Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File:                     _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier:          r8fLbnWUrMqQK8dYc94C3PFOYunuhm7M4Q6IYgX/Nrs=
Subject key identifier:   47:6E:D8:ED:88:EB:92:3E:35:13:DC:57:15:E7:7C:33:DE:08:7A:C6
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer:       /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial:       0196458D95F51E55FC307C8162B8854C42FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number:          14F8
Signing time:             Thu 17 Apr 2025 21:00:28 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:28 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:28 +0000
Files and hashes:         1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: SgKDdRQ/aIc8cbw2t9tISq1wfpl9aWfaAOYtVLCOTXo=)
                          2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:95:f5:1e:55:fc:30:7c:81:62:b8:85:4c:42:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
        Validity
            Not Before: Apr 17 21:00:28 2025 GMT
            Not After : Apr 18 21:00:28 2025 GMT
        Subject: CN=476ed8ed88eb923e3513dc5715e77c33de087ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:98:37:4f:d9:53:42:7f:81:b3:ef:dd:44:
                    96:a3:ac:64:46:b3:85:8e:45:e5:54:54:5d:aa:63:
                    9b:97:95:37:cf:99:e6:14:5e:c1:6b:15:5b:a8:84:
                    1d:86:f6:52:5e:61:8a:2d:43:ed:c2:05:99:26:b7:
                    41:2a:4d:58:f2:db:17:b0:3a:32:c5:51:8f:3f:eb:
                    f3:63:7d:92:29:ff:b6:71:2b:e7:db:0c:55:51:1c:
                    6b:99:a6:84:27:8e:b3:29:a5:b0:e2:4d:58:b8:d3:
                    46:83:2d:79:eb:06:c2:93:56:a2:96:40:66:95:00:
                    25:15:98:e7:c4:a3:8d:40:d6:71:b9:ff:d8:fd:20:
                    c5:a1:4d:79:b2:8d:08:b5:31:f2:9f:d4:70:f0:8a:
                    fb:c9:3d:a7:91:f9:11:f9:97:40:6c:10:32:e0:af:
                    bf:30:53:67:68:ce:80:0a:f8:14:5b:f7:b8:93:f7:
                    4b:f6:d1:5f:7d:f6:f8:32:32:05:0c:27:29:f9:be:
                    f3:08:9b:f1:87:bf:eb:c8:64:ee:32:60:b3:83:0a:
                    6d:02:0e:69:cc:b2:cd:2a:37:17:2a:4a:5b:58:64:
                    21:fd:01:39:07:f1:c2:39:3f:98:6c:8b:45:23:61:
                    83:c2:90:2d:a2:7c:32:74:6d:eb:7c:c5:04:1b:76:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6E:D8:ED:88:EB:92:3E:35:13:DC:57:15:E7:7C:33:DE:08:7A:C6
            X509v3 Authority Key Identifier:
                keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:4d:86:5a:78:26:f5:93:c1:64:38:af:e1:35:f5:81:e1:
         49:c8:3e:59:ab:1c:91:71:70:d2:de:23:17:cf:75:5a:85:d0:
         9a:45:06:09:07:7c:f2:d7:cd:7b:69:4e:ab:a5:fd:28:ec:7d:
         86:a4:19:47:44:da:68:b5:5f:cd:27:99:7d:c5:89:fb:bf:64:
         e9:86:52:d0:8a:b8:8d:de:fe:ea:11:66:74:e9:50:96:76:e6:
         d1:e0:97:f7:ad:c7:3d:16:af:93:9b:ed:8b:7a:dc:53:d4:a4:
         d6:36:a9:bb:b4:92:c3:2f:e6:31:1b:af:8c:5b:5b:e7:81:ab:
         32:f8:a8:68:28:04:b6:18:8e:1b:9c:a7:c9:3f:4a:c6:64:a9:
         f1:62:4b:7b:23:7d:b0:e3:bf:bf:78:0e:83:4d:e1:ba:c2:b6:
         31:d0:90:bc:ca:b0:ca:0f:0a:4e:b8:f5:c2:ab:7e:0f:09:b1:
         a3:6d:99:d8:08:f4:02:d8:0b:00:93:71:a8:c6:d1:67:79:45:
         47:ca:b4:68:b3:1b:18:e5:19:db:04:f2:1a:0b:28:6e:b0:9a:
         b0:3b:6d:da:ff:6c:10:3d:0e:59:40:e8:5e:83:8c:db:ee:58:
         21:60:43:49:40:a3:df:9f:ab:a0:ab:e8:73:df:98:21:6b:e3:
         d9:3d:7a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjZX1HlX8MHyBYriFTEL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk
YzkxZWYwHhcNMjUwNDE3MjEwMDI4WhcNMjUwNDE4MjEwMDI4WjAzMTEwLwYDVQQD
Eyg0NzZlZDhlZDg4ZWI5MjNlMzUxM2RjNTcxNWU3N2MzM2RlMDg3YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FSYN0/ZU0J/gbPv3USWo6xkRrOF
jkXlVFRdqmObl5U3z5nmFF7BaxVbqIQdhvZSXmGKLUPtwgWZJrdBKk1Y8tsXsDoy
xVGPP+vzY32SKf+2cSvn2wxVURxrmaaEJ46zKaWw4k1YuNNGgy156wbCk1ailkBm
lQAlFZjnxKONQNZxuf/Y/SDFoU15so0ItTHyn9Rw8Ir7yT2nkfkR+ZdAbBAy4K+/
MFNnaM6ACvgUW/e4k/dL9tFfffb4MjIFDCcp+b7zCJvxh7/ryGTuMmCzgwptAg5p
zLLNKjcXKkpbWGQh/QE5B/HCOT+YbItFI2GDwpAtonwydG3rfMUEG3YqXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdu2O2I65I+NRPcVxXnfDPeCHrGMB8GA1UdIwQY
MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct
NWIwOWE2NzQzMzc1LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1
LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/tNhlp4
JvWTwWQ4r+E19YHhScg+WasckXFw0t4jF891WoXQmkUGCQd88tfNe2lOq6X9KOx9
hqQZR0TaaLVfzSeZfcWJ+79k6YZS0Iq4jd7+6hFmdOlQlnbm0eCX963HPRavk5vt
i3rcU9Sk1japu7SSwy/mMRuvjFtb54GrMvioaCgEthiOG5ynyT9KxmSp8WJLeyN9
sOO/v3gOg03husK2MdCQvMqwyg8KTrj1wqt+Dwmxo22Z2Aj0AtgLAJNxqMbRZ3lF
R8q0aLMbGOUZ2wTyGgsobrCasDtt2v9sED0OWUDoXoOM2+5YIWBDSUCj35+roKvo
c9+YIWvj2T16Xw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:47 2025 by rpki-client