Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File:                     6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier:          0y4W6XQt4hbNntiEJhVipbHhW6rE7e/+N+snTKHATos=
Subject key identifier:   64:1D:3E:49:B0:AE:5E:F1:86:AE:78:99:25:02:65:AD:00:EE:E2:97
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer:       /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial:       01965C4C6F228DC561F8D9309CAED956898C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number:          32
Signing time:             Tue 22 Apr 2025 07:00:35 +0000
Manifest this update:     Tue 22 Apr 2025 07:00:35 +0000
Manifest next update:     Wed 23 Apr 2025 07:00:35 +0000
Files and hashes:         1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
                          2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: splpSXaXic5IJHAW5l/zxlDiqnjKVCKkstirFDI8UMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:4c:6f:22:8d:c5:61:f8:d9:30:9c:ae:d9:56:89:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
        Validity
            Not Before: Apr 22 07:00:35 2025 GMT
            Not After : Apr 23 07:00:35 2025 GMT
        Subject: CN=641d3e49b0ae5ef186ae7899250265ad00eee297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:35:3f:d1:c6:e0:88:86:81:1d:52:2f:34:
                    2d:b0:1d:bb:81:6b:7a:22:5a:25:41:06:6f:a5:a0:
                    4b:62:b9:df:82:95:c4:4a:47:19:e1:bd:86:6d:1a:
                    6b:03:1f:0c:14:9e:22:be:77:b8:e9:c9:f5:ab:65:
                    c6:51:06:e8:a9:d8:22:d7:7d:90:5f:d6:e2:04:ea:
                    b5:e7:b2:5c:57:9b:c1:be:31:86:7a:10:6a:ea:a7:
                    0c:22:a4:31:38:7d:96:0a:ef:8f:ec:9e:a3:0e:dc:
                    73:2a:f4:ba:ca:84:f6:7e:2c:cc:d9:15:a2:37:24:
                    47:5d:2c:0f:ce:20:49:f6:0c:02:3b:9d:4f:c0:48:
                    19:c3:9a:6b:64:7b:14:80:7c:46:e6:b5:43:7d:5d:
                    1d:37:4b:39:54:30:a3:7b:70:c4:a9:e3:8e:de:e8:
                    9c:70:e5:83:39:32:79:56:fc:07:d9:59:a5:bf:62:
                    47:fb:92:33:15:b6:07:c7:eb:da:a5:35:17:a9:82:
                    7c:36:89:99:78:35:68:f5:5c:3a:9d:a0:b0:42:fa:
                    a9:47:45:d2:4b:4e:6c:f7:0b:a7:8d:d0:78:65:ad:
                    81:96:19:e9:28:ee:d9:58:19:cb:a3:cd:91:fa:2a:
                    df:74:df:a1:90:64:bc:4e:9e:a4:b4:ff:e1:7c:01:
                    2a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:3E:49:B0:AE:5E:F1:86:AE:78:99:25:02:65:AD:00:EE:E2:97
            X509v3 Authority Key Identifier:
                keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:02:72:5d:cf:71:ba:06:2e:c2:29:fc:f3:02:2e:5a:41:20:
         d9:8b:91:66:2a:38:76:e5:dc:e5:dd:f3:5d:d3:cc:77:87:99:
         4b:85:8c:be:ef:fb:03:68:a7:32:eb:47:09:7e:11:7f:b8:b5:
         57:2a:e9:6e:38:9d:70:a5:69:1a:47:62:9f:d0:fc:67:80:5b:
         47:93:2b:74:19:d1:2f:de:01:6e:4b:29:c1:9f:3a:95:9b:02:
         19:68:79:e2:af:87:a6:3a:0d:07:10:af:cf:f0:db:21:1b:de:
         b4:5f:56:79:5d:86:e1:c7:98:1f:fa:af:45:59:b1:a7:ec:e8:
         bb:e9:2f:6d:96:84:78:d4:ac:1e:bb:a7:be:fa:30:de:1a:bb:
         89:62:d9:3c:bf:bb:ac:9b:04:a3:7b:55:79:35:6e:20:a5:dd:
         8d:67:52:09:27:e4:53:dd:d6:e6:5b:8a:3d:2e:f7:3f:bd:ab:
         53:df:bb:f2:c4:be:8b:d8:46:80:8a:72:93:81:32:a4:19:dc:
         f1:10:99:d0:71:4b:e5:60:e8:e3:bd:2f:1d:cc:0b:37:00:ed:
         21:a3:dc:c0:1b:ef:a2:4c:d0:ca:73:0b:a5:b1:66:91:dd:4a:
         2d:86:e9:8b:ac:d7:fe:f6:ea:2c:68:87:49:aa:2c:dd:e5:17:
         8d:a0:c0:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcTG8ijcVh+NkwnK7ZVomMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTBjMmMwZGVlNmY5ZWQ2NWUwNTFlYWE5MDk3ZDAyY2Y1
YmY1ZjIwHhcNMjUwNDIyMDcwMDM1WhcNMjUwNDIzMDcwMDM1WjAzMTEwLwYDVQQD
Eyg2NDFkM2U0OWIwYWU1ZWYxODZhZTc4OTkyNTAyNjVhZDAwZWVlMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMM1P9HG4IiGgR1SLzQtsB27gWt6
IlolQQZvpaBLYrnfgpXESkcZ4b2GbRprAx8MFJ4ivne46cn1q2XGUQboqdgi132Q
X9biBOq157JcV5vBvjGGehBq6qcMIqQxOH2WCu+P7J6jDtxzKvS6yoT2fizM2RWi
NyRHXSwPziBJ9gwCO51PwEgZw5prZHsUgHxG5rVDfV0dN0s5VDCje3DEqeOO3uic
cOWDOTJ5VvwH2Vmlv2JH+5IzFbYHx+vapTUXqYJ8NomZeDVo9Vw6naCwQvqpR0XS
S05s9wunjdB4Za2BlhnpKO7ZWBnLo82R+irfdN+hkGS8Tp6ktP/hfAEqDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQdPkmwrl7xhq54mSUCZa0A7uKXMB8GA1UdIwQY
MBaAFOrgwsDe5vntZeBR6qkJfQLPW/XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQt
ZDk4ZjVkMDc2Mjk4LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQtZDk4ZjVkMDc2Mjk4
LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwJyXc9x
ugYuwin88wIuWkEg2YuRZio4duXc5d3zXdPMd4eZS4WMvu/7A2inMutHCX4Rf7i1
VyrpbjidcKVpGkdin9D8Z4BbR5MrdBnRL94BbkspwZ86lZsCGWh54q+HpjoNBxCv
z/DbIRvetF9WeV2G4ceYH/qvRVmxp+zou+kvbZaEeNSsHrunvvow3hq7iWLZPL+7
rJsEo3tVeTVuIKXdjWdSCSfkU93W5luKPS73P72rU9+78sS+i9hGgIpyk4EypBnc
8RCZ0HFL5WDo470vHcwLNwDtIaPcwBvvokzQynMLpbFmkd1KLYbpi6zX/vbqLGiH
Saos3eUXjaDA/A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:28:32 2025 by rpki-client