Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File:                     zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier:          LATj+luIciFleQEB4aqJVOXqYStYkW2X5mrYvgi4h84=
Subject key identifier:   46:68:80:7F:D0:FC:AF:AE:75:0F:97:77:CE:8D:7D:FC:99:BA:30:53
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer:       /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial:       0196CCBC4B38E57195FEDEC93F22853B441D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number:          1103
Signing time:             Wed 14 May 2025 03:00:14 +0000
Manifest this update:     Wed 14 May 2025 03:00:14 +0000
Manifest next update:     Thu 15 May 2025 03:00:14 +0000
Files and hashes:         1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=)
                          2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: EFoR9gZQ9uVw18nAwHip6Vmv3Oze9Hdiqimab/v0vpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:4b:38:e5:71:95:fe:de:c9:3f:22:85:3b:44:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
        Validity
            Not Before: May 14 03:00:14 2025 GMT
            Not After : May 15 03:00:14 2025 GMT
        Subject: CN=4668807fd0fcafae750f9777ce8d7dfc99ba3053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:d8:5e:5c:db:54:e7:ee:fe:78:81:56:e6:
                    62:e4:18:a3:5f:86:db:c4:52:cf:01:73:1e:ed:3f:
                    ba:29:9d:6b:c3:a0:b9:d7:f3:0d:1a:14:70:c9:c7:
                    79:61:eb:4c:03:73:de:a9:58:ea:b7:3a:29:35:49:
                    25:1a:70:dd:03:aa:1c:34:2f:d3:53:55:b7:a8:01:
                    18:c0:4d:e9:bc:8b:00:1f:49:5e:7c:fe:bc:cc:94:
                    ac:56:bc:3c:ac:a3:86:4b:7f:60:2b:fb:ad:29:a7:
                    61:22:d5:e9:2d:d0:b1:c1:bb:0a:41:3f:48:6f:ce:
                    53:48:2e:f6:3e:cc:f2:05:c6:14:34:13:b2:6a:7f:
                    85:2a:3d:14:a4:93:4e:5a:a3:e4:86:ce:49:3a:12:
                    69:1e:f9:cc:0c:92:bf:93:7b:e6:ca:68:e3:e9:c6:
                    7f:5f:2a:c7:95:10:e5:a9:e9:c6:df:ee:4a:a2:c2:
                    70:8a:06:e5:ee:bb:d4:f0:2d:bc:a6:ce:68:8b:a1:
                    68:a9:31:c5:ba:a2:1e:7a:51:fb:a2:24:20:50:f3:
                    e4:9d:8b:e7:fe:1e:3b:a8:e4:39:ea:3f:c2:f4:08:
                    db:f9:35:2a:97:18:44:d6:10:de:1d:b1:3e:ae:da:
                    e3:ca:2e:63:77:57:57:cd:6e:b3:e3:49:a3:4c:de:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:68:80:7F:D0:FC:AF:AE:75:0F:97:77:CE:8D:7D:FC:99:BA:30:53
            X509v3 Authority Key Identifier:
                keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:0b:c9:3a:e6:92:38:4e:9a:48:24:9f:a1:ab:1c:8a:57:
         15:83:c8:15:06:1e:33:26:e7:0b:cb:38:18:15:8a:2c:7d:a6:
         10:69:b7:cb:23:96:08:b0:41:59:e2:d5:d1:e5:cf:8c:92:1e:
         bb:0e:a4:4f:ab:3e:86:b2:bb:ba:e5:90:e0:91:98:9f:1c:c2:
         d1:1c:af:33:ef:95:e2:f6:f6:40:56:17:09:b4:1c:ee:65:a9:
         8b:e8:12:d6:5d:6d:6d:99:aa:5e:ba:ef:16:6d:62:26:e3:27:
         2f:b0:a3:82:a3:e5:fc:48:d3:ff:b1:ce:80:e0:05:43:c7:38:
         38:6d:d8:2a:85:c6:21:e2:64:61:b9:97:39:bb:3a:4b:83:2e:
         7e:73:1e:e5:95:18:d8:dd:2a:08:7a:e8:b8:05:89:c6:65:82:
         80:c1:85:3d:44:83:b9:3b:46:b8:da:07:46:f2:bd:cd:5e:b0:
         f0:57:83:51:78:20:04:36:b7:10:52:18:d2:4a:54:78:e2:7e:
         44:46:23:b5:06:9a:cb:97:91:ee:66:ff:37:e3:10:82:7d:b1:
         16:fb:d7:4a:d5:99:bf:62:cc:99:d9:27:88:8a:84:5b:86:6b:
         59:40:13:81:d8:56:83:d2:4e:18:cf:11:93:9c:e3:de:b1:d5:
         ba:08:a7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMvEs45XGV/t7JPyKFO0QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZTRjMTVjODcwN2RmYmRmZGE4M2JlM2E2OTNjMzU5NDdm
MTZkNTkwHhcNMjUwNTE0MDMwMDE0WhcNMjUwNTE1MDMwMDE0WjAzMTEwLwYDVQQD
Eyg0NjY4ODA3ZmQwZmNhZmFlNzUwZjk3NzdjZThkN2RmYzk5YmEzMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMHYXlzbVOfu/niBVuZi5BijX4bb
xFLPAXMe7T+6KZ1rw6C51/MNGhRwycd5YetMA3PeqVjqtzopNUklGnDdA6ocNC/T
U1W3qAEYwE3pvIsAH0lefP68zJSsVrw8rKOGS39gK/utKadhItXpLdCxwbsKQT9I
b85TSC72PszyBcYUNBOyan+FKj0UpJNOWqPkhs5JOhJpHvnMDJK/k3vmymjj6cZ/
XyrHlRDlqenG3+5KosJwigbl7rvU8C28ps5oi6FoqTHFuqIeelH7oiQgUPPknYvn
/h47qOQ56j/C9Ajb+TUqlxhE1hDeHbE+rtrjyi5jd1dXzW6z40mjTN5OpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZogH/Q/K+udQ+Xd86NffyZujBTMB8GA1UdIwQY
MBaAFM7kwVyHB9+9/ag746aTw1lH8W1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2Yt
MmQ3Yjg1NzBkZDAzLzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2YtMmQ3Yjg1NzBkZDAz
LzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvkLyTrm
kjhOmkgkn6GrHIpXFYPIFQYeMybnC8s4GBWKLH2mEGm3yyOWCLBBWeLV0eXPjJIe
uw6kT6s+hrK7uuWQ4JGYnxzC0RyvM++V4vb2QFYXCbQc7mWpi+gS1l1tbZmqXrrv
Fm1iJuMnL7CjgqPl/EjT/7HOgOAFQ8c4OG3YKoXGIeJkYbmXObs6S4MufnMe5ZUY
2N0qCHrouAWJxmWCgMGFPUSDuTtGuNoHRvK9zV6w8FeDUXggBDa3EFIY0kpUeOJ+
REYjtQaay5eR7mb/N+MQgn2xFvvXStWZv2LMmdkniIqEW4ZrWUATgdhWg9JOGM8R
k5zj3rHVugin/g==
-----END CERTIFICATE-----
Generated at Wed May 14 05:51:45 2025 by rpki-client