Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File:                     97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier:          IBfSRzmdDpVa8wlmURtZ5ZPxhye0vxuhtoZoJvAlrEM=
Subject key identifier:   B5:99:A9:EC:0B:87:06:1D:C9:72:10:53:AD:F5:13:17:AB:4D:F8:0D
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer:       /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial:       019651FFCC2108AB21C537ACBD6EC03CEC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number:          0242
Signing time:             Sun 20 Apr 2025 07:00:40 +0000
Manifest this update:     Sun 20 Apr 2025 07:00:40 +0000
Manifest next update:     Mon 21 Apr 2025 07:00:40 +0000
Files and hashes:         1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: ELfkmPMzBWfdV0BicEbAOpIUjJahhFA0Hci1NOdW7Js=)
                          2: lbYGE0sLJ3B23IRi-OtNtyGPAp0.roa (hash: DQpQYf+5h9YK3aPo5AxywjFuQIhJ9ib5nUDkQNDeYcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:ff:cc:21:08:ab:21:c5:37:ac:bd:6e:c0:3c:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
        Validity
            Not Before: Apr 20 07:00:40 2025 GMT
            Not After : Apr 21 07:00:40 2025 GMT
        Subject: CN=b599a9ec0b87061dc9721053adf51317ab4df80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:18:1c:ad:36:bd:30:c3:a9:16:4f:c4:e7:
                    34:e9:f5:75:cc:77:dc:72:34:4c:13:b8:6c:02:59:
                    7d:cc:67:20:26:e7:b9:6b:b3:7d:5d:5e:de:1f:17:
                    03:97:8b:a0:27:ec:91:76:ea:3e:40:ae:d0:74:7e:
                    8b:70:06:2f:e2:75:1c:3b:db:3e:ba:e9:38:b2:7d:
                    19:db:de:d9:a6:d7:e9:1b:25:c8:e2:ef:8a:bf:41:
                    f9:93:94:be:81:2a:83:dc:3a:ba:4f:a4:31:95:61:
                    4b:4f:bc:48:81:9b:b2:3c:11:4c:29:43:07:8f:c5:
                    5b:ac:e1:20:2b:e6:d9:c2:a3:cd:03:dd:14:07:9c:
                    9d:b4:0a:82:f0:7d:74:c5:2e:6e:f7:4a:82:84:93:
                    07:45:a5:3b:dd:be:53:de:ae:1c:83:3f:8c:d4:ae:
                    47:0e:d1:1a:87:7b:c0:dd:55:95:a9:b4:28:b5:f9:
                    8c:fb:86:41:8d:2a:4c:f4:7f:24:2a:8d:99:07:eb:
                    d5:88:d3:50:c7:cd:c3:7e:d0:f8:40:d0:76:8a:12:
                    33:fb:dd:d0:46:1f:cc:1e:d3:89:bb:2a:2b:f4:d4:
                    0d:55:1a:30:a2:d6:8d:e6:0e:c7:d5:3f:57:b6:ef:
                    8d:3b:dc:ef:81:67:7c:c1:6c:b8:9d:a4:27:73:81:
                    a6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:A9:EC:0B:87:06:1D:C9:72:10:53:AD:F5:13:17:AB:4D:F8:0D
            X509v3 Authority Key Identifier:
                keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:12:3a:46:ba:10:9f:3f:d6:d1:c6:79:8d:eb:ef:13:08:41:
         4e:cf:1a:66:bc:7e:9a:89:aa:67:a4:fb:c3:16:3f:20:1a:52:
         69:0b:65:87:d6:e8:06:09:ab:b7:26:0a:de:25:09:5d:87:7f:
         5b:7d:28:76:e9:f5:4c:ef:dc:98:a6:9d:96:5f:10:fe:00:b7:
         a0:ce:16:f7:9d:aa:3f:62:57:c5:b2:34:1a:d4:be:f3:90:8f:
         55:58:11:05:43:16:54:61:32:1c:0c:3b:6e:c7:7d:18:4e:83:
         82:43:64:c2:d5:d8:2c:ec:f3:7e:05:5a:35:0a:ea:fb:c9:8c:
         92:ec:d7:77:0b:25:82:55:dc:2d:0f:da:11:a0:ce:8a:e5:06:
         25:0d:66:56:0c:16:51:83:97:e5:c3:30:d7:eb:73:3c:80:09:
         5f:1a:04:96:b2:1b:52:c4:88:cd:bb:31:27:1c:fa:ab:b5:27:
         62:a6:48:89:66:1a:e4:d5:3a:ce:56:5c:d9:8a:4b:2a:29:4f:
         68:35:5d:1b:ba:f2:86:fb:23:13:7b:53:47:20:83:88:84:33:
         4b:b2:79:55:ab:eb:68:28:5c:d7:2a:c2:ea:8a:25:ba:45:3f:
         48:0a:d6:12:2a:fb:47:4e:d8:36:14:c7:6f:e1:2d:db:e9:2c:
         3f:13:52:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZR/8whCKshxTesvW7APOx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjlkOTdiOTdmZDRjYmFjZWRhODFjNDQwNmU3NGFkNmQ1
MzkzMjYwHhcNMjUwNDIwMDcwMDQwWhcNMjUwNDIxMDcwMDQwWjAzMTEwLwYDVQQD
EyhiNTk5YTllYzBiODcwNjFkYzk3MjEwNTNhZGY1MTMxN2FiNGRmODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EcYHK02vTDDqRZPxOc06fV1zHfc
cjRME7hsAll9zGcgJue5a7N9XV7eHxcDl4ugJ+yRduo+QK7QdH6LcAYv4nUcO9s+
uuk4sn0Z297ZptfpGyXI4u+Kv0H5k5S+gSqD3Dq6T6QxlWFLT7xIgZuyPBFMKUMH
j8VbrOEgK+bZwqPNA90UB5ydtAqC8H10xS5u90qChJMHRaU73b5T3q4cgz+M1K5H
DtEah3vA3VWVqbQotfmM+4ZBjSpM9H8kKo2ZB+vViNNQx83DftD4QNB2ihIz+93Q
Rh/MHtOJuyor9NQNVRowotaN5g7H1T9Xtu+NO9zvgWd8wWy4naQnc4GmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWZqewLhwYdyXIQU631ExerTfgNMB8GA1UdIwQY
MBaAFPe52XuX/Uy6ztqBxEBudK1tU5MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMt
YTMwZDgyYmQ2MjE5LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMtYTMwZDgyYmQ2MjE5
LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBI6RroQ
nz/W0cZ5jevvEwhBTs8aZrx+momqZ6T7wxY/IBpSaQtlh9boBgmrtyYK3iUJXYd/
W30odun1TO/cmKadll8Q/gC3oM4W952qP2JXxbI0GtS+85CPVVgRBUMWVGEyHAw7
bsd9GE6DgkNkwtXYLOzzfgVaNQrq+8mMkuzXdwslglXcLQ/aEaDOiuUGJQ1mVgwW
UYOX5cMw1+tzPIAJXxoElrIbUsSIzbsxJxz6q7UnYqZIiWYa5NU6zlZc2YpLKilP
aDVdG7ryhvsjE3tTRyCDiIQzS7J5VavraChc1yrC6oolukU/SArWEir7R07YNhTH
b+Et2+ksPxNSBg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:54:01 2025 by rpki-client