Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
File:                     RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json)
Hash identifier:          TKYnvoZOYAcwm/AgLCdsnpuIgRSKsGNtrzoL/13tH/o=
Subject key identifier:   E6:F0:0A:7A:66:67:78:33:6A:F4:3B:3C:0F:7A:5E:BC:54:00:25:FA
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Certificate issuer:       /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial:       01958B167E40EFFC89EE29016210FD7CD218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
Manifest number:          0841
Signing time:             Wed 12 Mar 2025 16:01:01 +0000
Manifest this update:     Wed 12 Mar 2025 16:01:01 +0000
Manifest next update:     Thu 13 Mar 2025 16:01:01 +0000
Files and hashes:         1: 0RTmTUPTdqVwMU5i8iRqJZA86F0.roa (hash: eIjsDcha7FolfU5e8Eelou/OO0UBzir5atE5Gevb/B4=)
                          2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: 6se+hDcQRsVNV96+AgAB7f1TVFrKJyzSaUBc+Ywf4RQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:7e:40:ef:fc:89:ee:29:01:62:10:fd:7c:d2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
        Validity
            Not Before: Mar 12 16:01:01 2025 GMT
            Not After : Mar 13 16:01:01 2025 GMT
        Subject: CN=e6f00a7a666778336af43b3c0f7a5ebc540025fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:b2:9e:80:3a:e8:79:9b:36:b1:e3:30:b7:
                    ea:23:22:30:68:6b:69:26:61:70:29:5f:55:a7:05:
                    68:0e:11:fc:47:55:7b:88:47:86:b1:50:45:45:5f:
                    4c:90:ad:8e:02:2c:d2:12:66:87:0d:24:91:5e:04:
                    61:54:a5:d4:e7:99:31:4a:93:e8:1f:5c:8e:5d:50:
                    1f:bc:52:6a:9a:8d:08:ea:94:00:c4:6b:c9:46:9c:
                    87:82:d7:4f:d2:ee:d9:fe:1d:fc:2c:4e:2d:72:94:
                    8a:a2:c0:ff:89:3d:77:3b:01:92:a6:dc:d8:2a:27:
                    f9:97:99:e7:27:53:6f:69:c2:dd:7b:46:c6:d1:1f:
                    0b:60:3f:64:92:2a:c4:3e:2f:e7:3b:e4:99:43:f1:
                    3d:81:06:32:b0:fe:dd:6c:49:a2:dc:9e:58:7a:f3:
                    18:72:ca:b8:cc:28:84:0e:dd:4c:88:83:bb:6c:f4:
                    be:39:46:f1:e0:32:01:e6:a5:42:38:04:e5:ca:f0:
                    10:62:56:09:fa:4a:42:8e:0d:f6:f0:1c:75:12:61:
                    5c:dd:ff:e1:94:25:d1:84:55:07:59:89:b8:37:5a:
                    5b:0c:33:0d:9e:6a:fd:c3:3c:85:72:74:c0:0c:f4:
                    28:2a:05:ab:84:c3:ed:65:e7:cd:c4:05:75:0f:44:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F0:0A:7A:66:67:78:33:6A:F4:3B:3C:0F:7A:5E:BC:54:00:25:FA
            X509v3 Authority Key Identifier:
                keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:99:08:b0:64:99:68:fc:c4:4f:62:07:1f:4c:ee:0f:bd:
         3f:f2:8a:e7:2a:00:31:2f:6e:67:96:28:57:d7:87:62:a6:7f:
         23:d1:66:88:48:bc:36:cb:db:32:14:b2:0f:9f:6c:01:01:47:
         56:4a:fa:87:5b:b4:d3:3f:45:54:0e:55:5e:b8:d6:1f:1c:5b:
         e0:a9:cb:0d:9c:71:79:4d:00:63:1c:c3:36:bc:bc:51:bf:b0:
         5e:a3:22:6e:57:bf:ce:5a:ad:80:82:68:c7:17:22:de:12:82:
         0b:64:dc:79:fb:53:44:94:b4:cc:07:00:8b:37:bd:d1:d2:23:
         9e:64:aa:cd:74:c9:f9:f5:7d:7b:1d:1d:9e:73:d7:30:d7:87:
         4f:bf:dd:c3:2e:ad:71:16:98:e0:91:0e:07:5c:7a:3f:95:e7:
         8a:3f:6f:cc:d3:d2:70:af:cb:29:08:11:31:f4:bb:7f:d0:05:
         55:ef:17:01:1d:0c:d5:22:ea:fb:00:92:c4:57:cf:46:48:1e:
         e3:b4:aa:bc:a7:b3:37:9d:99:e5:49:56:50:be:49:61:f6:82:
         1b:c8:5d:88:89:c2:d8:ac:0f:18:91:eb:00:5b:8d:1d:db:78:
         fa:13:99:2e:a2:19:aa:be:83:26:4e:da:a0:31:3c:69:5c:9a:
         8c:7d:ad:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFn5A7/yJ7ikBYhD9fNIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2M1MmQ4MWVkYzEyNDk2NDRhZDc5NGJlMDI4YWY5MGUw
MjRhMTYwHhcNMjUwMzEyMTYwMTAxWhcNMjUwMzEzMTYwMTAxWjAzMTEwLwYDVQQD
EyhlNmYwMGE3YTY2Njc3ODMzNmFmNDNiM2MwZjdhNWViYzU0MDAyNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3CynoA66HmbNrHjMLfqIyIwaGtp
JmFwKV9VpwVoDhH8R1V7iEeGsVBFRV9MkK2OAizSEmaHDSSRXgRhVKXU55kxSpPo
H1yOXVAfvFJqmo0I6pQAxGvJRpyHgtdP0u7Z/h38LE4tcpSKosD/iT13OwGSptzY
Kif5l5nnJ1NvacLde0bG0R8LYD9kkirEPi/nO+SZQ/E9gQYysP7dbEmi3J5YevMY
csq4zCiEDt1MiIO7bPS+OUbx4DIB5qVCOATlyvAQYlYJ+kpCjg328Bx1EmFc3f/h
lCXRhFUHWYm4N1pbDDMNnmr9wzyFcnTADPQoKgWrhMPtZefNxAV1D0QngwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObwCnpmZ3gzavQ7PA96XrxUACX6MB8GA1UdIwQY
MBaAFER8Utge3BJJZErXlL4CivkOAkoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYt
ZWZhNjc4OWZkOTcyLzEvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYtZWZhNjc4OWZkOTcy
LzEvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfuZCLBk
mWj8xE9iBx9M7g+9P/KK5yoAMS9uZ5YoV9eHYqZ/I9FmiEi8NsvbMhSyD59sAQFH
Vkr6h1u00z9FVA5VXrjWHxxb4KnLDZxxeU0AYxzDNry8Ub+wXqMible/zlqtgIJo
xxci3hKCC2TceftTRJS0zAcAize90dIjnmSqzXTJ+fV9ex0dnnPXMNeHT7/dwy6t
cRaY4JEOB1x6P5Xnij9vzNPScK/LKQgRMfS7f9AFVe8XAR0M1SLq+wCSxFfPRkge
47SqvKezN52Z5UlWUL5JYfaCG8hdiInC2KwPGJHrAFuNHdt4+hOZLqIZqr6DJk7a
oDE8aVyajH2tZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:02 2025 by rpki-client