Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          FkMrUpmX1gvAl/b8Yzz3EZnxTcAyfXc3hm7dmddSN9Q=
Subject key identifier:   72:E0:E3:5E:44:19:B3:2B:C9:7D:FA:5D:75:33:C3:9D:17:8E:56:3D
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       0196146AD1E13151BE253F35146EAB0D2E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          14E4
Signing time:             Tue 08 Apr 2025 08:01:06 +0000
Manifest this update:     Tue 08 Apr 2025 08:01:06 +0000
Manifest next update:     Wed 09 Apr 2025 08:01:06 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: MX7fwKDddn0zXbfhX9cXqUpmGEstQi5X4Yw6WiJMHno=)
                          2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:6a:d1:e1:31:51:be:25:3f:35:14:6e:ab:0d:2e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Apr  8 08:01:06 2025 GMT
            Not After : Apr  9 08:01:06 2025 GMT
        Subject: CN=72e0e35e4419b32bc97dfa5d7533c39d178e563d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4d:52:ba:1e:75:5f:eb:b3:ee:c5:e5:4f:87:
                    07:c8:14:c8:74:3e:d6:70:91:fa:96:1b:b1:b4:9f:
                    73:a4:60:8b:e6:8d:2c:1a:5f:66:f5:25:cb:c0:9e:
                    39:ad:bb:0f:fa:25:6b:8c:3a:7f:2f:d6:67:ff:fa:
                    84:c4:51:c3:04:7c:b4:e0:a6:cf:e7:af:3e:f6:f5:
                    83:0b:aa:2d:bc:54:2c:31:8c:49:f3:cc:3d:84:e0:
                    44:cf:70:ae:68:4e:a4:c7:2d:15:a7:31:b8:15:58:
                    e0:49:a4:e9:a2:64:2d:5e:48:04:ca:0d:b5:39:0f:
                    33:8c:04:ad:c8:02:ad:95:da:61:0c:f9:75:f3:bf:
                    d9:0b:0c:c5:f3:70:b0:eb:a9:68:cb:fe:c8:84:82:
                    07:19:d2:56:4a:af:31:7b:f9:34:de:a8:77:7b:87:
                    e2:07:39:87:41:1f:65:28:de:5c:90:ae:8f:8e:c3:
                    2f:e5:b6:97:93:a1:8b:d6:0f:2c:a7:46:f7:38:26:
                    21:d3:5d:25:3b:b2:89:37:25:97:de:33:49:f8:d0:
                    e2:f1:f3:09:14:2a:71:44:f2:54:c5:12:b9:05:af:
                    61:21:11:9a:88:49:22:38:11:9b:b1:22:57:11:41:
                    e0:ba:21:ad:61:ee:e5:a7:b4:ef:97:ec:46:56:eb:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E0:E3:5E:44:19:B3:2B:C9:7D:FA:5D:75:33:C3:9D:17:8E:56:3D
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:43:c9:9f:4e:3d:cf:12:e6:a4:c8:d4:a5:21:42:25:1a:0f:
         ec:dd:36:51:b6:e1:22:46:14:30:ed:da:e5:ed:4f:d9:ee:da:
         1f:85:c4:1a:51:9d:86:f3:88:67:6d:43:58:8f:3a:fe:34:ab:
         f6:ff:de:91:9a:f9:84:f4:fd:21:8a:6c:7e:23:86:bb:e5:a8:
         22:ce:ac:68:72:56:27:cd:cb:83:ac:b3:b1:8e:5a:ae:3b:81:
         f0:c1:cf:e0:31:03:61:b1:53:be:7c:b6:52:57:27:53:50:c0:
         b9:de:16:de:2d:3b:7c:f4:08:78:29:26:2c:b0:12:f0:d9:53:
         1e:49:53:59:00:69:73:76:ff:a4:0a:45:57:d9:6a:19:12:5d:
         a3:09:7e:0b:5c:a1:ef:df:a1:f1:ba:1f:f0:e1:0c:bc:56:a0:
         f5:0e:49:f4:66:8f:a0:eb:cc:0d:31:7c:ee:e6:1a:b6:3f:4b:
         c3:44:37:c9:4a:73:4d:d7:eb:33:e1:57:86:87:29:76:e0:7e:
         b8:48:70:23:98:51:bf:ff:b0:cf:58:0f:20:ae:e5:38:ad:64:
         05:5d:32:a1:2b:b6:8a:45:b3:9e:c2:32:59:e4:90:06:1d:06:
         5a:15:e7:a5:00:31:e8:46:bc:3c:b9:a0:e3:5b:17:ba:6a:31:
         56:36:34:3c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYUatHhMVG+JT81FG6rDS4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky
NTY2MTUwHhcNMjUwNDA4MDgwMTA2WhcNMjUwNDA5MDgwMTA2WjAzMTEwLwYDVQQD
Eyg3MmUwZTM1ZTQ0MTliMzJiYzk3ZGZhNWQ3NTMzYzM5ZDE3OGU1NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E1Suh51X+uz7sXlT4cHyBTIdD7W
cJH6lhuxtJ9zpGCL5o0sGl9m9SXLwJ45rbsP+iVrjDp/L9Zn//qExFHDBHy04KbP
568+9vWDC6otvFQsMYxJ88w9hOBEz3CuaE6kxy0VpzG4FVjgSaTpomQtXkgEyg21
OQ8zjAStyAKtldphDPl187/ZCwzF83Cw66loy/7IhIIHGdJWSq8xe/k03qh3e4fi
BzmHQR9lKN5ckK6PjsMv5baXk6GL1g8sp0b3OCYh010lO7KJNyWX3jNJ+NDi8fMJ
FCpxRPJUxRK5Ba9hIRGaiEkiOBGbsSJXEUHguiGtYe7lp7Tvl+xGVuuxhQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHLg415EGbMryX36XXUzw50XjlY9MB8GA1UdIwQY
MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh
LWJkMzdkYTBlNDQ3Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0
N2MvMS8xLTNuQ2J6RlhVMFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREPJ
n049zxLmpMjUpSFCJRoP7N02UbbhIkYUMO3a5e1P2e7aH4XEGlGdhvOIZ21DWI86
/jSr9v/ekZr5hPT9IYpsfiOGu+WoIs6saHJWJ83Lg6yzsY5arjuB8MHP4DEDYbFT
vny2UlcnU1DAud4W3i07fPQIeCkmLLAS8NlTHklTWQBpc3b/pApFV9lqGRJdowl+
C1yh79+h8bof8OEMvFag9Q5J9GaPoOvMDTF87uYatj9Lw0Q3yUpzTdfrM+FXhocp
duB+uEhwI5hRv/+wz1gPIK7lOK1kBV0yoSu2ikWznsIyWeSQBh0GWhXnpQAx6Ea8
PLmg41sXumoxVjY0PA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:08 2025 by rpki-client