Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File:                     3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier:          6V1r1T6FmIKMIAmxFenan5vHQEv9wV/aJwcff43Qrfo=
Subject key identifier:   33:AD:1D:BF:1F:7A:A9:60:8C:E1:76:15:74:6A:A0:B3:27:FF:9C:82
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer:       /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial:       0196501154380F0EC5301F31F77F8BD1E375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 22:00:34 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:34 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:34 +0000
Files and hashes:         1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: iTElcgZntLpFkbCE2XT0xa7NaR6FeO3u9+HZ7Iq7Iak=)
                          2: hs44kTsCSKJHF4M4m6a7yybk2BU.roa (hash: sJmLUUiHtQ2muOzZ9TuqLt9boiXoy5M0LFt8+5jZEwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:54:38:0f:0e:c5:30:1f:31:f7:7f:8b:d1:e3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
        Validity
            Not Before: Apr 19 22:00:34 2025 GMT
            Not After : Apr 20 22:00:34 2025 GMT
        Subject: CN=33ad1dbf1f7aa9608ce17615746aa0b327ff9c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:1c:67:74:17:bb:77:4d:9e:fc:d4:4c:c4:
                    1a:c8:90:41:af:4a:1a:50:b0:8c:70:a3:c4:22:a9:
                    32:4f:9a:78:87:8e:96:e2:82:a6:93:7f:a6:56:6a:
                    3b:cc:86:11:23:68:f4:bb:50:97:61:98:c6:64:19:
                    59:59:69:44:ca:35:5b:54:75:ae:de:ed:4c:6e:15:
                    36:c1:08:98:f2:6a:ad:0a:2f:d8:15:40:1d:65:5c:
                    dc:66:3e:62:a8:c6:e2:9e:3b:dc:8c:55:fa:89:1b:
                    a8:64:94:e6:56:d4:b0:3c:b7:0e:62:f6:f0:55:63:
                    d8:cd:9e:c1:43:f4:b1:12:5b:ed:c4:af:97:5f:72:
                    cc:c1:9c:5b:a9:0a:66:98:3b:f2:50:6b:7b:5a:6a:
                    68:c1:8e:88:f3:71:6b:b4:54:41:cb:32:bc:fd:6f:
                    44:ac:cf:93:9c:68:5e:61:c3:b3:5c:75:24:c0:21:
                    6d:be:ae:d1:22:2c:81:b6:ba:ab:38:b5:06:4c:30:
                    2b:8b:aa:01:83:b0:47:09:4c:4f:75:98:4c:d7:96:
                    95:17:8d:d5:1e:94:21:1c:27:26:f9:37:9d:5d:7a:
                    56:a6:6c:be:80:e8:58:8a:82:47:06:8a:49:d2:66:
                    47:8d:89:74:41:2c:d6:18:78:d8:2e:4e:2d:9c:b5:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AD:1D:BF:1F:7A:A9:60:8C:E1:76:15:74:6A:A0:B3:27:FF:9C:82
            X509v3 Authority Key Identifier:
                keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:74:78:16:29:ec:23:b3:c9:ca:9d:54:81:80:09:a2:3e:
         ac:6c:ba:b7:10:0f:66:42:e9:fa:2e:94:c1:6a:a5:92:0c:b9:
         e2:69:ca:a0:5e:8f:35:17:70:fa:46:f2:26:cb:31:bc:34:b8:
         71:86:fc:98:99:f2:11:e1:35:54:54:f8:58:39:dc:a8:63:5b:
         c8:88:1f:0f:38:33:9f:ca:37:46:2a:3d:63:34:7b:ce:d9:7d:
         4b:ec:6d:97:a4:bd:85:6a:32:0a:6c:b5:d4:b5:65:4a:64:1b:
         e5:43:b8:f9:c7:19:9c:12:11:20:d2:82:d7:2f:bf:5d:e9:6f:
         8b:b9:c1:73:de:eb:03:96:38:7c:c2:ee:2e:30:06:f8:e0:32:
         2b:0b:86:8e:3f:96:52:8e:8b:1c:9f:73:48:61:3b:af:3b:4b:
         81:e9:f8:24:5d:0b:22:05:b6:b6:90:98:d3:40:8c:23:86:e5:
         fe:6e:69:6f:9e:fd:5e:95:09:62:8d:f5:ba:b6:fe:9c:02:21:
         2d:65:e7:db:b8:3b:e4:cd:9a:49:cc:7b:ec:46:bb:d7:ef:e5:
         92:57:d2:cc:68:79:1a:db:9e:e4:38:47:c3:66:8c:db:29:b4:
         01:1b:54:53:36:60:96:a7:44:05:ba:c5:53:44:39:a8:ab:c3:
         b2:3b:e0:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEVQ4Dw7FMB8x93+L0eN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYWQ0Yzg5ZjdhZWQ4NjgxZDAyMDJkMjI0NzlkODZlMTQ2
MmY4ODkwHhcNMjUwNDE5MjIwMDM0WhcNMjUwNDIwMjIwMDM0WjAzMTEwLwYDVQQD
EygzM2FkMWRiZjFmN2FhOTYwOGNlMTc2MTU3NDZhYTBiMzI3ZmY5YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5scZ3QXu3dNnvzUTMQayJBBr0oa
ULCMcKPEIqkyT5p4h46W4oKmk3+mVmo7zIYRI2j0u1CXYZjGZBlZWWlEyjVbVHWu
3u1MbhU2wQiY8mqtCi/YFUAdZVzcZj5iqMbinjvcjFX6iRuoZJTmVtSwPLcOYvbw
VWPYzZ7BQ/SxElvtxK+XX3LMwZxbqQpmmDvyUGt7WmpowY6I83FrtFRByzK8/W9E
rM+TnGheYcOzXHUkwCFtvq7RIiyBtrqrOLUGTDAri6oBg7BHCUxPdZhM15aVF43V
HpQhHCcm+TedXXpWpmy+gOhYioJHBopJ0mZHjYl0QSzWGHjYLk4tnLVRNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOtHb8feqlgjOF2FXRqoLMn/5yCMB8GA1UdIwQY
MBaAFN6tTIn3rthoHQIC0iR52G4UYviJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUt
NWJjZmNlNWNhMmM3LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUtNWJjZmNlNWNhMmM3
LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqF0eBYp
7COzycqdVIGACaI+rGy6txAPZkLp+i6UwWqlkgy54mnKoF6PNRdw+kbyJssxvDS4
cYb8mJnyEeE1VFT4WDncqGNbyIgfDzgzn8o3Rio9YzR7ztl9S+xtl6S9hWoyCmy1
1LVlSmQb5UO4+ccZnBIRINKC1y+/Xelvi7nBc97rA5Y4fMLuLjAG+OAyKwuGjj+W
Uo6LHJ9zSGE7rztLgen4JF0LIgW2tpCY00CMI4bl/m5pb579XpUJYo31urb+nAIh
LWXn27g75M2aScx77Ea71+/lklfSzGh5Gtue5DhHw2aM2ym0ARtUUzZglqdEBbrF
U0Q5qKvDsjvggw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:41 2025 by rpki-client