Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File:                     AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier:          oyS1JQzTQQ5kwXKpkDfivyV5N3BbKRrG9havcIM5bSU=
Subject key identifier:   7E:67:5C:8B:DD:4E:81:49:CD:DF:28:1F:AF:F6:36:D3:E8:27:E9:F3
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer:       /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial:       01969E9AAE844573B7E086FA93752A51B5DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number:          1523
Signing time:             Mon 05 May 2025 04:00:59 +0000
Manifest this update:     Mon 05 May 2025 04:00:59 +0000
Manifest next update:     Tue 06 May 2025 04:00:59 +0000
Files and hashes:         1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: DREGj1ZxBDqlL0LzNZNH2aFw1/UPOxw+A4UbVzJVl+s=)
                          2: dL5tLsAU6PWlL4weQ4Up71k3hXA.roa (hash: ZvntQMrxSDwlXP02WdClHLb+VoQxqS4KZZo3fc10HIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:ae:84:45:73:b7:e0:86:fa:93:75:2a:51:b5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
        Validity
            Not Before: May  5 04:00:59 2025 GMT
            Not After : May  6 04:00:59 2025 GMT
        Subject: CN=7e675c8bdd4e8149cddf281faff636d3e827e9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:b4:97:ff:95:6d:c4:3a:f6:81:cf:38:4a:
                    6f:5c:85:f1:4b:2f:a2:76:74:53:1c:14:3a:67:bf:
                    7f:90:77:ff:43:d0:ed:d6:50:e3:d3:38:78:fe:1d:
                    de:3f:06:be:d4:34:3a:d3:fc:b7:08:c8:d4:63:f2:
                    31:a7:a8:ae:11:fc:bb:74:5f:2b:1a:3f:65:9e:c1:
                    c8:f5:b0:b6:e1:76:36:69:6e:d8:75:25:e1:2b:16:
                    bf:d3:13:d9:fb:5d:25:00:37:25:a1:36:52:d1:b9:
                    3a:53:65:54:12:fa:ce:c9:44:43:97:c2:d5:f3:ee:
                    14:99:8b:12:81:2d:65:40:14:8e:44:6c:32:0d:12:
                    31:9d:23:56:4f:90:15:e7:c8:2a:7d:0b:2d:44:fb:
                    ab:6c:75:4a:54:e4:0b:93:8d:ee:59:36:fa:24:d2:
                    c5:0b:50:8d:26:b1:0b:ef:42:3a:31:08:fd:76:f4:
                    a9:27:40:19:91:c0:c5:ca:4e:1f:dc:4c:28:95:d7:
                    72:76:60:f1:3a:b9:28:fa:2d:5d:10:94:41:bc:19:
                    d9:8d:4e:df:4b:64:76:82:08:4c:7a:c1:bb:fc:f8:
                    60:01:e8:5a:41:50:4b:b0:7f:f0:9c:15:12:cd:54:
                    cc:4f:44:81:06:21:6b:43:0a:07:f4:e5:b3:82:e7:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:67:5C:8B:DD:4E:81:49:CD:DF:28:1F:AF:F6:36:D3:E8:27:E9:F3
            X509v3 Authority Key Identifier:
                keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:64:ea:44:cd:c5:c0:fa:44:cf:e8:d0:f3:b5:5b:06:35:
         58:fe:ed:ad:c6:05:21:23:73:e0:51:d6:1a:48:05:56:62:5f:
         d4:ef:b9:b7:7e:8c:6c:94:f0:da:80:c2:88:0f:44:be:b5:64:
         cd:a2:79:fe:bc:99:59:2f:b1:c1:ae:15:fc:29:a5:8e:04:c1:
         dc:66:d6:7e:51:cd:41:2e:d7:f1:65:2f:42:c6:a0:e7:82:42:
         a9:e8:84:5f:3c:71:40:e0:40:f3:62:e2:75:3a:25:e8:a3:72:
         d6:1f:c7:0c:ce:71:7a:5f:1e:b0:ab:65:b3:1f:3c:83:a7:1d:
         20:16:62:ae:c0:3e:b8:cd:90:3b:35:34:52:a9:64:5e:04:4f:
         03:05:d3:8e:da:3f:f2:06:f5:9e:b7:7a:40:dd:d8:05:d4:11:
         0a:14:97:5d:50:a1:6a:b5:e3:2a:3b:48:79:cb:c1:15:f4:bf:
         88:e4:cc:93:ff:d0:7e:12:9f:3c:ee:e3:8a:25:8c:96:55:b8:
         fb:f4:0c:b5:47:19:55:77:91:34:73:12:e9:1e:33:71:2d:9f:
         50:23:ce:48:88:16:02:c2:c7:6c:5e:1e:48:0d:38:4b:ef:ad:
         8d:74:5f:12:ab:00:e6:fe:ea:21:22:b2:25:21:b5:25:ba:b2:
         c2:dc:c7:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemq6ERXO34Ib6k3UqUbXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGE0Y2QwNDRjNmU5ODczYWM4ZmQ5Y2ZkMzBmMWVjYjNk
ODBiY2EwHhcNMjUwNTA1MDQwMDU5WhcNMjUwNTA2MDQwMDU5WjAzMTEwLwYDVQQD
Eyg3ZTY3NWM4YmRkNGU4MTQ5Y2RkZjI4MWZhZmY2MzZkM2U4MjdlOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8G0l/+VbcQ69oHPOEpvXIXxSy+i
dnRTHBQ6Z79/kHf/Q9Dt1lDj0zh4/h3ePwa+1DQ60/y3CMjUY/Ixp6iuEfy7dF8r
Gj9lnsHI9bC24XY2aW7YdSXhKxa/0xPZ+10lADcloTZS0bk6U2VUEvrOyURDl8LV
8+4UmYsSgS1lQBSORGwyDRIxnSNWT5AV58gqfQstRPurbHVKVOQLk43uWTb6JNLF
C1CNJrEL70I6MQj9dvSpJ0AZkcDFyk4f3EwolddydmDxOrko+i1dEJRBvBnZjU7f
S2R2gghMesG7/PhgAehaQVBLsH/wnBUSzVTMT0SBBiFrQwoH9OWzgufKMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5nXIvdToFJzd8oH6/2NtPoJ+nzMB8GA1UdIwQY
MBaAFALaTNBExumHOsj9nP0w8eyz2AvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYt
ZDY5MmMzNzI5YzQ4LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYtZDY5MmMzNzI5YzQ4
LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3Jk6kTN
xcD6RM/o0PO1WwY1WP7trcYFISNz4FHWGkgFVmJf1O+5t36MbJTw2oDCiA9EvrVk
zaJ5/ryZWS+xwa4V/CmljgTB3GbWflHNQS7X8WUvQsag54JCqeiEXzxxQOBA82Li
dTol6KNy1h/HDM5xel8esKtlsx88g6cdIBZirsA+uM2QOzU0UqlkXgRPAwXTjto/
8gb1nrd6QN3YBdQRChSXXVCharXjKjtIecvBFfS/iOTMk//QfhKfPO7jiiWMllW4
+/QMtUcZVXeRNHMS6R4zcS2fUCPOSIgWAsLHbF4eSA04S++tjXRfEqsA5v7qISKy
JSG1JbqywtzHDQ==
-----END CERTIFICATE-----
Generated at Mon May 5 13:40:41 2025 by rpki-client