Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File:                     3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier:          Q7J/LDjgz+kdqCprV5DwAgtn04mUWPli97yeFsntDF0=
Subject key identifier:   A9:E7:2B:B3:AD:37:FA:0C:4A:CA:94:96:07:85:73:BF:81:FB:93:2E
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer:       /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial:       01963EE6BC21921376129381B44FF94DFAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number:          14F4
Signing time:             Wed 16 Apr 2025 14:00:30 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:30 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:30 +0000
Files and hashes:         1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: qL1w+wW8Ec067s8vw3CfGnyMqnrYIYO5sGy3nT392No=)
                          2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e6:bc:21:92:13:76:12:93:81:b4:4f:f9:4d:fa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
        Validity
            Not Before: Apr 16 14:00:30 2025 GMT
            Not After : Apr 17 14:00:30 2025 GMT
        Subject: CN=a9e72bb3ad37fa0c4aca9496078573bf81fb932e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:93:eb:f5:5c:b3:ae:17:36:5d:e1:ee:97:
                    64:ed:d4:57:62:14:06:37:07:cd:c5:6d:16:9c:20:
                    23:14:96:19:0c:5d:ba:8e:22:7e:4d:9f:8d:ea:b1:
                    af:42:86:2f:99:54:c5:7e:2c:36:30:a5:f2:9a:b9:
                    42:e4:e6:ec:d5:49:53:a3:10:3d:44:d8:a1:ab:43:
                    26:48:8e:e6:56:9e:b8:3a:03:47:65:b5:72:e1:99:
                    6f:30:69:aa:05:41:9c:4a:c7:8e:2d:da:96:16:14:
                    4f:0b:eb:07:ed:1a:70:5b:51:34:a0:8e:43:2d:fb:
                    8e:a2:11:dd:66:0e:e2:bb:90:3c:a8:e2:e1:f2:e6:
                    bd:f8:a8:5d:2f:27:00:f3:87:10:b6:28:1e:40:f6:
                    94:36:e4:95:bf:a9:b4:9c:ba:05:86:8f:be:fd:a8:
                    fe:34:d9:12:14:ab:67:02:dd:c0:3e:7d:f0:c2:e5:
                    7a:92:27:d4:90:36:6b:4a:c9:bd:dc:7c:41:b4:41:
                    21:d7:cc:35:a4:5b:11:70:7a:2a:7f:0b:87:08:1f:
                    69:ca:56:a4:14:27:57:94:af:85:d1:c4:20:26:21:
                    1f:2d:0e:b4:80:a1:94:a7:06:31:9f:c8:81:61:b8:
                    a6:f0:74:34:1c:1f:30:2a:23:78:94:8d:06:81:b7:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E7:2B:B3:AD:37:FA:0C:4A:CA:94:96:07:85:73:BF:81:FB:93:2E
            X509v3 Authority Key Identifier:
                keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:34:a8:4c:81:45:8e:cb:03:84:b2:64:66:de:5c:0d:4c:f3:
         bb:1e:5a:fa:85:8c:c4:c6:e3:69:62:35:40:8b:17:eb:b0:e9:
         fa:cc:eb:60:24:88:b9:7d:f8:82:ba:d6:a3:5c:11:f8:2b:52:
         2c:20:de:a0:d2:ec:1e:52:7d:04:9d:37:07:5a:ec:92:cf:e7:
         ac:72:b5:e6:4d:2b:30:3c:15:10:0f:b0:b9:2e:18:9d:88:cf:
         f0:0b:9f:df:18:1a:25:3e:4d:4f:1e:0f:26:76:9f:fc:76:a2:
         21:68:44:aa:47:9b:2b:31:33:be:4d:df:3e:3e:ad:21:66:65:
         ce:69:86:59:06:0c:65:46:88:dd:d5:94:19:8e:ad:dc:e9:9d:
         ee:53:13:92:bd:ce:7a:9e:0e:e0:75:cf:7e:23:a3:11:44:26:
         a7:e3:e7:a6:13:22:d7:5f:86:6a:13:b4:e9:22:4e:46:58:ef:
         be:ad:60:d4:fb:c3:ce:2e:72:b8:76:09:44:4d:fa:e6:1e:b0:
         a6:3e:45:dc:23:9d:87:ea:f3:4a:1e:4f:8c:67:3a:89:95:83:
         d2:dd:b1:da:d7:88:fb:b5:5d:1f:a1:39:1d:19:1f:99:6a:6d:
         22:01:a6:1c:60:87:fd:c9:02:a9:d3:04:1c:f5:58:98:1f:1e:
         06:42:69:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5rwhkhN2EpOBtE/5TfriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDg1YjBkMWJiZjllNzgxYjE1NGIwNmY3YjkxNDExMjlk
Yjc3NWYwHhcNMjUwNDE2MTQwMDMwWhcNMjUwNDE3MTQwMDMwWjAzMTEwLwYDVQQD
EyhhOWU3MmJiM2FkMzdmYTBjNGFjYTk0OTYwNzg1NzNiZjgxZmI5MzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAOT6/Vcs64XNl3h7pdk7dRXYhQG
NwfNxW0WnCAjFJYZDF26jiJ+TZ+N6rGvQoYvmVTFfiw2MKXymrlC5Obs1UlToxA9
RNihq0MmSI7mVp64OgNHZbVy4ZlvMGmqBUGcSseOLdqWFhRPC+sH7RpwW1E0oI5D
LfuOohHdZg7iu5A8qOLh8ua9+KhdLycA84cQtigeQPaUNuSVv6m0nLoFho++/aj+
NNkSFKtnAt3APn3wwuV6kifUkDZrSsm93HxBtEEh18w1pFsRcHoqfwuHCB9pylak
FCdXlK+F0cQgJiEfLQ60gKGUpwYxn8iBYbim8HQ0HB8wKiN4lI0GgbetewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnnK7OtN/oMSsqUlgeFc7+B+5MuMB8GA1UdIwQY
MBaAFN4IWw0bv554GxVLBve5FBEp23dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTkt
N2EwYjNkNWQ5MTU2LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTktN2EwYjNkNWQ5MTU2
LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzSoTIFF
jssDhLJkZt5cDUzzux5a+oWMxMbjaWI1QIsX67Dp+szrYCSIuX34grrWo1wR+CtS
LCDeoNLsHlJ9BJ03B1rsks/nrHK15k0rMDwVEA+wuS4YnYjP8Auf3xgaJT5NTx4P
Jnaf/HaiIWhEqkebKzEzvk3fPj6tIWZlzmmGWQYMZUaI3dWUGY6t3Omd7lMTkr3O
ep4O4HXPfiOjEUQmp+PnphMi11+GahO06SJORljvvq1g1PvDzi5yuHYJRE365h6w
pj5F3COdh+rzSh5PjGc6iZWD0t2x2teI+7VdH6E5HRkfmWptIgGmHGCH/ckCqdME
HPVYmB8eBkJpBw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:17:29 2025 by rpki-client