Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File:                     FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier:          BPZg2q50hcqd7QUxWOG2c0V0CTPRUkBxYqgzSJ5ipZ8=
Subject key identifier:   70:CC:11:DE:D9:BD:D0:03:A8:3F:4B:DC:EF:0E:E4:2E:11:B5:95:AF
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer:       /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial:       01963E0B938A6D50EDD9BB1613FA56122C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number:          1486
Signing time:             Wed 16 Apr 2025 10:01:08 +0000
Manifest this update:     Wed 16 Apr 2025 10:01:08 +0000
Manifest next update:     Thu 17 Apr 2025 10:01:08 +0000
Files and hashes:         1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: ao4RtMCR3N2CAHJSrQj3EF40ke7DwseRJzp4iktDUCg=)
                          2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:0b:93:8a:6d:50:ed:d9:bb:16:13:fa:56:12:2c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
        Validity
            Not Before: Apr 16 10:01:08 2025 GMT
            Not After : Apr 17 10:01:08 2025 GMT
        Subject: CN=70cc11ded9bdd003a83f4bdcef0ee42e11b595af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:17:f0:15:2a:60:22:b2:90:83:ad:f3:6c:
                    47:a5:79:54:95:64:62:08:6a:0c:2e:e2:4b:1a:44:
                    fd:0d:a0:83:73:c6:9a:7e:df:b0:a9:2b:06:1d:50:
                    3c:87:38:c8:8b:be:6a:15:23:5f:a6:55:4d:3d:e7:
                    09:06:42:e4:89:6b:b8:38:cb:f9:f1:2d:30:0d:b4:
                    d2:61:78:cc:dd:2b:aa:33:73:07:84:66:dd:99:f8:
                    90:0f:ac:92:fa:6b:f6:49:3d:35:06:86:0d:e7:3f:
                    da:1e:0c:51:42:1f:b9:55:68:e4:1c:4b:ba:a5:b8:
                    9f:f1:61:e7:6e:aa:9e:ac:ad:18:a5:6b:1a:17:88:
                    be:07:2e:7b:40:eb:64:85:93:ae:ed:5c:c0:a7:80:
                    07:d7:31:c0:2b:66:d9:88:2b:8e:13:08:2b:5c:a9:
                    01:ce:27:e8:cc:c3:5b:19:49:53:ea:ff:36:2f:74:
                    8d:22:3c:47:8c:cc:ef:5c:28:db:ac:e5:83:99:b5:
                    1c:99:83:20:ab:a9:1d:0a:e5:ea:6b:95:1a:6d:ec:
                    14:02:49:9a:29:31:df:0d:bc:d5:0d:f8:e3:bc:a3:
                    ae:9a:24:60:64:dc:ed:b6:37:2f:73:1b:15:d5:46:
                    04:5e:99:91:93:ad:ed:89:93:90:a5:b8:50:cf:f9:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:11:DE:D9:BD:D0:03:A8:3F:4B:DC:EF:0E:E4:2E:11:B5:95:AF
            X509v3 Authority Key Identifier:
                keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:47:b5:69:91:3a:41:14:cf:dd:87:e6:2d:78:df:ae:57:
         25:12:f6:98:43:ed:70:ba:74:21:f3:4c:fe:1d:54:4d:7a:40:
         92:19:1f:21:ab:32:b4:27:5e:1f:91:4b:85:89:fd:11:ab:5a:
         fd:d2:2c:73:8d:ca:b9:e1:ab:9f:ae:91:2f:1a:1e:39:c7:51:
         26:5a:d0:6c:8e:84:89:f1:cc:16:e4:61:0a:8a:a7:fc:cc:b9:
         00:8b:ba:9d:4a:cd:3b:6a:55:99:0c:43:e3:66:1a:f3:68:db:
         eb:52:67:34:91:12:d2:28:ea:f1:15:01:d3:e1:a9:f6:bd:a3:
         70:f1:f7:85:dc:30:87:be:f3:47:cc:1c:6f:e6:d5:cb:ce:24:
         52:6b:57:f4:f9:cf:d0:63:13:24:e2:ac:a5:35:e0:c5:8c:0d:
         b7:3f:8f:61:5e:63:67:74:3c:a8:f7:f4:3e:83:29:78:5b:91:
         f7:3e:89:d6:ce:48:cd:8c:28:c1:a4:69:7b:a3:75:45:4d:63:
         47:df:ef:b4:a0:e0:2c:fb:10:c1:d0:11:37:b3:95:8b:10:ed:
         fb:c0:30:e7:42:a1:d2:92:9c:16:68:1f:d6:63:ef:12:f3:1a:
         6d:d9:68:80:1b:63:94:b1:0e:e4:01:20:39:f1:4e:5d:b6:66:
         e4:d2:40:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+C5OKbVDt2bsWE/pWEiwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk
NzkwYzkwHhcNMjUwNDE2MTAwMTA4WhcNMjUwNDE3MTAwMTA4WjAzMTEwLwYDVQQD
Eyg3MGNjMTFkZWQ5YmRkMDAzYTgzZjRiZGNlZjBlZTQyZTExYjU5NWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MYX8BUqYCKykIOt82xHpXlUlWRi
CGoMLuJLGkT9DaCDc8aaft+wqSsGHVA8hzjIi75qFSNfplVNPecJBkLkiWu4OMv5
8S0wDbTSYXjM3SuqM3MHhGbdmfiQD6yS+mv2ST01BoYN5z/aHgxRQh+5VWjkHEu6
pbif8WHnbqqerK0YpWsaF4i+By57QOtkhZOu7VzAp4AH1zHAK2bZiCuOEwgrXKkB
zifozMNbGUlT6v82L3SNIjxHjMzvXCjbrOWDmbUcmYMgq6kdCuXqa5UabewUAkma
KTHfDbzVDfjjvKOumiRgZNzttjcvcxsV1UYEXpmRk63tiZOQpbhQz/niMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDMEd7ZvdADqD9L3O8O5C4RtZWvMB8GA1UdIwQY
MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct
MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2
LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPlHtWmR
OkEUz92H5i14365XJRL2mEPtcLp0IfNM/h1UTXpAkhkfIasytCdeH5FLhYn9Eata
/dIsc43KueGrn66RLxoeOcdRJlrQbI6EifHMFuRhCoqn/My5AIu6nUrNO2pVmQxD
42Ya82jb61JnNJES0ijq8RUB0+Gp9r2jcPH3hdwwh77zR8wcb+bVy84kUmtX9PnP
0GMTJOKspTXgxYwNtz+PYV5jZ3Q8qPf0PoMpeFuR9z6J1s5IzYwowaRpe6N1RU1j
R9/vtKDgLPsQwdARN7OVixDt+8Aw50Kh0pKcFmgf1mPvEvMabdlogBtjlLEO5AEg
OfFOXbZm5NJAEQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:33:29 2025 by rpki-client