Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File:                     F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier:          wO+Dfgpp/tXgwKwGrJhpEaFMJPtsO2ZDWl5wBqy0Hvw=
Subject key identifier:   DF:F4:69:78:A3:56:E5:CA:CB:FF:CF:D0:C0:D4:4C:05:69:30:F8:01
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       01958B4D4FEDA5D5F0D3B487E95A32D2E70A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number:          12DE
Signing time:             Wed 12 Mar 2025 17:00:54 +0000
Manifest this update:     Wed 12 Mar 2025 17:00:54 +0000
Manifest next update:     Thu 13 Mar 2025 17:00:54 +0000
Files and hashes:         1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: YoGuDqg6Sptzz0LA05TxYpjrJNZkX3iRht8AO/QhtDQ=)
                          2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:4f:ed:a5:d5:f0:d3:b4:87:e9:5a:32:d2:e7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: Mar 12 17:00:54 2025 GMT
            Not After : Mar 13 17:00:54 2025 GMT
        Subject: CN=dff46978a356e5cacbffcfd0c0d44c056930f801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:5e:13:b6:61:47:89:0b:50:98:de:0e:ee:
                    ef:32:df:43:a3:05:01:9d:9c:50:d5:b9:96:0d:86:
                    94:03:12:dd:18:25:6e:56:56:28:b1:6b:bf:ef:99:
                    03:2f:8f:3b:ad:ff:a4:4e:52:4e:7f:16:c1:8a:92:
                    d3:dc:ce:e4:cc:e5:20:1f:1e:59:6e:27:bb:42:77:
                    20:17:6d:80:40:8c:df:72:38:42:ff:92:2a:eb:76:
                    36:bf:22:a8:ea:23:61:4e:c0:67:3e:5a:0b:5c:2d:
                    a6:eb:9e:9e:63:ac:72:a8:7b:80:19:8d:bf:63:92:
                    2c:71:e8:50:e5:f3:e1:ef:7c:e0:bc:d9:49:ac:a0:
                    0e:a0:34:a2:77:34:a2:c3:7c:14:c3:f7:80:a9:26:
                    77:05:8f:96:2d:a6:8c:fa:0a:c4:43:3a:6b:45:fa:
                    95:36:6c:52:86:ea:2f:47:68:3c:70:6a:fc:58:5d:
                    bd:09:e2:1a:54:55:12:f1:2c:49:68:4a:a4:fc:64:
                    07:4e:a6:7c:1b:11:bb:df:ca:3a:e0:ec:d6:e5:6b:
                    b5:5b:e9:3f:ae:ec:ba:df:c4:86:6a:d8:cc:b1:5c:
                    d0:37:e6:97:e9:76:5d:f8:de:74:b6:b5:40:c5:e0:
                    93:0f:c2:93:3c:70:b2:05:04:f0:cb:ec:4b:88:17:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F4:69:78:A3:56:E5:CA:CB:FF:CF:D0:C0:D4:4C:05:69:30:F8:01
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:1a:08:b7:39:0b:2a:94:6b:91:b2:1a:fd:3a:8e:a9:b8:
         37:57:68:cb:04:ea:54:44:e1:1d:07:5d:5a:7f:97:82:77:07:
         18:7e:bd:c4:66:e3:73:d7:52:b1:7f:75:0b:70:fc:a6:b6:9e:
         b7:03:d8:68:be:85:1f:18:f8:47:f1:c9:09:43:d1:32:5a:71:
         7c:67:9a:46:9e:c6:dc:0c:f2:78:4c:51:1f:39:6f:c0:12:3a:
         68:c3:33:60:7e:b5:51:54:ae:e7:40:ae:f6:02:c8:13:42:3f:
         e9:c1:0c:33:7a:a8:2b:fd:df:84:40:dc:d5:08:f2:41:ee:7f:
         21:f1:ca:92:d5:7a:a6:b5:ef:6e:4e:58:7c:14:d1:33:50:8d:
         bf:b8:1a:29:a4:2d:91:1c:30:46:59:b1:36:66:99:a9:f4:cc:
         97:9c:3d:5b:bf:8d:55:16:0f:2b:f0:30:1a:68:fb:39:b7:37:
         0f:a5:27:59:c9:ef:94:2a:a9:64:cc:81:8a:90:2d:3d:fc:4f:
         ba:3e:0e:14:74:87:ef:70:9f:23:18:2b:db:d8:fa:20:2a:a7:
         ce:24:fa:5d:ff:19:4d:c2:22:0a:d5:d8:e7:01:74:76:12:bd:
         e5:bb:bf:b7:3a:03:92:92:6b:91:10:8d:72:5d:07:10:65:10:
         9f:ea:c7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTU/tpdXw07SH6Voy0ucKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTk5ZTIxMTkxNGE2OGRiODNlYWYzZjdmZDM4NGM1M2U3
NDc0NTUwHhcNMjUwMzEyMTcwMDU0WhcNMjUwMzEzMTcwMDU0WjAzMTEwLwYDVQQD
EyhkZmY0Njk3OGEzNTZlNWNhY2JmZmNmZDBjMGQ0NGMwNTY5MzBmODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIVeE7ZhR4kLUJjeDu7vMt9DowUB
nZxQ1bmWDYaUAxLdGCVuVlYosWu/75kDL487rf+kTlJOfxbBipLT3M7kzOUgHx5Z
bie7QncgF22AQIzfcjhC/5Iq63Y2vyKo6iNhTsBnPloLXC2m656eY6xyqHuAGY2/
Y5IscehQ5fPh73zgvNlJrKAOoDSidzSiw3wUw/eAqSZ3BY+WLaaM+grEQzprRfqV
NmxShuovR2g8cGr8WF29CeIaVFUS8SxJaEqk/GQHTqZ8GxG738o64OzW5Wu1W+k/
ruy638SGatjMsVzQN+aX6XZd+N50trVAxeCTD8KTPHCyBQTwy+xLiBf7wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/0aXijVuXKy//P0MDUTAVpMPgBMB8GA1UdIwQY
MBaAFBeZniEZFKaNuD6vP3/ThMU+dHRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lYTExN2EtNDEyYS00OWUyLTg5MGYt
NGJiNDNiYTNjZGUzLzEvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lYTExN2EtNDEyYS00OWUyLTg5MGYtNGJiNDNiYTNjZGUz
LzEvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeEaCLc5
CyqUa5GyGv06jqm4N1doywTqVEThHQddWn+XgncHGH69xGbjc9dSsX91C3D8prae
twPYaL6FHxj4R/HJCUPRMlpxfGeaRp7G3AzyeExRHzlvwBI6aMMzYH61UVSu50Cu
9gLIE0I/6cEMM3qoK/3fhEDc1QjyQe5/IfHKktV6prXvbk5YfBTRM1CNv7gaKaQt
kRwwRlmxNmaZqfTMl5w9W7+NVRYPK/AwGmj7Obc3D6UnWcnvlCqpZMyBipAtPfxP
uj4OFHSH73CfIxgr29j6ICqnziT6Xf8ZTcIiCtXY5wF0dhK95bu/tzoDkpJrkRCN
cl0HEGUQn+rHpQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:32 2025 by rpki-client