Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File:                     8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier:          ZeTD0ONifbK8gz5VI/Oig8QmkJ8ewtgHdT6J/2Ls77c=
Subject key identifier:   D6:A9:87:66:2B:D5:24:EA:04:EF:16:34:FA:59:CE:92:A6:3D:3C:D7
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer:       /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial:       019511A26F9569041BE461A150093F5C4A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number:          0DC1
Signing time:             Mon 17 Feb 2025 02:00:12 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:12 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:12 +0000
Files and hashes:         1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: ovExhIJkPHwJJyY/utU8qBVun7o9X/FfgRYbM2tN+nM=)
                          2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:6f:95:69:04:1b:e4:61:a1:50:09:3f:5c:4a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
        Validity
            Not Before: Feb 17 02:00:12 2025 GMT
            Not After : Feb 18 02:00:12 2025 GMT
        Subject: CN=d6a987662bd524ea04ef1634fa59ce92a63d3cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:1f:9b:42:08:97:10:99:17:b8:ca:a4:ff:
                    a3:ff:de:e0:55:0b:c1:42:d2:46:42:9f:d4:26:62:
                    5f:df:59:7c:f8:b3:13:19:14:da:da:58:40:fc:e8:
                    b1:31:32:cf:1c:39:64:2c:2d:2e:bb:82:a7:7a:a1:
                    fd:24:fb:02:9d:84:c8:00:68:44:7b:62:fe:8c:88:
                    e6:b3:12:f6:88:28:94:14:a2:f4:b0:87:54:9e:25:
                    0a:89:84:d5:07:5b:10:46:3a:2c:75:25:bd:87:6f:
                    d2:c0:0b:ab:a5:ad:fb:b4:dd:ad:01:a7:44:a1:4e:
                    3f:76:29:cd:6a:8a:1c:15:df:88:e9:ea:c5:43:a9:
                    21:0e:d3:0d:5c:32:d3:31:21:c4:78:49:cf:0e:b8:
                    27:88:d7:63:c2:c0:51:b8:df:bf:c3:3d:3e:40:3e:
                    02:0a:b7:a7:a3:03:31:51:b6:2c:64:e5:83:b5:e0:
                    a7:2e:7b:b7:05:2c:9b:8c:ee:40:43:fa:da:01:6d:
                    7d:3a:8a:a1:c4:e4:76:13:24:2f:46:02:25:ed:e6:
                    db:89:67:bc:25:93:6b:93:82:cb:28:b5:48:69:02:
                    34:e1:63:f7:68:13:e2:b2:f1:4d:c4:14:6d:91:f7:
                    99:45:5e:1a:89:8d:9e:ab:56:be:4b:7f:e9:87:4d:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A9:87:66:2B:D5:24:EA:04:EF:16:34:FA:59:CE:92:A6:3D:3C:D7
            X509v3 Authority Key Identifier:
                keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e5:81:f8:75:05:89:3f:75:ea:2d:f0:df:d3:23:76:8e:c1:
         ff:ef:fd:28:99:28:9b:6d:68:c4:14:ef:20:aa:71:70:6f:d2:
         a2:4a:a0:87:4e:4d:fe:fb:db:d5:2c:3c:21:9a:da:4c:c9:8f:
         f3:a4:40:fe:34:b1:ea:6b:5f:1a:04:46:ff:29:6c:a1:b0:e4:
         20:59:8e:6f:c1:f5:49:e0:ae:31:9b:6c:2a:c6:42:01:4e:69:
         d7:a1:a3:15:e2:70:b2:98:cc:6f:a2:c0:1f:97:af:5e:84:0e:
         21:94:f8:0c:a3:21:40:29:a9:ab:23:19:c5:0a:e4:db:cd:0e:
         b8:da:2e:dd:96:22:e7:db:c9:b8:22:12:17:90:cb:b6:a5:5e:
         af:e0:6c:51:c4:fd:37:f3:ff:9a:84:c6:b6:ec:a1:66:6a:84:
         a0:4f:1d:56:4c:ac:08:db:3a:93:1e:c8:e3:8e:1e:ba:b2:79:
         ee:f7:ae:47:61:8c:e7:95:72:35:2f:23:e9:1a:93:9f:17:02:
         43:86:14:6c:47:b6:58:95:af:38:e6:cd:c1:9a:55:71:c4:c1:
         5a:e9:b7:c5:ae:78:e4:d9:50:22:09:2c:a5:ee:e7:e0:0a:78:
         77:fa:c7:58:aa:c5:94:9b:05:73:f8:17:c2:7d:d0:d2:14:f5:
         5f:b9:c7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURom+VaQQb5GGhUAk/XEpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjA1ZDA5YWQyYzZjNDM3YjZjMmY4NjgzZmZmZmJlMjE3
NGZlNmMwHhcNMjUwMjE3MDIwMDEyWhcNMjUwMjE4MDIwMDEyWjAzMTEwLwYDVQQD
EyhkNmE5ODc2NjJiZDUyNGVhMDRlZjE2MzRmYTU5Y2U5MmE2M2QzY2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvMfm0IIlxCZF7jKpP+j/97gVQvB
QtJGQp/UJmJf31l8+LMTGRTa2lhA/OixMTLPHDlkLC0uu4KneqH9JPsCnYTIAGhE
e2L+jIjmsxL2iCiUFKL0sIdUniUKiYTVB1sQRjosdSW9h2/SwAurpa37tN2tAadE
oU4/dinNaoocFd+I6erFQ6khDtMNXDLTMSHEeEnPDrgniNdjwsBRuN+/wz0+QD4C
CrenowMxUbYsZOWDteCnLnu3BSybjO5AQ/raAW19OoqhxOR2EyQvRgIl7ebbiWe8
JZNrk4LLKLVIaQI04WP3aBPisvFNxBRtkfeZRV4aiY2eq1a+S3/ph01oXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaph2Yr1STqBO8WNPpZzpKmPTzXMB8GA1UdIwQY
MBaAFPFgXQmtLGxDe2wvhoP//74hdP5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDIt
MjI4NzMzMjQ1Y2QxLzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDItMjI4NzMzMjQ1Y2Qx
LzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+WB+HUF
iT916i3w39Mjdo7B/+/9KJkom21oxBTvIKpxcG/Sokqgh05N/vvb1Sw8IZraTMmP
86RA/jSx6mtfGgRG/ylsobDkIFmOb8H1SeCuMZtsKsZCAU5p16GjFeJwspjMb6LA
H5evXoQOIZT4DKMhQCmpqyMZxQrk280OuNou3ZYi59vJuCISF5DLtqVer+BsUcT9
N/P/moTGtuyhZmqEoE8dVkysCNs6kx7I444eurJ57veuR2GM55VyNS8j6RqTnxcC
Q4YUbEe2WJWvOObNwZpVccTBWum3xa545NlQIgkspe7n4Ap4d/rHWKrFlJsFc/gX
wn3Q0hT1X7nH7g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:14 2025 by rpki-client