Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
File:                     e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft (raw, json)
Hash identifier:          mX9+BdCmEZDAPE5BWdeVE5SJ/tIjzj5Ql6Ov6yxrkBo=
Subject key identifier:   ED:3A:F5:39:42:48:4C:FA:36:C9:B0:43:32:59:8A:0F:44:12:D9:7F
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Certificate issuer:       /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial:       0194BB28F51DE7DBE0CE0E7C9F5F6EF7DA1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
Manifest number:          0A25
Signing time:             Fri 31 Jan 2025 07:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:10 +0000
Files and hashes:         1: FsJ3zITAe84c1D5csHES5hjciz4.roa (hash: YNKbDTh8tdjiYkEUi21i1eLdfiJOkLdo8vV3R3CkNJc=)
                          2: Misdpg6iWwUm88Ty_fc4pFhMjYc.roa (hash: cciFC3d1gK2Xqhaij9/j0Cvs/RVlR1idmhLYdfWiw1Q=)
                          3: P8Eoq9RR0aGjSpGwX1OgPUIROxQ.roa (hash: s3K98YwNuWaxYBAIxIP0FKSAzloX75bONeEAcTalG7c=)
                          4: Zokk9-ke3e4g6tf_NzEP8-t6QmQ.roa (hash: LDa+p34hUBYWv+O47IPPq2d0lQ+F5fOMupLZzH7le48=)
                          5: e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl (hash: YbKocQHuZW9VdAQAxexqBMDRSh/+siNC5KpgRqaQqC0=)
                          6: yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa (hash: UvfLf0kl1I/2dxM34pZ3U07NlO8Q7BM1QyFjXwpJPeI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:28:f5:1d:e7:db:e0:ce:0e:7c:9f:5f:6e:f7:da:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
        Validity
            Not Before: Jan 31 07:00:10 2025 GMT
            Not After : Feb  1 07:00:10 2025 GMT
        Subject: CN=ed3af53942484cfa36c9b04332598a0f4412d97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:0e:bf:59:ac:d5:b5:bb:86:d2:0e:4b:69:
                    d2:0e:1f:a2:eb:c5:c9:e2:d0:a0:b9:95:db:70:75:
                    65:85:bd:1e:83:c9:58:a6:cb:0b:84:e3:58:0b:fc:
                    76:ce:b4:81:24:b5:1a:aa:e2:50:c7:7f:d7:58:9e:
                    fb:db:79:96:b2:0a:c3:78:0f:e7:1c:9e:1b:53:73:
                    28:09:fe:41:bb:b9:f0:28:5b:2d:92:ef:3a:af:46:
                    cb:e6:24:40:28:74:2e:76:e3:0b:82:bb:7c:49:e4:
                    f6:7d:85:36:a0:e9:4d:82:e6:a4:be:81:15:6f:24:
                    ce:41:37:88:b6:42:ed:5f:8a:bf:67:22:7b:29:64:
                    1a:d6:19:93:90:ef:1c:af:75:91:3b:c5:8e:fa:10:
                    08:b6:46:84:1a:52:8e:51:f3:47:58:9b:47:bf:00:
                    21:f1:b9:95:66:db:80:ac:d8:bb:4c:98:21:92:22:
                    33:98:ee:cb:ac:d3:ed:f6:ba:26:39:99:2b:05:55:
                    e7:33:52:a3:0e:02:10:a0:aa:05:8d:e8:ea:72:f1:
                    e5:15:c5:ce:bf:6b:4d:32:27:bd:89:45:fd:63:de:
