Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          Y5saA5hlR+AGajri67wkw3iV3H/q99MyS914RVQTaeY=
Subject key identifier:   DE:37:9C:81:C3:54:A0:E7:BE:86:6D:66:58:4E:DD:38:1D:8E:2E:1C
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       0196BE25716824D32B7A9C94113747BFE8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0B32
Signing time:             Sun 11 May 2025 07:00:46 +0000
Manifest this update:     Sun 11 May 2025 07:00:46 +0000
Manifest next update:     Mon 12 May 2025 07:00:46 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: d4YzGkZj0jwH7T+r776XLCxc4SO4hGEFayzKHgCOC2E=)
                          2: E0ztfcYqRXNTHVQ8th7DBM0JCFs.roa (hash: LXPJ0gjb0to5N+vRXKqM1sCi601PFomLREP+hCV5J8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:71:68:24:d3:2b:7a:9c:94:11:37:47:bf:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: May 11 07:00:46 2025 GMT
            Not After : May 12 07:00:46 2025 GMT
        Subject: CN=de379c81c354a0e7be866d66584edd381d8e2e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:e9:f1:1b:42:a8:71:47:d2:96:dd:0d:8b:
                    b0:06:9b:ca:8f:fc:6b:57:59:cf:48:92:9e:ff:e1:
                    3b:d2:69:b5:b5:ae:0c:bd:c8:ac:86:d2:7e:06:43:
                    ae:05:f4:7b:a9:e6:9a:07:25:36:05:88:6a:1a:b8:
                    32:33:d2:d8:82:ea:47:1a:1f:16:d1:e1:05:f2:3d:
                    02:0e:ca:ec:c9:24:1d:98:2c:6d:51:3e:33:bd:0f:
                    56:46:45:ba:2c:3d:34:f9:84:45:45:1a:38:50:29:
                    4c:34:ed:d4:71:17:07:3c:f5:72:30:79:2f:0b:71:
                    5b:fd:8d:5c:a3:2e:f3:38:24:36:13:e8:9a:67:19:
                    31:ed:01:5f:61:d7:7b:35:35:2a:77:65:aa:34:25:
                    45:fd:74:8f:fb:63:b2:b4:e2:85:af:33:0b:80:bb:
                    04:ae:18:c6:ca:22:35:61:9b:06:ec:8d:d8:0a:1e:
                    8e:2a:3e:c4:93:60:ba:e2:e1:f2:dc:54:64:29:de:
                    ed:30:99:ef:3f:4d:74:1a:39:a2:9b:63:fa:47:9a:
                    7e:97:8a:3a:72:76:1c:1a:4c:ce:0b:38:5d:31:17:
                    a7:a8:d1:e9:5a:1e:cf:9c:49:12:35:f3:b3:18:f4:
                    65:f7:30:45:79:56:11:6e:40:c0:e6:46:f2:b3:ea:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:37:9C:81:C3:54:A0:E7:BE:86:6D:66:58:4E:DD:38:1D:8E:2E:1C
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:28:92:1b:a3:99:d0:a4:cd:68:fe:79:26:a8:f8:ba:fa:c8:
         80:87:c4:5a:35:95:66:95:4f:a3:b1:fb:76:89:58:02:ee:6c:
         52:26:1d:e7:0b:4d:22:fd:80:72:fe:13:2b:04:d8:03:09:f9:
         4b:ef:4b:c4:0c:b9:41:67:30:ef:22:13:20:06:68:cb:57:4f:
         57:86:47:ab:e8:e3:90:ba:3d:e9:1b:99:67:a4:0a:c8:93:17:
         96:48:47:6d:a2:3f:ba:ce:ed:db:3f:0c:fc:77:d8:5b:0c:a0:
         6c:e5:e8:af:12:c9:14:d3:87:a0:20:d7:3b:c6:3d:ea:a5:13:
         48:f6:7a:23:18:48:34:dc:ff:63:c0:54:53:e8:55:46:f1:c0:
         37:92:46:df:f2:e9:09:3c:6d:69:31:c7:6e:7f:08:7e:8c:e3:
         f7:62:2c:9f:f6:f7:2c:47:1a:4e:29:ec:2f:e6:20:72:cc:09:
         a7:2d:21:5d:3f:93:87:f7:63:b5:63:59:36:0c:df:64:75:11:
         75:5c:e9:61:d4:ca:14:7b:01:a7:91:62:65:e3:9b:a9:af:c0:
         86:c9:69:6f:73:91:ec:80:c9:30:c7:d8:f4:e0:98:3a:ad:6f:
         73:22:43:88:a6:f6:fc:7c:46:c6:fa:c3:aa:ea:b1:92:a0:d2:
         8a:85:4c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JXFoJNMrepyUETdHv+jAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh
M2Q0NjUwHhcNMjUwNTExMDcwMDQ2WhcNMjUwNTEyMDcwMDQ2WjAzMTEwLwYDVQQD
EyhkZTM3OWM4MWMzNTRhMGU3YmU4NjZkNjY1ODRlZGQzODFkOGUyZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPPp8RtCqHFH0pbdDYuwBpvKj/xr
V1nPSJKe/+E70mm1ta4MvcishtJ+BkOuBfR7qeaaByU2BYhqGrgyM9LYgupHGh8W
0eEF8j0CDsrsySQdmCxtUT4zvQ9WRkW6LD00+YRFRRo4UClMNO3UcRcHPPVyMHkv
C3Fb/Y1coy7zOCQ2E+iaZxkx7QFfYdd7NTUqd2WqNCVF/XSP+2OytOKFrzMLgLsE
rhjGyiI1YZsG7I3YCh6OKj7Ek2C64uHy3FRkKd7tMJnvP010Gjmim2P6R5p+l4o6
cnYcGkzOCzhdMRenqNHpWh7PnEkSNfOzGPRl9zBFeVYRbkDA5kbys+poowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN43nIHDVKDnvoZtZlhO3Tgdji4cMB8GA1UdIwQY
MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt
OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz
LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCiSG6OZ
0KTNaP55Jqj4uvrIgIfEWjWVZpVPo7H7dolYAu5sUiYd5wtNIv2Acv4TKwTYAwn5
S+9LxAy5QWcw7yITIAZoy1dPV4ZHq+jjkLo96RuZZ6QKyJMXlkhHbaI/us7t2z8M
/HfYWwygbOXorxLJFNOHoCDXO8Y96qUTSPZ6IxhINNz/Y8BUU+hVRvHAN5JG3/Lp
CTxtaTHHbn8Ifozj92Isn/b3LEcaTinsL+YgcswJpy0hXT+Th/djtWNZNgzfZHUR
dVzpYdTKFHsBp5FiZeObqa/Ahslpb3OR7IDJMMfY9OCYOq1vcyJDiKb2/HxGxvrD
quqxkqDSioVMeg==
-----END CERTIFICATE-----
Generated at Sun May 11 09:37:47 2025 by rpki-client