Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          DSEA9lLoVzkWeFYbcaXEtRlhK0AR6NV5vpeq+wloono=
Subject key identifier:   E5:2A:69:04:03:A4:31:FA:E2:9D:E6:82:39:08:9D:C4:8B:8F:DE:BF
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       01951021E080BE7F6C6B7445E0A034361332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          1461
Signing time:             Sun 16 Feb 2025 19:00:10 +0000
Manifest this update:     Sun 16 Feb 2025 19:00:10 +0000
Manifest next update:     Mon 17 Feb 2025 19:00:10 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: S5GhZbKDrpqdp1HuMbIZIv4lHk4/gVd5mJAYImPb9Lk=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:21:e0:80:be:7f:6c:6b:74:45:e0:a0:34:36:13:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Feb 16 19:00:10 2025 GMT
            Not After : Feb 17 19:00:10 2025 GMT
        Subject: CN=e52a690403a431fae29de68239089dc48b8fdebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:97:a1:a7:91:66:7f:ae:95:ec:60:35:5e:
                    83:48:61:8a:dd:9a:6d:3e:79:5f:eb:4f:11:87:1c:
                    d5:b7:d2:4d:8d:5c:f1:02:46:82:70:4a:53:ba:4d:
                    c7:f7:c4:0e:e4:1f:72:42:db:f2:8a:20:5d:32:92:
                    eb:bd:5a:40:d0:7e:db:72:40:ef:0b:a5:a4:87:93:
                    87:e5:3c:86:dc:70:e5:09:75:ca:c5:9f:ca:88:ba:
                    8e:0a:44:95:87:d4:e3:8b:e5:76:b9:c5:a7:38:82:
                    ad:f1:f9:84:95:8a:c4:f2:d1:3c:d1:92:62:13:2a:
                    19:ad:9e:b7:a2:f3:7e:76:57:b9:9d:58:ee:a1:8b:
                    f3:bf:e2:ef:05:3e:32:a9:f9:40:71:b2:39:bf:b9:
                    8e:f8:84:45:02:86:49:f2:f8:88:81:86:17:9b:54:
                    5e:ce:a5:34:4b:c0:80:dc:5c:9c:06:fb:38:28:32:
                    a3:fe:89:f8:f3:7e:16:bc:ba:dd:2b:74:bd:c8:93:
                    cb:b9:3b:83:79:f7:3e:14:0c:05:db:c1:3d:81:4c:
                    ff:50:f9:fc:77:e8:09:5b:c6:c4:81:89:3d:3c:dd:
                    f4:38:c4:7c:6e:46:ed:c9:9c:c1:c8:55:a1:9e:3c:
                    d6:ef:7f:52:d6:16:f6:cf:13:f5:8b:a0:5c:9b:20:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:69:04:03:A4:31:FA:E2:9D:E6:82:39:08:9D:C4:8B:8F:DE:BF
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:00:c0:ac:da:0e:8e:ec:16:f6:fb:e7:c7:a8:d2:ea:bb:
         44:4e:aa:fe:35:6d:57:40:ed:ef:1f:ff:6c:92:5f:52:93:80:
         d8:94:53:67:4c:b0:aa:64:69:82:91:05:b3:4b:ab:35:79:77:
         5d:21:88:12:c1:80:b7:a7:a0:3e:0c:75:4a:6b:01:9d:0f:c3:
         66:0f:db:84:74:e4:d5:14:50:c1:fe:c3:b9:09:ce:a0:ee:8c:
         7a:0b:ed:04:6b:5a:4e:b1:26:b7:c2:e8:46:e4:07:23:ae:df:
         6f:34:40:82:10:b2:0c:48:cc:bc:99:6b:f4:16:2e:24:35:36:
         5d:1c:e6:8d:9b:1a:59:92:66:1d:18:a3:01:d9:0a:38:80:1b:
         68:88:3d:6f:89:14:fe:05:be:e6:f9:31:11:1a:56:65:82:b1:
         07:04:20:f3:96:95:66:62:d8:ac:c1:35:8e:e7:a8:ca:c8:ef:
         ad:cb:2b:1e:37:95:6a:b7:59:73:bc:cb:2a:b5:df:d9:f3:27:
         6d:4a:39:2e:ee:7b:b2:bc:df:f5:97:22:58:93:60:bc:c7:5c:
         30:de:74:5f:3e:f9:c9:40:63:f0:a5:8c:ce:16:a8:fa:0b:1b:
         b5:4d:00:e4:15:45:32:71:26:68:a5:cb:4c:a6:cf:a9:cc:89:
         0e:ab:b8:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQIeCAvn9sa3RF4KA0NhMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjUwMjE2MTkwMDEwWhcNMjUwMjE3MTkwMDEwWjAzMTEwLwYDVQQD
EyhlNTJhNjkwNDAzYTQzMWZhZTI5ZGU2ODIzOTA4OWRjNDhiOGZkZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF+XoaeRZn+ulexgNV6DSGGK3Zpt
Pnlf608RhxzVt9JNjVzxAkaCcEpTuk3H98QO5B9yQtvyiiBdMpLrvVpA0H7bckDv
C6Wkh5OH5TyG3HDlCXXKxZ/KiLqOCkSVh9Tji+V2ucWnOIKt8fmElYrE8tE80ZJi
EyoZrZ63ovN+dle5nVjuoYvzv+LvBT4yqflAcbI5v7mO+IRFAoZJ8viIgYYXm1Re
zqU0S8CA3FycBvs4KDKj/on4834WvLrdK3S9yJPLuTuDefc+FAwF28E9gUz/UPn8
d+gJW8bEgYk9PN30OMR8bkbtyZzByFWhnjzW739S1hb2zxP1i6BcmyC5ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUqaQQDpDH64p3mgjkIncSLj96/MB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyYAwKza
Do7sFvb758eo0uq7RE6q/jVtV0Dt7x//bJJfUpOA2JRTZ0ywqmRpgpEFs0urNXl3
XSGIEsGAt6egPgx1SmsBnQ/DZg/bhHTk1RRQwf7DuQnOoO6MegvtBGtaTrEmt8Lo
RuQHI67fbzRAghCyDEjMvJlr9BYuJDU2XRzmjZsaWZJmHRijAdkKOIAbaIg9b4kU
/gW+5vkxERpWZYKxBwQg85aVZmLYrME1jueoysjvrcsrHjeVardZc7zLKrXf2fMn
bUo5Lu57srzf9ZciWJNgvMdcMN50Xz75yUBj8KWMzhao+gsbtU0A5BVFMnEmaKXL
TKbPqcyJDqu4Hw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:50 2025 by rpki-client