Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File:                     cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier:          CZX8K50+MH9ctBGhrrx4ZbsBr57oODznBPQuD02J1f4=
Subject key identifier:   91:EA:5D:89:E4:38:DB:8A:67:A0:FE:37:A1:C2:E9:F5:F5:45:0C:62
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer:       /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial:       01964745451364D8CB3C9CE3105A6486A4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number:          11C6
Signing time:             Fri 18 Apr 2025 05:00:44 +0000
Manifest this update:     Fri 18 Apr 2025 05:00:44 +0000
Manifest next update:     Sat 19 Apr 2025 05:00:44 +0000
Files and hashes:         1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: bCx7yXhqdJrE7ORZCGLSqDiyvA6qbGYQqgGm+VhZhsA=)
                          2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:45:45:13:64:d8:cb:3c:9c:e3:10:5a:64:86:a4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
        Validity
            Not Before: Apr 18 05:00:44 2025 GMT
            Not After : Apr 19 05:00:44 2025 GMT
        Subject: CN=91ea5d89e438db8a67a0fe37a1c2e9f5f5450c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:e3:a7:39:d3:f1:2a:0c:ed:b2:97:bd:87:
                    2d:34:95:33:d3:26:ac:bf:1d:33:5d:1a:b9:05:17:
                    fe:21:d3:30:6d:db:bc:6c:3f:76:4d:ec:c4:e3:f0:
                    7f:cf:9d:a1:86:47:61:78:34:a2:1e:28:56:3d:29:
                    a5:92:ff:85:42:5c:3e:1d:72:0f:65:78:e3:61:be:
                    05:e0:ef:5c:11:fb:cc:14:f9:b0:d3:b5:96:3a:64:
                    8c:36:65:ca:d5:75:af:72:0c:5d:a2:f4:a8:12:ab:
                    f7:57:ba:29:4c:8b:eb:f2:cc:e6:9b:ee:85:ea:49:
                    6b:70:49:16:6f:e6:a2:4f:d9:2c:9a:e6:69:3d:e6:
                    a7:ef:c7:1f:f4:09:5e:cc:42:96:3e:40:9c:34:87:
                    f1:c9:93:70:20:83:5c:38:d2:dc:3f:f2:dd:36:13:
                    7c:37:84:da:85:7b:37:81:cc:04:67:ec:bc:aa:00:
                    90:fa:9e:c5:1e:71:bb:5b:f1:05:39:4b:9b:ce:0c:
                    7a:05:38:60:63:c5:6c:2f:77:30:d9:12:86:28:4a:
                    26:87:f3:20:75:65:99:24:4f:67:06:a2:50:f4:2c:
                    36:18:13:ea:50:4b:56:28:d4:b2:ed:68:a6:4f:d3:
                    73:b8:15:d1:4e:fa:d0:0b:b2:e9:34:9a:0f:f2:53:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:5D:89:E4:38:DB:8A:67:A0:FE:37:A1:C2:E9:F5:F5:45:0C:62
            X509v3 Authority Key Identifier:
                keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e7:d1:2c:5d:3f:95:38:44:73:4e:67:0f:e7:6d:52:31:ac:
         54:2b:4b:fa:06:f7:6a:c3:14:78:b7:6c:73:1a:05:e7:5f:91:
         30:6a:06:4f:7d:12:09:6d:93:b1:74:1c:d4:92:d2:3f:f4:9e:
         cc:e6:87:db:f5:9b:c5:64:21:54:4c:76:d4:88:91:09:5c:48:
         09:ea:27:63:52:21:e7:2d:a4:da:af:ce:eb:2d:04:e7:b6:89:
         50:38:4c:fe:6c:a2:a8:b6:74:ca:cb:33:b1:0b:56:6b:1a:9b:
         e4:ae:cb:95:e0:ad:6e:8b:be:03:74:36:a4:5e:73:75:b5:8d:
         b2:ad:83:ab:0f:7f:ae:7e:27:05:62:41:0c:ac:89:1e:bf:9d:
         65:02:58:ac:45:fe:3c:43:f2:7b:b2:5a:14:f9:b5:ff:64:92:
         3d:fd:86:b1:d0:ad:fc:3b:81:2b:41:bb:d6:c1:26:02:4d:b6:
         ef:74:95:a9:c7:60:18:5a:4d:c2:bf:a4:55:f3:30:07:b3:71:
         1b:2c:4c:2d:25:6f:85:0e:7a:53:21:8d:78:47:94:86:d1:ac:
         5d:89:9f:d1:28:f5:f8:79:39:00:e7:6d:ec:a7:98:ed:0a:f7:
         1f:ee:3b:91:f7:a8:23:40:38:9c:77:95:f8:5a:92:28:52:4e:
         2b:67:29:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHRUUTZNjLPJzjEFpkhqTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDcxYzg1YTM0ODI5NThmODdmMDMyYjY0NjMxOThjN2Zk
OWViMDcwHhcNMjUwNDE4MDUwMDQ0WhcNMjUwNDE5MDUwMDQ0WjAzMTEwLwYDVQQD
Eyg5MWVhNWQ4OWU0MzhkYjhhNjdhMGZlMzdhMWMyZTlmNWY1NDUwYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8jjpznT8SoM7bKXvYctNJUz0yas
vx0zXRq5BRf+IdMwbdu8bD92TezE4/B/z52hhkdheDSiHihWPSmlkv+FQlw+HXIP
ZXjjYb4F4O9cEfvMFPmw07WWOmSMNmXK1XWvcgxdovSoEqv3V7opTIvr8szmm+6F
6klrcEkWb+aiT9ksmuZpPean78cf9AlezEKWPkCcNIfxyZNwIINcONLcP/LdNhN8
N4TahXs3gcwEZ+y8qgCQ+p7FHnG7W/EFOUubzgx6BThgY8VsL3cw2RKGKEomh/Mg
dWWZJE9nBqJQ9Cw2GBPqUEtWKNSy7WimT9NzuBXRTvrQC7LpNJoP8lMkBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHqXYnkONuKZ6D+N6HC6fX1RQxiMB8GA1UdIwQY
MBaAFHEHHIWjSClY+H8DK2RjGYx/2esHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEt
YWVmZDgwODcyNTMyLzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEtYWVmZDgwODcyNTMy
LzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+fRLF0/
lThEc05nD+dtUjGsVCtL+gb3asMUeLdscxoF51+RMGoGT30SCW2TsXQc1JLSP/Se
zOaH2/WbxWQhVEx21IiRCVxICeonY1Ih5y2k2q/O6y0E57aJUDhM/myiqLZ0yssz
sQtWaxqb5K7LleCtbou+A3Q2pF5zdbWNsq2Dqw9/rn4nBWJBDKyJHr+dZQJYrEX+
PEPye7JaFPm1/2SSPf2GsdCt/DuBK0G71sEmAk2273SVqcdgGFpNwr+kVfMwB7Nx
GyxMLSVvhQ56UyGNeEeUhtGsXYmf0Sj1+Hk5AOdt7KeY7Qr3H+47kfeoI0A4nHeV
+FqSKFJOK2cpcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:45 2025 by rpki-client