Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File:                     4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier:          Zw28UMdRNlfq5XH3roSym7rZhnGahaZSs9nlg8Ov63w=
Subject key identifier:   66:55:D0:FA:29:A2:76:2C:BD:C2:A4:29:E7:92:E9:35:65:44:3E:C0
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer:       /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial:       0196B3D8FE6D38E0FDAC8B4D80424A848C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number:          0192
Signing time:             Fri 09 May 2025 07:01:04 +0000
Manifest this update:     Fri 09 May 2025 07:01:04 +0000
Manifest next update:     Sat 10 May 2025 07:01:04 +0000
Files and hashes:         1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
                          2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: Cg8UI/3FVVTQ2Fy2Aba+WMvqY8jlFFrjuuR3CZOQc7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d8:fe:6d:38:e0:fd:ac:8b:4d:80:42:4a:84:8c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
        Validity
            Not Before: May  9 07:01:04 2025 GMT
            Not After : May 10 07:01:04 2025 GMT
        Subject: CN=6655d0fa29a2762cbdc2a429e792e93565443ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:ce:9d:45:b2:4c:53:33:9d:42:8b:f4:bb:
                    99:fa:01:8f:ba:88:2c:00:8b:a4:51:fe:1e:93:df:
                    2c:b8:a0:37:f3:8d:d7:d8:e1:45:27:ec:0e:7b:3e:
                    d6:e1:4d:f8:5a:28:89:26:56:9d:93:6a:e0:a5:29:
                    3b:8f:5b:a5:22:af:20:37:4e:09:ed:99:cc:a1:17:
                    5b:10:25:24:3e:1e:03:fa:e8:a3:d2:fb:0a:39:b6:
                    c3:bd:55:53:43:4c:af:bb:c5:7b:54:24:0c:15:75:
                    bd:2e:c2:90:35:27:41:67:d7:c2:ba:1f:db:18:0e:
                    57:55:c3:f1:e4:de:e5:e4:e3:36:9a:bb:2b:86:7d:
                    0f:15:bf:c6:c5:e5:e7:1c:0c:ec:8c:11:4b:ae:56:
                    93:65:97:35:ff:4e:d5:30:ad:63:de:9e:2a:99:29:
                    55:b5:3d:91:79:1f:1c:16:86:5e:b6:79:97:16:51:
                    3c:ce:de:11:cd:99:80:73:d4:fe:71:bc:23:b2:ce:
                    0f:07:9f:00:f7:67:27:2d:91:1c:52:9b:fa:6b:c6:
                    45:46:61:23:e5:09:2c:60:ee:00:a3:bd:e0:c1:1d:
                    37:3d:e7:e6:03:23:03:ce:53:6a:12:1f:06:46:26:
                    da:aa:48:8a:78:05:c8:cb:7a:06:42:9b:6b:ae:bc:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:55:D0:FA:29:A2:76:2C:BD:C2:A4:29:E7:92:E9:35:65:44:3E:C0
            X509v3 Authority Key Identifier:
                keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:13:d6:28:80:d1:8a:8a:d6:0f:7a:dd:b4:9a:54:fa:32:
         6b:93:d0:7e:49:55:2a:f3:ae:2b:2c:28:25:92:a2:e5:14:46:
         05:27:4d:a0:f4:39:5f:e5:27:7d:4d:49:3d:71:45:f6:b2:6c:
         30:53:f2:5b:c9:ba:9b:34:c6:1e:80:ed:79:f3:bb:a3:34:21:
         82:35:bc:c2:6a:5b:a6:a9:ae:92:7b:44:d6:d7:e1:e3:9a:6b:
         20:c0:4f:39:56:4e:bf:8a:3d:c5:23:5d:9d:1a:b8:c2:6c:1f:
         65:03:af:de:55:4a:8a:b6:3e:32:7f:b9:78:8d:1a:7b:b8:37:
         5e:e6:8b:f3:ef:31:42:39:5e:50:e9:24:69:69:9d:ab:f1:01:
         17:f9:ac:63:3c:15:a9:6f:b7:44:ba:38:e2:0e:86:7e:e1:90:
         d1:f7:3a:62:d8:f4:55:9d:5b:d6:a9:4c:34:21:b7:bf:bc:7b:
         69:7a:0c:10:d9:81:76:f2:42:11:70:4c:11:3c:13:d6:cb:aa:
         66:a9:d7:da:ab:d4:bc:a0:e7:57:1f:39:d1:6a:00:cc:99:45:
         5b:3e:43:52:02:ab:32:61:8f:a6:04:7f:14:cc:14:66:7d:3a:
         27:f0:22:59:cb:2e:52:01:c9:fe:ac:13:bc:68:55:15:4d:e0:
         1f:38:84:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2P5tOOD9rItNgEJKhIxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjQ2OTJhOTI5MWYyYzY3YjU2Y2MxNWRhNGQzMTAxMjAy
MzAxNzcwHhcNMjUwNTA5MDcwMTA0WhcNMjUwNTEwMDcwMTA0WjAzMTEwLwYDVQQD
Eyg2NjU1ZDBmYTI5YTI3NjJjYmRjMmE0MjllNzkyZTkzNTY1NDQzZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNzOnUWyTFMznUKL9LuZ+gGPuogs
AIukUf4ek98suKA3843X2OFFJ+wOez7W4U34WiiJJladk2rgpSk7j1ulIq8gN04J
7ZnMoRdbECUkPh4D+uij0vsKObbDvVVTQ0yvu8V7VCQMFXW9LsKQNSdBZ9fCuh/b
GA5XVcPx5N7l5OM2mrsrhn0PFb/GxeXnHAzsjBFLrlaTZZc1/07VMK1j3p4qmSlV
tT2ReR8cFoZetnmXFlE8zt4RzZmAc9T+cbwjss4PB58A92cnLZEcUpv6a8ZFRmEj
5QksYO4Ao73gwR03PefmAyMDzlNqEh8GRibaqkiKeAXIy3oGQptrrrxVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZV0PoponYsvcKkKeeS6TVlRD7AMB8GA1UdIwQY
MBaAFOK0aSqSkfLGe1bMFdpNMQEgIwF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEt
YzI2NGI3NWI2Yjc4LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEtYzI2NGI3NWI2Yjc4
LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOMT1iiA
0YqK1g963bSaVPoya5PQfklVKvOuKywoJZKi5RRGBSdNoPQ5X+UnfU1JPXFF9rJs
MFPyW8m6mzTGHoDtefO7ozQhgjW8wmpbpqmukntE1tfh45prIMBPOVZOv4o9xSNd
nRq4wmwfZQOv3lVKirY+Mn+5eI0ae7g3XuaL8+8xQjleUOkkaWmdq/EBF/msYzwV
qW+3RLo44g6GfuGQ0fc6Ytj0VZ1b1qlMNCG3v7x7aXoMENmBdvJCEXBMETwT1suq
ZqnX2qvUvKDnVx850WoAzJlFWz5DUgKrMmGPpgR/FMwUZn06J/AiWcsuUgHJ/qwT
vGhVFU3gHziEpw==
-----END CERTIFICATE-----
Generated at Fri May 9 14:01:11 2025 by rpki-client