Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          yi0IQsvVpDhaKu/ssA9MCSrVZRqtm5GosSsQKwHnfJw=
Subject key identifier:   02:EB:CD:54:14:15:F7:DF:2F:49:B4:86:26:5A:77:6B:74:68:B0:C1
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       01963A9C43022480E39D6A72A867B5BCF792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          0F43
Signing time:             Tue 15 Apr 2025 18:00:41 +0000
Manifest this update:     Tue 15 Apr 2025 18:00:41 +0000
Manifest next update:     Wed 16 Apr 2025 18:00:41 +0000
Files and hashes:         1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: MkTXCdrZ7CRkyAW+mbw4JDLOPdccJjFxTAsmzWpsa3Y=)
                          2: BHjifWVoQKxqVIzEnX32wai1mHI.roa (hash: AjeiL3e+XMTL7CQVb6tcAbQ4dMq9NOjai1XiWf1vXec=)
                          3: QXbfJIh1eRteU9Wzrebe-Y-tzSY.roa (hash: SsanvIDWtEhKsoV2dkvCk+7YzGR4haX0tXLi2hZEJiE=)
                          4: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (hash: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 15:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3a:9c:43:02:24:80:e3:9d:6a:72:a8:67:b5:bc:f7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Apr 15 18:00:41 2025 GMT
            Not After : Apr 16 18:00:41 2025 GMT
        Subject: CN=02ebcd541415f7df2f49b486265a776b7468b0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:de:e4:2a:c2:51:81:0d:a9:47:a2:4f:b5:
                    e4:64:04:26:a3:30:6f:58:3f:15:59:a7:2f:e1:b6:
                    43:f3:cb:40:15:2b:1d:d4:2d:7d:f2:a1:68:9d:84:
                    7e:7e:8b:6b:53:6c:32:37:68:a0:98:de:a1:45:32:
                    21:3d:43:1d:86:89:ed:32:9f:8d:f9:c2:48:1e:47:
                    09:7b:69:92:90:79:aa:e6:9a:e7:60:7b:92:20:bb:
                    36:20:6b:b1:16:ce:7a:47:5f:a4:97:3d:08:6c:dd:
                    90:eb:c1:5d:7b:c6:ee:62:a7:30:b8:30:23:10:92:
                    41:84:44:f8:76:67:1e:fd:6a:bb:7a:43:48:4c:ab:
                    e0:d5:eb:87:6c:96:13:90:f8:00:8e:59:ee:58:f3:
                    c1:ab:27:ba:fb:19:20:f5:1c:3b:30:9f:ad:b3:f4:
                    28:6b:5a:7e:d7:e7:7a:1d:ba:e1:2b:ef:cf:dc:e9:
                    fe:e2:f6:dc:fa:88:af:2f:b4:f8:cf:28:fa:77:38:
                    f5:45:d3:d0:33:b9:f3:cd:84:f9:8a:60:f5:4e:14:
                    71:03:90:22:1f:9c:76:c2:20:35:01:32:ff:4e:fa:
                    b0:19:27:df:a0:79:be:74:4f:fc:06:a7:1c:e1:95:
                    6f:c9:1c:ea:9a:9f:ba:0b:22:2d:7c:bb:4d:3a:c7:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:CD:54:14:15:F7:DF:2F:49:B4:86:26:5A:77:6B:74:68:B0:C1
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:9a:b4:b5:01:83:55:f6:ee:d2:04:1d:df:ea:38:f8:92:
         83:8b:56:cc:f7:2a:9d:d3:9a:40:78:4b:49:6e:80:2e:32:8b:
         9b:87:9f:4f:f2:56:3a:d4:26:e5:8a:cc:69:c8:98:ae:09:e1:
         32:eb:10:7c:f9:7f:01:58:df:ff:9b:8c:90:8f:62:89:df:b2:
         fe:73:15:2b:8a:9e:ec:29:42:1c:a2:93:51:24:fc:b2:f6:54:
         d4:67:c1:90:d8:c4:a4:1b:cd:6c:0f:e5:a1:77:17:20:00:ce:
         93:ee:4e:93:4e:b0:e8:60:a4:d5:3c:44:df:a9:12:7f:ba:00:
         ff:e5:41:e0:cb:80:ff:a9:cf:4c:12:94:ca:d5:1d:b5:7a:50:
         ee:1a:81:10:0a:07:38:4a:ec:7f:9b:a8:66:e4:bf:08:12:51:
         f5:a3:37:ad:ac:6b:48:5f:2e:5b:97:b7:15:2f:60:77:05:81:
         4c:c8:35:39:b9:93:84:d2:ac:7d:0b:0b:01:63:79:52:a7:ef:
         b2:e8:b1:9a:40:32:f6:83:68:26:11:92:c5:e0:5f:84:d4:3f:
         83:f2:96:53:31:f5:ae:f8:b1:e1:13:e6:35:d5:e3:12:ff:a9:
         74:77:53:73:bf:ea:d3:bf:e2:a3:f0:77:64:8b:31:9a:fc:f0:
         4e:17:62:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY6nEMCJIDjnWpyqGe1vPeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjUwNDE1MTgwMDQxWhcNMjUwNDE2MTgwMDQxWjAzMTEwLwYDVQQD
EygwMmViY2Q1NDE0MTVmN2RmMmY0OWI0ODYyNjVhNzc2Yjc0NjhiMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Pe5CrCUYENqUeiT7XkZAQmozBv
WD8VWacv4bZD88tAFSsd1C198qFonYR+fotrU2wyN2igmN6hRTIhPUMdhontMp+N
+cJIHkcJe2mSkHmq5prnYHuSILs2IGuxFs56R1+klz0IbN2Q68Fde8buYqcwuDAj
EJJBhET4dmce/Wq7ekNITKvg1euHbJYTkPgAjlnuWPPBqye6+xkg9Rw7MJ+ts/Qo
a1p+1+d6HbrhK+/P3On+4vbc+oivL7T4zyj6dzj1RdPQM7nzzYT5imD1ThRxA5Ai
H5x2wiA1ATL/TvqwGSffoHm+dE/8Bqcc4ZVvyRzqmp+6CyItfLtNOscjxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALrzVQUFfffL0m0hiZad2t0aLDBMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7OatLUB
g1X27tIEHd/qOPiSg4tWzPcqndOaQHhLSW6ALjKLm4efT/JWOtQm5YrMaciYrgnh
MusQfPl/AVjf/5uMkI9iid+y/nMVK4qe7ClCHKKTUST8svZU1GfBkNjEpBvNbA/l
oXcXIADOk+5Ok06w6GCk1TxE36kSf7oA/+VB4MuA/6nPTBKUytUdtXpQ7hqBEAoH
OErsf5uoZuS/CBJR9aM3raxrSF8uW5e3FS9gdwWBTMg1ObmThNKsfQsLAWN5Uqfv
suixmkAy9oNoJhGSxeBfhNQ/g/KWUzH1rvix4RPmNdXjEv+pdHdTc7/q07/io/B3
ZIsxmvzwThdiWw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:29:43 2025 by rpki-client