Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File:                     0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier:          CbiOMzshCFhpmDVp4idrVQGMNxe0kpGr4o+cOTJXC9Q=
Subject key identifier:   F0:C9:E3:3C:A7:A5:31:83:9F:A0:23:02:49:0F:91:1A:97:F7:C5:6E
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       0194BAF26B1316F71FE539F44835DC4EBCCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number:          0599
Signing time:             Fri 31 Jan 2025 06:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:36 +0000
Files and hashes:         1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: PiFZeeELxCgWnnmlyGDWXnCT/StML4vB7UIFEKXIhuY=)
                          2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
                          3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
                          4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:6b:13:16:f7:1f:e5:39:f4:48:35:dc:4e:bc:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Jan 31 06:00:36 2025 GMT
            Not After : Feb  1 06:00:36 2025 GMT
        Subject: CN=f0c9e33ca7a531839fa02302490f911a97f7c56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:64:e2:44:d8:9f:72:ed:2f:9d:60:68:e6:
                    ff:24:79:8d:b6:05:4a:ed:26:67:7f:29:3c:69:d3:
                    7e:ad:9b:f0:ec:bf:23:a9:90:09:3b:82:7a:99:64:
                    d8:f8:18:e1:e7:bf:fc:06:40:f4:c8:d5:ab:3b:83:
                    9b:30:a6:77:15:52:be:21:66:8d:03:c1:be:5b:0b:
                    79:51:a3:98:38:36:0b:95:cf:d4:63:d2:19:3b:d3:
                    67:7d:83:de:50:0c:a0:c1:cd:23:4e:a1:3b:e4:28:
                    b1:e6:76:b4:d6:f6:5c:4a:77:96:23:bc:fe:15:a5:
                    e2:f5:e1:3b:46:1f:df:42:be:18:41:a7:e2:1b:df:
                    25:e7:b7:31:fc:12:a8:37:05:59:95:d0:35:79:d7:
                    c9:2f:d5:a3:f9:f8:8c:57:e1:2d:45:bf:9c:f3:ac:
                    9b:2a:48:dd:cb:2d:fe:be:32:f5:b2:e1:1d:23:13:
                    5e:23:ab:e5:f3:f8:c6:29:84:5a:fd:10:66:27:a4:
                    45:e6:36:14:21:ae:3c:5e:07:0d:0a:82:e0:44:d5:
                    b6:df:24:9a:26:6f:02:3e:60:8a:49:b6:e5:cd:d0:
                    9b:c5:46:16:2e:77:da:ad:15:f4:85:ab:16:eb:85:
                    c8:fd:e7:49:57:61:e8:68:a1:d2:b6:0b:68:b2:8b:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:E3:3C:A7:A5:31:83:9F:A0:23:02:49:0F:91:1A:97:F7:C5:6E
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:25:4b:b1:54:ea:b6:df:47:bd:23:9d:e6:08:a3:20:cb:
         b8:23:36:3a:55:e4:cc:fd:6e:a7:a3:80:03:c8:b7:a9:21:4b:
         d5:a0:a1:48:60:3f:e5:15:f1:11:4c:53:9d:d8:59:ab:7e:a2:
         0a:78:6f:8d:d0:4f:2a:c6:ae:ad:2f:b1:a6:b5:ab:59:cc:4b:
         e1:4c:bc:0d:0a:d7:7e:6b:98:dd:db:15:7d:9c:48:1d:43:f8:
         21:25:27:22:de:9a:de:8f:62:b1:bf:60:03:8d:fc:d2:14:a5:
         91:da:54:37:1f:69:81:7b:37:0d:b7:4f:97:b0:f7:1b:a0:39:
         4e:0c:f6:46:31:8e:c5:e9:23:25:c8:8c:2d:29:a7:60:31:13:
         d4:f8:5a:0b:a5:70:d4:bb:ef:c3:d5:a6:32:ca:69:a7:a1:3b:
         cf:42:9a:0e:0c:82:34:13:ed:4c:6f:00:95:66:bd:de:13:11:
         c2:70:30:4a:a4:f9:f2:4e:ad:62:ec:c8:42:10:ac:19:98:e5:
         f3:84:c0:e9:aa:dd:c6:f8:42:37:20:29:d6:97:a3:ab:14:b5:
         64:5d:24:73:f3:3a:35:01:5e:0f:05:fe:32:53:33:30:32:1e:
         4a:a9:84:0f:60:65:81:b9:32:f9:92:cf:4b:07:c7:8e:de:d1:
         4e:8b:49:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68msTFvcf5Tn0SDXcTrzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm
OWMxNjgwHhcNMjUwMTMxMDYwMDM2WhcNMjUwMjAxMDYwMDM2WjAzMTEwLwYDVQQD
EyhmMGM5ZTMzY2E3YTUzMTgzOWZhMDIzMDI0OTBmOTExYTk3ZjdjNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9hk4kTYn3LtL51gaOb/JHmNtgVK
7SZnfyk8adN+rZvw7L8jqZAJO4J6mWTY+Bjh57/8BkD0yNWrO4ObMKZ3FVK+IWaN
A8G+Wwt5UaOYODYLlc/UY9IZO9NnfYPeUAygwc0jTqE75Cix5na01vZcSneWI7z+
FaXi9eE7Rh/fQr4YQafiG98l57cx/BKoNwVZldA1edfJL9Wj+fiMV+EtRb+c86yb
Kkjdyy3+vjL1suEdIxNeI6vl8/jGKYRa/RBmJ6RF5jYUIa48XgcNCoLgRNW23ySa
Jm8CPmCKSbblzdCbxUYWLnfarRX0hasW64XI/edJV2HoaKHStgtosotkCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDJ4zynpTGDn6AjAkkPkRqX98VuMB8GA1UdIwQY
MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct
YTJkNjM2ZjMyNWU2LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2
LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfElS7FU
6rbfR70jneYIoyDLuCM2OlXkzP1up6OAA8i3qSFL1aChSGA/5RXxEUxTndhZq36i
CnhvjdBPKsaurS+xprWrWcxL4Uy8DQrXfmuY3dsVfZxIHUP4ISUnIt6a3o9isb9g
A4380hSlkdpUNx9pgXs3DbdPl7D3G6A5Tgz2RjGOxekjJciMLSmnYDET1PhaC6Vw
1Lvvw9WmMsppp6E7z0KaDgyCNBPtTG8AlWa93hMRwnAwSqT58k6tYuzIQhCsGZjl
84TA6ardxvhCNyAp1pejqxS1ZF0kc/M6NQFeDwX+MlMzMDIeSqmED2Blgbky+ZLP
SwfHjt7RTotJXQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:01 2025 by rpki-client on console-fra.rpki-client.org