Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          U5FYCD63oYBs2JFM/XwZ9/DX4NlAhkFfV74SUE/5rgg=
Subject key identifier:   05:C1:55:AC:50:54:6E:0B:A1:91:12:CE:3F:B0:B5:74:60:B7:96:45
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       019618109331C8DA99AE62E35CEE786B387D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          14E6
Signing time:             Wed 09 Apr 2025 01:01:01 +0000
Manifest this update:     Wed 09 Apr 2025 01:01:01 +0000
Manifest next update:     Thu 10 Apr 2025 01:01:01 +0000
Files and hashes:         1: F3mmIE5e5Y4BeSDKQ3DR2L-rAk8.roa (hash: jbee28DZuoinhmMa1MpH2LACZ/XrJT7Z3vVmbAZdw7Q=)
                          2: Mk3OCH61bD3mOm8DSaSiAzwW7fk.roa (hash: oxlH7V9EjPMbmvgDLqeKQJs9KOwBY0gM7ZfOAxvET+w=)
                          3: dRiT-c0xAt2kngbyOhm_uFIV1zw.roa (hash: Wglqc09L4EahGS8AZXe98XrHNBuQBQLDeHD0KWaBnTQ=)
                          4: fV9G8OutvawEP_xsKieVXci-tIE.roa (hash: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=)
                          5: jx4NNkHPAbONhfyLhU8TOxw7M1s.roa (hash: g2tq87dmJIfsiGuaezvjDvuxwyvPju47/Uw+kKdECC0=)
                          6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: F9A/f1VqHQQ0ZbQQGyZX/BJ7XkgUDzNTp+2FuSi+NQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:18:10:93:31:c8:da:99:ae:62:e3:5c:ee:78:6b:38:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Apr  9 01:01:01 2025 GMT
            Not After : Apr 10 01:01:01 2025 GMT
        Subject: CN=05c155ac50546e0ba19112ce3fb0b57460b79645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:04:8c:0d:87:cb:39:a7:98:f8:5e:c4:f2:
                    21:44:62:c2:b3:d4:dd:b3:d5:fd:4d:2a:d9:57:3d:
                    23:2c:85:5c:77:55:e2:34:e3:bf:55:b6:ec:c2:43:
                    4b:e1:98:09:b3:ee:87:8c:88:d4:d2:da:d7:fe:ab:
                    d5:91:dd:8a:58:26:3e:83:06:44:f4:26:a5:a4:a7:
                    0d:9f:a8:8a:5c:61:e6:d2:9c:05:bf:01:ff:2a:32:
                    32:bd:25:f3:2d:eb:dc:61:aa:04:e2:58:6c:af:ef:
                    c6:39:93:0f:44:fe:05:7e:d5:2d:be:58:ba:19:5c:
                    5e:be:f5:cf:93:72:80:a4:1d:06:00:7f:79:95:42:
                    17:4e:15:e6:a9:ed:5c:de:7b:f6:3d:6b:96:3d:4a:
                    b0:9b:67:96:38:6a:5d:96:a3:e0:31:e1:20:88:1d:
                    3a:45:20:91:31:84:b9:61:f6:dc:8a:e5:e1:24:89:
                    98:3d:39:1c:5a:50:32:e8:32:84:57:7e:00:c2:16:
                    43:7d:33:b5:c1:02:a4:e1:77:0e:10:a2:2a:a8:63:
                    ee:98:ca:fc:74:b3:b0:4f:a9:1c:5d:bb:cd:03:47:
