Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File:                     A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier:          NsWWcZHsSwZuE6tjo6UHVby6EZyzkekxyAj+v6tTpAo=
Subject key identifier:   1C:8F:43:D6:6C:40:83:B5:99:36:28:AC:46:0D:EE:D2:48:F7:20:57
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       019650B6A93818940C9F3A100E76725C1A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number:          14FD
Signing time:             Sun 20 Apr 2025 01:01:10 +0000
Manifest this update:     Sun 20 Apr 2025 01:01:10 +0000
Manifest next update:     Mon 21 Apr 2025 01:01:10 +0000
Files and hashes:         1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: nqzI2zjNNMJ2BiQnO4alTMTnPgd2fg0gdlZReg8VCLw=)
                          2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=)
                          3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=)
                          4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:a9:38:18:94:0c:9f:3a:10:0e:76:72:5c:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: Apr 20 01:01:10 2025 GMT
            Not After : Apr 21 01:01:10 2025 GMT
        Subject: CN=1c8f43d66c4083b5993628ac460deed248f72057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:74:cc:0d:4e:b6:9d:54:3e:da:4b:ff:ad:cc:
                    9b:ac:36:95:d9:bb:fd:65:65:ef:54:67:a2:99:1f:
                    7e:71:bf:56:bc:c8:f6:13:5b:b7:11:c1:0b:a4:09:
                    1c:bb:b7:e7:af:37:38:f0:6a:3b:b2:45:90:26:8e:
                    00:d6:13:f8:20:b1:20:2f:d3:58:33:d0:7f:6f:f5:
                    e5:26:40:61:29:4c:de:34:ba:fe:21:c1:fb:a0:b6:
                    1a:77:8b:65:06:3a:13:39:64:d3:2d:2d:1b:fd:e4:
                    eb:aa:bc:b9:e8:6b:0a:01:61:78:31:38:0e:68:b2:
                    a5:ab:db:f4:c8:7a:67:83:a8:b6:51:2a:9a:4f:79:
                    1f:eb:73:f6:09:2a:87:42:d0:e4:98:b8:60:60:bf:
                    20:74:5a:d3:c6:e9:0a:f3:00:f8:9b:4c:c3:f7:c8:
                    34:31:ba:6a:f2:38:b3:c8:1e:5e:70:25:30:b2:ae:
                    81:f2:24:00:09:f9:26:2e:99:f5:f0:c0:7d:e9:f7:
                    0d:0f:17:3b:d3:6c:a4:1b:c2:be:80:77:49:33:dd:
                    29:fc:c8:0f:3d:a7:50:60:3d:60:19:20:0d:2c:80:
                    25:c5:37:c8:4b:92:5b:ff:f5:68:a6:ab:24:c8:ee:
                    17:c2:a9:d2:14:12:c8:b8:3c:ee:bb:07:f6:99:8a:
                    3c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:43:D6:6C:40:83:B5:99:36:28:AC:46:0D:EE:D2:48:F7:20:57
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:04:4b:a8:dc:d9:23:f9:3f:18:4e:f4:5b:e1:7a:2c:69:
         3e:e2:0b:06:70:10:21:f6:39:50:90:75:75:cf:c1:a4:f3:e8:
         ca:91:00:3b:46:17:2b:f2:71:7d:20:53:83:d6:32:98:c2:1f:
         b8:55:91:af:a2:af:12:3f:31:37:13:ef:7f:69:53:b3:1b:b7:
         91:3a:94:33:91:2d:f8:67:3b:62:e5:7a:e9:2c:a5:7d:fc:c5:
         1b:66:8a:db:9a:f4:fd:15:b4:a0:6d:81:c5:26:50:8b:de:c2:
         ae:48:34:23:52:c1:8c:32:00:8f:53:40:07:2e:44:4a:28:a6:
         be:f6:d4:8d:97:ce:26:b7:3b:d1:a1:58:81:f1:f2:2f:6e:29:
         ae:83:5e:4d:3e:c5:63:83:07:ba:9d:1c:66:79:e7:73:b6:3e:
         2d:79:bd:eb:cc:1c:53:fc:84:bc:61:75:f0:80:f8:19:96:d1:
         ca:b2:3c:05:33:80:fe:0a:fe:c2:ea:21:a5:9b:70:c0:23:b4:
         f1:bd:77:59:a5:9b:73:9d:8c:9d:ee:1c:af:e8:0c:73:da:54:
         95:57:29:f9:b2:68:74:e5:f7:b6:bd:ee:0a:ae:41:6d:f1:60:
         28:24:1e:02:88:02:8c:db:49:36:89:a6:ac:51:ca:eb:3e:47:
         cf:81:e3:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtqk4GJQMnzoQDnZyXBpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWIwMTM1M2U1MWEzYTg3ZTgzNTk2M2JkODgzM2VkODE4
NTNkNzcwHhcNMjUwNDIwMDEwMTEwWhcNMjUwNDIxMDEwMTEwWjAzMTEwLwYDVQQD
EygxYzhmNDNkNjZjNDA4M2I1OTkzNjI4YWM0NjBkZWVkMjQ4ZjcyMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XTMDU62nVQ+2kv/rcybrDaV2bv9
ZWXvVGeimR9+cb9WvMj2E1u3EcELpAkcu7fnrzc48Go7skWQJo4A1hP4ILEgL9NY
M9B/b/XlJkBhKUzeNLr+IcH7oLYad4tlBjoTOWTTLS0b/eTrqry56GsKAWF4MTgO
aLKlq9v0yHpng6i2USqaT3kf63P2CSqHQtDkmLhgYL8gdFrTxukK8wD4m0zD98g0
Mbpq8jizyB5ecCUwsq6B8iQACfkmLpn18MB96fcNDxc702ykG8K+gHdJM90p/MgP
PadQYD1gGSANLIAlxTfIS5Jb//VopqskyO4XwqnSFBLIuDzuuwf2mYo8iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByPQ9ZsQIO1mTYorEYN7tJI9yBXMB8GA1UdIwQY
MBaAFAObATU+UaOofoNZY72IM+2BhT13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt
NGE4YjZiNDA4MmIxLzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx
LzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKIES6jc
2SP5PxhO9FvheixpPuILBnAQIfY5UJB1dc/BpPPoypEAO0YXK/JxfSBTg9YymMIf
uFWRr6KvEj8xNxPvf2lTsxu3kTqUM5Et+Gc7YuV66SylffzFG2aK25r0/RW0oG2B
xSZQi97Crkg0I1LBjDIAj1NABy5ESiimvvbUjZfOJrc70aFYgfHyL24proNeTT7F
Y4MHup0cZnnnc7Y+LXm968wcU/yEvGF18ID4GZbRyrI8BTOA/gr+wuohpZtwwCO0
8b13WaWbc52Mne4cr+gMc9pUlVcp+bJodOX3tr3uCq5BbfFgKCQeAogCjNtJNomm
rFHK6z5Hz4HjRQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:48 2025 by rpki-client