:05:
                    aa:d8:67:7d:26:18:51:40:e5:d5:ac:dd:e1:c1:6f:
                    65:30:2f:73:76:6b:8e:cd:8d:c7:4f:a5:bc:60:0c:
                    87:48:72:6f:3a:b0:1e:b4:4c:2f:04:0e:59:ad:9a:
                    1f:bf:4d:9b:2f:d8:c2:c9:16:89:0b:ba:c8:fd:24:
                    17:3f:fd:2e:95:71:55:72:07:ba:78:d9:7b:57:93:
                    92:b8:24:12:61:ad:e4:d4:ad:e0:5b:b5:ff:5a:b1:
                    4f:ee:82:a2:d1:d7:01:de:e7:04:a7:03:a2:fc:d6:
                    65:d9:ef:d7:94:1b:9b:5c:57:17:eb:06:97:79:98:
                    2f:c8:25:5a:ac:70:f5:db:dd:50:54:74:f6:11:d3:
                    37:08:29:12:df:93:92:7d:54:db:77:10:eb:34:1b:
                    cf:e2:3b:ec:49:39:b5:16:eb:5a:fc:f2:81:a0:46:
                    c1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F1:B0:96:14:1D:E7:6D:38:AF:5E:5D:3A:F0:40:0B:F7:63:AA:1B
            X509v3 Authority Key Identifier:
                keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:73:e4:d8:ff:bc:1d:51:bd:ba:f6:76:8d:dd:33:e7:ec:
         44:ca:bb:80:bf:44:8c:8f:b9:fc:1c:65:47:fb:96:b1:00:0d:
         53:86:25:0d:16:2e:97:72:59:18:01:b1:80:1f:d0:3d:d8:7b:
         55:cf:e6:70:17:d4:4b:f9:bc:ed:cb:e2:24:dc:f9:b9:d8:5b:
         84:52:13:51:45:52:f4:9a:70:6c:c6:8b:19:5a:64:37:a8:47:
         fa:8a:a5:29:6e:e6:e4:05:b7:46:6a:4c:29:8c:91:8e:ce:7e:
         0e:88:9e:83:b1:c9:f2:28:a5:c2:9c:df:bb:b7:c5:2b:42:cd:
         ac:35:e1:ba:7a:b5:9d:9d:f7:10:09:89:ab:4a:6d:9b:5e:db:
         48:a5:ff:97:ed:ab:ef:bb:97:3c:d8:26:55:0f:17:d9:2b:cb:
         c6:9c:38:1f:22:7c:25:9a:d5:9a:9c:41:60:8b:9a:81:24:1b:
         93:ad:2b:22:5c:ed:35:48:72:0d:70:dc:f7:96:72:ae:e0:6b:
         10:6e:5e:69:46:77:6d:bd:45:80:a3:70:26:46:41:b7:5b:9e:
         c3:39:21:94:47:81:2c:d8:83:60:09:1a:85:0d:70:81:c0:ca:
         c4:c5:ce:b7:f4:9f:d9:72:33:fe:e4:ab:99:84:41:d3:b1:22:
         a4:22:4f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/qlta2MGM+mddnmrfzjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjUwNTEwMDcwMDE5WhcNMjUwNTExMDcwMDE5WjAzMTEwLwYDVQQD
EygwNWYxYjA5NjE0MWRlNzZkMzhhZjVlNWQzYWYwNDAwYmY3NjNhYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle8oFtb5+smgF9JWJ3jWkBfBDvg+
7fahHvthrO6rkircNaKLSBZEq8t34+Pkacp7F9qKAoUn//m1R9u0ohsIWiNcy/Km
zfCTB6S7lNCN5pdIqL1inqMT3gWq2Gd9JhhRQOXVrN3hwW9lMC9zdmuOzY3HT6W8
YAyHSHJvOrAetEwvBA5ZrZofv02bL9jCyRaJC7rI/SQXP/0ulXFVcge6eNl7V5OS
uCQSYa3k1K3gW7X/WrFP7oKi0dcB3ucEpwOi/NZl2e/XlBubXFcX6waXeZgvyCVa
rHD1291QVHT2EdM3CCkS35OSfVTbdxDrNBvP4jvsSTm1Futa/PKBoEbBBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXxsJYUHedtOK9eXTrwQAv3Y6obMB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNFz5Nj/
vB1Rvbr2do3dM+fsRMq7gL9EjI+5/BxlR/uWsQANU4YlDRYul3JZGAGxgB/QPdh7
Vc/mcBfUS/m87cviJNz5udhbhFITUUVS9JpwbMaLGVpkN6hH+oqlKW7m5AW3RmpM
KYyRjs5+Doieg7HJ8iilwpzfu7fFK0LNrDXhunq1nZ33EAmJq0ptm17bSKX/l+2r
77uXPNgmVQ8X2SvLxpw4HyJ8JZrVmpxBYIuagSQbk60rIlztNUhyDXDc95ZyruBr
EG5eaUZ3bb1FgKNwJkZBt1uewzkhlEeBLNiDYAkahQ1wgcDKxMXOt/Sf2XIz/uSr
mYRB07EipCJP6Q==
-----END CERTIFICATE-----
Generated at Sat May 10 16:18:20 2025 by rpki-client