Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          bXwrCuIBz7IWAkGbWEgi8Vo0WrDLb6SPfjbAbmNJEGQ=
Subject key identifier:   B5:EA:61:D4:62:D8:31:8B:70:B2:59:90:5B:78:45:AC:95:5E:32:0B
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       019650B6C2BFE322124BE13132A2CA8E2935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          14FD
Signing time:             Sun 20 Apr 2025 01:01:16 +0000
Manifest this update:     Sun 20 Apr 2025 01:01:16 +0000
Manifest next update:     Mon 21 Apr 2025 01:01:16 +0000
Files and hashes:         1: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
                          2: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
                          3: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: CexmY0WEFMLq+kKxlZ2ymxAzzdUVfvg30pfT0U8Wj18=)
                          4: iMxQ2AOySk_FZxXcjfPe4fAEOGg.roa (hash: zaY98e3Y+bpnfMZKNHgnuKftqgMn0QZNLBsrc2JhQww=)
                          5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:c2:bf:e3:22:12:4b:e1:31:32:a2:ca:8e:29:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Apr 20 01:01:16 2025 GMT
            Not After : Apr 21 01:01:16 2025 GMT
        Subject: CN=b5ea61d462d8318b70b259905b7845ac955e320b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:45:0c:8b:84:6c:0b:5d:bc:d2:05:4f:0f:
                    cf:2e:ee:75:5d:ab:b8:4b:79:a7:7e:cb:47:ff:a1:
                    ab:a7:89:18:69:d2:d5:f3:68:42:43:65:f0:cd:59:
                    f0:30:9e:2b:1c:b0:3a:2b:b3:74:98:ba:37:ee:2c:
                    51:29:6f:bf:e2:38:e7:26:ff:15:99:ff:57:40:d4:
                    ed:7d:6f:4c:bf:ab:fe:02:0a:1f:ab:55:89:7c:77:
                    ff:6b:2d:15:ca:be:75:fa:91:4d:42:7e:ee:79:51:
                    66:11:51:75:fe:f4:3c:b9:60:6e:69:a6:06:ca:19:
                    2a:78:14:dd:20:7e:5e:bc:bc:ed:91:63:7d:cf:16:
                    c8:ad:8e:be:48:b2:85:51:04:b8:be:21:12:c2:0f:
                    90:c6:37:50:12:85:48:13:96:87:79:7d:51:46:5f:
                    a3:30:ca:f3:d7:c1:c2:08:94:23:43:d9:55:7a:50:
                    fa:e3:6f:51:00:cd:7d:19:85:20:48:06:fd:af:53:
                    c4:ce:84:fe:7e:53:3c:a0:c7:0f:d7:56:8c:3e:24:
                    4c:cd:7f:74:c9:a0:96:82:70:ca:46:85:ff:b6:1e:
                    48:d3:e6:c6:76:e2:1e:26:13:1d:7c:77:53:fc:45:
                    ec:c9:22:47:77:ff:3f:a2:d7:23:dc:29:1b:25:4c:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EA:61:D4:62:D8:31:8B:70:B2:59:90:5B:78:45:AC:95:5E:32:0B
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:4c:0b:57:bb:f7:40:19:56:87:96:7d:dc:fd:1f:df:fa:
         90:f4:74:52:d3:52:73:1f:3e:ce:da:75:3c:18:96:27:a9:1c:
         bf:de:2d:1a:f5:d3:8c:df:22:99:d5:00:bd:c3:0d:a9:ad:82:
         ae:a6:d1:c2:48:4c:fe:95:17:62:17:42:c7:38:b6:98:0b:5f:
         4a:88:f9:f3:16:69:6d:0b:c0:09:93:d8:3c:e7:cd:ba:60:96:
         46:01:66:7b:7c:65:48:28:ad:06:00:41:e6:36:d2:8a:0d:fc:
         93:3b:7e:52:ba:35:e0:50:fb:44:d7:16:9f:9c:f4:0d:ef:63:
         7c:1c:47:fa:04:ea:9c:8f:84:24:24:36:27:39:c7:0e:4c:73:
         03:73:79:4a:3d:f6:fa:0f:68:5b:c1:f9:1d:41:4e:85:26:47:
         c3:d7:23:fc:94:83:2a:c7:6b:7d:0f:d6:c2:0e:27:27:e0:af:
         ae:a1:7e:bc:6d:ba:f3:7e:cb:f5:9c:37:b9:9f:3a:4a:7e:38:
         d8:2a:2a:d1:86:f8:cb:ac:db:d8:c5:8a:57:be:a1:22:2d:54:
         d1:63:0a:65:30:de:3b:fb:bd:be:4c:11:51:42:9e:f2:1b:a0:
         17:8d:23:05:0b:5d:e4:17:00:16:db:c9:80:d1:38:5c:24:4b:
         13:1b:3d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtsK/4yISS+ExMqLKjik1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx
MjE2NDcwHhcNMjUwNDIwMDEwMTE2WhcNMjUwNDIxMDEwMTE2WjAzMTEwLwYDVQQD
EyhiNWVhNjFkNDYyZDgzMThiNzBiMjU5OTA1Yjc4NDVhYzk1NWUzMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFhFDIuEbAtdvNIFTw/PLu51Xau4
S3mnfstH/6Grp4kYadLV82hCQ2XwzVnwMJ4rHLA6K7N0mLo37ixRKW+/4jjnJv8V
mf9XQNTtfW9Mv6v+Agofq1WJfHf/ay0Vyr51+pFNQn7ueVFmEVF1/vQ8uWBuaaYG
yhkqeBTdIH5evLztkWN9zxbIrY6+SLKFUQS4viESwg+QxjdQEoVIE5aHeX1RRl+j
MMrz18HCCJQjQ9lVelD6429RAM19GYUgSAb9r1PEzoT+flM8oMcP11aMPiRMzX90
yaCWgnDKRoX/th5I0+bGduIeJhMdfHdT/EXsySJHd/8/otcj3CkbJUyLnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXqYdRi2DGLcLJZkFt4RayVXjILMB8GA1UdIwQY
MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt
YjE1YjNmYmMwNGE2LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2
LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADadMC1e7
90AZVoeWfdz9H9/6kPR0UtNScx8+ztp1PBiWJ6kcv94tGvXTjN8imdUAvcMNqa2C
rqbRwkhM/pUXYhdCxzi2mAtfSoj58xZpbQvACZPYPOfNumCWRgFme3xlSCitBgBB
5jbSig38kzt+Uro14FD7RNcWn5z0De9jfBxH+gTqnI+EJCQ2JznHDkxzA3N5Sj32
+g9oW8H5HUFOhSZHw9cj/JSDKsdrfQ/Wwg4nJ+CvrqF+vG26837L9Zw3uZ86Sn44
2Coq0Yb4y6zb2MWKV76hIi1U0WMKZTDeO/u9vkwRUUKe8hugF40jBQtd5BcAFtvJ
gNE4XCRLExs9oA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:39 2025 by rpki-client