Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File:                     f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier:          33jYZBbeXxGSqlN67B5F9TwnhZNVJ8dGqQvVl2hFVl8=
Subject key identifier:   92:44:37:F8:F0:C8:E8:F4:06:7A:76:B2:56:74:51:F7:4C:1D:D4:98
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer:       /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial:       01964FDAE72F039E3B06A88488E5966716E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number:          0A04
Signing time:             Sat 19 Apr 2025 21:01:08 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:08 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:08 +0000
Files and hashes:         1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
                          2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: RUSLVp1PmlnE7wZTy3Z24N9Fy6nOPylLUH1UAeslxVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:e7:2f:03:9e:3b:06:a8:84:88:e5:96:67:16:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
        Validity
            Not Before: Apr 19 21:01:08 2025 GMT
            Not After : Apr 20 21:01:08 2025 GMT
        Subject: CN=924437f8f0c8e8f4067a76b2567451f74c1dd498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:49:07:77:84:1b:0e:47:71:8b:42:ba:84:
                    a2:93:84:9a:ed:f6:a9:f4:6c:7e:43:61:33:8d:0b:
                    c5:87:a5:01:e1:fb:52:2c:b7:06:a9:f7:0b:27:70:
                    e1:dc:06:e4:ed:6f:35:c0:ef:a4:82:94:ff:1f:21:
                    ba:d2:a9:1e:ea:a1:99:7b:5b:58:15:af:b2:d8:01:
                    1f:78:7e:cb:a1:93:28:c3:19:ac:59:e8:9c:45:bf:
                    35:37:98:43:01:c3:58:de:75:9f:7c:72:03:d5:78:
                    58:14:9a:e0:ec:78:40:5b:20:4b:e2:cc:9d:59:93:
                    a2:ed:bc:37:8d:0f:4b:4c:36:14:c7:2c:d5:81:c6:
                    9e:5c:d6:af:86:b3:48:f9:cd:98:b2:53:bf:b1:91:
                    fb:dd:93:50:7f:4f:32:af:f7:2d:4c:3a:b5:78:ae:
                    57:50:32:e7:81:bb:e2:96:37:b5:4b:74:54:17:4f:
                    ce:7f:f3:ae:af:28:f8:63:e6:f1:94:58:ee:e3:97:
                    ac:96:02:18:3e:e6:6a:e9:7e:a9:fb:0c:18:7c:4e:
                    2c:11:c4:0c:d3:1d:46:01:11:00:51:46:ee:d9:e2:
                    58:22:78:a1:30:39:0f:49:2e:92:35:00:fd:82:f7:
                    f5:b6:db:f2:ba:4a:c8:27:15:d4:9e:0c:69:b7:a9:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:44:37:F8:F0:C8:E8:F4:06:7A:76:B2:56:74:51:F7:4C:1D:D4:98
            X509v3 Authority Key Identifier:
                keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:47:3d:bd:02:41:3b:2e:2a:da:65:1c:b4:2c:90:6f:fc:
         5b:7a:e8:8c:a0:56:b2:4c:04:da:f3:4d:17:2f:f5:1a:19:64:
         4a:17:e1:e2:da:69:bb:05:72:62:85:15:a4:9c:29:99:6b:a1:
         89:49:32:61:5a:7b:be:76:08:af:f5:ae:ba:0f:10:22:fc:6e:
         d1:ca:c8:2f:63:a5:43:ae:e3:a4:b2:67:92:2d:c7:74:22:5a:
         b0:7f:4a:87:c0:cb:be:05:59:ac:44:26:b8:2a:e2:7f:af:74:
         a7:4f:56:c8:55:eb:52:3e:f7:71:3b:3f:f5:e1:02:a7:0e:be:
         10:50:09:85:8d:c4:77:be:2b:10:13:c0:bd:08:58:75:e4:fb:
         35:13:3b:6b:a2:04:54:11:7c:b1:63:bb:9d:1b:a5:52:df:4d:
         f9:e2:b1:49:89:50:3c:64:64:ee:4a:1f:de:d9:20:11:1f:80:
         d2:82:e6:eb:44:10:76:97:0c:e1:e4:ab:bb:ac:8e:79:90:83:
         27:dd:44:bc:93:01:a8:50:cb:2d:69:1b:ab:95:f4:eb:ab:3d:
         e0:6d:b0:3f:dd:8b:ff:bb:61:e6:e0:e9:ec:0b:5e:b4:c0:10:
         f4:38:10:9d:ca:c7:6d:53:5d:32:ba:34:ee:0d:72:39:c2:2b:
         f4:ec:91:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2ucvA547BqiEiOWWZxbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj
MDFhZjkwHhcNMjUwNDE5MjEwMTA4WhcNMjUwNDIwMjEwMTA4WjAzMTEwLwYDVQQD
Eyg5MjQ0MzdmOGYwYzhlOGY0MDY3YTc2YjI1Njc0NTFmNzRjMWRkNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbBJB3eEGw5HcYtCuoSik4Sa7fap
9Gx+Q2EzjQvFh6UB4ftSLLcGqfcLJ3Dh3Abk7W81wO+kgpT/HyG60qke6qGZe1tY
Fa+y2AEfeH7LoZMowxmsWeicRb81N5hDAcNY3nWffHID1XhYFJrg7HhAWyBL4syd
WZOi7bw3jQ9LTDYUxyzVgcaeXNavhrNI+c2YslO/sZH73ZNQf08yr/ctTDq1eK5X
UDLngbvilje1S3RUF0/Of/Ouryj4Y+bxlFju45eslgIYPuZq6X6p+wwYfE4sEcQM
0x1GAREAUUbu2eJYInihMDkPSS6SNQD9gvf1ttvyukrIJxXUngxpt6lxDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJEN/jwyOj0Bnp2slZ0UfdMHdSYMB8GA1UdIwQY
MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt
Y2JlMDIwNjY1ZWZlLzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl
LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv1HPb0C
QTsuKtplHLQskG/8W3rojKBWskwE2vNNFy/1GhlkShfh4tppuwVyYoUVpJwpmWuh
iUkyYVp7vnYIr/Wuug8QIvxu0crIL2OlQ67jpLJnki3HdCJasH9Kh8DLvgVZrEQm
uCrif690p09WyFXrUj73cTs/9eECpw6+EFAJhY3Ed74rEBPAvQhYdeT7NRM7a6IE
VBF8sWO7nRulUt9N+eKxSYlQPGRk7kof3tkgER+A0oLm60QQdpcM4eSru6yOeZCD
J91EvJMBqFDLLWkbq5X066s94G2wP92L/7th5uDp7AtetMAQ9DgQncrHbVNdMro0
7g1yOcIr9OyRhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:28 2025 by rpki-client