Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File:                     c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier:          iQ+FtouKxwmMuF03O1QScUXjKJxQ8auTqE/7iqQ8/g0=
Subject key identifier:   9B:9D:F5:67:1F:C0:44:49:16:18:AF:A5:D2:9F:54:79:04:95:DC:53
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer:       /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial:       01963C539329CDCE7AC5780881F0DCDDCC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number:          0E57
Signing time:             Wed 16 Apr 2025 02:00:31 +0000
Manifest this update:     Wed 16 Apr 2025 02:00:31 +0000
Manifest next update:     Thu 17 Apr 2025 02:00:31 +0000
Files and hashes:         1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=)
                          2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: EHWLYFTo7oPDPYrQtOlfvG5dawQDbPOkkAuT9hlOL5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:53:93:29:cd:ce:7a:c5:78:08:81:f0:dc:dd:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
        Validity
            Not Before: Apr 16 02:00:31 2025 GMT
            Not After : Apr 17 02:00:31 2025 GMT
        Subject: CN=9b9df5671fc044491618afa5d29f54790495dc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:7a:2f:db:f3:53:75:4e:fc:82:30:b4:48:
                    16:61:55:f3:6d:88:c4:8c:95:87:ec:6a:87:53:c4:
                    38:55:fe:30:96:72:6a:20:5e:9a:73:6b:f7:1d:d9:
                    aa:9f:c5:e3:96:a6:7a:05:1a:cd:fb:57:07:83:16:
                    bd:db:0a:e4:58:8f:f0:0f:58:9f:ad:fd:ec:cf:17:
                    c2:47:90:aa:32:1d:c2:17:4f:b9:7a:8b:85:7c:97:
                    af:fa:f5:2c:03:68:36:d4:08:58:6f:bb:09:21:62:
                    f1:5d:ca:74:31:61:4f:5b:34:04:da:d6:fd:09:4d:
                    d9:d8:d3:ca:ea:46:fe:02:0d:f0:03:93:83:2b:43:
                    17:68:65:19:81:f5:40:5a:f4:87:c5:7c:91:50:d3:
                    e9:1b:84:ab:33:4e:a2:28:73:7c:95:31:73:ed:bc:
                    4b:97:7e:06:9e:f2:5a:e7:8a:36:7f:27:90:67:b8:
                    31:ab:84:90:f2:e1:db:44:b5:9e:7b:e1:66:bb:6c:
                    8f:57:16:89:cc:4b:bf:77:12:f3:d7:ed:19:b0:d9:
                    b6:71:51:d9:c5:4f:7f:fb:8f:25:ce:80:4d:f7:1b:
                    27:fd:24:33:ce:44:a0:cd:f1:87:4a:85:b5:e0:bc:
                    44:79:07:fa:a6:96:97:ee:fc:3e:77:14:ee:19:49:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9D:F5:67:1F:C0:44:49:16:18:AF:A5:D2:9F:54:79:04:95:DC:53
            X509v3 Authority Key Identifier:
                keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:d7:f3:35:f0:f3:e3:d8:58:59:69:ab:16:40:d4:bf:d4:
         da:e0:41:12:7d:c9:9e:7f:34:2e:81:f8:72:a4:fe:22:fc:9a:
         39:23:3c:e1:7a:c4:f4:f2:6e:89:37:81:ce:eb:d8:18:e8:13:
         cc:64:e1:4f:35:dd:c3:b6:42:dc:7d:79:72:e8:9f:7c:9c:08:
         97:55:78:6a:82:ee:f2:5a:23:5d:30:17:67:94:03:cb:9e:37:
         8e:42:7d:ad:34:2c:79:38:6d:d7:ce:ed:08:5f:a6:16:2e:b3:
         dc:d7:46:84:f7:a2:e7:41:9e:dc:eb:db:7a:e9:94:46:db:9c:
         da:18:e0:47:f7:d8:0d:74:4f:c2:b5:d5:44:5a:7c:b6:79:70:
         88:c1:42:8f:ad:5d:da:00:17:ee:62:ef:aa:6a:d3:65:71:7b:
         26:44:ca:01:74:80:3c:ee:ad:9d:82:8a:54:1b:47:76:35:c9:
         f6:6b:4e:0a:89:76:7b:2c:f1:6f:77:cb:27:8e:ca:4a:0c:02:
         0d:e6:f5:e2:97:f9:04:77:fa:e8:29:09:7e:93:5b:73:f4:94:
         84:48:f3:d8:86:e5:30:2b:b7:98:0a:9f:28:04:fc:e7:a6:60:
         55:ee:85:b7:bc:7d:75:06:12:8b:3e:65:46:20:78:48:48:34:
         4c:52:09:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8U5Mpzc56xXgIgfDc3cw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm
ODJlOTQwHhcNMjUwNDE2MDIwMDMxWhcNMjUwNDE3MDIwMDMxWjAzMTEwLwYDVQQD
Eyg5YjlkZjU2NzFmYzA0NDQ5MTYxOGFmYTVkMjlmNTQ3OTA0OTVkYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTt6L9vzU3VO/IIwtEgWYVXzbYjE
jJWH7GqHU8Q4Vf4wlnJqIF6ac2v3Hdmqn8XjlqZ6BRrN+1cHgxa92wrkWI/wD1if
rf3szxfCR5CqMh3CF0+5eouFfJev+vUsA2g21AhYb7sJIWLxXcp0MWFPWzQE2tb9
CU3Z2NPK6kb+Ag3wA5ODK0MXaGUZgfVAWvSHxXyRUNPpG4SrM06iKHN8lTFz7bxL
l34GnvJa54o2fyeQZ7gxq4SQ8uHbRLWee+Fmu2yPVxaJzEu/dxLz1+0ZsNm2cVHZ
xU9/+48lzoBN9xsn/SQzzkSgzfGHSoW14LxEeQf6ppaX7vw+dxTuGUnuIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJud9WcfwERJFhivpdKfVHkEldxTMB8GA1UdIwQY
MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt
YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5
LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqXX8zXw
8+PYWFlpqxZA1L/U2uBBEn3Jnn80LoH4cqT+IvyaOSM84XrE9PJuiTeBzuvYGOgT
zGThTzXdw7ZC3H15cuiffJwIl1V4aoLu8lojXTAXZ5QDy543jkJ9rTQseTht187t
CF+mFi6z3NdGhPei50Ge3OvbeumURtuc2hjgR/fYDXRPwrXVRFp8tnlwiMFCj61d
2gAX7mLvqmrTZXF7JkTKAXSAPO6tnYKKVBtHdjXJ9mtOCol2eyzxb3fLJ47KSgwC
Deb14pf5BHf66CkJfpNbc/SUhEjz2IblMCu3mAqfKAT856ZgVe6Ft7x9dQYSiz5l
RiB4SEg0TFIJnw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:24:16 2025 by rpki-client