Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
File:                     F1rTPU9qTQU5wncOK0-7qU_PHx0.mft (raw, json)
Hash identifier:          62qdro2oZmWLP+JRFSG2BYFGMH/c71iR07gxaKaACZk=
Subject key identifier:   B3:8F:2A:61:46:18:4E:99:0B:6D:65:9C:7B:E4:93:7E:99:40:63:45
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Certificate issuer:       /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial:       01964DEBE614C6D00F3217BA55C6FDC53053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
Manifest number:          0B93
Signing time:             Sat 19 Apr 2025 12:00:27 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:27 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:27 +0000
Files and hashes:         1: F1rTPU9qTQU5wncOK0-7qU_PHx0.crl (hash: iXpZkCZr270d9yTAQ8dNWdSGkOQfpDNQWmk1RRGIc5E=)
                          2: zei6YjhBpdjVqL63TukdVgynd-Y.roa (hash: T4fQda7C6XsjIP/sCnd8L2esALMeo+oGlKzEL3Px+0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:eb:e6:14:c6:d0:0f:32:17:ba:55:c6:fd:c5:30:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
        Validity
            Not Before: Apr 19 12:00:27 2025 GMT
            Not After : Apr 20 12:00:27 2025 GMT
        Subject: CN=b38f2a6146184e990b6d659c7be4937e99406345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:7c:c3:95:64:3e:65:d1:ec:fe:e8:f9:80:
                    58:33:98:96:c9:ea:63:6b:b9:ac:6d:02:3e:99:08:
                    f4:4f:5e:44:a6:e5:76:68:8f:58:e4:25:01:8d:4b:
                    01:66:bd:a1:25:02:13:eb:53:2f:33:67:05:f0:4c:
                    ef:61:74:c3:80:5c:8c:db:bb:c3:4f:e8:be:4c:e6:
                    f9:89:72:f7:c4:ee:ac:f9:b5:3d:9d:e7:4b:cb:f4:
                    0e:2a:bf:f8:a9:28:62:17:4f:f9:41:58:8c:c5:82:
                    e7:e6:b1:aa:b5:01:df:de:89:0d:1e:8f:5b:dc:6e:
                    3f:23:1f:41:be:63:d3:77:74:01:9b:22:30:cc:cd:
                    68:08:52:1e:60:9d:ba:28:10:6d:2e:af:35:e6:e1:
                    2b:2b:fb:13:6a:a4:f0:6f:f7:e4:fe:bf:1b:22:32:
                    e7:d5:7e:65:ed:89:8b:b0:30:b1:34:3b:7d:ea:bf:
                    a9:9a:41:d8:10:bf:47:c5:bb:e8:fc:4d:30:3f:59:
                    be:44:2c:fe:7b:2d:25:1d:83:09:4f:af:6e:0b:e7:
                    c1:d9:9e:f5:d4:98:3e:54:51:16:98:34:d7:8c:72:
                    60:83:35:15:30:d1:36:b3:49:19:ec:3e:bd:c1:c3:
                    9d:c3:c3:93:09:eb:3c:a4:e1:02:fa:40:1a:d8:92:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8F:2A:61:46:18:4E:99:0B:6D:65:9C:7B:E4:93:7E:99:40:63:45
            X509v3 Authority Key Identifier:
                keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:1c:84:1e:15:22:b6:4a:ab:45:dd:09:ad:58:7d:13:b4:
         fa:44:af:84:b0:5c:12:4e:89:e2:ec:8a:f2:46:0b:23:4e:b5:
         40:4b:0d:4a:9c:21:c7:aa:07:dd:2d:74:25:ac:7b:89:bc:d4:
         9b:34:e1:89:bc:e1:d6:a9:a2:db:1a:a6:2a:93:75:e1:28:12:
         e6:bd:a5:4d:f0:a2:c0:43:99:69:2b:42:b5:15:04:d9:08:b1:
         64:20:82:91:87:8a:db:91:9d:ce:1e:3a:70:08:a7:85:0f:85:
         f2:b9:7c:5f:d2:c7:83:f1:a1:71:32:2b:c2:b1:a8:79:83:c6:
         bd:fd:ca:49:00:82:52:54:8b:a3:3e:cc:9a:04:53:78:19:77:
         c5:92:0a:90:01:71:8a:ff:d6:44:50:c4:94:f7:67:f2:26:53:
         27:63:d0:55:ed:e0:f8:b2:31:2a:40:2b:54:00:a7:66:2c:2f:
         07:12:b6:14:28:d9:38:7b:f9:97:23:d9:7a:b6:6b:d8:7d:a3:
         f8:71:0a:ec:d5:eb:1a:e3:0e:7e:cf:9a:f5:b1:14:5a:f0:ab:
         ca:45:a2:38:6e:ab:73:c6:55:a1:ad:f0:37:a2:37:85:9a:27:
         2c:ab:70:2c:fe:e9:af:2d:dc:33:1d:4f:5f:05:4d:0c:0c:78:
         62:61:7e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN6+YUxtAPMhe6Vcb9xTBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWFkMzNkNGY2YTRkMDUzOWMyNzcwZTJiNGZiYmE5NGZj
ZjFmMWQwHhcNMjUwNDE5MTIwMDI3WhcNMjUwNDIwMTIwMDI3WjAzMTEwLwYDVQQD
EyhiMzhmMmE2MTQ2MTg0ZTk5MGI2ZDY1OWM3YmU0OTM3ZTk5NDA2MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mx8w5VkPmXR7P7o+YBYM5iWyepj
a7msbQI+mQj0T15EpuV2aI9Y5CUBjUsBZr2hJQIT61MvM2cF8EzvYXTDgFyM27vD
T+i+TOb5iXL3xO6s+bU9nedLy/QOKr/4qShiF0/5QViMxYLn5rGqtQHf3okNHo9b
3G4/Ix9BvmPTd3QBmyIwzM1oCFIeYJ26KBBtLq815uErK/sTaqTwb/fk/r8bIjLn
1X5l7YmLsDCxNDt96r+pmkHYEL9Hxbvo/E0wP1m+RCz+ey0lHYMJT69uC+fB2Z71
1Jg+VFEWmDTXjHJggzUVMNE2s0kZ7D69wcOdw8OTCes8pOEC+kAa2JLJ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOPKmFGGE6ZC21lnHvkk36ZQGNFMB8GA1UdIwQY
MBaAFBda0z1Pak0FOcJ3DitPu6lPzx8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEt
MDcyMDNjZDgxNmI4LzEvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEtMDcyMDNjZDgxNmI4
LzEvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbREchB4V
IrZKq0XdCa1YfRO0+kSvhLBcEk6J4uyK8kYLI061QEsNSpwhx6oH3S10Jax7ibzU
mzThibzh1qmi2xqmKpN14SgS5r2lTfCiwEOZaStCtRUE2QixZCCCkYeK25Gdzh46
cAinhQ+F8rl8X9LHg/GhcTIrwrGoeYPGvf3KSQCCUlSLoz7MmgRTeBl3xZIKkAFx
iv/WRFDElPdn8iZTJ2PQVe3g+LIxKkArVACnZiwvBxK2FCjZOHv5lyPZerZr2H2j
+HEK7NXrGuMOfs+a9bEUWvCrykWiOG6rc8ZVoa3wN6I3hZonLKtwLP7pry3cMx1P
XwVNDAx4YmF+Ng==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:24 2025 by rpki-client