Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
File:                     1-2d6wpD-CR-iNunaZquveM0sjGE.mft (raw, json)
Hash identifier:          xBB7QEMn/DON3zqGjWSAKXdDIQbi7xg/pFoSP4X4vHA=
Subject key identifier:   A1:D6:C0:DF:90:36:1F:E8:54:AA:5C:C4:CA:36:7C:09:6B:B3:E6:AA
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Certificate issuer:       /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial:       01964F359E2AD3A709FFF948D26ED53510BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
Manifest number:          0EF5
Signing time:             Sat 19 Apr 2025 18:00:35 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:35 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:35 +0000
Files and hashes:         1: 1-2d6wpD-CR-iNunaZquveM0sjGE.crl (hash: xrEWNuOuEngD8EeVD1GUo0ZkLmN705IznEzfN5Nc2OI=)
                          2: 9IBHLWVOZ0QllouyRgZXZZaYaZg.roa (hash: EjNvIqlv1V/ciVJtAGWjow9nk1g6XEmRzV7siqw9gdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:9e:2a:d3:a7:09:ff:f9:48:d2:6e:d5:35:10:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
        Validity
            Not Before: Apr 19 18:00:35 2025 GMT
            Not After : Apr 20 18:00:35 2025 GMT
        Subject: CN=a1d6c0df90361fe854aa5cc4ca367c096bb3e6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:e5:e7:a0:6e:49:1f:93:e3:fd:60:32:95:
                    28:e1:32:34:b5:d5:57:2b:00:5f:1e:25:27:fe:53:
                    0f:ab:45:9a:8e:5c:a5:f9:18:e5:e6:34:6c:88:87:
                    8c:5c:92:bb:7d:71:35:24:c9:55:13:4f:d2:f7:57:
                    5d:d1:8d:63:e2:43:b6:c6:fa:7e:3d:3e:2d:a5:7a:
                    dd:23:d1:0f:32:28:f9:d4:42:78:f6:97:3a:52:32:
                    10:e2:7d:c5:45:8b:a0:c6:17:ee:c2:db:5b:6a:d4:
                    18:cf:1c:5b:76:03:c7:2b:88:94:f3:ac:f1:1c:7a:
                    36:26:25:a0:71:db:19:bf:6a:b3:11:3c:26:e5:21:
                    ef:3e:66:8a:77:c6:a2:2f:32:05:2d:20:eb:e3:e9:
                    00:cf:30:e1:29:69:71:7d:b4:ac:a5:df:40:1c:88:
                    6a:b0:2e:45:cb:40:ae:0e:cd:c2:69:74:82:89:47:
                    a4:af:ac:f6:03:6b:46:ac:37:91:b9:1b:90:04:f4:
                    03:63:b3:29:7f:56:8f:9c:59:9d:49:3b:7f:51:07:
                    85:7f:8f:16:67:34:dd:1c:82:11:44:82:fb:20:25:
                    27:72:1f:87:ed:67:c9:c4:06:a7:b4:a2:86:ee:91:
                    d3:6c:17:ac:5c:f2:b4:6b:b6:73:67:4b:7b:11:bf:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:C0:DF:90:36:1F:E8:54:AA:5C:C4:CA:36:7C:09:6B:B3:E6:AA
            X509v3 Authority Key Identifier:
                keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:16:33:9e:68:3d:3a:c6:f0:80:39:60:ae:46:a1:47:ae:
         ff:65:db:da:3e:d1:0f:83:76:27:75:1a:d3:2f:45:67:d4:bd:
         11:13:d0:ef:aa:10:16:06:ff:94:88:64:9f:36:10:37:ad:d2:
         0a:5a:9f:32:31:12:d8:8d:df:07:ff:36:26:83:db:44:f1:60:
         2f:85:8b:15:bc:0d:aa:2c:59:f7:63:7c:f4:d9:3c:a2:ba:70:
         ff:a1:68:1a:c0:5e:7c:ed:c3:8c:8e:79:fb:1b:35:9d:89:49:
         85:04:da:37:8a:77:f7:b1:a2:77:32:c7:62:95:b6:5f:84:f2:
         98:18:40:3d:a2:3f:da:e0:a6:f1:8c:71:0c:0f:6f:81:56:b2:
         c2:ed:e4:75:e3:58:19:f5:6c:54:f9:1a:bf:7e:0a:82:0a:a0:
         1b:6c:32:f9:13:cf:40:0a:fb:68:82:cb:2d:a7:2e:5b:70:1e:
         2a:a2:4d:7a:14:03:a2:d9:28:aa:f1:f9:5c:d1:94:de:17:05:
         49:94:e4:84:5a:53:34:e6:d6:d7:63:02:3c:15:df:d2:13:c9:
         90:b9:07:01:bf:ed:dd:25:4f:a5:d9:f9:39:d6:0e:f0:d6:94:
         b3:5f:28:3c:34:be:0e:14:d0:88:b2:1a:1e:0f:6f:8a:17:4e:
         e8:f5:35:39
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZPNZ4q06cJ//lI0m7VNRC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNjc3YWMyOTBmZTA5MWZhMjM2ZTlkYTY2YWJhZjc4Y2Qy
YzhjNjEwHhcNMjUwNDE5MTgwMDM1WhcNMjUwNDIwMTgwMDM1WjAzMTEwLwYDVQQD
EyhhMWQ2YzBkZjkwMzYxZmU4NTRhYTVjYzRjYTM2N2MwOTZiYjNlNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvujl56BuSR+T4/1gMpUo4TI0tdVX
KwBfHiUn/lMPq0Wajlyl+Rjl5jRsiIeMXJK7fXE1JMlVE0/S91dd0Y1j4kO2xvp+
PT4tpXrdI9EPMij51EJ49pc6UjIQ4n3FRYugxhfuwttbatQYzxxbdgPHK4iU86zx
HHo2JiWgcdsZv2qzETwm5SHvPmaKd8aiLzIFLSDr4+kAzzDhKWlxfbSspd9AHIhq
sC5Fy0CuDs3CaXSCiUekr6z2A2tGrDeRuRuQBPQDY7Mpf1aPnFmdSTt/UQeFf48W
ZzTdHIIRRIL7ICUnch+H7WfJxAantKKG7pHTbBesXPK0a7ZzZ0t7Eb+Y4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKHWwN+QNh/oVKpcxMo2fAlrs+aqMB8GA1UdIwQY
MBaAFPtnesKQ/gkfojbp2marr3jNLIxhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yZDZ3cEQtQ1ItaU51bmFacXV2ZU0wc2pHRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNWEwMWUyLTgzZTItNGE3Yy1hYzJi
LTU4ZjY3MjNlOTgxZS8xLzEtMmQ2d3BELUNSLWlOdW5hWnF1dmVNMHNqR0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRjLzVhMDFlMi04M2UyLTRhN2MtYWMyYi01OGY2NzIzZTk4
MWUvMS8xLTJkNndwRC1DUi1pTnVuYVpxdXZlTTBzakdFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOsW
M55oPTrG8IA5YK5GoUeu/2Xb2j7RD4N2J3Ua0y9FZ9S9ERPQ76oQFgb/lIhknzYQ
N63SClqfMjES2I3fB/82JoPbRPFgL4WLFbwNqixZ92N89Nk8orpw/6FoGsBefO3D
jI55+xs1nYlJhQTaN4p397GidzLHYpW2X4TymBhAPaI/2uCm8YxxDA9vgVaywu3k
deNYGfVsVPkav34KggqgG2wy+RPPQAr7aILLLacuW3AeKqJNehQDotkoqvH5XNGU
3hcFSZTkhFpTNObW12MCPBXf0hPJkLkHAb/t3SVPpdn5OdYO8NaUs18oPDS+DhTQ
iLIaHg9vihdO6PU1OQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:03 2025 by rpki-client