Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
File:                     Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft (raw, json)
Hash identifier:          Quv7d/RBFILvjHLBWcSglodpnHG+mgaU2pCgcQ9CsP8=
Subject key identifier:   97:97:60:BC:32:61:29:0A:A2:20:14:1D:E9:C4:83:37:CB:97:9F:8F
Authority key identifier: 0A:6D:5B:2C:6E:A0:09:31:63:15:54:06:6F:99:51:46:E3:FF:01:44
Certificate issuer:       /CN=0a6d5b2c6ea00931631554066f995146e3ff0144
Certificate serial:       01965914187CE4BDB033B9A78CDBA71415D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
Manifest number:          04AF
Signing time:             Mon 21 Apr 2025 16:00:11 +0000
Manifest this update:     Mon 21 Apr 2025 16:00:11 +0000
Manifest next update:     Tue 22 Apr 2025 16:00:11 +0000
Files and hashes:         1: Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl (hash: /BgmCfeFnmLCxfKpRaXq2m45Y/Ed3Jn70WSCG0p5nyI=)
                          2: ibL-wM5Utk3qSFo0-NrYlsVtpTI.roa (hash: H67n/HQzKROWvSa4M/HKFg5PRZKUR6a+MTAqwbhiOYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:14:18:7c:e4:bd:b0:33:b9:a7:8c:db:a7:14:15:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6d5b2c6ea00931631554066f995146e3ff0144
        Validity
            Not Before: Apr 21 16:00:11 2025 GMT
            Not After : Apr 22 16:00:11 2025 GMT
        Subject: CN=979760bc3261290aa220141de9c48337cb979f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:c9:d7:f8:be:62:ea:00:7b:72:72:ef:78:
                    e6:48:ea:e3:c9:d8:e0:ac:ab:ad:81:5a:be:3a:4f:
                    1c:12:a8:b1:f3:37:7b:79:36:a9:85:82:af:2e:af:
                    41:b3:0f:0f:7f:0c:ba:0d:bb:2f:11:bf:ac:dc:af:
                    b5:97:a5:0a:ce:09:91:d8:1f:14:ee:ad:d1:b8:88:
                    83:fa:12:5c:19:c2:94:a0:08:78:3d:64:a1:66:04:
                    e2:e4:a8:e8:dc:41:1d:98:bf:cc:81:64:c6:19:df:
                    33:32:23:c9:65:db:c2:0b:b7:9a:fd:a0:f7:29:aa:
                    11:d1:ed:38:57:b1:b3:1f:d1:8a:f4:2e:a4:2f:a2:
                    ad:8a:d1:d1:4f:cc:0a:d5:38:35:21:61:f5:5c:a5:
                    18:c1:e3:74:a7:36:a7:82:c2:ce:06:ce:62:08:c5:
                    ab:87:f4:21:49:6a:ba:5e:8a:9d:d3:62:1a:4a:e2:
                    76:5b:d5:00:86:40:4b:64:ef:ad:6f:5b:0a:66:4b:
                    a1:e6:0d:29:ff:9e:5b:e1:91:02:c2:e4:ec:52:aa:
                    f6:d9:56:57:02:93:cb:8a:db:3b:d1:3b:77:a4:9a:
                    78:79:ed:36:1c:e3:91:9c:f7:39:21:db:71:34:f9:
                    eb:87:c6:67:85:9d:47:88:b3:75:cc:28:ab:d8:c3:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:97:60:BC:32:61:29:0A:A2:20:14:1D:E9:C4:83:37:CB:97:9F:8F
