Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File:                     f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier:          SLj0XzNIZBRiR6kuLiIl549pZNVYqcllpUqYQT9InSg=
Subject key identifier:   9E:E8:12:54:E9:13:EE:40:3E:04:19:E0:B5:F0:69:D1:22:1A:2A:C6
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer:       /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial:       01964CA275715F75EC3AFD801B8B3FFE12F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 06:00:37 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:37 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:37 +0000
Files and hashes:         1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
                          2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: hSpfmix2Y9tnl8TQQSFSdaSXoGAUTuVFlwJeyeQmHlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:75:71:5f:75:ec:3a:fd:80:1b:8b:3f:fe:12:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
        Validity
            Not Before: Apr 19 06:00:37 2025 GMT
            Not After : Apr 20 06:00:37 2025 GMT
        Subject: CN=9ee81254e913ee403e0419e0b5f069d1221a2ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:58:9a:6a:2f:5f:aa:e5:a5:7d:b9:c8:ab:
                    d6:f5:e1:80:ad:4e:9c:6c:ce:46:a5:26:0f:fb:30:
                    78:5b:fe:26:a4:f6:f2:fc:c6:55:bd:50:97:12:f7:
                    80:05:25:9b:68:12:e6:81:5c:90:77:99:13:43:a0:
                    3a:a2:01:ba:c1:d6:f5:66:64:00:1d:e9:09:65:35:
                    db:e8:0b:dd:c6:fa:e1:47:bc:d6:b1:42:2f:d1:a4:
                    cd:a0:e7:ad:12:70:70:97:0b:1c:b3:02:7a:ae:f6:
                    9b:a3:da:bb:d7:c4:d7:8a:4f:38:f9:70:a8:a7:65:
                    c8:17:cd:b4:17:66:7d:2e:e2:be:50:e3:c4:74:97:
                    13:f8:09:06:60:68:a2:e0:63:cb:ed:01:c3:be:45:
                    3c:ff:fd:7f:33:5c:d4:a1:3f:d6:fc:65:76:49:04:
                    7d:3d:56:66:b9:ea:25:a5:a2:09:4a:be:cc:46:4a:
                    05:84:4c:8a:d1:00:20:0b:d7:9c:ae:38:48:02:9b:
                    f6:16:06:1b:9f:62:0a:1a:9c:06:f4:c4:50:47:66:
                    50:4f:e5:79:4e:97:5e:c2:aa:a3:98:dc:c1:fb:1f:
                    6b:72:fe:0e:8e:75:e8:7b:7e:4c:61:50:f3:a7:b3:
                    44:8a:85:db:7f:2f:ab:5e:b0:28:a6:f0:be:99:1a:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E8:12:54:E9:13:EE:40:3E:04:19:E0:B5:F0:69:D1:22:1A:2A:C6
            X509v3 Authority Key Identifier:
                keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:41:4b:63:2c:89:d4:14:17:80:3e:d9:6c:c9:75:c6:89:
         80:cb:fc:a5:7b:ba:8a:61:82:08:be:86:f1:9c:d6:2c:e7:97:
         f5:ee:14:8c:5a:52:4b:4d:06:e4:20:da:57:b6:fa:5b:6a:df:
         4b:b0:eb:76:56:e8:79:6e:07:a1:46:14:f3:68:cc:05:dd:70:
         e7:4c:61:04:a8:a4:41:8e:c0:72:5d:97:00:4f:4f:21:af:be:
         31:85:13:e3:eb:d3:10:86:22:bf:36:76:26:c2:fe:78:a8:ac:
         92:51:90:15:b0:cd:13:ea:1b:05:ec:65:cd:b0:48:f2:b1:82:
         9a:f3:bd:8b:4d:6b:4d:ca:58:d4:cb:43:f0:1b:bc:5e:ee:9c:
         a8:46:f7:24:24:54:b0:3f:51:82:af:b1:bb:1e:a7:96:b8:25:
         77:2a:75:5d:8a:3f:17:d8:a5:a1:91:97:95:79:e5:ee:3e:b3:
         f6:c1:2b:cb:65:f0:0d:d0:9a:3b:bf:e1:5f:03:d6:1a:0c:3d:
         c6:50:a1:90:8d:9c:ed:29:8a:3e:f7:13:e2:ae:ee:4c:fe:bc:
         9e:6a:dc:62:b7:54:80:bf:21:5c:c2:13:46:c2:3a:92:c8:1b:
         0c:62:e7:9a:1e:49:5a:cd:c3:9e:64:20:4b:c3:b7:0b:7c:b4:
         69:1e:46:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMonVxX3XsOv2AG4s//hLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj
YjE5MzYwHhcNMjUwNDE5MDYwMDM3WhcNMjUwNDIwMDYwMDM3WjAzMTEwLwYDVQQD
Eyg5ZWU4MTI1NGU5MTNlZTQwM2UwNDE5ZTBiNWYwNjlkMTIyMWEyYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+VYmmovX6rlpX25yKvW9eGArU6c
bM5GpSYP+zB4W/4mpPby/MZVvVCXEveABSWbaBLmgVyQd5kTQ6A6ogG6wdb1ZmQA
HekJZTXb6AvdxvrhR7zWsUIv0aTNoOetEnBwlwscswJ6rvabo9q718TXik84+XCo
p2XIF820F2Z9LuK+UOPEdJcT+AkGYGii4GPL7QHDvkU8//1/M1zUoT/W/GV2SQR9
PVZmueolpaIJSr7MRkoFhEyK0QAgC9ecrjhIApv2FgYbn2IKGpwG9MRQR2ZQT+V5
TpdewqqjmNzB+x9rcv4OjnXoe35MYVDzp7NEioXbfy+rXrAopvC+mRpfsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7oElTpE+5APgQZ4LXwadEiGirGMB8GA1UdIwQY
MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt
OGI1MzcyNTg0YWNkLzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk
LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcBBS2Ms
idQUF4A+2WzJdcaJgMv8pXu6imGCCL6G8ZzWLOeX9e4UjFpSS00G5CDaV7b6W2rf
S7DrdlboeW4HoUYU82jMBd1w50xhBKikQY7Acl2XAE9PIa++MYUT4+vTEIYivzZ2
JsL+eKisklGQFbDNE+obBexlzbBI8rGCmvO9i01rTcpY1MtD8Bu8Xu6cqEb3JCRU
sD9Rgq+xux6nlrgldyp1XYo/F9iloZGXlXnl7j6z9sEry2XwDdCaO7/hXwPWGgw9
xlChkI2c7SmKPvcT4q7uTP68nmrcYrdUgL8hXMITRsI6ksgbDGLnmh5JWs3DnmQg
S8O3C3y0aR5Glw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:10 2025 by rpki-client