                    e8:0f:37:ae:e2:e5:4a:1c:47:cc:df:25:6f:07:56:
                    11:6a:e8:f1:4d:af:ba:b0:51:fd:98:bc:98:86:98:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3A:F5:39:42:48:4C:FA:36:C9:B0:43:32:59:8A:0F:44:12:D9:7F
            X509v3 Authority Key Identifier:
                keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:56:e5:ad:d4:54:4a:46:b1:08:7d:6a:fe:cd:4a:15:ab:
         4e:54:5a:b0:42:26:45:e1:51:29:dc:7b:83:79:b4:3f:b2:9f:
         0b:f4:83:69:5a:66:4c:e7:2e:5f:38:62:00:97:65:ef:36:4b:
         e2:3f:91:1e:36:cb:3e:01:d7:e6:f2:00:64:a5:ba:83:48:2e:
         5c:23:ff:0d:40:43:1d:98:0c:da:16:c2:6b:63:ec:07:a7:28:
         4a:d8:7f:b7:da:97:3b:e5:44:00:9a:92:95:d2:87:de:6d:6e:
         93:e1:de:ba:61:e3:2b:e9:ce:d0:08:46:2f:39:b8:48:a5:ac:
         2e:fa:3a:16:c5:c7:6c:95:01:06:a3:58:06:03:5f:86:9b:94:
         73:da:6a:73:7e:55:9e:51:4b:e1:2c:f1:7b:2b:89:b6:9a:34:
         55:dd:91:2e:56:9c:0e:b6:f4:ff:31:7a:56:60:23:98:70:90:
         a8:c7:91:45:83:e2:7a:8a:21:0c:35:65:7c:4c:24:ea:94:ab:
         c2:0c:42:49:02:22:3d:3a:17:bf:31:18:40:bb:9f:c3:54:9a:
         bc:15:d0:eb:96:3c:a9:b6:8d:37:f3:fe:d9:02:a7:b8:b9:a7:
         ee:1d:e2:d3:82:74:7d:d7:6a:a2:28:ea:e3:29:bc:cb:4e:be:
         ed:a6:a9:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KPUd59vgzg58n19u99oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTI4OWViZTkzMzUxMjM2YTU1ODBlYjViNzAxMDJjZjNm
MTFkZmMwHhcNMjUwMTMxMDcwMDEwWhcNMjUwMjAxMDcwMDEwWjAzMTEwLwYDVQQD
EyhlZDNhZjUzOTQyNDg0Y2ZhMzZjOWIwNDMzMjU5OGEwZjQ0MTJkOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuwOv1ms1bW7htIOS2nSDh+i68XJ
4tCguZXbcHVlhb0eg8lYpssLhONYC/x2zrSBJLUaquJQx3/XWJ7723mWsgrDeA/n
HJ4bU3MoCf5Bu7nwKFstku86r0bL5iRAKHQuduMLgrt8SeT2fYU2oOlNguakvoEV
byTOQTeItkLtX4q/ZyJ7KWQa1hmTkO8cr3WRO8WO+hAItkaEGlKOUfNHWJtHvwAh
8bmVZtuArNi7TJghkiIzmO7LrNPt9romOZkrBVXnM1KjDgIQoKoFjejqcvHlFcXO
v2tNMie9iUX9Y97oDzeu4uVKHEfM3yVvB1YRaujxTa+6sFH9mLyYhpjrcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO069TlCSEz6NsmwQzJZig9EEtl/MB8GA1UdIwQY
MBaAFHuiievpM1EjalWA61twECzz8R38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMt
ZDE2M2I1NDk5ZTY4LzEvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMtZDE2M2I1NDk5ZTY4
LzEvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRxW5a3U
VEpGsQh9av7NShWrTlRasEImReFRKdx7g3m0P7KfC/SDaVpmTOcuXzhiAJdl7zZL
4j+RHjbLPgHX5vIAZKW6g0guXCP/DUBDHZgM2hbCa2PsB6coSth/t9qXO+VEAJqS
ldKH3m1uk+HeumHjK+nO0AhGLzm4SKWsLvo6FsXHbJUBBqNYBgNfhpuUc9pqc35V
nlFL4SzxeyuJtpo0Vd2RLlacDrb0/zF6VmAjmHCQqMeRRYPieoohDDVlfEwk6pSr
wgxCSQIiPToXvzEYQLufw1SavBXQ65Y8qbaNN/P+2QKnuLmn7h3i04J0fddqoijq
4ym8y06+7aapyA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:05 2025 by rpki-client on console-fra.rpki-client.org