Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File:                     P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier:          mC+WacXfK17bRKoskixiq9i5UCrUy+MvhBbQGJH8R3g=
Subject key identifier:   E0:3F:C0:D9:90:F8:8E:0E:A7:64:0C:35:F0:E2:40:DA:AC:F0:39:31
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer:       /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial:       0196451F9F7C28C9E7CC50DE85BB3089887C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number:          14F8
Signing time:             Thu 17 Apr 2025 19:00:22 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:22 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:22 +0000
Files and hashes:         1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: WJLfIyG8hogubsMgXFDkfn39i3lVeHDWl+gfTrqAtGc=)
                          2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:9f:7c:28:c9:e7:cc:50:de:85:bb:30:89:88:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
        Validity
            Not Before: Apr 17 19:00:22 2025 GMT
            Not After : Apr 18 19:00:22 2025 GMT
        Subject: CN=e03fc0d990f88e0ea7640c35f0e240daacf03931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:20:32:d1:30:3e:5e:41:67:72:4b:c1:69:
                    cb:4c:8a:62:c9:fa:94:d1:c3:6c:4c:91:c6:56:cf:
                    88:37:4c:88:4c:51:52:d6:a9:31:33:50:6f:2c:57:
                    c9:d4:66:ef:c3:70:91:76:2d:af:83:90:29:9d:d5:
                    61:13:05:80:c5:ca:36:b3:a4:74:d7:d8:e7:b8:c4:
                    3e:75:cc:9e:3e:12:cd:9d:21:2d:1e:f2:bb:10:01:
                    66:22:21:cf:dd:f5:69:73:17:3a:76:95:a1:63:8a:
                    db:3d:c9:0b:70:fa:85:3c:ac:a5:52:31:ae:51:b9:
                    ba:d2:c6:b4:87:44:dd:b3:bd:6b:27:b2:5d:4f:a6:
                    14:0e:6f:bc:b4:87:af:26:f1:bd:16:7d:23:bf:15:
                    b1:c3:2e:91:c3:3c:42:99:e6:56:76:d5:15:7a:58:
                    e3:f0:23:f9:6c:22:3a:90:de:bc:72:af:90:ef:37:
                    1b:29:be:48:65:9c:67:2f:3b:70:c6:5f:34:48:cd:
                    08:69:54:34:04:7c:aa:e1:8e:1e:b7:f7:f5:9f:27:
                    c5:ce:e7:b3:7c:1c:3b:b9:31:f2:9d:4f:de:93:ec:
                    87:95:b9:59:a9:67:70:e1:d3:22:e8:a1:f1:4c:1f:
                    fd:71:50:63:db:ad:0d:30:cc:eb:5c:3a:65:93:b3:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3F:C0:D9:90:F8:8E:0E:A7:64:0C:35:F0:E2:40:DA:AC:F0:39:31
            X509v3 Authority Key Identifier:
                keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f3:d5:8d:8b:ed:ca:d8:88:0b:ee:03:7d:09:cb:81:0a:be:
         7e:d4:20:81:e1:84:f0:d5:e3:25:7f:15:9c:83:33:e8:03:a3:
         80:49:73:5e:ea:8f:a1:e3:2e:03:2f:3e:c7:5b:30:aa:42:cc:
         53:4f:17:b4:35:dc:e8:49:05:f1:cb:74:be:b3:45:b7:fc:16:
         16:82:e6:54:9f:e4:49:90:b8:39:b4:1e:b3:06:c1:fa:42:7a:
         4a:72:86:90:d8:40:36:69:cd:3e:b7:64:32:28:2f:a1:db:49:
         de:aa:4c:38:b6:82:0e:12:2c:ff:64:cc:81:98:af:31:3b:44:
         71:1e:a4:53:54:e3:65:5b:46:11:a9:d6:25:4c:cc:44:eb:7b:
         30:28:40:e8:1e:89:44:de:49:14:75:c1:16:72:90:09:32:4b:
         5d:8e:7f:42:77:57:0f:db:17:4e:c3:10:c2:2b:d7:24:e2:63:
         4a:32:f9:2a:45:f4:90:b2:37:a9:78:2d:72:d7:ac:60:b1:03:
         e0:e9:8b:74:5c:47:32:c3:b0:51:14:85:c1:31:35:80:1c:3b:
         bf:ee:0b:9e:d5:74:11:22:80:3e:2c:91:f3:ac:1f:bb:e2:b9:
         ec:1a:93:89:ab:cb:b8:1e:b6:bc:09:6b:fb:2a:e6:e5:a3:ed:
         85:62:4b:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFH598KMnnzFDehbswiYh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTQwZmNmYTgzNmJiMGI1YjNlMTI5NDA0Y2IzMWU4NTI1
MGIwMWYwHhcNMjUwNDE3MTkwMDIyWhcNMjUwNDE4MTkwMDIyWjAzMTEwLwYDVQQD
EyhlMDNmYzBkOTkwZjg4ZTBlYTc2NDBjMzVmMGUyNDBkYWFjZjAzOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcEgMtEwPl5BZ3JLwWnLTIpiyfqU
0cNsTJHGVs+IN0yITFFS1qkxM1BvLFfJ1Gbvw3CRdi2vg5ApndVhEwWAxco2s6R0
19jnuMQ+dcyePhLNnSEtHvK7EAFmIiHP3fVpcxc6dpWhY4rbPckLcPqFPKylUjGu
Ubm60sa0h0Tds71rJ7JdT6YUDm+8tIevJvG9Fn0jvxWxwy6RwzxCmeZWdtUVeljj
8CP5bCI6kN68cq+Q7zcbKb5IZZxnLztwxl80SM0IaVQ0BHyq4Y4et/f1nyfFzuez
fBw7uTHynU/ek+yHlblZqWdw4dMi6KHxTB/9cVBj260NMMzrXDplk7Pf9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA/wNmQ+I4Op2QMNfDiQNqs8DkxMB8GA1UdIwQY
MBaAFD+kD8+oNrsLWz4SlATLMehSULAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYt
MDcyNDA4OTI4OWJiLzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYtMDcyNDA4OTI4OWJi
LzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvPVjYvt
ytiIC+4DfQnLgQq+ftQggeGE8NXjJX8VnIMz6AOjgElzXuqPoeMuAy8+x1swqkLM
U08XtDXc6EkF8ct0vrNFt/wWFoLmVJ/kSZC4ObQeswbB+kJ6SnKGkNhANmnNPrdk
MigvodtJ3qpMOLaCDhIs/2TMgZivMTtEcR6kU1TjZVtGEanWJUzMROt7MChA6B6J
RN5JFHXBFnKQCTJLXY5/QndXD9sXTsMQwivXJOJjSjL5KkX0kLI3qXgtctesYLED
4OmLdFxHMsOwURSFwTE1gBw7v+4LntV0ESKAPiyR86wfu+K57BqTiavLuB62vAlr
+yrm5aPthWJLpg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:34 2025 by rpki-client