Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
File:                     _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json)
Hash identifier:          nykA/PKavKdWg4GIfNALirjepqSP/KvXp/JE4XiG7LA=
Subject key identifier:   80:78:85:59:17:DF:EB:4F:4E:29:6F:09:BD:68:06:7E:F6:A1:67:CE
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Certificate issuer:       /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial:       0196512443498DD5A121D4F25CFE595BD5ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
Manifest number:          0808
Signing time:             Sun 20 Apr 2025 03:00:53 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:53 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:53 +0000
Files and hashes:         1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: d45K6ZB+jni+sV8NmlljiO2XWfbH0+EsLEtJhrQZTqA=)
                          2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:24:43:49:8d:d5:a1:21:d4:f2:5c:fe:59:5b:d5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
        Validity
            Not Before: Apr 20 03:00:53 2025 GMT
            Not After : Apr 21 03:00:53 2025 GMT
        Subject: CN=8078855917dfeb4f4e296f09bd68067ef6a167ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:20:2e:c7:03:90:95:d6:bb:9a:68:b9:b6:
                    6d:4c:99:3f:35:17:be:f7:ec:43:3a:a3:42:50:57:
                    2f:77:14:5e:93:fd:ef:e7:d9:f7:34:9e:7a:8b:d4:
                    4f:65:10:c7:b1:8f:04:c5:bb:cc:f7:cb:fe:f0:be:
                    15:81:39:b9:67:61:59:b5:30:d0:f7:42:eb:b2:d1:
                    b7:a2:f3:f3:11:19:6d:fa:9e:f2:3a:99:36:11:8c:
                    c9:8b:ed:51:9a:a8:68:2a:25:4f:1d:0f:dd:b0:ce:
                    d7:27:64:b3:eb:d9:90:93:04:9d:42:bb:e5:ac:cf:
                    73:f1:78:27:54:c2:8a:e6:9e:0a:75:6e:f9:94:88:
                    d7:c3:89:e0:fc:2b:63:52:d8:20:b9:fb:3a:5a:01:
                    02:46:a0:5b:fb:e6:de:84:2e:ff:e5:0d:a9:e7:64:
                    0c:9c:df:64:ee:4b:36:f1:0d:52:61:30:e1:6e:b0:
                    58:16:6d:89:72:f6:b0:e5:8e:35:0f:c1:3c:2d:6a:
                    2f:cf:8c:2a:bf:68:5e:39:be:b1:15:bc:cc:aa:1a:
                    a0:b4:81:1c:0e:60:50:bb:5d:05:f7:b4:0c:e9:0f:
                    3d:22:0a:e4:7d:9d:32:5e:a9:14:87:57:59:b1:82:
                    88:00:ad:57:09:53:bc:e0:4a:53:96:88:6b:de:96:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:78:85:59:17:DF:EB:4F:4E:29:6F:09:BD:68:06:7E:F6:A1:67:CE
            X509v3 Authority Key Identifier:
                keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:0d:5e:4c:c6:4f:af:f2:95:1a:a1:ca:1b:42:1d:5b:82:
         a4:10:17:01:ca:85:f5:31:79:f3:4d:22:c1:a2:fe:bf:4b:cd:
         12:4e:cf:1a:d7:60:cf:b8:be:08:3c:bf:90:47:d4:f0:7c:76:
         28:ea:3b:e3:1a:9f:a4:80:a7:fe:a4:57:32:1b:e1:9f:90:72:
         66:e5:ad:55:7c:cd:38:26:1d:65:df:25:15:89:59:5e:60:7a:
         98:04:b0:35:64:da:b2:f8:ae:3b:b0:03:a4:9e:8f:94:19:78:
         e6:24:ea:22:40:52:49:3e:42:5b:a7:16:3f:ee:f7:57:88:11:
         f6:69:bf:07:8d:cf:11:b4:45:70:ab:10:de:a6:a9:84:88:03:
         aa:84:0f:01:a1:5b:cb:f6:1d:c8:a3:e1:30:c6:30:3f:a5:df:
         d3:52:5b:8c:00:b7:f2:73:f3:a0:af:c2:3c:cd:f5:ef:66:cb:
         ff:c9:44:24:8b:67:5f:e6:1f:85:97:22:26:c3:ec:b1:16:b6:
         3d:4c:a9:4d:24:78:39:e9:f7:44:a6:9f:8b:5e:49:1c:b5:08:
         13:3c:b8:85:b0:b9:ab:35:e4:93:58:94:c8:7d:ec:83:cb:49:
         7d:a0:32:c3:fb:2a:8c:a0:36:29:4b:81:9b:81:c2:14:f1:53:
         fc:c7:d7:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRJENJjdWhIdTyXP5ZW9XtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5
NjFiNmQwHhcNMjUwNDIwMDMwMDUzWhcNMjUwNDIxMDMwMDUzWjAzMTEwLwYDVQQD
Eyg4MDc4ODU1OTE3ZGZlYjRmNGUyOTZmMDliZDY4MDY3ZWY2YTE2N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCIgLscDkJXWu5poubZtTJk/NRe+
9+xDOqNCUFcvdxRek/3v59n3NJ56i9RPZRDHsY8ExbvM98v+8L4VgTm5Z2FZtTDQ
90LrstG3ovPzERlt+p7yOpk2EYzJi+1RmqhoKiVPHQ/dsM7XJ2Sz69mQkwSdQrvl
rM9z8XgnVMKK5p4KdW75lIjXw4ng/CtjUtggufs6WgECRqBb++behC7/5Q2p52QM
nN9k7ks28Q1SYTDhbrBYFm2Jcvaw5Y41D8E8LWovz4wqv2heOb6xFbzMqhqgtIEc
DmBQu10F97QM6Q89IgrkfZ0yXqkUh1dZsYKIAK1XCVO84EpTlohr3pbZkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB4hVkX3+tPTilvCb1oBn72oWfOMB8GA1UdIwQY
MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt
YjY4MzViNzMyYWQ2LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2
LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgENXkzG
T6/ylRqhyhtCHVuCpBAXAcqF9TF5800iwaL+v0vNEk7PGtdgz7i+CDy/kEfU8Hx2
KOo74xqfpICn/qRXMhvhn5ByZuWtVXzNOCYdZd8lFYlZXmB6mASwNWTasviuO7AD
pJ6PlBl45iTqIkBSST5CW6cWP+73V4gR9mm/B43PEbRFcKsQ3qaphIgDqoQPAaFb
y/YdyKPhMMYwP6Xf01JbjAC38nPzoK/CPM3172bL/8lEJItnX+YfhZciJsPssRa2
PUypTSR4Oen3RKafi15JHLUIEzy4hbC5qzXkk1iUyH3sg8tJfaAyw/sqjKA2KUuB
m4HCFPFT/MfXoQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:24 2025 by rpki-client