Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File:                     _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier:          oCbANlaODwQWNDIyNzM0pS2H/l4NYfbo7QhYdLawtTQ=
Subject key identifier:   11:C4:5C:36:C0:93:CA:2E:EB:9D:B5:FC:C5:BB:51:B9:29:F3:68:B6
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer:       /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial:       01964C3494C618290E9235B54CF2C037A1B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number:          062B
Signing time:             Sat 19 Apr 2025 04:00:36 +0000
Manifest this update:     Sat 19 Apr 2025 04:00:36 +0000
Manifest next update:     Sun 20 Apr 2025 04:00:36 +0000
Files and hashes:         1: RPQbOHDP5f9n1By4mqwH4fhw1TI.roa (hash: kv9hMH16A1aRfv7UIsyvQ2bwSOQjVyvOtNY7blCGEj4=)
                          2: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: KroKDA2GczW4xsVT0WRg4tSc6PWGiRbXe5zRgfZ7cRI=)
                          3: wz8UbUwzL3_klN4f7OgBtXQAE0o.roa (hash: tVZRRH50Unry3OLtaAmUSG+/0ObBliH9W0a4ti8eLaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:34:94:c6:18:29:0e:92:35:b5:4c:f2:c0:37:a1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
        Validity
            Not Before: Apr 19 04:00:36 2025 GMT
            Not After : Apr 20 04:00:36 2025 GMT
        Subject: CN=11c45c36c093ca2eeb9db5fcc5bb51b929f368b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:33:99:e9:15:6b:76:7e:fb:52:e8:80:bf:
                    57:73:6b:8e:f2:c7:e7:34:e6:e1:b7:4b:cb:fc:06:
                    ca:e1:d2:dd:90:1a:e8:74:84:4f:9e:df:f7:30:69:
                    34:6c:70:53:72:4c:72:03:2b:a9:89:d3:59:de:cd:
                    f8:66:44:39:57:e9:e3:43:f2:3b:0d:65:6f:e1:05:
                    b9:90:35:11:93:96:d2:4d:f8:51:d9:e4:8f:32:cc:
                    a6:c6:a5:54:62:53:34:7a:65:bd:e4:1a:2c:c2:41:
                    4d:20:f8:31:d7:40:b5:5e:f9:c1:45:ad:d2:73:24:
                    7f:18:65:15:75:14:4a:50:c1:34:27:c1:cc:6e:c0:
                    45:8e:70:c8:45:66:cf:0c:a1:c3:f6:6c:3b:40:43:
                    2d:84:a3:df:bc:62:c3:07:21:c4:e4:ed:66:91:c5:
                    5f:e2:74:7a:91:36:eb:7f:5a:02:0b:10:09:45:54:
                    31:bd:02:9f:c9:d8:35:2d:99:d6:48:d9:31:7c:81:
                    45:02:4c:e6:6d:56:e3:31:2e:7f:3b:98:2e:d3:3f:
                    bb:22:4b:d0:ac:52:d5:2b:a3:27:11:83:35:c3:68:
                    48:b5:bf:09:76:00:b3:c6:20:59:7c:4a:62:1c:bb:
                    c5:73:64:94:0d:ef:6b:c5:ac:7b:e7:fc:d7:88:f5:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:5C:36:C0:93:CA:2E:EB:9D:B5:FC:C5:BB:51:B9:29:F3:68:B6
            X509v3 Authority Key Identifier:
                keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:9c:e4:0a:67:84:1d:7b:70:23:56:a1:c3:00:ad:87:02:
         e4:54:50:c2:47:7b:a0:03:2d:35:83:ae:92:58:1b:ff:b2:87:
         30:cb:76:b5:44:ca:e0:1b:1a:58:55:68:de:88:04:40:37:96:
         7b:47:01:9f:54:9f:34:d7:5c:2d:80:c4:86:f3:be:50:e8:21:
         eb:60:e3:ff:79:e9:a8:c4:33:ea:b4:aa:15:62:50:9d:45:b2:
         8a:bb:fa:5a:9b:cd:3c:62:eb:f6:3d:71:a5:98:64:4c:82:dd:
         65:ac:3f:56:b3:77:87:c7:6f:f5:81:94:13:5e:a4:bd:da:46:
         32:60:66:c7:b0:69:ae:92:38:9e:12:c4:cc:ab:55:3f:d2:d7:
         0a:3b:fb:2e:81:32:af:11:60:9f:f5:f4:27:20:da:d8:44:d0:
         bf:84:92:f5:33:d4:27:22:bd:e9:57:ff:4e:eb:ea:85:da:55:
         1e:a2:e8:dc:df:3a:be:cc:7c:6d:d0:0d:e7:98:27:02:df:ca:
         16:6c:d8:13:5e:9b:69:da:42:35:76:bb:13:9a:0d:62:a6:52:
         a7:62:b3:6b:78:49:c7:8a:f3:04:6d:16:77:f8:9b:52:e2:82:
         cd:63:37:43:5c:63:91:c5:0b:45:d6:03:1e:32:dc:c9:42:3e:
         87:1b:b5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNJTGGCkOkjW1TPLAN6G0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTc2Y2E4NWU5NjU0MWE1YWRkM2NhY2FmMWU1ZTExNGZh
YTQ3ZWYwHhcNMjUwNDE5MDQwMDM2WhcNMjUwNDIwMDQwMDM2WjAzMTEwLwYDVQQD
EygxMWM0NWMzNmMwOTNjYTJlZWI5ZGI1ZmNjNWJiNTFiOTI5ZjM2OGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF0zmekVa3Z++1LogL9Xc2uO8sfn
NObht0vL/AbK4dLdkBrodIRPnt/3MGk0bHBTckxyAyupidNZ3s34ZkQ5V+njQ/I7
DWVv4QW5kDURk5bSTfhR2eSPMsymxqVUYlM0emW95BoswkFNIPgx10C1XvnBRa3S
cyR/GGUVdRRKUME0J8HMbsBFjnDIRWbPDKHD9mw7QEMthKPfvGLDByHE5O1mkcVf
4nR6kTbrf1oCCxAJRVQxvQKfydg1LZnWSNkxfIFFAkzmbVbjMS5/O5gu0z+7IkvQ
rFLVK6MnEYM1w2hItb8JdgCzxiBZfEpiHLvFc2SUDe9rxax75/zXiPWMIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHEXDbAk8ou6521/MW7Ubkp82i2MB8GA1UdIwQY
MBaAFP3nbKhellQaWt08rK8eXhFPqkfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2Yt
MjI5ZTJjYjBmNjZjLzEvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2YtMjI5ZTJjYjBmNjZj
LzEvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7mc5Apn
hB17cCNWocMArYcC5FRQwkd7oAMtNYOuklgb/7KHMMt2tUTK4BsaWFVo3ogEQDeW
e0cBn1SfNNdcLYDEhvO+UOgh62Dj/3npqMQz6rSqFWJQnUWyirv6WpvNPGLr9j1x
pZhkTILdZaw/VrN3h8dv9YGUE16kvdpGMmBmx7BprpI4nhLEzKtVP9LXCjv7LoEy
rxFgn/X0JyDa2ETQv4SS9TPUJyK96Vf/TuvqhdpVHqLo3N86vsx8bdAN55gnAt/K
FmzYE16badpCNXa7E5oNYqZSp2Kza3hJx4rzBG0Wd/ibUuKCzWM3Q1xjkcULRdYD
HjLcyUI+hxu1Qw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:24:45 2025 by rpki-client