Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
File:                     iloI9Bw3MCfggbXByoqAC_GFXZ8.mft (raw, json)
Hash identifier:          jO9/tyw1nSqk1H5pEZkUKUhIPjHRYwagmCpoajgOwxk=
Subject key identifier:   CF:3D:10:1B:C3:B8:56:5A:0D:5A:A5:C2:58:76:A6:ED:68:59:F5:F7
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Certificate issuer:       /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial:       019640302F333CA3491DBB2B9C2B541CA2A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
Manifest number:          08BB
Signing time:             Wed 16 Apr 2025 20:00:21 +0000
Manifest this update:     Wed 16 Apr 2025 20:00:21 +0000
Manifest next update:     Thu 17 Apr 2025 20:00:21 +0000
Files and hashes:         1: iloI9Bw3MCfggbXByoqAC_GFXZ8.crl (hash: +ocX+MV85h4qhHHwyhcRfZu5QXgIoVcgMAkmWw9L860=)
                          2: yECgV0Zjm63pdebLZV2oJguqmFo.roa (hash: TFpt7mIhig+6+4covOB47Kn/9EddQnuc9xQ22XL602I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:30:2f:33:3c:a3:49:1d:bb:2b:9c:2b:54:1c:a2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
        Validity
            Not Before: Apr 16 20:00:21 2025 GMT
            Not After : Apr 17 20:00:21 2025 GMT
        Subject: CN=cf3d101bc3b8565a0d5aa5c25876a6ed6859f5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:a2:c5:03:44:cf:fc:91:f9:af:83:ca:8e:
                    90:2d:e7:e0:c1:fc:91:9f:24:05:ee:34:36:ea:30:
                    82:30:53:76:1d:43:8a:e2:8c:cf:ac:3d:27:87:20:
                    5d:e7:6c:30:13:02:9e:33:7d:0f:49:a8:38:e5:a3:
                    d0:fd:04:54:07:ab:b5:86:60:d7:6b:49:2d:92:95:
                    df:a4:ee:94:ae:21:c4:ee:4d:d6:b1:25:a2:b8:81:
                    36:8c:be:86:86:c1:ec:01:d7:a1:33:d1:51:56:b7:
                    b8:3d:2e:7d:c8:f9:3b:be:52:c8:2c:a5:c0:42:db:
                    34:0d:e3:44:53:cd:d3:a6:e1:2f:0d:7a:50:c0:f7:
                    7b:09:7f:f0:e1:e5:b6:97:72:05:1b:3e:d1:40:e0:
                    75:0b:7f:44:85:9a:5d:7c:09:9b:8d:95:ad:57:20:
                    84:52:7f:2b:aa:1c:f4:f8:e5:eb:76:b1:a5:b4:42:
                    49:16:0b:8d:43:55:82:d2:43:33:12:44:ce:de:62:
                    71:df:95:a1:57:d8:1f:2e:91:44:d8:0d:88:78:47:
                    3b:3d:35:51:dc:19:4c:28:86:cc:64:71:5a:d7:71:
                    43:ed:d8:9a:c0:cb:ab:5b:e8:70:78:1a:50:93:c9:
                    bb:cc:24:67:a9:de:b1:85:e1:bc:b7:67:bb:dd:a2:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3D:10:1B:C3:B8:56:5A:0D:5A:A5:C2:58:76:A6:ED:68:59:F5:F7
            X509v3 Authority Key Identifier:
                keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:61:b1:e4:e2:2f:69:dd:59:8f:5d:b8:22:85:df:02:77:ae:
         39:af:94:50:87:c7:ff:5e:15:4a:ef:7b:b6:34:db:eb:6c:a4:
         28:8f:df:4d:5c:8b:ed:70:a4:8a:eb:c9:83:b2:be:8c:f7:bd:
         4f:38:51:3d:cd:4b:42:d7:d3:57:57:92:2f:43:36:45:ee:88:
         4f:a4:98:00:68:22:68:01:d1:65:40:c9:c9:0f:6a:b6:2e:27:
         13:da:32:b9:29:2a:96:06:e1:ad:bc:18:cb:02:0f:c8:07:74:
         0e:76:e1:87:81:42:96:6c:97:c2:ba:06:d2:14:92:03:46:23:
         63:f0:8c:5a:1c:fb:09:a8:08:79:f6:c5:11:b0:21:b0:57:16:
         11:63:eb:df:9a:e3:82:6c:e2:57:4d:5a:2a:69:f5:6e:0a:38:
         f4:d2:d3:c7:83:e4:d3:51:22:92:d6:a7:56:8d:f9:cd:ed:85:
         3f:84:4e:6e:f3:4a:a5:f3:ad:62:51:e2:9b:72:5b:80:7c:8d:
         9f:61:c0:a1:60:54:4b:b0:dd:83:59:68:78:d2:27:43:02:12:
         09:ae:0a:a5:3c:57:82:4b:78:32:fe:34:0d:11:47:7b:58:51:
         fc:54:b2:c1:e8:51:d2:d3:6f:32:dd:3f:b7:03:7c:cc:3b:38:
         b8:e9:fe:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMC8zPKNJHbsrnCtUHKKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEwOGY0MWMzNzMwMjdlMDgxYjVjMWNhOGE4MDBiZjE4
NTVkOWYwHhcNMjUwNDE2MjAwMDIxWhcNMjUwNDE3MjAwMDIxWjAzMTEwLwYDVQQD
EyhjZjNkMTAxYmMzYjg1NjVhMGQ1YWE1YzI1ODc2YTZlZDY4NTlmNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe+ixQNEz/yR+a+Dyo6QLefgwfyR
nyQF7jQ26jCCMFN2HUOK4ozPrD0nhyBd52wwEwKeM30PSag45aPQ/QRUB6u1hmDX
a0ktkpXfpO6UriHE7k3WsSWiuIE2jL6GhsHsAdehM9FRVre4PS59yPk7vlLILKXA
Qts0DeNEU83TpuEvDXpQwPd7CX/w4eW2l3IFGz7RQOB1C39EhZpdfAmbjZWtVyCE
Un8rqhz0+OXrdrGltEJJFguNQ1WC0kMzEkTO3mJx35WhV9gfLpFE2A2IeEc7PTVR
3BlMKIbMZHFa13FD7diawMurW+hweBpQk8m7zCRnqd6xheG8t2e73aLtswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM89EBvDuFZaDVqlwlh2pu1oWfX3MB8GA1UdIwQY
MBaAFIpaCPQcNzAn4IG1wcqKgAvxhV2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUt
OGE1NmIwZjUwNzMxLzEvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUtOGE1NmIwZjUwNzMx
LzEvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2Gx5OIv
ad1Zj124IoXfAneuOa+UUIfH/14VSu97tjTb62ykKI/fTVyL7XCkiuvJg7K+jPe9
TzhRPc1LQtfTV1eSL0M2Re6IT6SYAGgiaAHRZUDJyQ9qti4nE9oyuSkqlgbhrbwY
ywIPyAd0Dnbhh4FClmyXwroG0hSSA0YjY/CMWhz7CagIefbFEbAhsFcWEWPr35rj
gmziV01aKmn1bgo49NLTx4Pk01EiktanVo35ze2FP4RObvNKpfOtYlHim3JbgHyN
n2HAoWBUS7Ddg1loeNInQwISCa4KpTxXgkt4Mv40DRFHe1hR/FSywehR0tNvMt0/
twN8zDs4uOn+hQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:38 2025 by rpki-client