Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File:                     fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier:          sBOKqJn4XWZjO884SyHWmxtu8mrQ5X51MGW1iCXNQ7w=
Subject key identifier:   73:F8:87:9E:4A:AC:A1:73:82:B0:99:61:7E:DE:C0:A6:02:BB:60:4C
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer:       /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial:       019653B6D5D07BA6B755191880ABE136EABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number:          060F
Signing time:             Sun 20 Apr 2025 15:00:13 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:13 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:13 +0000
Files and hashes:         1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
                          2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: 6vrvgZ2ffhX+RTKRdxcUi/6YUY5nDZkY/AO45GzbNhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b6:d5:d0:7b:a6:b7:55:19:18:80:ab:e1:36:ea:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
        Validity
            Not Before: Apr 20 15:00:13 2025 GMT
            Not After : Apr 21 15:00:13 2025 GMT
        Subject: CN=73f8879e4aaca17382b099617edec0a602bb604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:15:86:5d:d3:1c:dd:ed:08:fa:d3:01:70:
                    c8:26:1e:7e:65:7e:d5:fb:29:89:2e:20:c2:b5:68:
                    35:78:a5:81:99:17:b5:d6:0c:f6:96:fd:97:64:10:
                    f6:81:16:c3:a7:a4:ff:5a:4c:cb:8d:31:70:e1:63:
                    05:99:4e:bb:aa:bc:2f:9e:2a:3c:74:5f:fc:d5:8f:
                    0c:fa:2f:88:b3:1a:d0:dc:e1:b4:ec:f3:7f:18:c2:
                    1a:99:49:15:8c:b3:12:27:8d:50:59:75:9e:0e:1c:
                    8a:ae:51:7b:0b:3e:bb:13:1f:7e:5a:d0:2c:7a:fd:
                    86:42:dd:8b:20:93:f0:f0:19:9a:56:b3:31:f5:97:
                    f7:0f:6b:8a:c6:3e:b1:fd:61:df:d7:04:48:48:7b:
                    14:07:a9:1d:b2:40:e6:10:22:3a:5f:39:d1:d7:12:
                    71:c1:ef:24:a0:bf:8e:4a:fc:08:1e:08:65:8b:7b:
                    ee:06:6a:c1:46:34:2f:56:a7:b2:cf:11:38:48:36:
                    3b:4e:4e:3f:32:b1:e1:a7:55:32:7c:b8:95:c3:6b:
                    b5:fc:b7:b1:8b:d2:26:40:40:fe:e7:2b:4e:82:49:
                    a0:7c:d1:bf:b5:dd:ca:5a:55:33:9e:7d:99:17:6a:
                    2a:48:e8:b8:7f:5f:be:cf:38:2e:0b:51:88:08:d1:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:87:9E:4A:AC:A1:73:82:B0:99:61:7E:DE:C0:A6:02:BB:60:4C
            X509v3 Authority Key Identifier:
                keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0b:f6:e2:e2:18:84:90:92:e6:71:c8:97:03:e2:d4:d5:8d:
         89:6e:51:51:8f:7a:0b:f1:3a:20:b1:d6:d9:a5:b8:10:65:9d:
         bc:56:2d:97:40:a0:e1:0c:86:8b:9d:35:4d:4e:b0:db:31:a9:
         fd:ed:8b:5e:d4:2c:9d:99:23:eb:d9:4f:19:cc:12:83:78:35:
         1a:1b:80:0e:55:52:c7:53:f8:d0:7d:74:c9:d7:5e:82:8d:02:
         97:53:50:01:de:b3:41:ef:7d:bf:aa:41:1d:6b:f1:b9:8f:49:
         e0:71:9a:50:c4:3c:e7:23:c8:c1:c7:13:e7:bb:41:7c:fd:5d:
         38:42:ce:18:6a:42:07:d3:71:f2:0f:04:4e:73:e1:3b:d4:33:
         2d:2b:df:33:90:38:a0:2d:00:eb:1a:4f:f8:2c:72:04:a3:9d:
         45:02:64:2f:fd:92:2b:01:97:9e:52:f3:df:21:1a:23:3c:21:
         de:aa:9e:04:47:de:44:3b:0c:2d:a1:f5:a6:10:6b:46:fc:ff:
         28:f0:d8:d3:d8:5a:c4:68:01:f3:3c:ea:a2:c6:19:32:7c:d9:
         19:bc:f5:03:13:95:e4:97:c4:1d:be:3a:b3:1a:12:f1:a1:1b:
         09:35:bb:18:28:04:0d:b9:3b:97:94:7e:5e:fd:a1:70:d6:eb:
         30:c9:de:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTttXQe6a3VRkYgKvhNuq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4
ZWYyNWIwHhcNMjUwNDIwMTUwMDEzWhcNMjUwNDIxMTUwMDEzWjAzMTEwLwYDVQQD
Eyg3M2Y4ODc5ZTRhYWNhMTczODJiMDk5NjE3ZWRlYzBhNjAyYmI2MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNYVhl3THN3tCPrTAXDIJh5+ZX7V
+ymJLiDCtWg1eKWBmRe11gz2lv2XZBD2gRbDp6T/WkzLjTFw4WMFmU67qrwvnio8
dF/81Y8M+i+IsxrQ3OG07PN/GMIamUkVjLMSJ41QWXWeDhyKrlF7Cz67Ex9+WtAs
ev2GQt2LIJPw8BmaVrMx9Zf3D2uKxj6x/WHf1wRISHsUB6kdskDmECI6XznR1xJx
we8koL+OSvwIHghli3vuBmrBRjQvVqeyzxE4SDY7Tk4/MrHhp1UyfLiVw2u1/Lex
i9ImQED+5ytOgkmgfNG/td3KWlUznn2ZF2oqSOi4f1++zzguC1GICNGkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP4h55KrKFzgrCZYX7ewKYCu2BMMB8GA1UdIwQY
MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt
NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2
LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQv24uIY
hJCS5nHIlwPi1NWNiW5RUY96C/E6ILHW2aW4EGWdvFYtl0Cg4QyGi501TU6w2zGp
/e2LXtQsnZkj69lPGcwSg3g1GhuADlVSx1P40H10yddego0Cl1NQAd6zQe99v6pB
HWvxuY9J4HGaUMQ85yPIwccT57tBfP1dOELOGGpCB9Nx8g8ETnPhO9QzLSvfM5A4
oC0A6xpP+CxyBKOdRQJkL/2SKwGXnlLz3yEaIzwh3qqeBEfeRDsMLaH1phBrRvz/
KPDY09haxGgB8zzqosYZMnzZGbz1AxOV5JfEHb46sxoS8aEbCTW7GCgEDbk7l5R+
Xv2hcNbrMMneKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:25:14 2025 by rpki-client