Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          htnEjaYjCckgSnAee56rqTJIUoiGrwTuXxak2JolGmg=
Subject key identifier:   EE:A8:3D:CE:76:B9:1D:C5:4D:78:DC:38:EB:54:0D:57:99:C8:EB:B2
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       019644E8DE3B4AE36EEA57618ECACA0AE1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          0FAE
Signing time:             Thu 17 Apr 2025 18:00:33 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:33 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:33 +0000
Files and hashes:         1: 1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa (hash: fltwqIioPSuzKLuXGtdMjJVRWOd9cnpy/Vmxbwnrchg=)
                          2: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
                          3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
                          4: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
                          5: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: vgsCjeLZhjX+EEeRndkA6Xm8p1KqZnVDNu5TVFoukrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:de:3b:4a:e3:6e:ea:57:61:8e:ca:ca:0a:e1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Apr 17 18:00:33 2025 GMT
            Not After : Apr 18 18:00:33 2025 GMT
        Subject: CN=eea83dce76b91dc54d78dc38eb540d5799c8ebb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:79:0d:29:b5:54:1d:3f:7c:4f:e3:fa:26:
                    a5:5e:d3:16:66:f9:b6:73:31:8b:01:63:8e:c4:27:
                    9f:63:8f:4c:89:62:f7:da:a4:93:e1:61:c6:60:36:
                    de:15:ed:bf:c3:ca:35:13:d4:17:3b:b6:d1:11:df:
                    4b:0b:c1:9a:bb:7a:48:0d:fd:07:a3:1b:d6:9c:04:
                    84:5f:15:88:d1:b4:05:c2:cf:1e:6b:92:6d:db:22:
                    fc:50:92:87:31:8b:08:fa:36:c3:c9:d8:c7:06:c3:
                    c5:89:4d:84:5b:35:21:24:f9:3c:db:28:dc:55:cf:
                    ee:ed:e4:d4:87:80:07:d1:8b:00:24:75:3c:04:6a:
                    b0:a1:d2:0f:8d:2c:37:67:61:81:37:14:10:a7:fa:
                    12:44:df:fd:7e:79:4b:2d:3a:1a:74:b1:47:f2:84:
                    bf:7b:ec:bc:7c:fb:6a:ad:7b:2e:ed:d0:67:56:09:
                    40:6e:35:f6:97:11:24:eb:91:64:80:fd:c0:be:97:
                    0d:1d:2b:88:19:08:39:b4:65:0f:95:d5:0f:ad:79:
                    af:6a:ef:19:d6:95:1b:e7:f1:de:73:d0:d4:4c:ea:
                    80:14:27:3d:31:8f:71:6a:c9:24:66:b2:0a:f0:b3:
                    7f:5e:e7:f6:df:4b:92:f1:2a:d9:4a:9f:26:07:ab:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A8:3D:CE:76:B9:1D:C5:4D:78:DC:38:EB:54:0D:57:99:C8:EB:B2
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:db:63:97:56:f4:65:a0:15:4b:9b:b5:05:b2:69:95:98:87:
         b1:29:7b:5a:f9:dc:8e:15:75:f3:e6:f7:3e:45:cd:e3:87:85:
         60:97:52:2f:6d:fe:18:70:74:08:a0:30:06:05:78:40:5a:c4:
         85:1c:f3:96:0f:83:29:a9:96:77:71:d8:f2:0c:60:37:50:8c:
         3a:f2:d4:8c:ba:e9:d1:e4:ce:8b:a4:1e:fa:41:cd:18:39:b6:
         67:56:88:43:d8:55:20:0e:3f:13:28:8e:8a:30:65:bc:70:b0:
         54:10:dc:0f:11:da:09:01:e9:16:a1:b0:50:c7:31:78:2f:44:
         58:37:19:5f:dd:34:80:85:a1:f2:8c:3f:26:15:fb:89:ba:16:
         6e:c6:f2:7c:0e:57:f8:8f:67:05:b1:0f:01:ff:5d:e9:4a:c4:
         fe:42:f4:82:59:95:0c:cf:cc:86:ed:e9:8a:88:86:20:e7:06:
         92:fa:42:9b:0a:71:a0:d6:3b:f6:3d:42:63:54:a4:c6:80:1a:
         71:41:f4:3c:14:d3:fe:59:b4:9a:6c:93:b1:08:0e:99:48:e6:
         88:5d:25:82:03:f2:38:79:a1:05:ba:f3:51:99:85:3b:ee:f5:
         4b:c1:a5:40:a0:0f:b6:a6:18:f3:2a:79:72:6b:01:1f:29:7e:
         2a:df:b9:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6N47SuNu6ldhjsrKCuHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjUwNDE3MTgwMDMzWhcNMjUwNDE4MTgwMDMzWjAzMTEwLwYDVQQD
EyhlZWE4M2RjZTc2YjkxZGM1NGQ3OGRjMzhlYjU0MGQ1Nzk5YzhlYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRF5DSm1VB0/fE/j+ialXtMWZvm2
czGLAWOOxCefY49MiWL32qST4WHGYDbeFe2/w8o1E9QXO7bREd9LC8Gau3pIDf0H
oxvWnASEXxWI0bQFws8ea5Jt2yL8UJKHMYsI+jbDydjHBsPFiU2EWzUhJPk82yjc
Vc/u7eTUh4AH0YsAJHU8BGqwodIPjSw3Z2GBNxQQp/oSRN/9fnlLLToadLFH8oS/
e+y8fPtqrXsu7dBnVglAbjX2lxEk65FkgP3AvpcNHSuIGQg5tGUPldUPrXmvau8Z
1pUb5/Hec9DUTOqAFCc9MY9xaskkZrIK8LN/Xuf230uS8SrZSp8mB6uX6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6oPc52uR3FTXjcOOtUDVeZyOuyMB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9tjl1b0
ZaAVS5u1BbJplZiHsSl7WvncjhV18+b3PkXN44eFYJdSL23+GHB0CKAwBgV4QFrE
hRzzlg+DKamWd3HY8gxgN1CMOvLUjLrp0eTOi6Qe+kHNGDm2Z1aIQ9hVIA4/EyiO
ijBlvHCwVBDcDxHaCQHpFqGwUMcxeC9EWDcZX900gIWh8ow/JhX7iboWbsbyfA5X
+I9nBbEPAf9d6UrE/kL0glmVDM/Mhu3pioiGIOcGkvpCmwpxoNY79j1CY1SkxoAa
cUH0PBTT/lm0mmyTsQgOmUjmiF0lggPyOHmhBbrzUZmFO+71S8GlQKAPtqYY8yp5
cmsBHyl+Kt+5bA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:24 2025 by rpki-client