Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File:                     o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier:          /cxQbLI1nJtSDFW2rRbMcpKFtV00yE7ds86aueShhog=
Subject key identifier:   49:FD:FC:CC:0B:FD:21:EB:E4:07:BD:61:6D:DC:09:03:E6:9F:CF:75
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer:       /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial:       01964A0EF54818E7FE3221AB6FDCC3359672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number:          14F9
Signing time:             Fri 18 Apr 2025 18:00:16 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:16 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:16 +0000
Files and hashes:         1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: Rbsuyh08rFULUNrJiOLphDaJWBTj9C4H0D7watTmEqk=)
                          2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0e:f5:48:18:e7:fe:32:21:ab:6f:dc:c3:35:96:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
        Validity
            Not Before: Apr 18 18:00:16 2025 GMT
            Not After : Apr 19 18:00:16 2025 GMT
        Subject: CN=49fdfccc0bfd21ebe407bd616ddc0903e69fcf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:90:3d:e0:38:61:f8:93:71:73:8c:db:29:
                    f9:53:91:0e:53:9f:46:6d:97:3c:12:71:68:db:49:
                    b6:da:3a:52:95:aa:22:cb:60:b5:5a:25:2d:2e:a8:
                    9c:54:b5:5a:df:95:fc:08:63:cf:51:04:92:3f:ce:
                    a1:83:bc:a1:2b:45:3d:0e:93:43:16:ca:02:0b:ec:
                    e8:93:79:62:0a:ee:fe:42:e8:5c:ed:3b:75:ea:e7:
                    1c:1c:a9:ba:14:ab:d8:12:42:51:64:9e:ef:82:d5:
                    ee:e9:ee:20:15:31:11:63:2f:61:f3:7f:c5:ba:a2:
                    b2:8f:90:bc:2b:f8:8d:2e:2b:a5:d4:78:15:b0:c6:
                    f9:5a:08:cc:55:e2:9e:3e:43:d4:e0:58:05:59:83:
                    72:0d:ac:fa:d4:d0:68:b7:bb:2b:2e:6d:ab:e2:cb:
                    a3:11:bc:77:5a:88:1b:e3:c5:42:ad:c0:c4:95:08:
                    d8:c5:66:d9:11:24:01:3b:f3:bd:d7:f6:62:c4:10:
                    d4:9a:eb:89:85:65:ff:07:e6:e9:ee:dc:77:18:cf:
                    cd:50:de:00:6b:35:fd:36:31:96:60:c3:94:13:aa:
                    a4:b3:99:ea:81:05:09:cb:4b:6e:63:08:45:31:72:
                    69:00:67:5a:ae:63:ff:28:db:b7:9a:2d:94:38:53:
                    83:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FD:FC:CC:0B:FD:21:EB:E4:07:BD:61:6D:DC:09:03:E6:9F:CF:75
            X509v3 Authority Key Identifier:
                keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:df:44:6c:04:ac:a0:8f:8e:6a:75:f6:1f:e9:4c:05:2c:
         5c:36:39:ae:2f:e5:70:8d:50:02:e2:21:05:b1:36:24:8c:ef:
         94:d0:a0:a1:8e:ba:79:62:bc:b0:17:04:c1:d1:50:f5:d7:bc:
         63:61:e9:8d:39:0c:db:03:07:db:ae:40:ee:fa:3f:d4:ac:8f:
         58:fc:b5:d5:56:cb:96:e7:f5:98:9d:1a:95:38:d7:be:9f:bd:
         8e:1d:98:82:d5:3e:e2:c9:52:7b:74:5c:41:0f:e7:66:56:02:
         76:57:b8:8b:9c:65:31:c7:aa:ba:5b:d9:fb:21:40:c8:e2:67:
         dd:61:2d:81:b6:db:96:b6:ff:2d:c8:a2:01:20:59:e9:17:20:
         d3:d0:0f:61:79:94:30:fa:25:79:e4:86:e0:b4:ab:10:06:86:
         6a:de:c7:fb:9d:a3:9d:69:aa:8d:78:d3:cd:df:7a:3e:88:f2:
         83:fc:df:cb:0a:b6:90:12:a1:b4:68:53:51:62:10:f7:82:98:
         a0:f0:fd:c4:03:74:05:45:26:6d:d9:3f:18:49:72:42:4d:2d:
         9c:b2:cb:c8:bf:61:1e:6e:4e:ac:37:a8:b5:bf:5e:c7:b1:6c:
         e2:22:4b:22:be:2d:78:ef:77:c0:c7:28:0f:e3:23:9a:f2:4a:
         73:7c:39:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKDvVIGOf+MiGrb9zDNZZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj
NWVmY2YwHhcNMjUwNDE4MTgwMDE2WhcNMjUwNDE5MTgwMDE2WjAzMTEwLwYDVQQD
Eyg0OWZkZmNjYzBiZmQyMWViZTQwN2JkNjE2ZGRjMDkwM2U2OWZjZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d6QPeA4YfiTcXOM2yn5U5EOU59G
bZc8EnFo20m22jpSlaoiy2C1WiUtLqicVLVa35X8CGPPUQSSP86hg7yhK0U9DpND
FsoCC+zok3liCu7+Quhc7Tt16uccHKm6FKvYEkJRZJ7vgtXu6e4gFTERYy9h83/F
uqKyj5C8K/iNLiul1HgVsMb5WgjMVeKePkPU4FgFWYNyDaz61NBot7srLm2r4suj
Ebx3Wogb48VCrcDElQjYxWbZESQBO/O91/ZixBDUmuuJhWX/B+bp7tx3GM/NUN4A
azX9NjGWYMOUE6qks5nqgQUJy0tuYwhFMXJpAGdarmP/KNu3mi2UOFODVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn9/MwL/SHr5Ae9YW3cCQPmn891MB8GA1UdIwQY
MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt
MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2
LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTvfRGwE
rKCPjmp19h/pTAUsXDY5ri/lcI1QAuIhBbE2JIzvlNCgoY66eWK8sBcEwdFQ9de8
Y2HpjTkM2wMH265A7vo/1KyPWPy11VbLluf1mJ0alTjXvp+9jh2YgtU+4slSe3Rc
QQ/nZlYCdle4i5xlMcequlvZ+yFAyOJn3WEtgbbblrb/LciiASBZ6Rcg09APYXmU
MPoleeSG4LSrEAaGat7H+52jnWmqjXjTzd96Pojyg/zfywq2kBKhtGhTUWIQ94KY
oPD9xAN0BUUmbdk/GElyQk0tnLLLyL9hHm5OrDeotb9ex7Fs4iJLIr4teO93wMco
D+MjmvJKc3w5Tw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:11:14 2025 by rpki-client