Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          jNRfN6DHCk9UnqZgniXJLwwm+LjltUMQ8cGn7TdH1jQ=
Subject key identifier:   6F:09:B9:A5:41:39:5F:B5:83:92:25:88:E1:F3:38:E3:50:34:94:0E
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       0196120EC2DBCCB3DEBF70FEE7CE8E9D49D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          0FC1
Signing time:             Mon 07 Apr 2025 21:01:19 +0000
Manifest this update:     Mon 07 Apr 2025 21:01:19 +0000
Manifest next update:     Tue 08 Apr 2025 21:01:19 +0000
Files and hashes:         1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: 3JOMGtG4WKMsjeJZmlZP+2oaqOown32b5hPLSW8njV4=)
                          2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:0e:c2:db:cc:b3:de:bf:70:fe:e7:ce:8e:9d:49:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Apr  7 21:01:19 2025 GMT
            Not After : Apr  8 21:01:19 2025 GMT
        Subject: CN=6f09b9a541395fb583922588e1f338e35034940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e6:56:a5:89:33:ce:02:93:dd:7a:9f:73:ef:
                    7c:2d:e7:db:e5:7f:3e:e5:11:93:1c:2b:34:2c:54:
                    9b:ef:3d:f0:e1:63:c6:9a:cb:1b:36:56:03:98:f2:
                    47:61:44:dc:f0:a9:4c:cc:a8:14:67:bd:1c:e6:c2:
                    a2:ac:88:0f:da:cb:ce:bb:e6:e1:ee:65:dd:2c:18:
                    d5:c5:d2:78:f6:3e:c3:d1:2a:9a:66:3e:2f:08:79:
                    28:72:ce:b4:97:99:22:9c:20:ab:d7:1a:02:59:30:
                    3c:43:e3:59:63:a2:0d:aa:ff:3b:30:25:ef:cd:c3:
                    f4:76:a8:e2:b3:f4:e5:7b:d9:3a:4e:1d:73:9f:a3:
                    c4:e1:0d:c1:03:0d:00:62:6b:37:df:a8:7b:03:b1:
                    0d:79:ff:56:6a:05:7c:e0:ec:51:ee:be:ab:19:5f:
                    de:71:ac:c5:ee:3f:b0:70:bf:e7:76:26:80:5b:fa:
                    66:3a:07:80:3d:81:e5:1a:14:50:82:14:b5:8f:e7:
                    00:c1:ad:82:21:c7:a6:8c:f4:1d:2e:11:7c:e5:74:
                    78:b5:c8:03:be:35:e8:7f:51:48:7d:4c:66:31:e9:
                    8f:aa:64:39:67:d9:d7:8d:9c:4b:f5:58:60:57:25:
                    52:7c:4e:a6:c1:d4:42:86:ec:62:8b:20:8c:d1:67:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:09:B9:A5:41:39:5F:B5:83:92:25:88:E1:F3:38:E3:50:34:94:0E
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:e9:1e:b0:12:59:01:81:31:fc:e3:de:e8:56:4c:a3:08:
         bb:b7:4c:f6:83:69:80:12:b2:3e:df:6d:79:94:0c:76:f2:ce:
         82:2f:a9:c2:67:25:4e:d2:13:74:fa:a1:3a:95:7a:cd:80:25:
         b5:ed:18:c3:bb:9f:35:03:88:84:8d:a5:8e:90:ac:4a:57:ed:
         37:ac:0e:9a:3e:3d:d7:3b:49:cc:ec:12:6f:ae:3e:40:4d:8d:
         6f:4f:39:b6:b5:58:69:69:20:33:3e:66:20:27:74:fb:65:d1:
         76:73:66:7f:03:0a:ea:12:07:7c:3d:66:96:8f:90:ce:7a:00:
         ef:db:17:c1:7f:81:c8:c7:ae:ca:e1:95:48:02:67:a7:d7:d5:
         71:ea:f1:d6:78:1f:a7:ab:b4:57:cd:47:0f:06:93:55:c1:bf:
         82:b7:f3:9b:4a:8d:e0:7f:2f:a8:2e:2e:1a:a8:26:0f:be:84:
         a8:ab:9c:22:7c:d9:c2:91:b2:06:ec:3c:16:ae:e7:9a:3b:7d:
         50:94:89:0e:b1:36:e6:4a:06:e3:61:84:12:18:9d:14:12:65:
         6a:5b:50:99:f2:68:b5:c4:a3:af:3b:67:cc:c1:93:0c:be:ac:
         40:51:74:02:cf:cf:6a:5c:c2:35:73:33:8e:51:2a:12:0e:d1:
         9b:9c:44:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSDsLbzLPev3D+586OnUnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTlmZWE3ZTgzZTY0ZTVkODI1NjIzMTNjM2EzZjE5MGY0
OWYwMzIwHhcNMjUwNDA3MjEwMTE5WhcNMjUwNDA4MjEwMTE5WjAzMTEwLwYDVQQD
Eyg2ZjA5YjlhNTQxMzk1ZmI1ODM5MjI1ODhlMWYzMzhlMzUwMzQ5NDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OZWpYkzzgKT3Xqfc+98Lefb5X8+
5RGTHCs0LFSb7z3w4WPGmssbNlYDmPJHYUTc8KlMzKgUZ70c5sKirIgP2svOu+bh
7mXdLBjVxdJ49j7D0SqaZj4vCHkocs60l5kinCCr1xoCWTA8Q+NZY6INqv87MCXv
zcP0dqjis/Tle9k6Th1zn6PE4Q3BAw0AYms336h7A7ENef9WagV84OxR7r6rGV/e
cazF7j+wcL/ndiaAW/pmOgeAPYHlGhRQghS1j+cAwa2CIcemjPQdLhF85XR4tcgD
vjXof1FIfUxmMemPqmQ5Z9nXjZxL9VhgVyVSfE6mwdRChuxiiyCM0WdE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8JuaVBOV+1g5IliOHzOONQNJQOMB8GA1UdIwQY
MBaAFIVZ/qfoPmTl2CViMTw6PxkPSfAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDct
ODcwZTY0ZDQ2NGQ1LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDctODcwZTY0ZDQ2NGQ1
LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK7pHrAS
WQGBMfzj3uhWTKMIu7dM9oNpgBKyPt9teZQMdvLOgi+pwmclTtITdPqhOpV6zYAl
te0Yw7ufNQOIhI2ljpCsSlftN6wOmj491ztJzOwSb64+QE2Nb085trVYaWkgMz5m
ICd0+2XRdnNmfwMK6hIHfD1mlo+QznoA79sXwX+ByMeuyuGVSAJnp9fVcerx1ngf
p6u0V81HDwaTVcG/grfzm0qN4H8vqC4uGqgmD76EqKucInzZwpGyBuw8Fq7nmjt9
UJSJDrE25koG42GEEhidFBJlaltQmfJotcSjrztnzMGTDL6sQFF0As/PalzCNXMz
jlEqEg7Rm5xEBw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:06 2025 by rpki-client