Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File:                     FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier:          DtVqeJqXj4OFJp5RL44cuKT85hw63uUUOb/BA3BM7XU=
Subject key identifier:   B1:9D:00:A1:B8:BE:6E:B3:34:16:19:3A:69:3D:B4:CC:27:38:12:13
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer:       /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial:       0195121027823D7133A5D88B24A1E040DD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number:          061C
Signing time:             Mon 17 Feb 2025 04:00:03 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:03 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:03 +0000
Files and hashes:         1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
                          2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: RyemtrPj4lKL62/4O9hDJ05A2V6qiRAVHUIT+acahAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:27:82:3d:71:33:a5:d8:8b:24:a1:e0:40:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
        Validity
            Not Before: Feb 17 04:00:03 2025 GMT
            Not After : Feb 18 04:00:03 2025 GMT
        Subject: CN=b19d00a1b8be6eb33416193a693db4cc27381213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:48:6b:90:60:4b:39:40:80:2e:ee:c4:d4:5a:
                    b7:47:a7:ea:9f:05:24:4d:2c:e2:b5:62:17:91:45:
                    40:29:fd:d1:ee:37:88:ed:95:74:8e:28:f2:3f:26:
                    bf:76:fc:1b:23:93:1e:79:01:77:c4:e2:76:ef:59:
                    88:55:7f:93:0c:ac:57:de:80:23:7e:1c:3e:67:2c:
                    d9:da:54:f7:d1:8b:29:55:1b:95:ab:d8:19:93:e3:
                    a4:6e:03:62:56:7f:09:64:b5:3e:bc:2a:be:ab:10:
                    3a:9a:cd:00:f7:ff:9c:32:ba:6e:68:45:07:df:ad:
                    db:e9:87:05:b6:41:40:62:06:7b:e6:c3:79:9f:22:
                    a3:17:4a:4c:82:43:3b:eb:6d:55:58:d7:d9:d2:89:
                    ce:d1:eb:0d:be:1b:76:e3:35:2f:5d:ea:7b:d7:73:
                    44:05:f9:05:7f:5e:f3:6a:79:05:32:3f:ae:cf:7f:
                    63:dc:ab:4a:4d:11:8b:02:3d:84:8e:e6:4a:36:31:
                    08:cb:4d:e2:da:ab:06:ca:e8:26:d1:19:02:16:62:
                    57:ea:82:47:af:b5:05:b5:0e:99:7b:36:7e:8d:60:
                    89:b6:c7:86:f2:21:56:9d:f4:cd:92:27:54:58:bf:
                    bf:f6:98:0f:08:0e:9f:dc:90:4d:68:42:42:98:68:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9D:00:A1:B8:BE:6E:B3:34:16:19:3A:69:3D:B4:CC:27:38:12:13
            X509v3 Authority Key Identifier:
                keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3f:88:cf:1b:11:eb:4e:cf:0c:4b:24:d1:79:03:89:d6:ae:
         48:a2:12:07:97:08:bd:d9:97:df:ab:ac:55:7c:21:7f:13:bb:
         63:41:47:1b:e6:a1:53:92:b8:5f:dc:6d:df:e7:a5:10:41:9e:
         9f:64:f9:c9:73:b3:9f:2a:e2:f9:fa:d1:85:b6:9b:73:dc:b5:
         58:17:99:7f:5b:70:a1:d7:37:b6:a5:16:67:83:21:fa:15:ac:
         a0:c2:2b:02:f2:06:70:f8:92:6d:57:f9:0c:6f:21:4a:19:36:
         b4:4c:27:a0:60:53:80:e0:64:47:99:44:9f:29:26:58:6e:22:
         c9:24:09:3a:30:e7:7e:03:d6:22:85:97:dd:b6:7c:41:ec:27:
         43:97:0f:e8:43:d0:36:fa:04:de:4a:4f:c5:50:30:fa:da:a6:
         47:05:ca:96:fb:8d:94:77:31:24:e2:dd:91:2e:2f:1f:53:9e:
         34:ff:fd:a5:a1:ee:1e:78:e4:c9:df:4a:88:8f:28:55:af:a4:
         1d:d1:89:16:98:f6:22:ca:e3:1b:a9:da:7f:63:39:09:78:0f:
         90:b5:c9:13:0e:38:be:53:34:18:b7:5e:03:3e:6f:23:14:6a:
         b8:da:38:75:6e:ee:a6:57:0d:22:48:a9:d4:09:21:f4:b8:e0:
         e6:cc:75:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSECeCPXEzpdiLJKHgQN0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWQzMGI3MGI5YTgzY2I4ZWQ1NTAxZjU1NGE3ZmVjYTM4
MmY5NTkwHhcNMjUwMjE3MDQwMDAzWhcNMjUwMjE4MDQwMDAzWjAzMTEwLwYDVQQD
EyhiMTlkMDBhMWI4YmU2ZWIzMzQxNjE5M2E2OTNkYjRjYzI3MzgxMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEhrkGBLOUCALu7E1Fq3R6fqnwUk
TSzitWIXkUVAKf3R7jeI7ZV0jijyPya/dvwbI5MeeQF3xOJ271mIVX+TDKxX3oAj
fhw+ZyzZ2lT30YspVRuVq9gZk+OkbgNiVn8JZLU+vCq+qxA6ms0A9/+cMrpuaEUH
363b6YcFtkFAYgZ75sN5nyKjF0pMgkM7621VWNfZ0onO0esNvht24zUvXep713NE
BfkFf17zankFMj+uz39j3KtKTRGLAj2EjuZKNjEIy03i2qsGyugm0RkCFmJX6oJH
r7UFtQ6ZezZ+jWCJtseG8iFWnfTNkidUWL+/9pgPCA6f3JBNaEJCmGihhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGdAKG4vm6zNBYZOmk9tMwnOBITMB8GA1UdIwQY
MBaAFBWdMLcLmoPLjtVQH1VKf+yjgvlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAt
NjVkNzIyODM3MTIxLzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAtNjVkNzIyODM3MTIx
LzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz+IzxsR
607PDEsk0XkDidauSKISB5cIvdmX36usVXwhfxO7Y0FHG+ahU5K4X9xt3+elEEGe
n2T5yXOznyri+frRhbabc9y1WBeZf1twodc3tqUWZ4Mh+hWsoMIrAvIGcPiSbVf5
DG8hShk2tEwnoGBTgOBkR5lEnykmWG4iySQJOjDnfgPWIoWX3bZ8QewnQ5cP6EPQ
NvoE3kpPxVAw+tqmRwXKlvuNlHcxJOLdkS4vH1OeNP/9paHuHnjkyd9KiI8oVa+k
HdGJFpj2IsrjG6naf2M5CXgPkLXJEw44vlM0GLdeAz5vIxRquNo4dW7uplcNIkip
1Akh9Ljg5sx16Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:31 2025 by rpki-client