Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File:                     fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier:          Np8K5ErrAFK1htkmuM1dvP4sC2CADu7wDX36Fs6wQac=
Subject key identifier:   9A:12:6D:34:95:B9:7B:57:6E:34:B0:2D:A6:C8:0E:0B:C1:98:E1:27
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer:       /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial:       0194C4D100681C3D15BC96983234E658097D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number:          5E
Signing time:             Sun 02 Feb 2025 04:00:18 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:18 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:18 +0000
Files and hashes:         1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: mBupz3sBv9lPUyarruA/ot/ksVE4kW5xXI/X0jNf2SM=)
                          2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:00:68:1c:3d:15:bc:96:98:32:34:e6:58:09:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
        Validity
            Not Before: Feb  2 04:00:18 2025 GMT
            Not After : Feb  3 04:00:18 2025 GMT
        Subject: CN=9a126d3495b97b576e34b02da6c80e0bc198e127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:b0:a7:3b:45:2a:a4:3f:6e:38:d3:67:7e:
                    68:62:4f:e2:53:7b:0e:af:93:77:d3:7e:04:59:89:
                    9f:3b:c9:0e:88:77:d6:5d:18:7d:ce:46:19:ee:4f:
                    56:d4:9e:bb:e4:ef:52:ae:9f:4c:70:f6:26:4a:ab:
                    6e:12:d8:9a:42:3a:92:8f:1a:ea:fd:85:dd:80:aa:
                    6d:01:ea:95:f9:db:8b:e6:7e:f9:71:67:5a:16:e7:
                    30:4b:cd:eb:a7:3a:55:df:ae:20:2f:77:ae:7e:b3:
                    8b:9d:a5:26:e1:b1:ab:9e:24:45:95:12:26:e2:63:
                    2c:c7:cf:6a:5f:70:a1:9a:d6:25:09:05:e7:b4:15:
                    2e:8b:55:32:3b:05:0c:1b:fc:3a:39:fe:71:cf:4a:
                    12:70:8a:cb:37:a9:5c:77:99:c2:31:2f:d9:b3:03:
                    56:7f:e2:64:f0:43:0a:c2:ff:b0:e6:dd:37:ba:2b:
                    41:82:d0:f4:88:f5:3a:b3:06:ea:68:c9:34:8b:72:
                    1d:2b:6d:ff:15:aa:0b:fc:d5:dd:9d:17:ef:76:9d:
                    e3:cf:8f:9a:34:1a:d7:41:9b:3e:10:8a:71:45:02:
                    22:62:12:1a:6c:05:cc:bb:09:7d:5d:ac:c0:92:d8:
                    c8:60:b5:46:0b:0f:7c:90:9f:a7:88:16:76:6a:be:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:6D:34:95:B9:7B:57:6E:34:B0:2D:A6:C8:0E:0B:C1:98:E1:27
            X509v3 Authority Key Identifier:
                keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:76:64:1a:e7:6f:7b:4e:3a:fd:53:03:fa:24:59:91:72:
         48:71:a3:53:10:5e:80:ac:29:c0:4b:f0:88:57:a2:a6:4b:ba:
         b3:8e:ea:42:18:ee:ee:e1:dc:1c:46:7a:15:30:aa:a8:e0:3a:
         8a:a2:6f:97:83:fd:94:c9:52:16:d5:e9:05:98:07:8c:f0:9a:
         f8:59:70:e1:5a:4f:fe:6a:25:2e:58:3a:f3:a4:a7:21:38:ed:
         10:ec:fd:23:7d:87:5e:ac:6e:2f:a1:c7:bb:8c:99:44:07:89:
         69:ff:1f:cf:7b:84:ba:6b:f5:83:8b:ff:18:8c:d5:f4:69:70:
         34:ea:47:ab:98:1d:e5:cb:23:45:83:93:9d:24:fd:51:d4:2c:
         9a:05:30:ad:11:99:b5:09:e1:1f:70:bc:63:1f:ab:a5:8f:6c:
         da:af:73:eb:0f:c1:71:13:30:f4:2e:11:7b:4f:b9:0c:69:c3:
         a9:80:06:72:fe:ab:d3:f5:30:c2:c6:ff:1d:2d:40:01:32:74:
         8d:a8:79:bc:c8:f9:b8:64:2e:a9:a1:ae:1d:4f:f4:91:33:74:
         b8:31:c3:ac:88:52:34:e4:b9:fb:41:f2:26:53:e0:59:70:30:
         14:e4:2f:d6:19:ab:a8:9c:a1:f3:c3:98:b9:ac:46:17:87:46:
         e8:c4:e2:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0QBoHD0VvJaYMjTmWAl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMjQ5Yjk1NDQ2MjA2ODNmOTRiMzg4YTc1NTFhNjhhNjQ5
M2VkMTIwHhcNMjUwMjAyMDQwMDE4WhcNMjUwMjAzMDQwMDE4WjAzMTEwLwYDVQQD
Eyg5YTEyNmQzNDk1Yjk3YjU3NmUzNGIwMmRhNmM4MGUwYmMxOThlMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AewpztFKqQ/bjjTZ35oYk/iU3sO
r5N3034EWYmfO8kOiHfWXRh9zkYZ7k9W1J675O9Srp9McPYmSqtuEtiaQjqSjxrq
/YXdgKptAeqV+duL5n75cWdaFucwS83rpzpV364gL3eufrOLnaUm4bGrniRFlRIm
4mMsx89qX3ChmtYlCQXntBUui1UyOwUMG/w6Of5xz0oScIrLN6lcd5nCMS/ZswNW
f+Jk8EMKwv+w5t03uitBgtD0iPU6swbqaMk0i3IdK23/FaoL/NXdnRfvdp3jz4+a
NBrXQZs+EIpxRQIiYhIabAXMuwl9XazAktjIYLVGCw98kJ+niBZ2ar4MMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoSbTSVuXtXbjSwLabIDgvBmOEnMB8GA1UdIwQY
MBaAFH8km5VEYgaD+Us4inVRpopkk+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMt
ODQyMzk3ZTMwNjQzLzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMtODQyMzk3ZTMwNjQz
LzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlz52ZBrn
b3tOOv1TA/okWZFySHGjUxBegKwpwEvwiFeipku6s47qQhju7uHcHEZ6FTCqqOA6
iqJvl4P9lMlSFtXpBZgHjPCa+Flw4VpP/molLlg686SnITjtEOz9I32HXqxuL6HH
u4yZRAeJaf8fz3uEumv1g4v/GIzV9GlwNOpHq5gd5csjRYOTnST9UdQsmgUwrRGZ
tQnhH3C8Yx+rpY9s2q9z6w/BcRMw9C4Re0+5DGnDqYAGcv6r0/Uwwsb/HS1AATJ0
jah5vMj5uGQuqaGuHU/0kTN0uDHDrIhSNOS5+0HyJlPgWXAwFOQv1hmrqJyh88OY
uaxGF4dG6MTiGw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:11 2025 by rpki-client