Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          i/PPAgz45uqvPuRsUsO5XpV0FEtLskYL4uCV+C46FkM=
Subject key identifier:   2F:00:65:49:63:CD:D6:38:BE:34:B0:82:E6:38:73:0C:92:E5:81:F4
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       01969D197D7BEDFE15F844F18EF8D2911855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          1225
Signing time:             Sun 04 May 2025 21:00:15 +0000
Manifest this update:     Sun 04 May 2025 21:00:15 +0000
Manifest next update:     Mon 05 May 2025 21:00:15 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: j6GDbmxHb7IivixDfTVpafVLIsVTNIBBDgq1r48NQsI=)
                          2: IC8rrkeuZ3TqcdV591D01mfbwHc.roa (hash: 7tBT71N8NPjqdd9xF1vrNPm9jbI3kLMX+SeUrC9ethY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:19:7d:7b:ed:fe:15:f8:44:f1:8e:f8:d2:91:18:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: May  4 21:00:15 2025 GMT
            Not After : May  5 21:00:15 2025 GMT
        Subject: CN=2f00654963cdd638be34b082e638730c92e581f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:cb:99:f3:de:91:bf:69:3b:6c:88:d1:1a:
                    c1:d8:da:ef:a8:4f:c7:28:31:1b:04:cd:e9:04:53:
                    4d:8c:6d:5c:42:1d:ce:4d:8f:04:b0:48:25:59:3d:
                    8d:1f:8e:59:2c:95:97:d1:a3:5e:3b:a8:ae:05:f0:
                    ed:ec:db:b5:76:d2:3d:03:64:53:5f:10:d9:1f:78:
                    b7:4e:9d:fc:0c:9b:86:6e:dd:ed:4d:ea:06:75:27:
                    5f:9b:3b:a0:29:a4:08:2a:de:d1:45:b9:9d:2e:9f:
                    2a:ca:76:d7:93:b1:66:cc:bf:4b:cb:15:80:97:a2:
                    4c:ae:df:8f:10:c5:87:5e:42:4b:02:04:c0:05:de:
                    a5:cd:f5:fe:b4:7f:d9:14:66:9a:e7:ef:90:8a:57:
                    a1:db:47:2c:ec:a0:ab:45:37:a0:d1:70:19:79:66:
                    7a:27:cb:02:e8:21:ff:c0:2d:5e:b6:3c:f2:e3:9b:
                    e7:ba:c6:0c:ac:8d:35:c6:1c:3d:03:0c:ac:dc:57:
                    6e:ef:83:6b:4c:03:95:a0:d6:69:a5:eb:65:3f:a1:
                    c1:90:c7:4c:57:52:45:ae:e6:db:21:c5:c4:88:fd:
                    f2:8c:3d:b6:5d:f4:d9:7d:4e:f6:7b:78:d4:76:31:
                    91:1c:14:91:af:c2:36:09:69:9e:71:f5:08:7f:c6:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:00:65:49:63:CD:D6:38:BE:34:B0:82:E6:38:73:0C:92:E5:81:F4
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:d2:b0:a0:ac:32:a5:0d:4b:d9:e7:e2:2c:53:fd:8f:93:
         7f:07:49:5e:87:0f:dd:f8:03:0c:60:0a:80:40:01:b2:4c:9f:
         2f:25:4e:22:82:04:62:50:7c:fa:ac:78:ce:e0:d2:57:da:83:
         3e:99:ee:84:ce:d0:16:3e:2a:1e:7b:ba:56:b7:14:bd:76:7e:
         ca:5b:12:ef:9b:1a:66:ce:ad:23:ac:b3:4b:6a:0a:5d:4a:4f:
         85:c8:30:07:e5:4d:bc:0f:e4:b0:75:54:09:0a:03:fb:fd:2c:
         e0:6d:8f:45:d2:ab:cf:2c:e3:42:7e:16:dd:05:7b:17:8e:a6:
         86:1d:5a:69:ee:ac:aa:ff:fa:a5:94:3a:e4:08:ed:02:85:0d:
         4a:57:db:13:eb:89:45:23:62:13:a0:cb:18:85:2f:92:59:06:
         96:4a:dc:9f:60:d1:a0:4f:29:23:05:ad:2c:e9:d7:0a:f7:d6:
         b6:3f:17:35:91:0c:f8:63:8f:ff:b9:f7:1d:b0:41:8b:22:1e:
         10:6c:cd:a6:16:4b:de:ef:ab:f0:c8:cf:80:c3:32:c6:87:29:
         25:34:16:fb:61:45:6f:5a:86:73:aa:b0:0c:bb:0c:6a:3a:b6:
         ec:87:d1:90:ff:4f:8e:3a:8f:7d:9a:2d:17:c4:e6:74:73:c6:
         38:f2:18:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadGX177f4V+ETxjvjSkRhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0M2NkZWUxNDZiMTNiOTY2N2RlZmYzZjdiMzBlOWExYWEz
MzRjODMwHhcNMjUwNTA0MjEwMDE1WhcNMjUwNTA1MjEwMDE1WjAzMTEwLwYDVQQD
EygyZjAwNjU0OTYzY2RkNjM4YmUzNGIwODJlNjM4NzMwYzkyZTU4MWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiDLmfPekb9pO2yI0RrB2NrvqE/H
KDEbBM3pBFNNjG1cQh3OTY8EsEglWT2NH45ZLJWX0aNeO6iuBfDt7Nu1dtI9A2RT
XxDZH3i3Tp38DJuGbt3tTeoGdSdfmzugKaQIKt7RRbmdLp8qynbXk7FmzL9LyxWA
l6JMrt+PEMWHXkJLAgTABd6lzfX+tH/ZFGaa5++Qileh20cs7KCrRTeg0XAZeWZ6
J8sC6CH/wC1etjzy45vnusYMrI01xhw9Awys3Fdu74NrTAOVoNZppetlP6HBkMdM
V1JFrubbIcXEiP3yjD22XfTZfU72e3jUdjGRHBSRr8I2CWmecfUIf8ajUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8AZUljzdY4vjSwguY4cwyS5YH0MB8GA1UdIwQY
MBaAFBQ83uFGsTuWZ97/P3sw6aGqM0yDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkR6ZTRVYXhPNVpuM3Y4X2V6RHBvYW96VElNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xY2EzOWMtMjAxYy00MWZkLTljYjAt
ODIzNmU1NzI2NGJmLzEvRkR6ZTRVYXhPNVpuM3Y4X2V6RHBvYW96VElNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xY2EzOWMtMjAxYy00MWZkLTljYjAtODIzNmU1NzI2NGJm
LzEvRkR6ZTRVYXhPNVpuM3Y4X2V6RHBvYW96VElNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0rSsKCs
MqUNS9nn4ixT/Y+TfwdJXocP3fgDDGAKgEABskyfLyVOIoIEYlB8+qx4zuDSV9qD
PpnuhM7QFj4qHnu6VrcUvXZ+ylsS75saZs6tI6yzS2oKXUpPhcgwB+VNvA/ksHVU
CQoD+/0s4G2PRdKrzyzjQn4W3QV7F46mhh1aae6sqv/6pZQ65AjtAoUNSlfbE+uJ
RSNiE6DLGIUvklkGlkrcn2DRoE8pIwWtLOnXCvfWtj8XNZEM+GOP/7n3HbBBiyIe
EGzNphZL3u+r8MjPgMMyxocpJTQW+2FFb1qGc6qwDLsMajq27IfRkP9PjjqPfZot
F8TmdHPGOPIYyQ==
-----END CERTIFICATE-----
Generated at Mon May 5 06:14:26 2025 by rpki-client