Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          NkgaVGjvuPoV/59BLQa6380xp+mo1Oy5KcmrEhFdGGU=
Subject key identifier:   E3:14:AA:04:FB:1B:8B:2A:47:F3:3B:0A:C8:F8:44:3F:71:FA:E4:E2
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       0196398956C8E6846DE2692F62D8B0505C10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          14FB
Signing time:             Tue 15 Apr 2025 13:00:23 +0000
Manifest this update:     Tue 15 Apr 2025 13:00:23 +0000
Manifest next update:     Wed 16 Apr 2025 13:00:23 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: eRDkBqPS0d57k6xuUhwfMxtI1neRNMj2mDZTsqmxhAY=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:39:89:56:c8:e6:84:6d:e2:69:2f:62:d8:b0:50:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Apr 15 13:00:23 2025 GMT
            Not After : Apr 16 13:00:23 2025 GMT
        Subject: CN=e314aa04fb1b8b2a47f33b0ac8f8443f71fae4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:2d:93:60:76:2f:77:c0:a3:aa:41:b1:ca:
                    cb:dc:6f:c6:d9:b3:2e:ba:30:70:dc:fb:d4:57:93:
                    ec:9e:cb:5e:b8:e4:ea:91:f0:9c:e1:72:44:81:79:
                    93:70:df:41:a5:17:87:fc:92:43:89:f2:e6:bf:aa:
                    5e:b8:13:65:8f:77:ef:86:92:94:87:e4:4a:af:9c:
                    8d:a6:eb:64:db:79:a4:a9:ed:33:8f:8a:bd:1e:9e:
                    79:24:b5:d2:05:06:7a:5a:22:50:76:ec:9f:0d:5a:
                    d0:36:df:9c:8b:eb:23:27:1f:0e:70:ca:95:d2:db:
                    cf:88:49:04:a4:c7:0d:73:27:33:99:2b:a4:fe:72:
                    9c:d5:fb:84:49:23:b6:f6:e6:cd:32:73:33:64:09:
                    b2:89:4c:0b:3c:b3:41:d1:df:28:95:f9:d2:98:01:
                    0f:7c:9f:31:bf:94:f5:34:85:ef:ae:4e:5b:44:d2:
                    f0:69:c6:ff:35:e7:c5:80:1e:2f:77:3b:5e:37:50:
                    f1:53:df:f8:81:99:80:55:53:ac:47:f1:6b:a0:fd:
                    e6:45:b9:d4:b1:ec:c8:14:b1:53:30:3c:b9:47:ce:
                    71:31:8a:d4:a7:87:df:72:eb:20:1c:d6:c2:d6:2b:
                    11:7c:a2:30:7c:a3:36:3b:21:bc:9d:67:59:e5:fc:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:14:AA:04:FB:1B:8B:2A:47:F3:3B:0A:C8:F8:44:3F:71:FA:E4:E2
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:5a:4b:ce:a6:0a:e8:3e:49:49:0b:87:6a:34:53:87:05:
         be:51:da:58:0e:d9:e4:d3:97:ce:5b:29:87:43:fc:18:82:6a:
         f8:75:c8:56:76:8f:5d:c6:c9:47:1a:d1:c1:53:1e:b8:96:7f:
         38:0f:b3:38:d2:ef:ba:35:6c:ad:fe:17:3b:91:8a:32:8b:70:
         9e:8a:8a:32:3a:f9:d0:34:c9:0b:e8:ea:e6:1a:47:4f:84:05:
         37:01:72:ce:55:c2:79:a6:df:b0:ac:6d:04:56:98:e0:30:c7:
         be:f0:a9:77:22:32:45:72:8b:68:f1:2f:5c:d8:0f:14:bb:0c:
         39:f9:da:50:a0:57:ed:f4:f6:80:91:b9:cc:9f:72:a5:51:e2:
         d3:7b:e0:48:8e:8e:5e:71:37:a4:0d:16:f8:78:e6:0c:e1:ca:
         bc:d4:36:e2:31:ed:9f:96:cb:7b:a4:83:23:84:c9:cf:a1:f0:
         61:01:48:23:53:fd:7a:1a:43:52:88:5f:06:1e:c7:41:f7:87:
         f4:d0:48:d2:12:04:0a:ae:d7:c6:7f:f2:38:4d:cf:b9:f6:45:
         3a:99:be:69:89:8c:cc:ae:32:2c:b4:eb:3a:e5:7a:84:87:26:
         e0:d9:4c:f9:12:45:e1:be:c0:f2:7b:10:8e:ce:08:0b:55:51:
         28:f4:0a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY5iVbI5oRt4mkvYtiwUFwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjUwNDE1MTMwMDIzWhcNMjUwNDE2MTMwMDIzWjAzMTEwLwYDVQQD
EyhlMzE0YWEwNGZiMWI4YjJhNDdmMzNiMGFjOGY4NDQzZjcxZmFlNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uwtk2B2L3fAo6pBscrL3G/G2bMu
ujBw3PvUV5PsnsteuOTqkfCc4XJEgXmTcN9BpReH/JJDifLmv6peuBNlj3fvhpKU
h+RKr5yNputk23mkqe0zj4q9Hp55JLXSBQZ6WiJQduyfDVrQNt+ci+sjJx8OcMqV
0tvPiEkEpMcNcyczmSuk/nKc1fuESSO29ubNMnMzZAmyiUwLPLNB0d8olfnSmAEP
fJ8xv5T1NIXvrk5bRNLwacb/NefFgB4vdzteN1DxU9/4gZmAVVOsR/FroP3mRbnU
sezIFLFTMDy5R85xMYrUp4ffcusgHNbC1isRfKIwfKM2OyG8nWdZ5fzq4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMUqgT7G4sqR/M7Csj4RD9x+uTiMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHv1aS86m
Cug+SUkLh2o0U4cFvlHaWA7Z5NOXzlsph0P8GIJq+HXIVnaPXcbJRxrRwVMeuJZ/
OA+zONLvujVsrf4XO5GKMotwnoqKMjr50DTJC+jq5hpHT4QFNwFyzlXCeabfsKxt
BFaY4DDHvvCpdyIyRXKLaPEvXNgPFLsMOfnaUKBX7fT2gJG5zJ9ypVHi03vgSI6O
XnE3pA0W+HjmDOHKvNQ24jHtn5bLe6SDI4TJz6HwYQFII1P9ehpDUohfBh7HQfeH
9NBI0hIECq7Xxn/yOE3PufZFOpm+aYmMzK4yLLTrOuV6hIcm4NlM+RJF4b7A8nsQ
js4IC1VRKPQKfg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 20:00:48 2025 by rpki-client