Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File:                     5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier:          J9MYOIDwRRDmZldQfVEoUC22b32VYE1ftnRyMkYauW8=
Subject key identifier:   73:7E:93:F4:A0:05:8C:73:A7:10:F6:66:E0:25:D7:C7:59:4B:E9:8E
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer:       /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial:       01958B4D829E59387F5936A59B0E9F972A9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number:          046F
Signing time:             Wed 12 Mar 2025 17:01:07 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:07 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:07 +0000
Files and hashes:         1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: ZbrJFX7RLdjrJeZ4HSEOvAVE7Gw27Bpz/vqAm+5/PXI=)
                          2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:82:9e:59:38:7f:59:36:a5:9b:0e:9f:97:2a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
        Validity
            Not Before: Mar 12 17:01:07 2025 GMT
            Not After : Mar 13 17:01:07 2025 GMT
        Subject: CN=737e93f4a0058c73a710f666e025d7c7594be98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:4d:02:2e:3d:59:23:e9:14:fa:cd:be:1e:
                    f5:91:6f:41:25:b3:02:f2:42:d9:bf:9a:7e:81:85:
                    60:7e:83:75:b6:aa:fe:ec:b8:70:dd:76:89:9a:44:
                    65:be:72:42:f8:7b:03:37:eb:10:c9:5c:39:4f:84:
                    cf:4d:20:67:41:95:96:56:30:fc:15:76:37:16:25:
                    07:db:72:8a:eb:89:ca:f4:3c:12:06:74:09:6c:67:
                    c6:0d:43:2b:d9:92:0d:16:a4:84:bc:35:b1:c0:52:
                    50:1b:c4:c1:fb:7f:8a:0d:ee:ac:b5:b7:c8:91:7a:
                    ec:6b:85:0a:8a:a5:c2:ca:04:14:4a:f5:de:4f:a3:
                    14:a8:98:a7:0f:3d:67:41:fd:82:9d:b9:1d:30:eb:
                    54:6b:d7:34:2e:ae:91:2f:82:84:9b:0f:38:2f:fd:
                    d7:41:fd:64:fe:cc:33:92:b9:49:64:c5:4a:17:06:
                    24:6f:0d:1f:b4:37:18:66:62:56:c8:1b:16:5a:b2:
                    18:28:fe:25:60:f3:88:fa:b2:a2:1b:0a:33:5e:45:
                    b3:91:bf:fc:78:95:cd:21:f3:15:28:04:49:bc:d3:
                    bb:c6:4c:e9:41:59:41:70:ce:d9:31:f1:20:58:3e:
                    71:c6:c8:87:2a:75:f3:92:a4:e9:cd:75:1a:de:1d:
                    b4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7E:93:F4:A0:05:8C:73:A7:10:F6:66:E0:25:D7:C7:59:4B:E9:8E
            X509v3 Authority Key Identifier:
                keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:64:54:13:5d:e9:0b:79:9b:3a:af:81:f3:45:94:85:24:3f:
         1e:8b:6e:0f:58:62:4e:c7:d5:27:52:0f:6b:2d:fd:35:42:7e:
         f7:13:5d:69:57:ae:62:d5:78:68:f1:5f:2d:00:ac:c7:b6:cd:
         9a:ce:8b:0d:6b:b3:f2:87:7d:aa:82:83:a0:9e:24:8f:b7:9a:
         67:4f:88:2d:96:25:45:e4:a3:13:c8:6b:0b:15:a0:9c:b0:21:
         20:15:60:a4:bc:a6:90:53:de:ac:c0:20:85:1f:99:02:ee:a1:
         85:62:05:a1:3f:b9:f1:a2:b5:5c:fc:61:20:b2:87:7e:54:f7:
         e8:b0:ba:d7:95:26:c8:63:0c:96:ab:a6:85:ce:8b:3e:58:47:
         87:9b:c9:c5:a2:fe:86:38:8a:37:1f:e0:a1:93:8f:7b:89:b7:
         70:66:3c:cd:9f:84:70:83:97:52:0c:25:24:c5:35:eb:5d:db:
         de:18:56:a1:c5:ae:4f:72:2b:97:75:3d:30:0a:35:b3:c1:97:
         50:6d:36:cb:cf:d0:49:73:54:3c:00:17:43:6b:14:89:f9:c5:
         28:a7:00:8f:51:bc:15:da:50:8d:72:1b:e1:eb:f7:cf:91:c9:
         9a:6f:42:73:5c:14:a5:ac:b6:dc:be:f5:c6:45:af:08:0e:3b:
         e2:c9:7c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTYKeWTh/WTalmw6flyqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODBhNTYxMDExMmRmMjAzOTg3ZjMyZjBlNWUxNWFkMzVl
NzEwZDIwHhcNMjUwMzEyMTcwMTA3WhcNMjUwMzEzMTcwMTA3WjAzMTEwLwYDVQQD
Eyg3MzdlOTNmNGEwMDU4YzczYTcxMGY2NjZlMDI1ZDdjNzU5NGJlOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhlNAi49WSPpFPrNvh71kW9BJbMC
8kLZv5p+gYVgfoN1tqr+7Lhw3XaJmkRlvnJC+HsDN+sQyVw5T4TPTSBnQZWWVjD8
FXY3FiUH23KK64nK9DwSBnQJbGfGDUMr2ZINFqSEvDWxwFJQG8TB+3+KDe6stbfI
kXrsa4UKiqXCygQUSvXeT6MUqJinDz1nQf2CnbkdMOtUa9c0Lq6RL4KEmw84L/3X
Qf1k/swzkrlJZMVKFwYkbw0ftDcYZmJWyBsWWrIYKP4lYPOI+rKiGwozXkWzkb/8
eJXNIfMVKARJvNO7xkzpQVlBcM7ZMfEgWD5xxsiHKnXzkqTpzXUa3h20vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHN+k/SgBYxzpxD2ZuAl18dZS+mOMB8GA1UdIwQY
MBaAFOaApWEBEt8gOYfzLw5eFa015xDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjIt
ZDE1MDJmN2NmMjM0LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjItZDE1MDJmN2NmMjM0
LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2RUE13p
C3mbOq+B80WUhSQ/HotuD1hiTsfVJ1IPay39NUJ+9xNdaVeuYtV4aPFfLQCsx7bN
ms6LDWuz8od9qoKDoJ4kj7eaZ0+ILZYlReSjE8hrCxWgnLAhIBVgpLymkFPerMAg
hR+ZAu6hhWIFoT+58aK1XPxhILKHflT36LC615UmyGMMlqumhc6LPlhHh5vJxaL+
hjiKNx/goZOPe4m3cGY8zZ+EcIOXUgwlJMU1613b3hhWocWuT3Irl3U9MAo1s8GX
UG02y8/QSXNUPAAXQ2sUifnFKKcAj1G8FdpQjXIb4ev3z5HJmm9Cc1wUpay23L71
xkWvCA474sl81w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:12 2025 by rpki-client