Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File:                     Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier:          0V6POLbwDdzHkq3xy7xALYScqRfgdHm98Me0RQrMhfM=
Subject key identifier:   1F:0B:45:7D:A4:39:BB:04:EB:E0:66:39:D0:2A:44:AA:95:AA:52:05
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer:       /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial:       0196CD61257254ABBD47394423800741AF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number:          1510
Signing time:             Wed 14 May 2025 06:00:17 +0000
Manifest this update:     Wed 14 May 2025 06:00:17 +0000
Manifest next update:     Thu 15 May 2025 06:00:17 +0000
Files and hashes:         1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
                          2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: AThUJnzsZiJOx+g6CDw6WV6zoQgfz2eZN822Or+NB6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:61:25:72:54:ab:bd:47:39:44:23:80:07:41:af:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
        Validity
            Not Before: May 14 06:00:17 2025 GMT
            Not After : May 15 06:00:17 2025 GMT
        Subject: CN=1f0b457da439bb04ebe06639d02a44aa95aa5205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:7c:fc:58:d4:55:b9:04:10:92:0b:91:04:
                    a3:98:03:32:91:1b:f2:df:35:4e:29:3b:0f:61:8e:
                    b0:fd:8b:07:e1:b9:fd:60:bf:55:c5:15:fc:b3:f9:
                    87:74:31:98:ba:65:01:22:70:22:f6:19:4b:c3:29:
                    bf:00:80:3a:3e:4a:1f:70:a4:88:be:fe:e0:eb:73:
                    67:f6:94:55:58:9f:1a:8d:71:48:d3:56:58:b9:95:
                    c7:04:0b:5d:ba:2d:64:50:fb:f8:0d:88:82:a9:ab:
                    bd:c6:a8:0f:85:4e:2e:f7:31:8e:b7:40:60:a0:90:
                    75:e0:00:b1:e3:6b:68:ed:44:a0:96:20:ed:4c:48:
                    84:86:95:20:b2:8d:35:e1:d3:35:d5:5e:39:e3:8e:
                    77:77:7e:ea:37:24:af:d3:8b:7d:f6:47:81:a0:5c:
                    31:38:23:26:38:ef:8c:46:5b:b3:15:7c:48:84:62:
                    fc:ae:d5:1e:a3:17:54:16:44:1c:53:05:f8:15:b6:
                    82:ba:3d:3a:18:70:bf:41:91:cd:3e:79:d3:5e:f8:
                    93:82:4e:c1:06:ab:c8:96:0a:1d:d9:66:c4:f9:24:
                    c5:86:bd:d0:51:04:0f:eb:7d:bf:07:92:c9:66:62:
                    7f:6b:f9:4b:61:70:86:5a:b2:31:c8:3a:6c:ce:2b:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:45:7D:A4:39:BB:04:EB:E0:66:39:D0:2A:44:AA:95:AA:52:05
            X509v3 Authority Key Identifier:
                keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:43:56:6d:d9:a7:b5:cb:29:87:f7:c8:67:34:6d:a3:60:
         09:0e:2c:6f:76:e4:73:13:a9:b9:c1:37:ed:23:48:66:16:e9:
         a6:3e:be:fa:b7:64:b3:57:39:48:54:de:bc:e0:b1:2b:3c:e3:
         b0:0e:98:5e:38:75:97:ab:4e:b8:94:9d:a4:2f:a3:7b:a9:59:
         0b:c0:cc:0d:cb:39:fd:57:cb:d2:c6:b6:16:d1:9a:66:3e:27:
         76:50:ce:bf:56:a1:18:a2:a9:59:15:5d:36:23:14:0d:71:fd:
         59:34:2b:3d:cb:1b:38:ba:c0:6d:9c:a3:d7:a3:56:8c:4d:ce:
         3a:12:a3:f5:b5:e2:dd:d6:82:7f:e9:bd:9d:22:11:ca:76:81:
         05:1a:44:90:6a:7c:78:3a:d6:c9:20:d1:11:dc:96:8a:12:77:
         f8:5b:87:f9:1a:b8:d2:03:50:be:c1:67:59:6b:53:1e:d0:ff:
         14:ca:a8:94:db:dc:bf:6f:28:1a:a9:f9:47:2a:7b:38:96:14:
         c6:56:3d:a9:29:68:08:1d:ef:50:47:09:be:87:0c:f3:c2:5f:
         c6:a2:83:bb:54:46:50:99:68:8c:8b:83:76:9b:3e:a8:52:e3:
         b9:ac:90:66:2b:e0:b0:90:7b:0a:61:22:fe:46:2b:bd:b0:ce:
         bb:9c:78:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNYSVyVKu9RzlEI4AHQa80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OWY1YzhiOWI2M2FlNWUyODc4NmViYTEwYTFmNjU3MmE2
MGUzZmMwHhcNMjUwNTE0MDYwMDE3WhcNMjUwNTE1MDYwMDE3WjAzMTEwLwYDVQQD
EygxZjBiNDU3ZGE0MzliYjA0ZWJlMDY2MzlkMDJhNDRhYTk1YWE1MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjh8/FjUVbkEEJILkQSjmAMykRvy
3zVOKTsPYY6w/YsH4bn9YL9VxRX8s/mHdDGYumUBInAi9hlLwym/AIA6PkofcKSI
vv7g63Nn9pRVWJ8ajXFI01ZYuZXHBAtdui1kUPv4DYiCqau9xqgPhU4u9zGOt0Bg
oJB14ACx42to7USgliDtTEiEhpUgso014dM11V454453d37qNySv04t99keBoFwx
OCMmOO+MRluzFXxIhGL8rtUeoxdUFkQcUwX4FbaCuj06GHC/QZHNPnnTXviTgk7B
BqvIlgod2WbE+STFhr3QUQQP632/B5LJZmJ/a/lLYXCGWrIxyDpszisFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8LRX2kObsE6+BmOdAqRKqVqlIFMB8GA1UdIwQY
MBaAFGafXIubY65eKHhuuhCh9lcqYOP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGIt
NTVlYjgyMGZkNTk2LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGItNTVlYjgyMGZkNTk2
LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACttDVm3Z
p7XLKYf3yGc0baNgCQ4sb3bkcxOpucE37SNIZhbppj6++rdks1c5SFTevOCxKzzj
sA6YXjh1l6tOuJSdpC+je6lZC8DMDcs5/VfL0sa2FtGaZj4ndlDOv1ahGKKpWRVd
NiMUDXH9WTQrPcsbOLrAbZyj16NWjE3OOhKj9bXi3daCf+m9nSIRynaBBRpEkGp8
eDrWySDREdyWihJ3+FuH+Rq40gNQvsFnWWtTHtD/FMqolNvcv28oGqn5Ryp7OJYU
xlY9qSloCB3vUEcJvocM88JfxqKDu1RGUJlojIuDdps+qFLjuayQZivgsJB7CmEi
/kYrvbDOu5x4dQ==
-----END CERTIFICATE-----
Generated at Wed May 14 14:54:06 2025 by rpki-client