Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File:                     N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier:          sLVDAPbQWfwpCH6FgJkirLUpGZx8aa7br6KpvgwfsAg=
Subject key identifier:   8C:05:71:FB:6B:F6:4B:88:46:ED:40:90:93:09:48:5F:06:E5:4F:EB
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       0195124716C8C09092E865CE31DE3E1599B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number:          0DEC
Signing time:             Mon 17 Feb 2025 05:00:03 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:03 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:03 +0000
Files and hashes:         1: 2M9xuwu5AndhxSfR2ZXlPgIY5_M.roa (hash: 0EPkYtcWzG6eUp2dhcekU5xNDT1dEtWLrLrA3RfkTu0=)
                          2: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: gQHQRagcOZEeRj7jlr7VJI2A1JBU670hyk4gxHwZUrI=)
                          3: SS113d4UMKkPVDPWmlqWck-x24E.roa (hash: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=)
                          4: tce_jftJ9E_4KJ_uPWaE-OosXF4.roa (hash: wJZcfb6ZEWBCJ/uKNt0y+u5y+6aoB2gLD29sHouunZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:16:c8:c0:90:92:e8:65:ce:31:de:3e:15:99:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Feb 17 05:00:03 2025 GMT
            Not After : Feb 18 05:00:03 2025 GMT
        Subject: CN=8c0571fb6bf64b8846ed40909309485f06e54feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:7e:2b:e6:04:ce:b4:6c:46:a4:0c:b5:8b:
                    fd:ab:67:09:fd:d7:50:4a:60:fb:c1:55:10:7f:93:
                    7c:fc:6d:08:a2:5d:7b:00:eb:3c:81:43:62:9f:d0:
                    af:24:ef:07:4c:eb:58:e8:7e:ec:bc:3c:78:ef:56:
                    5e:33:3f:e1:d0:15:fe:af:2b:d4:7d:41:10:ec:48:
                    be:e0:47:7e:22:a7:f7:a3:d2:2b:bd:9c:89:db:ad:
                    4d:82:20:66:6c:74:0f:d5:95:66:62:a4:e9:a7:92:
                    71:8a:9c:7b:11:36:83:6a:70:74:9e:19:f8:1d:35:
                    67:89:32:af:5e:b1:eb:c0:9d:ac:d4:38:db:92:f7:
                    6a:0a:32:06:11:c6:fa:e8:76:c4:4e:57:62:97:c3:
                    0b:28:82:5e:1a:2e:22:13:88:65:ae:b4:be:88:0f:
                    03:73:ac:4f:52:67:d2:cc:09:56:3f:02:b9:c0:86:
                    15:da:a0:31:c1:59:01:9d:3c:97:7c:4e:f1:1c:7f:
                    5d:8d:87:c5:5e:31:d2:b3:20:bf:f0:85:ba:ef:82:
                    cc:01:08:64:44:14:0b:5a:89:f8:67:bc:70:a0:28:
                    18:29:ef:9e:42:5a:67:eb:00:56:c6:42:56:2b:35:
                    b8:61:9f:1a:5b:cd:38:3b:4d:20:f8:03:dd:55:c6:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:05:71:FB:6B:F6:4B:88:46:ED:40:90:93:09:48:5F:06:E5:4F:EB
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:67:2d:5e:49:77:47:45:02:63:16:4e:c8:28:f8:8e:da:a1:
         23:35:cf:9f:9f:e3:c0:51:b9:6f:df:62:bf:e8:8c:7b:86:e4:
         ac:53:b0:2c:dd:01:85:7e:e8:de:2c:7c:82:89:67:90:20:c2:
         c9:34:5e:e1:ac:f6:26:e8:16:91:cd:e5:94:04:90:67:b2:07:
         29:fc:7a:fe:5f:24:1f:a5:f3:bd:39:e9:3c:e4:44:73:a7:3f:
         d7:2e:02:3a:15:9a:7e:da:ea:c8:d9:a2:e8:b6:c8:1c:8b:ca:
         e6:fb:fe:20:81:29:90:51:20:82:1d:c7:64:ef:42:a6:f0:34:
         1d:57:57:9b:dd:33:82:e9:35:e3:1b:b8:1b:82:a1:6d:48:60:
         5b:1e:89:71:64:22:77:07:55:b0:c0:6c:06:e5:50:19:ed:0a:
         a0:fe:02:a9:7f:bd:45:28:b6:c7:a5:a8:f0:11:5b:66:2a:a7:
         1c:f1:5d:1e:9d:18:34:ab:83:0a:36:f7:d3:6c:51:3d:e8:37:
         f7:c8:7c:b4:8a:36:6b:f5:13:41:ca:ab:53:f9:95:cb:d7:71:
         5b:c9:fd:ff:97:15:16:5d:96:f2:b4:5e:30:8c:01:51:2e:43:
         10:89:74:d0:17:f1:98:6b:51:c0:6d:b9:41:25:0c:bc:89:ae:
         e9:ee:e0:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRxbIwJCS6GXOMd4+FZm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGMyNjE3YTM3MmU0NjZlOThkNDI1MzJkZDBiZDhlNWNk
ZDk5M2QwHhcNMjUwMjE3MDUwMDAzWhcNMjUwMjE4MDUwMDAzWjAzMTEwLwYDVQQD
Eyg4YzA1NzFmYjZiZjY0Yjg4NDZlZDQwOTA5MzA5NDg1ZjA2ZTU0ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMd+K+YEzrRsRqQMtYv9q2cJ/ddQ
SmD7wVUQf5N8/G0Iol17AOs8gUNin9CvJO8HTOtY6H7svDx471ZeMz/h0BX+ryvU
fUEQ7Ei+4Ed+Iqf3o9IrvZyJ261NgiBmbHQP1ZVmYqTpp5Jxipx7ETaDanB0nhn4
HTVniTKvXrHrwJ2s1DjbkvdqCjIGEcb66HbETldil8MLKIJeGi4iE4hlrrS+iA8D
c6xPUmfSzAlWPwK5wIYV2qAxwVkBnTyXfE7xHH9djYfFXjHSsyC/8IW674LMAQhk
RBQLWon4Z7xwoCgYKe+eQlpn6wBWxkJWKzW4YZ8aW804O00g+APdVcYTgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwFcftr9kuIRu1AkJMJSF8G5U/rMB8GA1UdIwQY
MBaAFDdMJhejcuRm6Y1CUy3QvY5c3Zk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQt
YjhkYWQ2ZTVjM2JmLzEvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQtYjhkYWQ2ZTVjM2Jm
LzEvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2ctXkl3
R0UCYxZOyCj4jtqhIzXPn5/jwFG5b99iv+iMe4bkrFOwLN0BhX7o3ix8golnkCDC
yTRe4az2JugWkc3llASQZ7IHKfx6/l8kH6XzvTnpPOREc6c/1y4COhWaftrqyNmi
6LbIHIvK5vv+IIEpkFEggh3HZO9CpvA0HVdXm90zguk14xu4G4KhbUhgWx6JcWQi
dwdVsMBsBuVQGe0KoP4CqX+9RSi2x6Wo8BFbZiqnHPFdHp0YNKuDCjb302xRPeg3
98h8tIo2a/UTQcqrU/mVy9dxW8n9/5cVFl2W8rReMIwBUS5DEIl00BfxmGtRwG25
QSUMvImu6e7gQw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:28 2025 by rpki-client