Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File:                     adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier:          1pCtBl3tQBQiF42kNQNpPd1oloZnWYOzCkNX2eL+J4Y=
Subject key identifier:   B7:56:77:72:46:4E:B2:94:63:97:A9:0C:7B:95:E6:08:3A:FB:9F:5C
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer:       /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial:       019649D82CFD0AB8E9D0DD53BC5AB2B6BE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number:          0E37
Signing time:             Fri 18 Apr 2025 17:00:26 +0000
Manifest this update:     Fri 18 Apr 2025 17:00:26 +0000
Manifest next update:     Sat 19 Apr 2025 17:00:26 +0000
Files and hashes:         1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
                          2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: uTTyXsSS2zyi7tEdZHu93yaGOY7NdYp+cJMdm9HGk70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:d8:2c:fd:0a:b8:e9:d0:dd:53:bc:5a:b2:b6:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
        Validity
            Not Before: Apr 18 17:00:26 2025 GMT
            Not After : Apr 19 17:00:26 2025 GMT
        Subject: CN=b7567772464eb2946397a90c7b95e6083afb9f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:c2:6a:76:ec:45:c5:60:25:9e:d9:3d:f5:
                    78:9b:bc:36:5d:27:06:b3:e2:d5:14:dc:db:35:60:
                    44:9e:32:8f:b4:28:a8:2b:76:2a:e9:a8:08:d1:43:
                    87:e1:f9:12:27:3a:e9:56:98:db:80:02:68:1e:97:
                    03:50:fd:0f:17:a2:f5:47:38:89:30:3a:e2:cf:16:
                    39:c7:aa:ae:6e:1c:83:46:33:62:5c:d1:12:e8:85:
                    f5:e4:cf:ee:a4:eb:ec:ec:55:dd:f6:a3:b8:af:68:
                    27:95:c9:d8:33:a3:d0:10:29:b8:39:d5:f7:22:7e:
                    4c:c7:bc:d8:8b:89:1b:01:4a:2e:58:b4:01:58:bb:
                    ae:c8:f6:ba:d5:eb:51:b7:1b:a1:1c:c2:75:b2:ab:
                    6d:46:d5:a1:de:df:e3:9c:4c:9f:f6:89:e2:d8:51:
                    90:d0:fa:1f:cb:2a:ed:74:62:66:88:b8:bb:92:b0:
                    c0:7f:37:1b:4c:f0:ba:d1:96:da:44:17:e9:ed:e8:
                    3a:08:a2:0d:52:89:47:dc:11:23:cd:9c:14:ad:16:
                    c4:de:41:49:d5:8d:9c:54:01:b4:3e:ce:db:09:c1:
                    d9:6c:b7:cf:b7:64:53:26:be:8f:a0:7c:41:51:4d:
                    be:f7:51:53:7d:d7:a8:de:ae:88:fa:59:47:40:e3:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:77:72:46:4E:B2:94:63:97:A9:0C:7B:95:E6:08:3A:FB:9F:5C
            X509v3 Authority Key Identifier:
                keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:da:89:0b:d1:5f:b8:f8:c9:8c:0f:a1:7f:e2:30:0d:67:
         30:7a:49:3a:ff:af:a1:37:38:78:54:a3:ee:f3:49:fd:ad:a4:
         5c:9a:95:95:62:13:54:c7:23:cc:67:4e:eb:8f:37:7c:10:8b:
         75:c4:3d:56:9e:4b:60:26:de:ec:0f:de:f4:1e:95:8d:0b:d9:
         0e:b0:5f:fa:43:68:b0:3a:79:19:49:10:7b:a0:88:18:e3:32:
         6c:a3:17:9f:b8:5f:eb:c0:8a:01:fb:87:9c:1b:b0:f3:5d:9d:
         24:73:71:b3:46:1c:ed:79:39:2c:e3:09:7d:22:34:2d:aa:88:
         98:75:61:7d:af:86:01:8c:22:4b:0d:ea:ec:52:16:44:29:db:
         c0:2f:97:fd:f8:6b:d7:f6:38:19:ea:8a:97:65:22:cf:db:ad:
         7e:10:ce:09:b4:e8:c6:cb:d0:4c:79:aa:f2:01:6d:c2:a5:f6:
         5b:a6:9a:95:bf:71:a0:9f:f7:bd:b1:e3:d1:b6:f1:95:7c:11:
         a3:1c:a3:ff:b3:08:7b:ae:3c:55:25:1a:f8:b0:4c:f3:2a:fe:
         5f:f0:68:ec:7f:cb:9a:65:65:9d:4b:f8:b5:66:5b:fc:83:6f:
         fe:f9:c9:36:86:45:d5:5f:51:18:da:db:1d:2c:90:56:a7:68:
         40:79:fb:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2Cz9Crjp0N1TvFqytr5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi
ODk2NjQwHhcNMjUwNDE4MTcwMDI2WhcNMjUwNDE5MTcwMDI2WjAzMTEwLwYDVQQD
EyhiNzU2Nzc3MjQ2NGViMjk0NjM5N2E5MGM3Yjk1ZTYwODNhZmI5ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxjCanbsRcVgJZ7ZPfV4m7w2XScG
s+LVFNzbNWBEnjKPtCioK3Yq6agI0UOH4fkSJzrpVpjbgAJoHpcDUP0PF6L1RziJ
MDrizxY5x6qubhyDRjNiXNES6IX15M/upOvs7FXd9qO4r2gnlcnYM6PQECm4OdX3
In5Mx7zYi4kbAUouWLQBWLuuyPa61etRtxuhHMJ1sqttRtWh3t/jnEyf9oni2FGQ
0PofyyrtdGJmiLi7krDAfzcbTPC60ZbaRBfp7eg6CKINUolH3BEjzZwUrRbE3kFJ
1Y2cVAG0Ps7bCcHZbLfPt2RTJr6PoHxBUU2+91FTfdeo3q6I+llHQOPaHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdWd3JGTrKUY5epDHuV5gg6+59cMB8GA1UdIwQY
MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt
ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi
LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaraiQvR
X7j4yYwPoX/iMA1nMHpJOv+voTc4eFSj7vNJ/a2kXJqVlWITVMcjzGdO6483fBCL
dcQ9Vp5LYCbe7A/e9B6VjQvZDrBf+kNosDp5GUkQe6CIGOMybKMXn7hf68CKAfuH
nBuw812dJHNxs0Yc7Xk5LOMJfSI0LaqImHVhfa+GAYwiSw3q7FIWRCnbwC+X/fhr
1/Y4GeqKl2Uiz9utfhDOCbToxsvQTHmq8gFtwqX2W6aalb9xoJ/3vbHj0bbxlXwR
oxyj/7MIe648VSUa+LBM8yr+X/Bo7H/LmmVlnUv4tWZb/INv/vnJNoZF1V9RGNrb
HSyQVqdoQHn7xg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:21:56 2025 by rpki-client