Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
File:                     1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft (raw, json)
Hash identifier:          70g1EP17oBGtMijUVUH/ybYlbXgiUE0zqHnvUNQju5g=
Subject key identifier:   40:58:02:0C:38:8A:56:07:83:D0:15:E0:11:DA:FE:93:83:5A:84:21
Authority key identifier: FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA
Certificate issuer:       /CN=fadbe65b28ff25667409cce635be096e3e6defca
Certificate serial:       019613FD957160A09A17D9205C155D97357C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
Manifest number:          0568
Signing time:             Tue 08 Apr 2025 06:01:47 +0000
Manifest this update:     Tue 08 Apr 2025 06:01:47 +0000
Manifest next update:     Wed 09 Apr 2025 06:01:47 +0000
Files and hashes:         1: 1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl (hash: qEprJ8ziN8t7HPS2ub6BJuFm4+MO+4JdKQ+Y+ajSkU0=)
                          2: 2hMUvTWNED7AdzekMGtePAfBbmA.roa (hash: qNOC6BJXbdCeJs6n66War8yhlL56sKGqTTY348ypj5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:13:fd:95:71:60:a0:9a:17:d9:20:5c:15:5d:97:35:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadbe65b28ff25667409cce635be096e3e6defca
        Validity
            Not Before: Apr  8 06:01:47 2025 GMT
            Not After : Apr  9 06:01:47 2025 GMT
        Subject: CN=4058020c388a560783d015e011dafe93835a8421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:27:61:86:2f:76:33:23:1d:04:5a:df:f6:
                    89:30:72:8b:2d:70:cb:2e:2e:65:06:56:6d:94:6a:
                    c7:4a:8c:bf:ec:44:e7:9d:65:72:1d:b4:68:ef:13:
                    ca:5e:84:f9:f6:70:05:8a:7f:0a:20:6d:12:92:7a:
                    af:d6:d5:2f:89:77:34:5c:23:51:11:6d:f5:2f:5f:
                    df:f9:2f:e1:e9:e6:88:84:e6:37:04:c2:65:8c:ec:
                    e4:98:6b:e0:fb:20:91:68:2c:0c:36:27:49:24:27:
                    38:7c:92:41:01:76:cc:88:76:bc:fc:2b:c4:89:fa:
                    9c:3b:5f:d8:d7:30:11:72:c4:92:de:e7:85:6c:9c:
                    70:8c:e3:01:94:5d:f0:35:1c:06:ab:01:ae:a8:15:
                    69:8e:e1:99:a3:a5:f5:62:f3:c1:41:a7:e6:e1:47:
                    e0:49:1a:68:ea:10:2c:92:96:de:59:f1:c9:80:42:
                    ee:c5:04:53:bc:e1:ec:e8:48:7d:74:fc:48:fa:be:
                    06:00:8a:f1:c9:a6:0e:6e:2b:e0:9f:ad:41:71:4f:
                    2c:f3:d7:9a:f7:85:ea:38:15:56:ff:e1:f0:02:f7:
                    1e:9d:c0:9b:08:7c:a9:d6:71:31:e8:7d:b8:a0:a6:
                    45:79:14:d5:2c:53:98:c0:e3:25:ee:30:05:68:13:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:58:02:0C:38:8A:56:07:83:D0:15:E0:11:DA:FE:93:83:5A:84:21
