Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File:                     cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier:          n0wSoKpv9CqI+rY1dxfnZFWVeu+eJLczIx5YL+tZfkI=
Subject key identifier:   47:FF:0C:C7:EC:E8:2F:0C:A4:D0:D5:BD:C6:18:A6:16:05:9F:A7:F1
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer:       /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial:       01964FDAAC989B45A2439B6890ECA7B59523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number:          0A1D
Signing time:             Sat 19 Apr 2025 21:00:53 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:53 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:53 +0000
Files and hashes:         1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: 6y/Y4Hh+wm5DPfuYjtVm/RKtMp9q+XwhaaQaBJvsCPw=)
                          2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:ac:98:9b:45:a2:43:9b:68:90:ec:a7:b5:95:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
        Validity
            Not Before: Apr 19 21:00:53 2025 GMT
            Not After : Apr 20 21:00:53 2025 GMT
        Subject: CN=47ff0cc7ece82f0ca4d0d5bdc618a616059fa7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:61:b8:83:7c:f1:48:1f:86:26:99:e7:de:
                    e0:7a:f0:c8:57:b0:09:e6:c2:f6:70:64:2c:ed:fe:
                    2a:ff:7c:3d:22:4c:75:47:9d:4a:b1:ae:1f:95:40:
                    73:35:49:6e:28:7f:54:49:29:da:07:1c:d7:2f:f7:
                    be:db:e4:a1:18:cc:be:5a:9a:8e:b8:58:d2:e1:76:
                    21:78:50:4d:e7:0e:a5:ff:e6:12:08:38:14:17:1b:
                    84:f8:fd:b1:99:d7:fb:da:a2:0c:4c:21:c4:9f:c1:
                    7d:97:a4:4c:21:5c:75:81:c9:05:79:09:c3:b5:3f:
                    90:0b:a9:83:ba:96:c1:be:ab:d0:53:c9:fe:3d:83:
                    b7:9b:16:69:e3:99:42:f6:26:ab:78:d1:41:1f:8a:
                    44:b8:7c:96:c0:03:fe:23:09:4e:a8:bc:57:c7:30:
                    5e:09:8d:c0:4b:1b:d6:fa:e1:c3:81:73:23:ad:db:
                    77:a3:b0:a1:de:9a:c9:c6:14:82:8a:95:61:63:25:
                    a5:03:9a:64:cb:01:14:4f:6b:4e:56:80:27:04:47:
                    9d:23:44:a6:b6:e3:89:5a:d4:1c:14:1b:47:85:dc:
                    a1:d0:4d:6b:4b:76:cf:85:46:fe:a9:e5:16:78:cf:
                    9b:b8:90:cb:20:5b:8e:59:e3:33:e6:c2:e7:99:ad:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FF:0C:C7:EC:E8:2F:0C:A4:D0:D5:BD:C6:18:A6:16:05:9F:A7:F1
            X509v3 Authority Key Identifier:
                keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:13:73:4e:81:08:a9:21:04:64:f7:a4:bb:09:52:9b:33:be:
         6d:92:b3:57:76:de:ed:1c:57:2f:bf:88:fb:04:9c:78:3e:b3:
         62:72:78:ab:bb:39:6b:01:18:ea:95:38:90:3e:96:80:88:46:
         e3:0b:e9:d8:c9:0d:e8:31:06:f4:c5:28:99:cd:61:81:b0:5e:
         3e:83:b6:b6:31:f2:bd:bb:a5:0e:f3:85:9e:ac:82:7c:41:0f:
         3f:fc:6a:6b:ca:0f:77:a3:7d:c2:e5:ae:23:70:16:14:cf:e9:
         c9:b9:c1:62:2f:d6:32:38:74:1c:2c:ea:5c:9f:06:44:f0:8d:
         8c:94:a3:9b:66:d9:c9:96:45:bf:b2:b9:c4:0a:61:05:7a:fa:
         c3:be:0c:72:ad:1b:e4:b6:e0:ad:67:53:3f:b2:8a:de:f2:4e:
         a8:65:97:2f:48:6b:c8:54:b0:52:2a:01:35:45:1d:db:58:e2:
         79:b4:b4:4f:60:ee:06:94:b0:9d:6c:ed:1c:82:b8:0f:24:95:
         c0:34:5b:9e:39:46:51:c5:2b:71:59:99:df:33:a9:68:85:3b:
         c2:3c:c6:1d:ee:f6:d7:69:41:de:15:15:8b:f3:17:1b:47:ec:
         1d:c0:02:e6:d8:6a:51:e7:6f:03:4e:af:ad:d6:0f:b1:c9:1a:
         ee:03:78:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2qyYm0WiQ5tokOyntZUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNmY2ZDExZjBjZTYzMjMwMTgxYTczZjg1YTY2NjE3MGY3
Mzg5YmQwHhcNMjUwNDE5MjEwMDUzWhcNMjUwNDIwMjEwMDUzWjAzMTEwLwYDVQQD
Eyg0N2ZmMGNjN2VjZTgyZjBjYTRkMGQ1YmRjNjE4YTYxNjA1OWZhN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZVhuIN88UgfhiaZ597gevDIV7AJ
5sL2cGQs7f4q/3w9Ikx1R51Ksa4flUBzNUluKH9USSnaBxzXL/e+2+ShGMy+WpqO
uFjS4XYheFBN5w6l/+YSCDgUFxuE+P2xmdf72qIMTCHEn8F9l6RMIVx1gckFeQnD
tT+QC6mDupbBvqvQU8n+PYO3mxZp45lC9iareNFBH4pEuHyWwAP+IwlOqLxXxzBe
CY3ASxvW+uHDgXMjrdt3o7Ch3prJxhSCipVhYyWlA5pkywEUT2tOVoAnBEedI0Sm
tuOJWtQcFBtHhdyh0E1rS3bPhUb+qeUWeM+buJDLIFuOWeMz5sLnma2+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf/DMfs6C8MpNDVvcYYphYFn6fxMB8GA1UdIwQY
MBaAFHFvbRHwzmMjAYGnP4WmZhcPc4m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTIt
ZTNmNDlhYzQ5NTYwLzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTItZTNmNDlhYzQ5NTYw
LzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhNzToEI
qSEEZPekuwlSmzO+bZKzV3be7RxXL7+I+wSceD6zYnJ4q7s5awEY6pU4kD6WgIhG
4wvp2MkN6DEG9MUomc1hgbBePoO2tjHyvbulDvOFnqyCfEEPP/xqa8oPd6N9wuWu
I3AWFM/pybnBYi/WMjh0HCzqXJ8GRPCNjJSjm2bZyZZFv7K5xAphBXr6w74Mcq0b
5LbgrWdTP7KK3vJOqGWXL0hryFSwUioBNUUd21jiebS0T2DuBpSwnWztHIK4DySV
wDRbnjlGUcUrcVmZ3zOpaIU7wjzGHe7212lB3hUVi/MXG0fsHcAC5thqUedvA06v
rdYPscka7gN4dw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:49 2025 by rpki-client