Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File:                     CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier:          WwCe/ZpNy3moLAFHdZqoO5uxiLoqK8kd0Eq6YYLTYYA=
Subject key identifier:   60:84:9C:23:01:19:19:0B:2C:D7:B6:4C:6C:14:75:25:8C:83:EF:8E
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer:       /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial:       01964D7E4302C4134EC9A29245F90899C56D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 10:00:42 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:42 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:42 +0000
Files and hashes:         1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: tHi19QjWmRnEW/KlIitTNlfc3Bb9EBgrYsoxZEQknE4=)
                          2: YlQdjt5F0FWIgyT-1ImB43dCeAQ.roa (hash: vRgN5UxgHV/91sR/Vq1eLdIZoA+usNllMbcu4073sPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:43:02:c4:13:4e:c9:a2:92:45:f9:08:99:c5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
        Validity
            Not Before: Apr 19 10:00:42 2025 GMT
            Not After : Apr 20 10:00:42 2025 GMT
        Subject: CN=60849c230119190b2cd7b64c6c1475258c83ef8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:8b:11:a4:eb:a3:c9:96:a6:1c:58:c6:67:
                    85:6d:61:fb:08:29:3a:7a:bc:47:11:b0:9b:4c:d2:
                    98:c8:e2:de:1f:06:05:2c:80:ec:95:e7:d5:7c:47:
                    27:49:fd:c8:ca:21:fa:83:de:e5:d2:8e:71:8a:e9:
                    13:a7:5c:15:2f:57:9b:19:31:dc:bf:41:e1:a9:e1:
                    e9:75:69:70:a6:f2:e4:4b:08:4e:df:da:f7:4a:4f:
                    fd:6a:55:54:35:83:dd:80:3c:97:2b:98:b8:27:11:
                    af:ec:1a:1a:14:d8:1a:0d:60:cf:00:7d:d4:7f:08:
                    29:11:c5:ce:c3:fd:ab:7f:54:6f:10:52:6f:82:ef:
                    71:7f:ef:c9:22:6d:72:ca:d5:42:3d:4b:07:18:71:
                    d7:9e:7f:9f:78:b0:a6:dc:06:51:bb:15:e0:63:8c:
                    6c:7d:e5:56:bc:ff:21:b1:86:43:a4:0e:18:4f:f3:
                    2d:5d:6c:2b:ff:03:40:58:d5:e7:c4:c3:98:b4:81:
                    72:de:4a:71:04:4c:48:2b:27:31:64:d1:3a:3e:74:
                    d1:c4:4a:13:89:bf:66:1b:90:15:f0:ba:21:75:d8:
                    c5:52:03:f6:29:b2:71:6a:6c:2b:1b:86:67:1b:13:
                    68:5e:bc:0a:3f:d9:eb:5f:72:ce:e7:77:6c:e1:24:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:84:9C:23:01:19:19:0B:2C:D7:B6:4C:6C:14:75:25:8C:83:EF:8E
            X509v3 Authority Key Identifier:
                keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:00:ea:ca:c0:da:d6:13:3d:00:8b:2b:59:78:1b:90:98:b8:
         33:76:7a:ae:19:1f:48:b9:7b:64:05:c4:96:cc:f6:19:a0:be:
         59:88:10:f7:fd:fa:b6:1e:7e:d9:72:6f:52:5f:a7:59:61:8a:
         16:da:cf:dc:92:f6:8c:10:c2:e0:55:cd:1f:34:e9:ff:ce:ab:
         ff:60:f5:cb:ea:30:40:d3:ab:b3:dd:af:8d:e6:3b:f3:b7:c5:
         1a:58:c0:95:1c:8e:ce:39:87:95:47:65:5a:9e:d5:6c:31:f5:
         4c:54:9c:03:c5:fd:d1:9d:38:41:61:02:7d:41:f1:68:d2:d3:
         a5:fb:95:50:3f:07:1e:a5:31:b9:3d:1e:ef:ba:2a:13:cc:c1:
         3e:e9:ed:45:5e:b1:9b:6a:f9:9a:62:6a:20:7b:f0:88:2f:ff:
         25:05:46:65:bd:6d:72:80:0a:9d:b6:95:7d:f9:79:03:dd:de:
         7f:47:69:92:05:6d:7f:eb:f4:ac:4c:06:6d:11:bd:4b:2c:65:
         d9:be:c0:e7:3c:b0:fd:ce:1c:e0:62:83:da:e6:81:af:67:0e:
         2d:e7:be:c1:7b:c6:3c:44:07:18:64:a7:8d:58:78:89:55:bf:
         87:73:36:64:b0:8b:da:71:6b:14:eb:cf:8a:bc:b2:9b:1b:bf:
         3a:5e:c7:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfkMCxBNOyaKSRfkImcVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjUwNDE5MTAwMDQyWhcNMjUwNDIwMTAwMDQyWjAzMTEwLwYDVQQD
Eyg2MDg0OWMyMzAxMTkxOTBiMmNkN2I2NGM2YzE0NzUyNThjODNlZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrqLEaTro8mWphxYxmeFbWH7CCk6
erxHEbCbTNKYyOLeHwYFLIDslefVfEcnSf3IyiH6g97l0o5xiukTp1wVL1ebGTHc
v0HhqeHpdWlwpvLkSwhO39r3Sk/9alVUNYPdgDyXK5i4JxGv7BoaFNgaDWDPAH3U
fwgpEcXOw/2rf1RvEFJvgu9xf+/JIm1yytVCPUsHGHHXnn+feLCm3AZRuxXgY4xs
feVWvP8hsYZDpA4YT/MtXWwr/wNAWNXnxMOYtIFy3kpxBExIKycxZNE6PnTRxEoT
ib9mG5AV8LohddjFUgP2KbJxamwrG4ZnGxNoXrwKP9nrX3LO53ds4SRsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCEnCMBGRkLLNe2TGwUdSWMg++OMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAADqysDa
1hM9AIsrWXgbkJi4M3Z6rhkfSLl7ZAXElsz2GaC+WYgQ9/36th5+2XJvUl+nWWGK
FtrP3JL2jBDC4FXNHzTp/86r/2D1y+owQNOrs92vjeY787fFGljAlRyOzjmHlUdl
Wp7VbDH1TFScA8X90Z04QWECfUHxaNLTpfuVUD8HHqUxuT0e77oqE8zBPuntRV6x
m2r5mmJqIHvwiC//JQVGZb1tcoAKnbaVffl5A93ef0dpkgVtf+v0rEwGbRG9Syxl
2b7A5zyw/c4c4GKD2uaBr2cOLee+wXvGPEQHGGSnjVh4iVW/h3M2ZLCL2nFrFOvP
iryymxu/Ol7HOQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:16 2025 by rpki-client