            X509v3 Authority Key Identifier:
                keyid:FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:ad:d5:b4:27:4a:83:07:3d:99:a9:a4:4a:c7:b3:f0:0a:
         2b:83:dc:d9:7f:63:32:25:61:80:83:a8:54:a5:0c:c7:71:ec:
         11:3f:12:47:09:07:42:6d:97:f4:55:ae:42:36:cf:b8:cf:d0:
         03:3a:2c:ba:c1:66:aa:59:a8:91:a7:d3:bc:48:a1:0d:09:8e:
         57:e3:87:8b:c5:b1:96:a4:26:62:10:6b:3a:75:4c:44:9b:78:
         94:0f:c0:4a:45:cf:6b:17:ce:9c:ad:5b:46:1c:b0:00:cb:49:
         d9:d0:e3:d1:86:e2:85:1d:1c:7a:92:c6:08:69:89:71:87:00:
         94:d0:2b:ea:0a:3b:4b:86:34:83:93:d6:31:5c:38:75:dd:81:
         d2:d5:66:e3:89:46:36:90:19:2c:78:bd:53:dc:c2:98:d4:10:
         71:0b:3d:64:fa:06:21:be:eb:18:24:f7:23:aa:aa:de:d9:b0:
         7d:60:36:73:97:42:a8:11:9b:67:95:8e:e7:da:45:62:7d:0b:
         8d:5e:73:39:4a:5d:f8:e8:75:e9:f5:92:ed:18:29:e8:3d:fd:
         84:ec:76:d5:1c:f8:e1:6b:0c:df:2f:5f:68:66:6d:50:2e:3d:
         1e:a6:be:b3:94:01:d5:5c:9b:8e:9d:b1:7a:cd:27:8a:d4:84:
         5b:ef:c3:81
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYT/ZVxYKCaF9kgXBVdlzV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGJlNjViMjhmZjI1NjY3NDA5Y2NlNjM1YmUwOTZlM2U2
ZGVmY2EwHhcNMjUwNDA4MDYwMTQ3WhcNMjUwNDA5MDYwMTQ3WjAzMTEwLwYDVQQD
Eyg0MDU4MDIwYzM4OGE1NjA3ODNkMDE1ZTAxMWRhZmU5MzgzNWE4NDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse4nYYYvdjMjHQRa3/aJMHKLLXDL
Li5lBlZtlGrHSoy/7ETnnWVyHbRo7xPKXoT59nAFin8KIG0Sknqv1tUviXc0XCNR
EW31L1/f+S/h6eaIhOY3BMJljOzkmGvg+yCRaCwMNidJJCc4fJJBAXbMiHa8/CvE
ifqcO1/Y1zARcsSS3ueFbJxwjOMBlF3wNRwGqwGuqBVpjuGZo6X1YvPBQafm4Ufg
SRpo6hAskpbeWfHJgELuxQRTvOHs6Eh9dPxI+r4GAIrxyaYObivgn61BcU8s89ea
94XqOBVW/+HwAvcencCbCHyp1nEx6H24oKZFeRTVLFOYwOMl7jAFaBPf3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEBYAgw4ilYHg9AV4BHa/pODWoQhMB8GA1UdIwQY
MBaAFPrb5lso/yVmdAnM5jW+CW4+be/KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10dm1XeWpfSldaMENjem1OYjRKYmo1dDc4by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNDhlOTc2LTM3MDctNDY4NS1hNWY5
LTk2MWI3OGQ5ZDRiYy8xLzEtdHZtV3lqX0pXWjBDY3ptTmI0SmJqNXQ3OG8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdjLzQ4ZTk3Ni0zNzA3LTQ2ODUtYTVmOS05NjFiNzhkOWQ0
YmMvMS8xLXR2bVd5al9KV1owQ2N6bU5iNEpiajV0NzhvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzyt
1bQnSoMHPZmppErHs/AKK4Pc2X9jMiVhgIOoVKUMx3HsET8SRwkHQm2X9FWuQjbP
uM/QAzosusFmqlmokafTvEihDQmOV+OHi8WxlqQmYhBrOnVMRJt4lA/ASkXPaxfO
nK1bRhywAMtJ2dDj0YbihR0cepLGCGmJcYcAlNAr6go7S4Y0g5PWMVw4dd2B0tVm
44lGNpAZLHi9U9zCmNQQcQs9ZPoGIb7rGCT3I6qq3tmwfWA2c5dCqBGbZ5WO59pF
Yn0LjV5zOUpd+Oh16fWS7Rgp6D39hOx21Rz44WsM3y9faGZtUC49Hqa+s5QB1Vyb
jp2xes0nitSEW+/DgQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:42 2025 by rpki-client