Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File:                     5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier:          tEGSadBSgxo2SxJ7szowRwQ5g6EEDdys1tgDpN8msjA=
Subject key identifier:   DE:37:73:01:E0:E8:15:2B:DD:4E:D0:4A:3C:F3:BB:8E:51:AD:13:C1
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer:       /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial:       01964A7CE1AB8A47C42ACB346766AAEEE2FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number:          14FC
Signing time:             Fri 18 Apr 2025 20:00:20 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:20 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:20 +0000
Files and hashes:         1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: oE5zQsFtbvaS4sOR4MLD0iBmfP4+6MYjwltjFlmgZQc=)
                          2: uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa (hash: g7l6o1+EK67dHVtVxC57iUhjiYlLOzwY9EalaarNVkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7c:e1:ab:8a:47:c4:2a:cb:34:67:66:aa:ee:e2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
        Validity
            Not Before: Apr 18 20:00:20 2025 GMT
            Not After : Apr 19 20:00:20 2025 GMT
        Subject: CN=de377301e0e8152bdd4ed04a3cf3bb8e51ad13c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:18:0f:c6:2f:23:73:83:c6:18:14:60:c8:
                    5c:31:26:c2:f0:61:0e:89:42:aa:88:b3:2b:96:5a:
                    66:07:b8:de:e1:40:26:df:f3:40:31:ce:91:09:a2:
                    5d:b6:bf:f3:50:5b:20:fa:23:1e:a3:08:d2:53:25:
                    5b:5f:72:b7:5d:6f:09:e8:69:c9:db:bd:c1:2f:fc:
                    b9:52:a8:39:7a:0a:f0:c1:d7:03:ee:14:87:de:86:
                    33:dc:29:18:75:d9:6b:a2:7f:92:8e:5e:72:5a:5c:
                    13:3b:a1:f9:71:49:95:e6:3f:02:01:4a:2e:c6:a1:
                    84:a7:7b:ff:b0:d1:7c:20:7c:0d:77:96:e4:73:9a:
                    77:3a:47:81:8f:47:e2:6c:62:b5:60:79:97:9b:7c:
                    bb:ce:58:7f:76:52:c2:ca:81:77:d9:65:98:d1:ea:
                    c5:1c:f6:a6:25:7c:8a:b7:9e:58:06:61:e3:b8:0c:
                    3e:b0:e7:e0:c1:fc:78:8f:6d:31:78:a4:96:25:bd:
                    8e:fe:0d:52:fd:f4:1b:42:fd:aa:1c:5b:a6:83:bb:
                    22:ef:d3:24:48:bc:8b:6c:5f:10:7b:c4:4d:52:93:
                    b9:76:15:9f:07:19:5a:35:8a:08:3d:99:34:8d:09:
                    33:89:2a:08:42:31:cf:b4:30:3e:8d:d2:ce:e7:6d:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:37:73:01:E0:E8:15:2B:DD:4E:D0:4A:3C:F3:BB:8E:51:AD:13:C1
            X509v3 Authority Key Identifier:
                keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:24:55:62:1a:23:94:26:c5:e6:35:96:44:f1:12:e6:41:c4:
         11:5d:73:e1:ce:33:21:2a:50:e4:5b:f2:26:30:ee:b0:db:af:
         c0:f0:c4:e4:32:d5:51:79:57:c8:e8:44:4c:98:c6:f4:06:1a:
         a7:fc:c2:b9:df:ff:66:a2:e8:ad:be:89:e3:4f:b7:6c:29:69:
         c3:60:fa:9f:18:84:6f:69:96:e5:a7:c3:eb:0f:f7:a6:1a:03:
         e9:db:ab:40:72:76:76:aa:17:a9:4f:ba:9d:61:f3:09:44:c5:
         5c:ee:db:cb:03:f2:12:16:29:e8:ce:54:f5:d4:8a:23:3d:50:
         be:bf:dd:da:ce:ab:d8:36:8f:09:0d:e3:86:46:a9:48:e6:0f:
         d6:65:74:98:f2:ae:8a:58:fa:ca:da:72:b2:0a:60:75:db:72:
         7e:0c:d4:bb:ae:cc:2f:fd:07:21:bc:c9:b7:aa:1a:ce:6e:67:
         27:c4:1e:3e:9d:fe:29:81:5d:e3:91:35:5a:d5:74:b1:84:8f:
         08:a1:f2:5e:65:47:aa:7b:aa:79:76:9e:c5:54:c3:ad:7d:24:
         16:84:84:db:a1:0b:77:01:56:05:87:cd:20:ee:0d:21:ae:82:
         f2:cc:1f:55:03:75:bb:60:e6:c9:a4:ff:ed:a3:c2:ef:41:88:
         53:4f:e0:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfOGrikfEKss0Z2aq7uL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjZjZWQyN2ZjNjBmOTAwZmFjMWI3NTFkYjFlZTRiZjc4
NWFhYjMwHhcNMjUwNDE4MjAwMDIwWhcNMjUwNDE5MjAwMDIwWjAzMTEwLwYDVQQD
EyhkZTM3NzMwMWUwZTgxNTJiZGQ0ZWQwNGEzY2YzYmI4ZTUxYWQxM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY4YD8YvI3ODxhgUYMhcMSbC8GEO
iUKqiLMrllpmB7je4UAm3/NAMc6RCaJdtr/zUFsg+iMeowjSUyVbX3K3XW8J6GnJ
273BL/y5Uqg5egrwwdcD7hSH3oYz3CkYddlron+Sjl5yWlwTO6H5cUmV5j8CAUou
xqGEp3v/sNF8IHwNd5bkc5p3OkeBj0fibGK1YHmXm3y7zlh/dlLCyoF32WWY0erF
HPamJXyKt55YBmHjuAw+sOfgwfx4j20xeKSWJb2O/g1S/fQbQv2qHFumg7si79Mk
SLyLbF8Qe8RNUpO5dhWfBxlaNYoIPZk0jQkziSoIQjHPtDA+jdLO52311wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN43cwHg6BUr3U7QSjzzu45RrRPBMB8GA1UdIwQY
MBaAFOX2ztJ/xg+QD6wbdR2x7kv3haqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAt
M2VhZDc3OTIwNzNjLzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAtM2VhZDc3OTIwNzNj
LzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyRVYhoj
lCbF5jWWRPES5kHEEV1z4c4zISpQ5FvyJjDusNuvwPDE5DLVUXlXyOhETJjG9AYa
p/zCud//ZqLorb6J40+3bClpw2D6nxiEb2mW5afD6w/3phoD6durQHJ2dqoXqU+6
nWHzCUTFXO7bywPyEhYp6M5U9dSKIz1Qvr/d2s6r2DaPCQ3jhkapSOYP1mV0mPKu
ilj6ytpysgpgddtyfgzUu67ML/0HIbzJt6oazm5nJ8QePp3+KYFd45E1WtV0sYSP
CKHyXmVHqnuqeXaexVTDrX0kFoSE26ELdwFWBYfNIO4NIa6C8swfVQN1u2DmyaT/
7aPC70GIU0/g+g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:28:12 2025 by rpki-client