Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File:                     F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier:          arswdRtj/NwlL2lWgWN5jmOgVB/R9T4S0zzNM0/0VFo=
Subject key identifier:   B9:89:A5:63:2A:DD:83:EF:53:81:A6:0F:AD:09:98:7F:CF:61:1E:18
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer:       /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial:       019655DD299FE391FC32997BE1CE0E95390D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number:          14FF
Signing time:             Mon 21 Apr 2025 01:01:19 +0000
Manifest this update:     Mon 21 Apr 2025 01:01:19 +0000
Manifest next update:     Tue 22 Apr 2025 01:01:19 +0000
Files and hashes:         1: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: UrAjEUNPOrRCE6xth11CFiOhplKa8oYxCWKAfPCn1wo=)
                          2: IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa (hash: DyBmKVyEULzTcgLEO9H1ApnqiTxiBMTx1NS1xEQhss8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:dd:29:9f:e3:91:fc:32:99:7b:e1:ce:0e:95:39:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
        Validity
            Not Before: Apr 21 01:01:19 2025 GMT
            Not After : Apr 22 01:01:19 2025 GMT
        Subject: CN=b989a5632add83ef5381a60fad09987fcf611e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:07:72:b2:cf:66:25:0f:47:23:c7:08:b5:e2:
                    3c:e3:75:bd:5d:5a:92:ef:41:95:d8:fa:f0:96:b9:
                    47:32:39:11:0e:5e:6e:55:ea:34:c3:13:75:01:a3:
                    52:7f:c5:4e:ed:0c:f5:46:54:01:af:71:3f:bf:81:
                    29:ea:54:21:ac:5f:42:68:9e:53:87:b5:4c:19:6d:
                    da:67:9f:1a:57:22:22:3f:fd:a0:e5:8b:55:e1:7f:
                    03:09:08:c0:67:04:bd:cf:e0:8c:98:63:43:3c:67:
                    f5:bd:a7:f7:18:71:2b:28:c6:77:5f:c9:07:96:74:
                    89:b4:c3:9f:9d:71:53:99:57:4b:fb:e8:79:03:59:
                    73:33:24:f9:2a:75:4c:ab:b6:ae:64:42:52:97:19:
                    92:10:7d:bd:5a:d8:13:b1:7c:b4:d2:90:a0:30:4a:
                    74:cd:f4:89:72:b5:c0:9d:c8:b5:79:3d:2e:60:07:
                    0e:f2:da:0d:71:12:ae:62:c9:be:11:a9:d4:9c:0a:
                    24:90:86:98:68:96:9a:f8:ce:2b:07:d1:e5:8c:62:
                    51:1e:7d:52:bc:93:a8:7d:03:fa:36:4e:73:6e:08:
                    7e:cb:eb:c8:d2:ae:5f:89:08:ad:c9:d0:07:66:ce:
                    fd:39:7f:ed:6b:e1:fa:80:64:c6:dc:ea:83:1e:ba:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:89:A5:63:2A:DD:83:EF:53:81:A6:0F:AD:09:98:7F:CF:61:1E:18
            X509v3 Authority Key Identifier:
                keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:32:e1:49:03:48:69:d3:e1:44:e2:9d:2d:55:8c:fe:6c:99:
         51:29:72:ab:dd:eb:cb:7e:c3:4d:13:7c:7c:4a:44:47:64:f9:
         b1:d4:46:77:e2:05:d5:74:93:9b:da:d0:e1:8e:e6:3f:60:83:
         dc:b6:57:e3:6c:19:7a:a1:f4:6c:67:21:55:e0:3b:43:df:48:
         1d:0c:a7:86:f9:62:bb:98:f4:8a:b0:6b:8e:b6:b4:04:ea:c8:
         a3:74:7d:d6:24:db:3f:c3:86:d0:b6:f3:ae:8c:7a:1c:4d:28:
         81:e8:06:5d:4c:e9:c4:5d:93:b2:65:f0:47:5d:2a:e8:e6:e6:
         ae:c5:5a:87:c9:7d:dc:8b:2d:4b:60:14:83:82:99:9e:1c:26:
         84:c3:b5:44:1e:92:20:06:43:6a:4a:9c:9d:30:29:74:c3:b6:
         f8:1b:57:84:79:7f:e5:7f:2b:23:ae:dd:82:d3:d7:e5:46:89:
         9d:89:7b:bc:8c:5a:ff:8b:f3:51:46:ea:5d:ee:df:4d:63:1d:
         a7:8e:7b:7a:1c:84:f4:25:5b:d8:da:51:f9:8b:09:96:3c:de:
         5e:8e:66:bf:4c:af:43:c7:d2:d0:85:9c:bb:e8:96:5b:ee:01:
         31:97:e8:05:e7:a1:d5:87:e2:1f:79:f7:01:c0:9a:88:c9:b1:
         d8:d3:d0:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3Smf45H8Mpl74c4OlTkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZmMWU3OGMzNzQ5OWQ3MmQxMDhiYTcyOGVmMDI5Yjdm
MGU3ZjMwHhcNMjUwNDIxMDEwMTE5WhcNMjUwNDIyMDEwMTE5WjAzMTEwLwYDVQQD
EyhiOTg5YTU2MzJhZGQ4M2VmNTM4MWE2MGZhZDA5OTg3ZmNmNjExZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Qdyss9mJQ9HI8cIteI843W9XVqS
70GV2PrwlrlHMjkRDl5uVeo0wxN1AaNSf8VO7Qz1RlQBr3E/v4Ep6lQhrF9CaJ5T
h7VMGW3aZ58aVyIiP/2g5YtV4X8DCQjAZwS9z+CMmGNDPGf1vaf3GHErKMZ3X8kH
lnSJtMOfnXFTmVdL++h5A1lzMyT5KnVMq7auZEJSlxmSEH29WtgTsXy00pCgMEp0
zfSJcrXAnci1eT0uYAcO8toNcRKuYsm+EanUnAokkIaYaJaa+M4rB9HljGJRHn1S
vJOofQP6Nk5zbgh+y+vI0q5fiQitydAHZs79OX/ta+H6gGTG3OqDHroFuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmJpWMq3YPvU4GmD60JmH/PYR4YMB8GA1UdIwQY
MBaAFBf/8eeMN0mdctEIunKO8Cm38OfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEt
M2YzOWQ3NjQyNGZiLzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEtM2YzOWQ3NjQyNGZi
LzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzLhSQNI
adPhROKdLVWM/myZUSlyq93ry37DTRN8fEpER2T5sdRGd+IF1XSTm9rQ4Y7mP2CD
3LZX42wZeqH0bGchVeA7Q99IHQynhvliu5j0irBrjra0BOrIo3R91iTbP8OG0Lbz
rox6HE0ogegGXUzpxF2TsmXwR10q6ObmrsVah8l93IstS2AUg4KZnhwmhMO1RB6S
IAZDakqcnTApdMO2+BtXhHl/5X8rI67dgtPX5UaJnYl7vIxa/4vzUUbqXe7fTWMd
p457ehyE9CVb2NpR+YsJljzeXo5mv0yvQ8fS0IWcu+iWW+4BMZfoBeeh1YfiH3n3
AcCaiMmx2NPQqQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:26 2025 by rpki-client