Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File:                     0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier:          HVjFVVrf3F2IWzWrkktsKZiBdQrYnu6Tr/AYMlKP+2k=
Subject key identifier:   93:28:22:89:22:A2:D3:81:19:0E:A0:17:D0:FF:80:AA:52:AD:E6:8C
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer:       /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial:       01962CAA68286450D907EC23F100BA17ED9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number:          107F
Signing time:             Sun 13 Apr 2025 01:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 01:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 01:01:27 +0000
Files and hashes:         1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: +CigNQ5J+WAshALxx5wH6JmBsJrqKxtYJTc1xmne5QY=)
                          2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:aa:68:28:64:50:d9:07:ec:23:f1:00:ba:17:ed:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
        Validity
            Not Before: Apr 13 01:01:27 2025 GMT
            Not After : Apr 14 01:01:27 2025 GMT
        Subject: CN=9328228922a2d381190ea017d0ff80aa52ade68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:96:76:3d:99:d8:1f:32:c7:70:06:5c:80:
                    d6:3d:7f:8d:b8:5f:80:ac:99:b1:cd:6b:27:a9:d4:
                    8b:88:bb:ab:88:42:66:8a:bf:84:6d:04:92:2e:8a:
                    69:f3:e4:35:15:60:1f:67:ac:80:55:72:17:80:73:
                    18:9d:a1:9d:11:18:06:ec:42:29:3a:6b:a2:76:26:
                    ae:3c:66:9b:e0:b9:46:48:c2:02:a3:2d:1a:22:e1:
                    16:81:97:64:e7:c4:13:2a:3d:f4:26:56:e1:e2:88:
                    77:4e:b5:e1:b2:23:48:d0:72:5c:95:56:dc:a1:3b:
                    cb:5d:47:7e:3c:58:52:3d:e3:8a:d7:93:18:a7:2e:
                    6f:e7:9e:46:8c:28:a8:22:b5:05:04:0a:98:48:8a:
                    13:b5:17:08:61:00:0b:63:16:69:f2:a3:bb:ad:4e:
                    b0:20:c0:80:41:98:75:73:22:15:9b:8f:26:76:78:
                    ef:6e:c6:98:0f:06:6c:4b:33:70:7a:8e:8b:86:53:
                    8c:78:3b:7d:f6:38:bc:44:f6:45:29:1d:1f:27:54:
                    60:2c:8f:a3:cd:58:37:e6:e4:3d:7d:61:43:3e:31:
                    64:b4:66:a9:34:4d:42:8f:17:e0:2f:1a:9a:3b:40:
                    c9:ca:90:dd:9b:7c:ec:8c:9c:95:cd:66:a5:6d:d4:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:22:89:22:A2:D3:81:19:0E:A0:17:D0:FF:80:AA:52:AD:E6:8C
            X509v3 Authority Key Identifier:
                keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f3:b4:25:94:73:10:54:7b:e5:62:ab:f0:25:9d:03:4f:4a:
         be:1a:c1:f0:04:0a:df:33:64:56:40:71:04:4c:44:3b:15:2e:
         81:c1:ae:d1:a8:db:c9:4b:72:19:97:53:58:02:29:66:b5:f2:
         f4:6a:e4:34:a8:fc:11:6c:32:24:fe:c4:ea:55:d7:c4:6e:92:
         1a:f2:3b:95:05:45:1e:8a:67:6b:a1:fc:22:ac:b8:ee:4c:68:
         fb:b9:22:a3:49:a8:7e:db:7c:19:79:6d:f0:62:36:5d:75:db:
         a2:d8:58:26:7c:b0:23:19:f7:99:36:6e:55:3e:6b:ec:0c:94:
         45:9f:7c:99:f9:c1:41:05:ad:63:3f:cb:9e:f5:d8:8a:91:04:
         50:4c:2a:8f:cd:08:8d:ee:5e:94:42:0a:db:94:cc:34:f5:5d:
         89:59:cf:d7:99:c0:07:98:7a:56:9b:97:da:2b:de:11:cb:89:
         57:bf:7d:3d:84:0c:fe:0d:d0:3b:e6:03:4a:9d:9b:91:f8:04:
         4b:40:87:9a:a2:9e:97:3a:46:cc:58:89:1d:f8:11:9a:85:d6:
         6b:6d:5a:0c:f0:99:f8:72:43:03:63:a8:78:a4:60:46:f7:db:
         5c:92:77:79:3a:ed:76:0a:f8:c8:10:2b:9c:0c:3b:a6:2d:f2:
         e3:d9:31:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsqmgoZFDZB+wj8QC6F+2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5
NWNjZmQwHhcNMjUwNDEzMDEwMTI3WhcNMjUwNDE0MDEwMTI3WjAzMTEwLwYDVQQD
Eyg5MzI4MjI4OTIyYTJkMzgxMTkwZWEwMTdkMGZmODBhYTUyYWRlNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznGWdj2Z2B8yx3AGXIDWPX+NuF+A
rJmxzWsnqdSLiLuriEJmir+EbQSSLopp8+Q1FWAfZ6yAVXIXgHMYnaGdERgG7EIp
OmuidiauPGab4LlGSMICoy0aIuEWgZdk58QTKj30Jlbh4oh3TrXhsiNI0HJclVbc
oTvLXUd+PFhSPeOK15MYpy5v555GjCioIrUFBAqYSIoTtRcIYQALYxZp8qO7rU6w
IMCAQZh1cyIVm48mdnjvbsaYDwZsSzNweo6LhlOMeDt99ji8RPZFKR0fJ1RgLI+j
zVg35uQ9fWFDPjFktGapNE1CjxfgLxqaO0DJypDdm3zsjJyVzWalbdSaUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMoIokiotOBGQ6gF9D/gKpSreaMMB8GA1UdIwQY
MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt
OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm
LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfO0JZRz
EFR75WKr8CWdA09KvhrB8AQK3zNkVkBxBExEOxUugcGu0ajbyUtyGZdTWAIpZrXy
9GrkNKj8EWwyJP7E6lXXxG6SGvI7lQVFHopna6H8Iqy47kxo+7kio0moftt8GXlt
8GI2XXXbothYJnywIxn3mTZuVT5r7AyURZ98mfnBQQWtYz/LnvXYipEEUEwqj80I
je5elEIK25TMNPVdiVnP15nAB5h6VpuX2iveEcuJV799PYQM/g3QO+YDSp2bkfgE
S0CHmqKelzpGzFiJHfgRmoXWa21aDPCZ+HJDA2OoeKRgRvfbXJJ3eTrtdgr4yBAr
nAw7pi3y49kxdA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:10:00 2025 by rpki-client