Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File:                     eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier:          CkSVD290DsZMVyWhgYFyoshoEmp5cRJQ28jyujP/+0I=
Subject key identifier:   6F:4F:67:F6:D3:A0:13:BD:55:02:17:6D:62:EC:0D:25:6B:50:7C:F0
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer:       /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial:       01963FFA820BA9C86CF2058E4805BABC2958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number:          98
Signing time:             Wed 16 Apr 2025 19:01:43 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:43 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:43 +0000
Files and hashes:         1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: dhNLyBtJe6dZlvVcnUyqj2gc72dRPQZcE8jz4w9sPqw=)
                          2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:fa:82:0b:a9:c8:6c:f2:05:8e:48:05:ba:bc:29:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
        Validity
            Not Before: Apr 16 19:01:43 2025 GMT
            Not After : Apr 17 19:01:43 2025 GMT
        Subject: CN=6f4f67f6d3a013bd5502176d62ec0d256b507cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:c7:18:24:db:9c:03:f3:0a:f7:34:86:bf:
                    6a:e9:54:49:1c:b4:43:e5:f1:c2:dc:09:f6:85:4c:
                    81:c1:9a:ae:a8:0d:ff:20:bd:a9:90:52:4a:f0:5d:
                    f0:b8:2b:70:9a:79:90:42:8e:1a:e7:62:b4:e5:79:
                    a5:d3:2b:eb:cb:b4:d3:af:40:16:06:6b:62:4a:dc:
                    6b:f7:a9:c9:bf:ed:a5:86:32:72:66:07:8a:dc:4e:
                    19:b0:96:10:e4:76:9e:ef:ca:97:d4:1e:3c:b8:ca:
                    85:2c:61:23:16:38:82:cd:2a:d8:79:84:ef:ba:68:
                    db:82:cd:8c:04:d4:dd:53:ab:40:72:fa:8f:6a:b4:
                    8f:36:fd:e2:46:da:40:01:90:37:c1:36:09:b1:08:
                    3e:a2:e7:8b:1f:73:2c:f0:12:ae:06:d1:12:07:fc:
                    5d:7c:fb:97:9b:69:9a:b6:8b:1e:45:9c:5c:59:64:
                    3c:bc:33:95:c9:e3:0d:72:52:50:19:79:ca:5d:b3:
                    26:7f:41:31:50:1f:c9:62:29:0e:18:60:f4:3a:cf:
                    ac:4c:05:b2:ce:32:0c:b7:71:8b:fd:76:28:e8:04:
                    d6:c4:4b:17:2f:ac:50:54:a7:8c:e4:c5:55:ec:05:
                    f6:00:cc:3b:cc:04:85:9d:41:44:74:ca:a7:d4:86:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:67:F6:D3:A0:13:BD:55:02:17:6D:62:EC:0D:25:6B:50:7C:F0
            X509v3 Authority Key Identifier:
                keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:8b:7f:e0:4e:b8:af:5a:fc:f2:36:ed:a0:3e:b3:ee:84:
         51:50:ff:79:1e:47:1a:c0:0b:9c:d5:19:7a:d5:5f:a2:6b:03:
         65:a4:7f:da:01:3a:7a:38:5b:ff:e3:c2:3c:99:de:b5:44:b9:
         b2:0c:45:d7:e8:f4:f3:8b:ad:da:17:05:2a:be:d7:ac:01:b2:
         db:d7:59:93:04:33:df:e7:cc:9a:41:76:ed:78:35:a4:de:cb:
         61:e5:2b:32:14:22:bd:f7:25:c8:b5:e5:d7:ce:e4:e8:38:72:
         5b:35:86:aa:38:c2:65:a4:03:2f:2c:55:a6:a5:a9:84:d5:fe:
         5b:97:27:9a:ce:f2:06:85:8e:9f:f7:2e:11:d9:5f:1b:5d:49:
         29:e9:e6:d9:f9:4b:44:a9:b6:e5:88:5f:79:41:ef:7e:fb:ba:
         94:b0:57:0b:ca:75:5e:c5:10:90:f4:e4:07:89:00:fc:67:3e:
         32:90:bc:be:13:3b:a7:f8:b9:dd:d2:a6:b4:5d:a0:90:32:c4:
         59:49:76:fe:c6:1a:65:f8:70:51:1c:bc:d1:7c:81:08:86:bf:
         d6:2e:45:41:02:98:4a:3e:38:05:89:3d:e6:88:28:0a:c5:86:
         4e:40:6c:44:f2:0d:3e:fb:c9:4c:c1:ec:95:da:54:c5:14:40:
         b4:9c:47:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+oILqchs8gWOSAW6vClYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDMyYzEyMTczNTQ0OWYxNTM4ZmYwMDM2ZjRhYmQwNjAw
YTgyNWYwHhcNMjUwNDE2MTkwMTQzWhcNMjUwNDE3MTkwMTQzWjAzMTEwLwYDVQQD
Eyg2ZjRmNjdmNmQzYTAxM2JkNTUwMjE3NmQ2MmVjMGQyNTZiNTA3Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqADHGCTbnAPzCvc0hr9q6VRJHLRD
5fHC3An2hUyBwZquqA3/IL2pkFJK8F3wuCtwmnmQQo4a52K05Xml0yvry7TTr0AW
BmtiStxr96nJv+2lhjJyZgeK3E4ZsJYQ5Hae78qX1B48uMqFLGEjFjiCzSrYeYTv
umjbgs2MBNTdU6tAcvqParSPNv3iRtpAAZA3wTYJsQg+oueLH3Ms8BKuBtESB/xd
fPuXm2matoseRZxcWWQ8vDOVyeMNclJQGXnKXbMmf0ExUB/JYikOGGD0Os+sTAWy
zjIMt3GL/XYo6ATWxEsXL6xQVKeM5MVV7AX2AMw7zASFnUFEdMqn1IZJOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9PZ/bToBO9VQIXbWLsDSVrUHzwMB8GA1UdIwQY
MBaAFHjTLBIXNUSfFTj/ADb0q9BgCoJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUt
MzRhM2FhMGI2YWEwLzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUtMzRhM2FhMGI2YWEw
LzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5CLf+BO
uK9a/PI27aA+s+6EUVD/eR5HGsALnNUZetVfomsDZaR/2gE6ejhb/+PCPJnetUS5
sgxF1+j084ut2hcFKr7XrAGy29dZkwQz3+fMmkF27Xg1pN7LYeUrMhQivfclyLXl
187k6DhyWzWGqjjCZaQDLyxVpqWphNX+W5cnms7yBoWOn/cuEdlfG11JKenm2flL
RKm25YhfeUHvfvu6lLBXC8p1XsUQkPTkB4kA/Gc+MpC8vhM7p/i53dKmtF2gkDLE
WUl2/sYaZfhwURy80XyBCIa/1i5FQQKYSj44BYk95ogoCsWGTkBsRPINPvvJTMHs
ldpUxRRAtJxHjA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:25:17 2025 by rpki-client