Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          N5QFsstGyAJT/L+UYmY/ahKbynFyC0Nm+A4BKPuEqb8=
Subject key identifier:   FE:5D:E4:5F:A6:FE:FC:45:FC:C2:3A:2D:4F:0C:AE:E5:CB:1C:E6:98
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       01963F8BA927EA0CC6E107BC503F205B0AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          1034
Signing time:             Wed 16 Apr 2025 17:00:39 +0000
Manifest this update:     Wed 16 Apr 2025 17:00:39 +0000
Manifest next update:     Thu 17 Apr 2025 17:00:39 +0000
Files and hashes:         1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: sQ46dJlnM54DmVIynLt6JqJ8LHeXeVLX18lafha6Nho=)
                          2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:8b:a9:27:ea:0c:c6:e1:07:bc:50:3f:20:5b:0a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Apr 16 17:00:39 2025 GMT
            Not After : Apr 17 17:00:39 2025 GMT
        Subject: CN=fe5de45fa6fefc45fcc23a2d4f0caee5cb1ce698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:0d:2b:37:63:08:65:56:20:fc:c4:83:45:
                    27:46:1c:bd:9e:67:06:1f:e0:9e:5a:d6:49:14:51:
                    4b:02:12:e0:cd:90:fb:96:e8:d0:ad:c5:61:3f:26:
                    ad:68:9a:83:63:a2:c0:2f:de:a0:1e:b8:06:a5:ee:
                    76:f5:cf:48:b2:dc:c2:63:37:ae:e8:d6:9e:fc:1b:
                    21:df:f9:05:49:58:0b:25:98:69:7b:44:e4:f3:57:
                    9a:0f:5b:93:09:2d:86:f5:a3:7c:c6:06:77:aa:7b:
                    81:66:75:9b:31:cf:3f:ee:1d:da:00:3b:7f:78:15:
                    1f:37:9b:39:cb:9f:66:b3:12:4c:e8:32:18:2c:2a:
                    8b:7f:f9:09:37:3a:a1:ec:7a:36:89:9c:08:0f:fa:
                    dd:06:7e:05:07:c1:81:39:77:ef:67:e3:7e:42:02:
                    12:26:48:94:a5:46:35:3c:33:62:47:0b:8a:45:c7:
                    f5:e3:94:dc:f6:0b:96:28:ef:19:99:a3:0d:0b:9b:
                    75:e4:cb:90:ed:a8:5e:4d:a3:36:61:80:fc:ae:1f:
                    6f:23:42:a9:f7:0e:5a:2a:0a:19:a5:0e:6f:01:eb:
                    c7:01:8e:84:42:b9:3d:d7:1c:a2:0a:8a:63:78:0b:
                    e3:e6:01:8d:7a:d5:5c:2d:d7:44:b9:a2:05:b1:e0:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:E4:5F:A6:FE:FC:45:FC:C2:3A:2D:4F:0C:AE:E5:CB:1C:E6:98
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:e6:2b:cc:33:ef:dc:bb:a4:3d:ba:8d:21:21:d1:42:8e:
         4c:c9:af:95:d4:d8:39:61:38:b0:3b:92:4f:54:50:ef:5a:9a:
         6c:48:b9:dc:2c:02:7e:c3:66:2e:99:1a:11:77:7e:e1:bd:25:
         6d:27:79:e9:bd:8b:0f:cf:e9:bc:a9:70:af:0d:44:35:6f:e7:
         dd:e5:5d:e2:ba:b7:e7:58:38:09:f9:6c:cf:4c:33:91:b4:bf:
         80:05:3e:84:40:d2:ac:36:1d:cf:2d:83:46:40:2e:be:49:12:
         e7:c3:8e:8f:40:ed:c8:17:9b:3e:b9:fd:8d:ee:e0:7f:a3:2f:
         44:74:58:b9:ff:ca:86:fa:ac:e1:f2:f5:24:a0:c0:c2:30:f5:
         c9:c5:af:a8:e3:50:96:e1:26:6d:20:02:fc:a5:34:25:ff:87:
         48:53:86:3a:0c:cc:ee:f6:9c:cc:e5:83:d8:eb:10:5b:d1:11:
         d2:85:73:a6:2f:8f:cb:c7:0c:b8:06:c2:86:22:8f:17:9e:0f:
         e2:6d:fa:b8:04:02:d6:02:b6:40:81:00:60:43:40:ce:6a:a0:
         a7:57:95:0f:5e:ed:bf:30:3e:fa:c8:3b:65:dd:58:3e:37:24:
         db:df:d2:7d:c9:d7:01:79:c1:39:f5:f5:51:88:18:59:d3:57:
         09:35:2e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i6kn6gzG4Qe8UD8gWwrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4
MzQxNTkwHhcNMjUwNDE2MTcwMDM5WhcNMjUwNDE3MTcwMDM5WjAzMTEwLwYDVQQD
EyhmZTVkZTQ1ZmE2ZmVmYzQ1ZmNjMjNhMmQ0ZjBjYWVlNWNiMWNlNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEoNKzdjCGVWIPzEg0UnRhy9nmcG
H+CeWtZJFFFLAhLgzZD7lujQrcVhPyataJqDY6LAL96gHrgGpe529c9IstzCYzeu
6Nae/Bsh3/kFSVgLJZhpe0Tk81eaD1uTCS2G9aN8xgZ3qnuBZnWbMc8/7h3aADt/
eBUfN5s5y59msxJM6DIYLCqLf/kJNzqh7Ho2iZwID/rdBn4FB8GBOXfvZ+N+QgIS
JkiUpUY1PDNiRwuKRcf145Tc9guWKO8ZmaMNC5t15MuQ7aheTaM2YYD8rh9vI0Kp
9w5aKgoZpQ5vAevHAY6EQrk91xyiCopjeAvj5gGNetVcLddEuaIFseCpUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5d5F+m/vxF/MI6LU8MruXLHOaYMB8GA1UdIwQY
MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt
MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2
LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2PmK8wz
79y7pD26jSEh0UKOTMmvldTYOWE4sDuST1RQ71qabEi53CwCfsNmLpkaEXd+4b0l
bSd56b2LD8/pvKlwrw1ENW/n3eVd4rq351g4Cflsz0wzkbS/gAU+hEDSrDYdzy2D
RkAuvkkS58OOj0DtyBebPrn9je7gf6MvRHRYuf/Khvqs4fL1JKDAwjD1ycWvqONQ
luEmbSAC/KU0Jf+HSFOGOgzM7vaczOWD2OsQW9ER0oVzpi+Py8cMuAbChiKPF54P
4m36uAQC1gK2QIEAYENAzmqgp1eVD17tvzA++sg7Zd1YPjck29/SfcnXAXnBOfX1
UYgYWdNXCTUuHg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:33 2025 by rpki-client