Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File:                     svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier:          UrU6h2wiLhc6HkEXmsAGh1IKaHAln5AwBJp/NEZrOao=
Subject key identifier:   60:47:50:A1:A0:29:45:D7:B7:23:6F:36:05:90:5C:84:2F:AE:7B:15
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer:       /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial:       01964C6C0773D56A8C628942E30295B97594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number:          0D9F
Signing time:             Sat 19 Apr 2025 05:01:10 +0000
Manifest this update:     Sat 19 Apr 2025 05:01:10 +0000
Manifest next update:     Sun 20 Apr 2025 05:01:10 +0000
Files and hashes:         1: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: 9z62WypHn1WBwbVNX6mc3Q9gOdtxhBWKwjcLVy7iJH0=)
                          2: tZnHKvR--oQspHXiMTb_7j-JYds.roa (hash: /ZQxh+STzzVQTIGd7v/o5S5T+TwpT7pJx116SvjP5MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6c:07:73:d5:6a:8c:62:89:42:e3:02:95:b9:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
        Validity
            Not Before: Apr 19 05:01:10 2025 GMT
            Not After : Apr 20 05:01:10 2025 GMT
        Subject: CN=604750a1a02945d7b7236f3605905c842fae7b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:56:08:c3:4c:15:93:77:4d:a8:cd:56:3d:
                    96:dc:84:6b:8d:70:bb:bc:3b:ef:7c:ba:e8:23:26:
                    62:e7:6c:ea:a7:f6:0a:03:ff:b9:22:77:1e:d5:81:
                    99:70:61:9b:87:2f:6f:29:9e:e8:f3:a0:86:f1:d5:
                    d6:96:d3:5f:b2:c7:78:65:7f:f6:2e:61:14:a7:be:
                    1e:7c:dd:5d:40:b7:09:30:3d:46:98:a5:a3:45:9c:
                    33:6d:ee:f9:86:fd:a2:1b:60:b7:18:54:57:fe:78:
                    a0:18:5f:54:bd:2d:25:37:66:1b:10:3c:18:08:49:
                    48:f8:6f:65:9e:23:61:2a:64:ff:26:f7:50:d9:c9:
                    2d:05:df:d1:70:44:27:0d:b0:1f:8f:f6:d7:09:4e:
                    db:5d:d2:6d:3d:3f:ec:bb:bd:42:46:67:29:ce:c1:
                    ce:d0:ff:73:73:1d:d4:60:71:31:40:94:3f:f7:ad:
                    69:77:5d:95:f6:5f:58:82:20:36:31:6d:4f:74:bb:
                    48:8b:cd:5b:56:cd:41:59:07:8c:ba:66:a0:8d:a7:
                    a7:b3:25:58:1d:75:50:9b:ec:92:d0:a9:0b:94:4e:
                    87:df:41:08:bb:97:1a:84:3d:d2:36:14:22:e7:f6:
                    8f:b8:58:91:5b:cb:cf:77:96:ce:29:e4:6a:59:b6:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:47:50:A1:A0:29:45:D7:B7:23:6F:36:05:90:5C:84:2F:AE:7B:15
            X509v3 Authority Key Identifier:
                keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:55:cd:56:e0:03:c2:95:e7:cc:07:e0:9d:cf:eb:6e:8a:f8:
         bd:0b:87:43:6a:88:dc:37:27:62:3c:1c:a4:cf:9e:c5:81:f1:
         3b:6b:49:93:28:5f:bf:ef:df:b6:62:ab:1e:14:23:22:09:1d:
         5e:1b:9a:7b:4e:b6:12:7c:6f:0e:e8:8b:67:36:79:80:98:24:
         66:2a:af:bc:2e:63:a0:62:a7:2a:84:d8:2e:97:85:34:16:92:
         84:05:a8:45:1b:24:f4:8b:34:de:02:f9:e4:2b:a8:03:d4:cc:
         cc:99:42:b7:02:00:15:f8:8e:e5:6b:1c:7b:05:40:db:80:9f:
         b4:f5:84:18:4a:4a:53:88:dc:c9:0e:6f:3e:dd:8b:9b:f2:7b:
         73:21:cb:1f:4e:a5:3a:70:a6:8f:76:e6:14:3d:78:54:fe:ce:
         23:c4:90:79:a4:4d:6f:3e:30:e7:28:7e:23:49:28:f4:74:6e:
         57:72:5a:06:e8:cb:60:f6:ab:32:9c:8c:54:63:e5:4f:1f:e3:
         e7:34:9e:10:05:48:68:2f:49:2e:93:c3:8a:e6:46:ec:ac:cb:
         1a:61:23:ea:ec:7f:be:a4:22:bd:dd:58:2e:fe:31:15:c3:d2:
         c1:fc:61:71:42:12:8b:1b:90:d4:27:87:0d:ae:86:56:6f:3d:
         0c:6c:22:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMbAdz1WqMYolC4wKVuXWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZjgzYTNlYjY4N2I0MTk5NGM4OWY3ODIzOGE5OTExMzNk
ZjI1ZjYwHhcNMjUwNDE5MDUwMTEwWhcNMjUwNDIwMDUwMTEwWjAzMTEwLwYDVQQD
Eyg2MDQ3NTBhMWEwMjk0NWQ3YjcyMzZmMzYwNTkwNWM4NDJmYWU3YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/ZWCMNMFZN3TajNVj2W3IRrjXC7
vDvvfLroIyZi52zqp/YKA/+5Ince1YGZcGGbhy9vKZ7o86CG8dXWltNfssd4ZX/2
LmEUp74efN1dQLcJMD1GmKWjRZwzbe75hv2iG2C3GFRX/nigGF9UvS0lN2YbEDwY
CElI+G9lniNhKmT/JvdQ2cktBd/RcEQnDbAfj/bXCU7bXdJtPT/su71CRmcpzsHO
0P9zcx3UYHExQJQ/961pd12V9l9YgiA2MW1PdLtIi81bVs1BWQeMumagjaensyVY
HXVQm+yS0KkLlE6H30EIu5cahD3SNhQi5/aPuFiRW8vPd5bOKeRqWbZOeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBHUKGgKUXXtyNvNgWQXIQvrnsVMB8GA1UdIwQY
MBaAFLL4Oj62h7QZlMifeCOKmREz3yX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUt
ZjYxNDFlMDNmM2E3LzEvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUtZjYxNDFlMDNmM2E3
LzEvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVXNVuAD
wpXnzAfgnc/rbor4vQuHQ2qI3DcnYjwcpM+exYHxO2tJkyhfv+/ftmKrHhQjIgkd
Xhuae062EnxvDuiLZzZ5gJgkZiqvvC5joGKnKoTYLpeFNBaShAWoRRsk9Is03gL5
5CuoA9TMzJlCtwIAFfiO5WscewVA24CftPWEGEpKU4jcyQ5vPt2Lm/J7cyHLH06l
OnCmj3bmFD14VP7OI8SQeaRNbz4w5yh+I0ko9HRuV3JaBujLYParMpyMVGPlTx/j
5zSeEAVIaC9JLpPDiuZG7KzLGmEj6ux/vqQivd1YLv4xFcPSwfxhcUISixuQ1CeH
Da6GVm89DGwiNA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:08 2025 by rpki-client