Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          1mGfULputCRpR1MqwjQscuPAMsjj/edhfTPR4AnhY8Q=
Subject key identifier:   1E:81:05:A2:7B:5E:B2:5B:8E:5C:14:78:41:6B:54:D9:46:83:74:E4
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       01962AF2BE6A597DEE8BE0EB51F873AACA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          046C
Signing time:             Sat 12 Apr 2025 17:01:13 +0000
Manifest this update:     Sat 12 Apr 2025 17:01:13 +0000
Manifest next update:     Sun 13 Apr 2025 17:01:13 +0000
Files and hashes:         1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
                          2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: 4x1htOmeDxKFn4arkfDrc44Y61jGZY6iWwinahbKb7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:f2:be:6a:59:7d:ee:8b:e0:eb:51:f8:73:aa:ca:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Apr 12 17:01:13 2025 GMT
            Not After : Apr 13 17:01:13 2025 GMT
        Subject: CN=1e8105a27b5eb25b8e5c1478416b54d9468374e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:00:93:1a:ab:7a:31:bd:72:d8:c6:34:24:
                    d7:d6:20:a3:6d:32:8e:3a:77:88:bf:69:54:f7:7d:
                    cd:42:af:c5:b4:fd:19:85:94:91:9b:33:9d:25:22:
                    70:22:d0:1b:77:b5:6b:e7:bc:24:9a:f8:72:85:c3:
                    7c:ff:ce:0e:8d:4f:c3:cf:d9:3c:df:85:ea:c8:01:
                    92:bc:f5:b8:d1:d0:90:c9:a1:dc:20:1f:6b:a2:03:
                    74:29:df:52:e3:bb:da:75:bf:36:e3:56:58:64:b5:
                    b1:76:5e:e7:65:bd:bd:bc:21:8b:b4:4e:92:ee:d6:
                    4e:4c:a2:8e:0f:17:05:30:0b:29:7d:7c:ed:44:79:
                    86:0a:47:46:c8:d4:6e:fa:07:77:1b:3d:ab:78:63:
                    dd:b5:2b:e5:1e:0b:81:b8:53:50:68:50:32:b5:87:
                    5b:96:5d:2c:42:a7:14:c5:53:81:ba:8e:d7:27:60:
                    e9:31:f3:69:ce:07:f2:fd:8b:55:b8:7a:3f:47:98:
                    3b:92:fa:04:f0:fe:63:6d:eb:ad:6c:81:41:4a:da:
                    b9:3d:d8:b0:06:e9:15:3d:67:b7:e9:3e:e5:c7:56:
                    95:40:71:1a:fc:07:a4:7b:be:26:76:8f:ed:ff:85:
                    5b:f4:16:50:bd:cc:36:7a:8e:d1:32:14:8d:c7:ba:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:81:05:A2:7B:5E:B2:5B:8E:5C:14:78:41:6B:54:D9:46:83:74:E4
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a2:0d:0a:0b:47:ca:a9:40:30:60:89:91:48:8e:48:9b:7a:
         b0:5a:70:7a:e8:b1:11:a4:b4:8c:47:1e:96:af:67:b8:e2:5a:
         19:f1:82:8b:6e:93:07:7d:ec:77:78:68:18:86:da:b3:40:a2:
         1c:06:d3:75:18:e0:5c:fe:c6:0e:49:70:26:ec:a3:96:c9:a7:
         e6:31:b8:4b:91:0d:03:81:fb:bc:7e:02:67:1b:14:22:93:04:
         e7:b7:00:04:2b:21:8f:0d:ca:07:d0:7d:d7:ee:59:b4:df:7c:
         5b:07:bc:8f:26:b4:9a:6a:0b:15:e4:11:31:59:98:5b:e5:c9:
         6d:7d:25:ac:6f:12:5f:76:69:4b:00:b4:af:bf:88:8b:66:3f:
         32:96:04:75:c3:63:14:6f:6b:64:2d:e8:6b:cc:ed:f0:72:78:
         fc:63:bc:cf:98:32:c3:cd:8a:4d:a3:eb:66:60:8c:0b:02:48:
         b4:00:62:fb:2d:6c:6e:9e:b4:e7:b9:19:a1:a5:95:10:3f:82:
         1a:f3:b5:02:a8:ac:4b:69:30:b5:86:45:3f:dc:1f:8b:e5:93:
         8c:30:ba:47:98:99:64:bd:af:37:b0:71:87:dc:9c:62:e0:d8:
         c9:fd:8b:4e:cd:21:e0:cc:f4:d7:f0:0e:de:5a:e4:d1:c7:a2:
         68:84:4c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYq8r5qWX3ui+DrUfhzqsp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5
MWMxZjEwHhcNMjUwNDEyMTcwMTEzWhcNMjUwNDEzMTcwMTEzWjAzMTEwLwYDVQQD
EygxZTgxMDVhMjdiNWViMjViOGU1YzE0Nzg0MTZiNTRkOTQ2ODM3NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswsAkxqrejG9ctjGNCTX1iCjbTKO
OneIv2lU933NQq/FtP0ZhZSRmzOdJSJwItAbd7Vr57wkmvhyhcN8/84OjU/Dz9k8
34XqyAGSvPW40dCQyaHcIB9rogN0Kd9S47vadb8241ZYZLWxdl7nZb29vCGLtE6S
7tZOTKKODxcFMAspfXztRHmGCkdGyNRu+gd3Gz2reGPdtSvlHguBuFNQaFAytYdb
ll0sQqcUxVOBuo7XJ2DpMfNpzgfy/YtVuHo/R5g7kvoE8P5jbeutbIFBStq5Pdiw
BukVPWe36T7lx1aVQHEa/Aeke74mdo/t/4Vb9BZQvcw2eo7RMhSNx7p4CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6BBaJ7XrJbjlwUeEFrVNlGg3TkMB8GA1UdIwQY
MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt
ZTMwMzg3YjNmMjExLzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx
LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaINCgtH
yqlAMGCJkUiOSJt6sFpweuixEaS0jEcelq9nuOJaGfGCi26TB33sd3hoGIbas0Ci
HAbTdRjgXP7GDklwJuyjlsmn5jG4S5ENA4H7vH4CZxsUIpME57cABCshjw3KB9B9
1+5ZtN98Wwe8jya0mmoLFeQRMVmYW+XJbX0lrG8SX3ZpSwC0r7+Ii2Y/MpYEdcNj
FG9rZC3oa8zt8HJ4/GO8z5gyw82KTaPrZmCMCwJItABi+y1sbp6057kZoaWVED+C
GvO1AqisS2kwtYZFP9wfi+WTjDC6R5iZZL2vN7Bxh9ycYuDYyf2LTs0h4Mz01/AO
3lrk0ceiaIRMLA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:28:59 2025 by rpki-client