Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File:                     B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier:          AGe5Rc6LBLR0vYf//dhFAHGM76HjeqmmtFlqVN0YuKg=
Subject key identifier:   2F:69:5A:6C:EB:04:B2:1D:48:1B:AF:E8:42:F6:9D:55:0B:E2:D6:55
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer:       /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial:       01965B711AF102A10909782AE179D6EFCD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number:          0A5A
Signing time:             Tue 22 Apr 2025 03:01:01 +0000
Manifest this update:     Tue 22 Apr 2025 03:01:01 +0000
Manifest next update:     Wed 23 Apr 2025 03:01:01 +0000
Files and hashes:         1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: gWKm9ovZeHSG3bZrrGLqa90g2iZtwJf82H4tljn58kE=)
                          2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:71:1a:f1:02:a1:09:09:78:2a:e1:79:d6:ef:cd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
        Validity
            Not Before: Apr 22 03:01:01 2025 GMT
            Not After : Apr 23 03:01:01 2025 GMT
        Subject: CN=2f695a6ceb04b21d481bafe842f69d550be2d655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:d5:90:b6:f0:60:15:15:a2:5e:5d:f0:e8:
                    72:00:5c:44:15:ec:fd:7e:e7:d0:64:38:64:06:a8:
                    83:00:c1:6c:f6:e5:b3:99:90:41:cd:1c:d4:d7:1e:
                    10:e4:c1:54:bf:93:ba:ae:39:46:af:85:de:32:d5:
                    f3:db:b4:db:68:2b:e9:21:86:5a:f9:85:4f:13:a7:
                    4a:58:bd:d0:a1:0a:16:eb:d0:8a:05:8f:7d:aa:39:
                    b6:55:18:fb:fb:32:3c:bb:1c:87:dd:be:fb:8d:ae:
                    bb:fb:67:5a:0c:09:cb:80:7b:5a:8a:3c:14:ed:a6:
                    fb:03:8e:ca:fb:09:4d:83:59:65:24:6d:0c:4c:84:
                    28:07:52:1c:af:b8:7b:e2:96:33:41:4b:a4:3c:87:
                    c7:4e:38:25:a1:40:79:9e:9e:3c:c4:b4:b8:fb:f3:
                    5f:06:59:c4:8e:f8:c2:43:1e:d7:ca:5d:2b:f1:ee:
                    17:58:f2:c5:d7:c5:f4:65:65:d4:98:0b:a2:2e:60:
                    dc:84:47:13:e5:02:67:5e:67:ac:1f:50:a4:67:f6:
                    ab:ec:d6:0f:56:9c:1a:23:45:34:0a:93:19:74:b2:
                    3b:3c:65:aa:f1:0f:6e:57:97:da:95:4b:ee:1b:fe:
                    d6:12:0d:5a:62:cd:4c:bf:fb:6e:74:e0:78:55:32:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:5A:6C:EB:04:B2:1D:48:1B:AF:E8:42:F6:9D:55:0B:E2:D6:55
            X509v3 Authority Key Identifier:
                keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:60:15:51:f8:3d:d7:f7:96:28:91:98:1b:43:b1:24:66:50:
         11:d7:aa:fe:02:7f:8e:1a:a2:dc:37:df:a3:30:aa:e8:81:13:
         68:01:c6:1e:c3:a9:78:09:ab:f0:76:87:3c:39:c2:be:7d:ed:
         da:4a:4d:3e:36:ae:b6:2a:89:59:9b:f0:91:a4:d1:36:61:bc:
         eb:ce:af:83:8e:25:df:b4:dc:eb:42:f3:2c:21:4e:3d:9e:6e:
         b1:d9:b7:7a:df:0d:91:25:cc:99:93:40:51:a4:62:2c:44:23:
         6e:92:52:a6:de:32:1b:07:b3:7f:90:e9:d0:15:f7:86:ee:39:
         fb:31:38:53:c5:4c:a0:59:d2:86:7b:8f:09:5b:72:14:89:4b:
         38:2a:4c:f0:15:cc:27:ea:e1:84:04:6f:7f:d4:d7:69:57:52:
         96:9e:cc:c9:39:76:9a:ca:5c:1f:5b:da:0e:05:76:4b:82:0d:
         11:6c:e8:0f:3b:ae:60:f4:4b:9b:a3:6c:ef:1b:93:4a:43:ef:
         c5:59:53:a0:ca:98:94:d6:53:4c:22:3b:72:16:d4:16:32:cf:
         4d:be:05:fe:c7:bc:73:54:9d:1e:a4:52:c4:b6:8c:7e:d9:33:
         ad:02:eb:e1:09:79:14:1d:df:7e:d2:60:b3:9b:29:34:e2:bc:
         a3:eb:84:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcRrxAqEJCXgq4XnW782XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YWVmMTkwZjQ0YmZjMWRiMGM1MGYxYTczZmRmMDE3MDgx
YWZlMTYwHhcNMjUwNDIyMDMwMTAxWhcNMjUwNDIzMDMwMTAxWjAzMTEwLwYDVQQD
EygyZjY5NWE2Y2ViMDRiMjFkNDgxYmFmZTg0MmY2OWQ1NTBiZTJkNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XLVkLbwYBUVol5d8OhyAFxEFez9
fufQZDhkBqiDAMFs9uWzmZBBzRzU1x4Q5MFUv5O6rjlGr4XeMtXz27TbaCvpIYZa
+YVPE6dKWL3QoQoW69CKBY99qjm2VRj7+zI8uxyH3b77ja67+2daDAnLgHtaijwU
7ab7A47K+wlNg1llJG0MTIQoB1Icr7h74pYzQUukPIfHTjgloUB5np48xLS4+/Nf
BlnEjvjCQx7Xyl0r8e4XWPLF18X0ZWXUmAuiLmDchEcT5QJnXmesH1CkZ/ar7NYP
VpwaI0U0CpMZdLI7PGWq8Q9uV5falUvuG/7WEg1aYs1Mv/tudOB4VTJ+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9pWmzrBLIdSBuv6EL2nVUL4tZVMB8GA1UdIwQY
MBaAFAeu8ZD0S/wdsMUPGnP98BcIGv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYt
ZWY0NDU4ZWEyMGNkLzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYtZWY0NDU4ZWEyMGNk
LzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmAVUfg9
1/eWKJGYG0OxJGZQEdeq/gJ/jhqi3DffozCq6IETaAHGHsOpeAmr8HaHPDnCvn3t
2kpNPjautiqJWZvwkaTRNmG8686vg44l37Tc60LzLCFOPZ5usdm3et8NkSXMmZNA
UaRiLEQjbpJSpt4yGwezf5Dp0BX3hu45+zE4U8VMoFnShnuPCVtyFIlLOCpM8BXM
J+rhhARvf9TXaVdSlp7MyTl2mspcH1vaDgV2S4INEWzoDzuuYPRLm6Ns7xuTSkPv
xVlToMqYlNZTTCI7chbUFjLPTb4F/se8c1SdHqRSxLaMftkzrQLr4Ql5FB3fftJg
s5spNOK8o+uE/g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:38 2025 by rpki-client