                    f1:9b:0f:45:57:01:4a:6e:39:9b:0c:4d:e6:94:96:
                    22:44:42:75:30:21:31:6c:4d:fb:d4:b3:fe:0d:ff:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:55:AC:50:54:6E:0B:A1:91:12:CE:3F:B0:B5:74:60:B7:96:45
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:f0:bf:80:e9:7c:33:f3:93:bc:60:4f:71:00:cb:86:e7:
         a8:ed:9b:e1:7f:90:30:f4:7f:a0:f2:a0:04:ef:4e:4c:e5:6e:
         e0:aa:4f:9e:19:3e:e2:47:3a:4b:cc:ed:2e:cd:b9:38:39:5d:
         01:63:7b:01:7e:d6:20:cf:a5:50:07:c2:2a:fe:c8:fa:4d:37:
         5b:a9:42:b1:7a:7a:94:a1:a0:c2:39:b4:bd:f5:ce:95:f9:69:
         be:06:fa:ce:cf:79:eb:02:e2:71:c7:19:20:a3:fd:52:02:c2:
         15:4a:b0:25:0e:d6:3a:19:d1:16:42:d0:4a:42:f4:66:f9:4f:
         8b:a1:fa:bc:86:3a:a9:61:6c:f0:6c:df:75:13:1f:41:9f:7f:
         48:0c:64:1b:e7:74:18:ac:4c:10:75:c1:83:75:45:2f:d6:d9:
         d1:69:95:ed:e5:7d:05:c0:86:ac:71:04:f6:41:e3:15:d4:c5:
         a8:f5:f7:97:e8:26:b5:07:97:10:5e:83:18:29:d4:ab:59:06:
         16:78:d7:b6:a0:70:5e:8b:00:ed:6c:c3:b1:d6:52:fa:41:07:
         f0:83:5d:23:ea:ed:9c:4a:b8:d0:bf:6d:5d:bc:03:ec:db:7c:
         56:62:ac:e2:cf:50:01:f5:41:6f:e3:31:05:f9:c5:9f:20:72:
         09:b7:2e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYYEJMxyNqZrmLjXO54azh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3
YzNkZjUwHhcNMjUwNDA5MDEwMTAxWhcNMjUwNDEwMDEwMTAxWjAzMTEwLwYDVQQD
EygwNWMxNTVhYzUwNTQ2ZTBiYTE5MTEyY2UzZmIwYjU3NDYwYjc5NjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoYEjA2HyzmnmPhexPIhRGLCs9Td
s9X9TSrZVz0jLIVcd1XiNOO/VbbswkNL4ZgJs+6HjIjU0trX/qvVkd2KWCY+gwZE
9CalpKcNn6iKXGHm0pwFvwH/KjIyvSXzLevcYaoE4lhsr+/GOZMPRP4FftUtvli6
GVxevvXPk3KApB0GAH95lUIXThXmqe1c3nv2PWuWPUqwm2eWOGpdlqPgMeEgiB06
RSCRMYS5YfbciuXhJImYPTkcWlAy6DKEV34AwhZDfTO1wQKk4XcOEKIqqGPumMr8
dLOwT6kcXbvNA0fxmw9FVwFKbjmbDE3mlJYiREJ1MCExbE371LP+Df/vVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXBVaxQVG4LoZESzj+wtXRgt5ZFMB8GA1UdIwQY
MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt
Y2Y4M2Q2ZTQwNTU4LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4
LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcPwv4Dp
fDPzk7xgT3EAy4bnqO2b4X+QMPR/oPKgBO9OTOVu4KpPnhk+4kc6S8ztLs25ODld
AWN7AX7WIM+lUAfCKv7I+k03W6lCsXp6lKGgwjm0vfXOlflpvgb6zs956wLicccZ
IKP9UgLCFUqwJQ7WOhnRFkLQSkL0ZvlPi6H6vIY6qWFs8GzfdRMfQZ9/SAxkG+d0
GKxMEHXBg3VFL9bZ0WmV7eV9BcCGrHEE9kHjFdTFqPX3l+gmtQeXEF6DGCnUq1kG
FnjXtqBwXosA7WzDsdZS+kEH8INdI+rtnEq40L9tXbwD7Nt8VmKs4s9QAfVBb+Mx
BfnFnyByCbcung==
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:51 2025 by rpki-client