Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File:                     J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier:          0cS1hGJHAnduCHXgthWlUemvNQ/qDJGCBrdFdGcxqnw=
Subject key identifier:   38:5D:CA:4E:9F:94:61:94:35:5B:FA:EF:7E:74:FF:DC:42:6D:70:63
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer:       /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial:       01964669D417C80675B3EC46CA1FF9D87861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number:          1203
Signing time:             Fri 18 Apr 2025 01:01:02 +0000
Manifest this update:     Fri 18 Apr 2025 01:01:02 +0000
Manifest next update:     Sat 19 Apr 2025 01:01:02 +0000
Files and hashes:         1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: M/p30CHbZ8QZAiE4CA6+ZWanD9ZS+lK6AsU8wfpX7So=)
                          2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
                          3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:d4:17:c8:06:75:b3:ec:46:ca:1f:f9:d8:78:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
        Validity
            Not Before: Apr 18 01:01:02 2025 GMT
            Not After : Apr 19 01:01:02 2025 GMT
        Subject: CN=385dca4e9f946194355bfaef7e74ffdc426d7063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:0c:71:a6:3e:05:77:e7:83:6d:09:ca:1c:
                    64:0b:dc:43:d6:47:ba:a4:86:d9:67:98:28:bf:0d:
                    84:da:a0:9f:52:39:f0:d9:b1:55:9a:be:e1:ef:f4:
                    fd:13:59:c1:82:ae:92:f2:3c:f2:12:61:8b:d6:5b:
                    3e:c7:11:d8:a6:b8:08:17:aa:4c:07:3d:11:04:97:
                    d6:65:ec:60:fa:be:3f:3c:2e:39:2e:a6:d0:45:36:
                    32:a3:cc:2f:4a:58:e9:4a:2a:83:f6:fa:24:a1:bd:
                    7f:4a:1f:1a:d4:d7:16:35:84:7b:fc:01:83:18:f1:
                    f2:c7:d5:ee:78:73:ac:c0:f9:9c:b3:6a:c2:8d:9b:
                    9f:26:58:f5:a9:f0:c4:85:d5:c1:b7:e3:bb:d0:87:
                    8a:74:55:88:68:ae:ee:4a:07:1c:7a:f2:33:1b:a5:
                    2f:c1:e3:92:b0:b2:17:94:97:b1:e8:4d:81:ef:d6:
                    23:9c:9c:b2:4f:a5:51:e3:d2:58:5d:aa:05:0c:50:
                    8e:e0:8b:1a:77:c1:24:99:58:47:9c:9c:79:9f:37:
                    5f:7e:c8:f4:4b:f0:02:9c:5b:eb:b6:c2:e2:6d:ae:
                    31:d6:28:31:ac:fd:fb:8b:6a:11:da:03:7b:8e:97:
                    b7:4b:38:69:9b:f1:5a:c0:78:a5:4d:2d:c8:55:1d:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:CA:4E:9F:94:61:94:35:5B:FA:EF:7E:74:FF:DC:42:6D:70:63
            X509v3 Authority Key Identifier:
                keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:e5:07:4a:91:90:5d:82:f8:6e:bb:68:03:90:3d:cf:10:
         ea:db:99:9e:c4:e0:7f:4f:c8:20:54:dc:29:39:3e:7f:7d:43:
         d9:8a:0d:d2:10:e8:19:d5:43:4d:c4:82:e2:69:48:e0:62:0e:
         f7:df:a5:7f:6f:ac:b4:6a:73:a4:09:7f:32:80:49:a4:df:ee:
         9c:43:14:cf:bf:ef:d7:1b:63:66:36:a3:9b:57:1c:1f:97:e4:
         24:6e:61:2f:51:0d:d0:c9:b1:11:1b:ab:f2:67:17:00:dd:af:
         8b:03:de:94:28:14:e0:55:19:57:45:d0:dc:76:ed:a8:32:bb:
         2e:d6:ad:7a:45:c9:07:ce:5b:f1:37:de:0c:94:a6:ce:80:6d:
         f4:d1:d1:07:3a:da:e9:8b:75:b5:c1:48:e3:82:36:00:0d:2d:
         f8:5b:f0:79:33:8c:17:5e:8e:81:7a:0c:9e:bf:ee:39:5e:a1:
         04:46:5e:57:44:5b:7c:4e:7e:d2:b3:8c:d7:ee:6f:2e:e8:ef:
         c7:ab:ea:cf:33:48:28:3b:9c:17:e4:ba:74:e5:c7:79:a1:87:
         03:9f:3b:5e:8e:65:a6:04:66:8e:41:85:61:e3:c2:f5:08:23:
         d7:69:98:5d:a8:da:0d:4c:91:99:87:86:e7:3a:e5:64:82:f5:
         52:6c:eb:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGadQXyAZ1s+xGyh/52HhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTdkMWYwZDczZmU0ODFjMjE4OGQyOGRlZjBlODU4ZTcx
NTY5N2UwHhcNMjUwNDE4MDEwMTAyWhcNMjUwNDE5MDEwMTAyWjAzMTEwLwYDVQQD
EygzODVkY2E0ZTlmOTQ2MTk0MzU1YmZhZWY3ZTc0ZmZkYzQyNmQ3MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZcMcaY+BXfng20JyhxkC9xD1ke6
pIbZZ5govw2E2qCfUjnw2bFVmr7h7/T9E1nBgq6S8jzyEmGL1ls+xxHYprgIF6pM
Bz0RBJfWZexg+r4/PC45LqbQRTYyo8wvSljpSiqD9vokob1/Sh8a1NcWNYR7/AGD
GPHyx9XueHOswPmcs2rCjZufJlj1qfDEhdXBt+O70IeKdFWIaK7uSgccevIzG6Uv
weOSsLIXlJex6E2B79YjnJyyT6VR49JYXaoFDFCO4Isad8EkmVhHnJx5nzdffsj0
S/ACnFvrtsLiba4x1igxrP37i2oR2gN7jpe3Szhpm/FawHilTS3IVR3IeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhdyk6flGGUNVv67350/9xCbXBjMB8GA1UdIwQY
MBaAFCen0fDXP+SBwhiNKN7w6FjnFWl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEt
ZDZlYWFmYzZiNGY1LzEvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEtZDZlYWFmYzZiNGY1
LzEvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamLlB0qR
kF2C+G67aAOQPc8Q6tuZnsTgf0/IIFTcKTk+f31D2YoN0hDoGdVDTcSC4mlI4GIO
99+lf2+stGpzpAl/MoBJpN/unEMUz7/v1xtjZjajm1ccH5fkJG5hL1EN0MmxERur
8mcXAN2viwPelCgU4FUZV0XQ3HbtqDK7LtatekXJB85b8TfeDJSmzoBt9NHRBzra
6Yt1tcFI44I2AA0t+FvweTOMF16OgXoMnr/uOV6hBEZeV0RbfE5+0rOM1+5vLujv
x6vqzzNIKDucF+S6dOXHeaGHA587Xo5lpgRmjkGFYePC9Qgj12mYXajaDUyRmYeG
5zrlZIL1Umzrew==
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:52:28 2025 by rpki-client