Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File:                     EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier:          zicxrfc5SzJHsLn90Knotdb8qJbCA/qmHnOplquaPsc=
Subject key identifier:   C9:6B:3B:AD:50:15:68:95:4E:5F:D4:62:B9:7F:DB:87:E6:4D:95:23
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer:       /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial:       01969D197C45C17546D3C7353869976A2CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number:          0E19
Signing time:             Sun 04 May 2025 21:00:15 +0000
Manifest this update:     Sun 04 May 2025 21:00:15 +0000
Manifest next update:     Mon 05 May 2025 21:00:15 +0000
Files and hashes:         1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
                          2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: j/qmTIGoXuNvD27EReuUUCaO3jx2er9TKYUNOKMP9wA=)
                          3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
                          4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:19:7c:45:c1:75:46:d3:c7:35:38:69:97:6a:2c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
        Validity
            Not Before: May  4 21:00:15 2025 GMT
            Not After : May  5 21:00:15 2025 GMT
        Subject: CN=c96b3bad501568954e5fd462b97fdb87e64d9523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:c2:c3:71:7b:e2:39:20:92:d6:95:c5:4e:
                    bc:cb:0d:cb:b8:08:ec:4b:d7:8c:96:48:38:8c:dc:
                    c8:b2:b5:e7:07:46:c3:35:2d:9f:e5:8b:ff:50:22:
                    46:c6:cc:b6:17:92:ef:78:14:ec:f2:f5:d3:45:a4:
                    e3:e4:83:bb:af:0b:4f:af:aa:51:45:0f:fa:4d:ae:
                    5f:bb:ad:ae:8c:c8:21:94:9b:66:b6:5b:98:ba:33:
                    75:24:89:8e:7a:0f:25:72:7d:ff:05:44:3e:32:56:
                    88:57:c1:bb:f4:3e:f0:70:27:7b:13:ea:72:84:12:
                    1c:f5:d7:83:5a:b2:aa:da:f2:21:5f:ad:de:31:3a:
                    34:6d:8c:fd:f1:3c:27:56:28:65:81:3f:fe:2e:8d:
                    4a:99:f4:dd:22:fe:57:32:b5:f8:e0:bd:9f:f7:e5:
                    88:2f:ce:d0:90:a5:93:50:97:34:6f:7f:cc:ef:2e:
                    69:cf:84:0c:2c:bd:e9:cd:ba:7b:d0:7e:82:22:e2:
                    51:93:9b:41:71:63:25:2d:32:8d:b3:4f:6c:61:cf:
                    23:14:74:df:4c:ac:c3:ed:05:08:22:ae:2b:21:21:
                    5a:f6:31:aa:97:bb:c1:f3:34:f1:d8:0e:c9:ae:4f:
                    e1:aa:0b:a3:fa:80:4c:31:ea:66:e4:d4:11:f6:0f:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:3B:AD:50:15:68:95:4E:5F:D4:62:B9:7F:DB:87:E6:4D:95:23
            X509v3 Authority Key Identifier:
                keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b3:84:23:2e:c9:72:d8:2b:c5:1e:98:db:cd:2c:c1:25:ff:
         18:89:6d:99:49:ef:e5:ad:99:9b:41:72:42:be:f6:45:d7:31:
         58:c1:53:9e:40:49:b8:78:50:b0:f6:3f:a0:1e:c1:8d:e7:63:
         8f:fd:49:43:2e:ea:f5:86:96:ff:f5:e8:6f:01:19:90:25:dd:
         16:d4:c7:9c:95:d2:e3:99:61:33:d3:12:b6:7e:c0:15:8d:88:
         6a:7e:fa:b5:48:ba:9f:79:c8:8b:36:e7:70:a5:5b:43:d6:e5:
         92:5e:11:c1:36:07:62:35:59:7a:24:db:d6:04:93:79:b2:e1:
         a7:4a:72:19:df:1e:0a:49:8a:36:3f:46:f0:64:4a:1f:81:43:
         b7:51:bb:3d:6c:54:5d:c2:d8:0c:77:8a:d8:50:cf:b7:2c:22:
         51:d2:c6:24:d4:6c:66:47:24:0e:6a:26:da:65:b1:06:5c:0e:
         dc:1e:34:cf:ec:e5:83:be:16:73:9f:69:76:05:64:e1:37:b7:
         a6:33:61:c6:7e:e2:39:40:d1:50:1f:1c:ee:dc:17:4e:0d:15:
         68:79:ef:ea:b1:90:a3:d1:4e:2a:e1:9b:e8:d0:e3:b7:f6:38:
         1f:37:90:37:88:60:11:a6:10:86:7b:4a:ea:01:39:77:21:13:
         92:d7:f2:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadGXxFwXVG08c1OGmXaizqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh
OWM4ODEwHhcNMjUwNTA0MjEwMDE1WhcNMjUwNTA1MjEwMDE1WjAzMTEwLwYDVQQD
EyhjOTZiM2JhZDUwMTU2ODk1NGU1ZmQ0NjJiOTdmZGI4N2U2NGQ5NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEvCw3F74jkgktaVxU68yw3LuAjs
S9eMlkg4jNzIsrXnB0bDNS2f5Yv/UCJGxsy2F5LveBTs8vXTRaTj5IO7rwtPr6pR
RQ/6Ta5fu62ujMghlJtmtluYujN1JImOeg8lcn3/BUQ+MlaIV8G79D7wcCd7E+py
hBIc9deDWrKq2vIhX63eMTo0bYz98TwnVihlgT/+Lo1KmfTdIv5XMrX44L2f9+WI
L87QkKWTUJc0b3/M7y5pz4QMLL3pzbp70H6CIuJRk5tBcWMlLTKNs09sYc8jFHTf
TKzD7QUIIq4rISFa9jGql7vB8zTx2A7Jrk/hqguj+oBMMepm5NQR9g+uCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlrO61QFWiVTl/UYrl/24fmTZUjMB8GA1UdIwQY
MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt
YTg1ODU4NDliZTE0LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0
LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLOEIy7J
ctgrxR6Y280swSX/GIltmUnv5a2Zm0FyQr72RdcxWMFTnkBJuHhQsPY/oB7Bjedj
j/1JQy7q9YaW//XobwEZkCXdFtTHnJXS45lhM9MStn7AFY2Ian76tUi6n3nIizbn
cKVbQ9blkl4RwTYHYjVZeiTb1gSTebLhp0pyGd8eCkmKNj9G8GRKH4FDt1G7PWxU
XcLYDHeK2FDPtywiUdLGJNRsZkckDmom2mWxBlwO3B40z+zlg74Wc59pdgVk4Te3
pjNhxn7iOUDRUB8c7twXTg0VaHnv6rGQo9FOKuGb6NDjt/Y4HzeQN4hgEaYQhntK
6gE5dyETktfy1A==
-----END CERTIFICATE-----
Generated at Mon May 5 03:38:45 2025 by rpki-client