            X509v3 Authority Key Identifier:
                keyid:0A:6D:5B:2C:6E:A0:09:31:63:15:54:06:6F:99:51:46:E3:FF:01:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:dc:c5:c9:b4:99:c6:fd:44:9c:21:55:95:8e:37:2b:6d:09:
         3c:e0:70:a3:10:9b:b0:d0:8a:f3:a2:57:21:c2:10:44:7c:d5:
         db:e4:5e:54:d6:2f:a6:83:20:53:19:b6:ca:e5:32:7d:db:37:
         76:87:63:eb:e8:9c:b0:6a:a1:70:b1:08:79:b3:69:74:02:56:
         70:10:97:df:73:f0:51:39:bc:c9:10:d1:e3:67:e5:5e:90:f8:
         c2:22:07:5d:2f:6e:e3:07:b4:7a:34:62:60:3f:1c:6b:50:9a:
         b5:a1:c1:c1:62:c4:ea:1f:92:0f:ec:de:73:78:a7:af:1c:ba:
         7b:b5:91:51:9f:d7:24:6c:c0:ff:91:ff:8a:c4:e5:ca:18:06:
         11:03:34:c0:4b:52:29:53:98:ad:c5:db:e1:b0:99:ad:ff:0a:
         4b:c9:45:4c:c0:a2:fc:29:65:de:21:f1:12:40:ad:65:6e:ab:
         db:3a:f9:e5:2c:a4:15:a6:da:f4:ba:ea:15:03:e1:fc:89:95:
         fb:54:47:f2:bb:6c:80:75:ec:a1:2e:f4:3f:90:42:d3:de:4f:
         15:0c:6c:c4:77:58:b9:59:d9:7f:ce:89:31:2e:cc:f0:41:cb:
         82:e4:35:9d:9e:6b:b7:de:f1:9c:22:93:92:95:eb:9b:ec:5f:
         47:ce:22:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFBh85L2wM7mnjNunFBXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNmQ1YjJjNmVhMDA5MzE2MzE1NTQwNjZmOTk1MTQ2ZTNm
ZjAxNDQwHhcNMjUwNDIxMTYwMDExWhcNMjUwNDIyMTYwMDExWjAzMTEwLwYDVQQD
Eyg5Nzk3NjBiYzMyNjEyOTBhYTIyMDE0MWRlOWM0ODMzN2NiOTc5ZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xzJ1/i+YuoAe3Jy73jmSOrjydjg
rKutgVq+Ok8cEqix8zd7eTaphYKvLq9Bsw8Pfwy6DbsvEb+s3K+1l6UKzgmR2B8U
7q3RuIiD+hJcGcKUoAh4PWShZgTi5Kjo3EEdmL/MgWTGGd8zMiPJZdvCC7ea/aD3
KaoR0e04V7GzH9GK9C6kL6KtitHRT8wK1Tg1IWH1XKUYweN0pzangsLOBs5iCMWr
h/QhSWq6Xoqd02IaSuJ2W9UAhkBLZO+tb1sKZkuh5g0p/55b4ZECwuTsUqr22VZX
ApPLits70Tt3pJp4ee02HOORnPc5IdtxNPnrh8ZnhZ1HiLN1zCir2MML6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeXYLwyYSkKoiAUHenEgzfLl5+PMB8GA1UdIwQY
MBaAFAptWyxuoAkxYxVUBm+ZUUbj/wFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ20xYkxHNmdDVEZqRlZRR2I1bFJSdVBfQVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt
ZDY1NjE3YmQzYjRmLzEvQ20xYkxHNmdDVEZqRlZRR2I1bFJSdVBfQVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm
LzEvQ20xYkxHNmdDVEZqRlZRR2I1bFJSdVBfQVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdzFybSZ
xv1EnCFVlY43K20JPOBwoxCbsNCK86JXIcIQRHzV2+ReVNYvpoMgUxm2yuUyfds3
dodj6+icsGqhcLEIebNpdAJWcBCX33PwUTm8yRDR42flXpD4wiIHXS9u4we0ejRi
YD8ca1CataHBwWLE6h+SD+zec3inrxy6e7WRUZ/XJGzA/5H/isTlyhgGEQM0wEtS
KVOYrcXb4bCZrf8KS8lFTMCi/Cll3iHxEkCtZW6r2zr55SykFaba9LrqFQPh/ImV
+1RH8rtsgHXsoS70P5BC095PFQxsxHdYuVnZf86JMS7M8EHLguQ1nZ5rt97xnCKT
kpXrm+xfR84ibQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:08 2025 by rpki-client