Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File:                     fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier:          ofbpIaiIA2Ox0Y9kCQ60jSWRGLhti43apUxVxbO/ays=
Subject key identifier:   C6:0A:BB:7B:B6:C8:D5:AC:B7:8E:CD:CC:21:2F:E0:85:43:0C:D7:A8
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer:       /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial:       019510C78A256B59AF83F3DD1D22359BDE6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number:          0E7D
Signing time:             Sun 16 Feb 2025 22:01:07 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:07 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:07 +0000
Files and hashes:         1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
                          2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: 7qrG9UEmHPHsDY3HHKEE4ts5Rc1faST3USAcRBeV+EQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:8a:25:6b:59:af:83:f3:dd:1d:22:35:9b:de:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
        Validity
            Not Before: Feb 16 22:01:07 2025 GMT
            Not After : Feb 17 22:01:07 2025 GMT
        Subject: CN=c60abb7bb6c8d5acb78ecdcc212fe085430cd7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:c6:65:e9:f6:4f:da:a4:a1:54:65:ca:22:
                    5c:79:b5:4d:7f:6c:21:ad:36:0c:b0:1c:4f:fc:c5:
                    09:86:00:22:11:06:63:0b:09:d5:a5:8b:20:51:28:
                    2c:4c:8a:b4:2e:13:52:0c:d4:dd:9c:be:63:84:7f:
                    51:5f:e0:dc:2d:30:ef:e8:0c:b6:c1:27:54:67:e3:
                    ea:8b:81:a0:fe:26:3d:d4:c9:30:89:24:16:44:41:
                    2f:2a:65:ab:29:61:f4:be:20:f5:72:d0:fa:6d:1a:
                    cc:0e:0f:f3:e6:fa:f5:b6:19:a3:7c:14:ea:a8:51:
                    c4:0e:18:79:57:90:71:7b:8d:54:11:ca:46:7d:2b:
                    a8:a7:5a:24:a8:23:8e:c1:19:ed:96:6a:b0:c5:95:
                    2c:0d:a9:06:58:26:d1:d0:00:4a:20:e9:e5:98:ea:
                    85:09:44:6c:85:d1:b6:4b:0e:e0:ca:95:ce:54:80:
                    f9:e0:90:48:ba:31:68:cf:4b:6e:e8:c8:25:9a:8e:
                    ac:8a:69:ca:99:dc:e4:39:de:57:ff:c9:52:e8:9a:
                    03:0d:8a:2f:7d:c6:49:61:f6:e2:bb:7c:30:7d:6f:
                    a2:6d:73:9c:60:03:ca:51:ec:df:4b:54:ab:4a:d1:
                    2a:7a:d3:c7:b6:f3:cf:e6:50:6c:b9:cb:00:0d:c7:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:BB:7B:B6:C8:D5:AC:B7:8E:CD:CC:21:2F:E0:85:43:0C:D7:A8
            X509v3 Authority Key Identifier:
                keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:03:fc:9f:16:98:88:5c:00:1c:bd:04:5e:3d:4d:8a:24:
         a9:5d:5c:e7:98:42:6e:cb:28:c0:97:98:b9:5c:1e:32:22:4b:
         bb:4a:df:37:ae:3b:84:4b:87:b2:68:75:b4:be:e0:5e:5f:d0:
         8d:25:50:0a:2d:5e:08:06:9c:62:27:27:27:c3:04:80:ea:44:
         f4:28:50:db:94:6b:26:37:1b:e5:69:c5:f9:77:31:58:cc:96:
         39:54:29:9f:49:cc:01:37:26:45:28:64:60:9d:77:a0:a2:63:
         99:9e:35:4b:e7:6b:7c:52:bd:02:e3:af:14:3b:7d:4d:51:bc:
         87:5e:48:65:94:22:19:5e:b7:6d:98:3f:61:df:65:a7:c5:89:
         45:c1:6f:5f:73:3c:17:1f:a3:a1:e1:7d:6c:1c:cc:6e:f3:f5:
         c4:ef:e2:cc:4c:23:8b:ae:32:4d:9b:0c:d3:00:c6:84:41:de:
         84:76:26:91:a0:fb:0c:7e:56:43:97:07:f7:e6:a4:e1:3f:74:
         f0:3d:45:f2:a4:3c:f1:78:e7:9e:4e:52:0c:ca:29:43:74:8c:
         da:a9:0b:40:38:04:8f:59:23:07:de:76:cc:a3:35:fb:2e:d6:
         6b:5b:92:31:32:a6:f2:c3:97:d9:04:59:0f:66:74:30:fc:97:
         ae:7a:69:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx4ola1mvg/PdHSI1m95uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjhiODczMDM3NWM5Mjg1M2I5OWFlM2FmNTc5N2MxMjNk
ZDE1MDcwHhcNMjUwMjE2MjIwMTA3WhcNMjUwMjE3MjIwMTA3WjAzMTEwLwYDVQQD
EyhjNjBhYmI3YmI2YzhkNWFjYjc4ZWNkY2MyMTJmZTA4NTQzMGNkN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwTGZen2T9qkoVRlyiJcebVNf2wh
rTYMsBxP/MUJhgAiEQZjCwnVpYsgUSgsTIq0LhNSDNTdnL5jhH9RX+DcLTDv6Ay2
wSdUZ+Pqi4Gg/iY91MkwiSQWREEvKmWrKWH0viD1ctD6bRrMDg/z5vr1thmjfBTq
qFHEDhh5V5Bxe41UEcpGfSuop1okqCOOwRntlmqwxZUsDakGWCbR0ABKIOnlmOqF
CURshdG2Sw7gypXOVID54JBIujFoz0tu6Mglmo6simnKmdzkOd5X/8lS6JoDDYov
fcZJYfbiu3wwfW+ibXOcYAPKUezfS1SrStEqetPHtvPP5lBsucsADcdwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYKu3u2yNWst47NzCEv4IVDDNeoMB8GA1UdIwQY
MBaAFHy4uHMDdckoU7ma469Xl8Ej3RUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAt
Mzg0MTFhMzEyZDg2LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAtMzg0MTFhMzEyZDg2
LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoMD/J8W
mIhcABy9BF49TYokqV1c55hCbssowJeYuVweMiJLu0rfN647hEuHsmh1tL7gXl/Q
jSVQCi1eCAacYicnJ8MEgOpE9ChQ25RrJjcb5WnF+XcxWMyWOVQpn0nMATcmRShk
YJ13oKJjmZ41S+drfFK9AuOvFDt9TVG8h15IZZQiGV63bZg/Yd9lp8WJRcFvX3M8
Fx+joeF9bBzMbvP1xO/izEwji64yTZsM0wDGhEHehHYmkaD7DH5WQ5cH9+ak4T90
8D1F8qQ88Xjnnk5SDMopQ3SM2qkLQDgEj1kjB952zKM1+y7Wa1uSMTKm8sOX2QRZ
D2Z0MPyXrnpp3Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:39 2025 by rpki-client