Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File:                     IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier:          XdUgNZkxQSkw/xfAxrFt3Phui6dv0D1/BPKnPy0fQvE=
Subject key identifier:   BE:36:51:BD:FF:2B:56:95:56:0F:09:30:8D:66:7B:93:ED:EF:12:A4
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer:       /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial:       0196C4270C2955B2A28BE92B8638E74217D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number:          05E5
Signing time:             Mon 12 May 2025 11:00:15 +0000
Manifest this update:     Mon 12 May 2025 11:00:15 +0000
Manifest next update:     Tue 13 May 2025 11:00:15 +0000
Files and hashes:         1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
                          2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: SQ2onJ8Hn6H6t01jYwmpi//FylWBWu1EXKxUokCdodw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:0c:29:55:b2:a2:8b:e9:2b:86:38:e7:42:17:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
        Validity
            Not Before: May 12 11:00:15 2025 GMT
            Not After : May 13 11:00:15 2025 GMT
        Subject: CN=be3651bdff2b5695560f09308d667b93edef12a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:f7:e1:59:ec:36:b2:0c:9a:04:cc:75:00:
                    df:a3:89:8c:05:9c:b5:72:77:17:c7:55:2e:2f:37:
                    6b:ea:2a:b8:bc:73:0f:f7:b0:61:d4:77:dd:86:45:
                    b7:1d:c7:3d:47:11:f2:74:83:28:e0:44:70:c8:05:
                    1e:bb:55:dd:a8:1a:81:74:09:d0:4d:92:c2:cf:da:
                    95:82:a5:68:1c:31:b1:b7:96:cb:6a:7c:b6:a5:6c:
                    a0:94:87:32:ff:9e:fc:11:51:05:d6:e6:83:a5:19:
                    56:7c:85:78:53:87:0a:7b:d8:6c:99:e5:ba:5c:e1:
                    b9:9b:cb:cf:ec:55:ca:f0:99:a4:13:b6:ae:3e:93:
                    64:f4:ab:bc:68:05:f9:13:33:a8:db:a8:0b:de:2b:
                    c1:bb:8f:2c:a7:a7:ff:e5:f9:42:23:b4:37:11:e3:
                    fa:91:6b:37:5c:d5:8d:35:e8:ae:89:d4:6e:5f:e6:
                    d6:34:9f:52:38:42:3e:95:ec:18:fc:80:f7:07:f4:
                    68:a9:e7:e5:c9:5e:de:84:94:11:67:75:2c:80:76:
                    04:f6:cc:2c:a2:f8:d2:06:d8:ac:fb:df:bc:c6:2f:
                    a1:da:d7:9d:ba:02:88:7b:ef:51:06:29:85:e8:f6:
                    ee:03:31:b7:86:76:62:37:fb:56:91:03:56:f6:2c:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:51:BD:FF:2B:56:95:56:0F:09:30:8D:66:7B:93:ED:EF:12:A4
            X509v3 Authority Key Identifier:
                keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:85:f5:ab:c3:c9:89:8b:fb:d9:20:85:01:04:f9:13:3e:
         8c:92:98:1b:b4:54:2d:5b:69:81:62:78:82:4f:6f:07:0c:9b:
         db:e8:6b:c1:4c:38:c2:c0:54:d8:25:08:14:de:80:43:96:0f:
         64:b5:3d:31:61:d9:31:b0:1e:f6:c5:db:19:63:a2:46:60:4b:
         5e:d8:8d:c5:6b:5f:0c:e0:2e:25:00:f7:47:1b:14:17:51:d7:
         23:60:e5:27:ea:31:51:fc:a8:02:e0:60:9c:5d:26:46:aa:bb:
         ac:2c:fe:d9:41:1b:ab:4a:5d:57:0c:a3:85:16:66:3e:9c:ef:
         cd:dc:76:9f:f5:9a:f7:a3:53:e8:d4:d0:85:55:ab:c8:04:2b:
         20:f3:6c:0c:21:b0:50:5d:f9:df:c9:95:41:56:f3:33:f0:ca:
         2f:f8:61:06:0c:92:a6:fa:bf:89:a3:82:85:82:0c:94:68:43:
         01:14:cb:0e:90:d7:45:31:a0:c1:a4:c3:b5:73:2b:06:69:87:
         48:72:54:87:8c:ab:d9:10:23:78:e3:10:72:08:62:43:65:1b:
         72:1b:c2:f1:2b:ab:21:f1:14:d4:95:3f:9e:f9:47:13:df:7b:
         d4:d9:5c:9f:b6:74:b4:42:eb:dd:74:17:00:4f:80:66:c2:3f:
         1b:54:49:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJwwpVbKii+krhjjnQhfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNDk5NWMzNjI3ZjdhYWNkZmUyMzkxNWU0NDJlM2QzOTAw
NjMxYWYwHhcNMjUwNTEyMTEwMDE1WhcNMjUwNTEzMTEwMDE1WjAzMTEwLwYDVQQD
EyhiZTM2NTFiZGZmMmI1Njk1NTYwZjA5MzA4ZDY2N2I5M2VkZWYxMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCL34VnsNrIMmgTMdQDfo4mMBZy1
cncXx1UuLzdr6iq4vHMP97Bh1HfdhkW3Hcc9RxHydIMo4ERwyAUeu1XdqBqBdAnQ
TZLCz9qVgqVoHDGxt5bLany2pWyglIcy/578EVEF1uaDpRlWfIV4U4cKe9hsmeW6
XOG5m8vP7FXK8JmkE7auPpNk9Ku8aAX5EzOo26gL3ivBu48sp6f/5flCI7Q3EeP6
kWs3XNWNNeiuidRuX+bWNJ9SOEI+lewY/ID3B/RoqeflyV7ehJQRZ3UsgHYE9sws
ovjSBtis+9+8xi+h2tedugKIe+9RBimF6PbuAzG3hnZiN/tWkQNW9izy/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL42Ub3/K1aVVg8JMI1me5Pt7xKkMB8GA1UdIwQY
MBaAFCBJlcNif3qs3+I5FeRC49OQBjGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQt
NDg0NTlkMDdiNDFlLzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQtNDg0NTlkMDdiNDFl
LzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD2F9avD
yYmL+9kghQEE+RM+jJKYG7RULVtpgWJ4gk9vBwyb2+hrwUw4wsBU2CUIFN6AQ5YP
ZLU9MWHZMbAe9sXbGWOiRmBLXtiNxWtfDOAuJQD3RxsUF1HXI2DlJ+oxUfyoAuBg
nF0mRqq7rCz+2UEbq0pdVwyjhRZmPpzvzdx2n/Wa96NT6NTQhVWryAQrIPNsDCGw
UF3538mVQVbzM/DKL/hhBgySpvq/iaOChYIMlGhDARTLDpDXRTGgwaTDtXMrBmmH
SHJUh4yr2RAjeOMQcghiQ2UbchvC8SurIfEU1JU/nvlHE9971Nlcn7Z0tELr3XQX
AE+AZsI/G1RJ+w==
-----END CERTIFICATE-----
Generated at Mon May 12 19:00:23 2025 by rpki-client