Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          4mGXyc/NkyYJDFRdvWUxFFtCzuiEES/8SI3RKZbDlbs=
Subject key identifier:   D2:02:5C:B5:04:95:47:E9:CD:F8:92:95:2E:04:80:6C:F9:5F:81:B8
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       0196297267557A4D7348307133432B094C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          14E8
Signing time:             Sat 12 Apr 2025 10:01:25 +0000
Manifest this update:     Sat 12 Apr 2025 10:01:25 +0000
Manifest next update:     Sun 13 Apr 2025 10:01:25 +0000
Files and hashes:         1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: Lb+52C2LrFuoXEcaa1s6hj9UTOAfe5UFkIVsqMh0de4=)
                          3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
                          4: qqV2GYRrmbyUVqWNJgyRU1ckeZ4.roa (hash: c1XQtreZPdPfIPdsWXkoKiXRjwhEMOyVYtqVV4vEo5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:72:67:55:7a:4d:73:48:30:71:33:43:2b:09:4c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Apr 12 10:01:25 2025 GMT
            Not After : Apr 13 10:01:25 2025 GMT
        Subject: CN=d2025cb5049547e9cdf892952e04806cf95f81b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:da:39:8a:fa:65:2f:f2:aa:15:2f:1f:2c:75:
                    88:a2:2c:6d:dc:c8:8a:90:2f:bf:6e:97:81:b2:95:
                    44:d7:e9:a3:5e:78:99:fb:9f:b2:60:35:39:24:4f:
                    30:ac:a2:a7:0e:db:81:81:de:3e:63:24:b0:39:95:
                    d8:12:b0:85:82:ac:88:44:4e:42:8c:9c:5e:95:4b:
                    77:e2:55:db:53:8c:3e:f7:a6:ea:f6:68:93:2e:cd:
                    f2:3b:66:da:43:62:6b:69:27:35:67:9b:f0:43:94:
                    a2:da:7b:6d:ee:ce:58:4c:9a:19:85:c1:6f:73:9a:
                    9b:d9:f4:7c:99:d3:62:59:5e:5a:55:f3:46:2e:50:
                    3f:95:ea:13:c2:ab:5d:78:7d:bc:2e:19:d1:d9:1a:
                    72:a9:6c:df:09:e2:cd:5f:ec:08:72:4b:2a:7b:7e:
                    10:20:47:cd:a4:7a:ec:48:9f:7b:f9:c0:26:c4:1d:
                    1f:1d:be:4c:64:84:31:c3:41:3b:ff:94:38:db:67:
                    8a:06:72:0d:00:40:a0:8b:55:8f:af:d1:c7:59:1a:
                    fd:9f:b9:0b:e2:a8:01:fa:58:01:b1:8c:f9:33:02:
                    a6:ff:1b:3b:d0:f3:80:2a:97:61:f4:ba:6d:52:6c:
                    65:2f:e0:0e:00:4a:99:3d:22:4f:d0:f6:5b:2e:23:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:02:5C:B5:04:95:47:E9:CD:F8:92:95:2E:04:80:6C:F9:5F:81:B8
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:7b:6b:a7:61:ca:8a:45:e9:9a:fc:11:c0:a0:7d:8e:51:
         f8:e3:07:f2:81:a2:34:b6:23:a1:50:f8:fc:ff:d0:73:8c:d7:
         01:54:21:e8:b2:81:4b:98:14:a4:41:f3:26:7d:6f:b1:f1:a7:
         a9:d6:46:e9:b7:d0:ea:f7:35:01:48:4a:79:9e:8a:c5:ca:4b:
         91:9b:f8:76:e0:20:92:c3:7f:ff:0c:c5:82:38:dc:78:02:20:
         b9:27:74:e8:f7:33:3b:31:80:96:28:e6:bf:22:cc:c1:55:22:
         19:54:15:f8:8c:d1:60:8d:90:eb:9d:64:3e:91:9d:8a:e9:f0:
         4e:7e:63:37:be:d3:a1:50:94:87:32:6f:1c:e4:8b:00:bf:07:
         87:12:db:8a:01:72:95:7e:56:ab:5b:f1:40:27:4e:62:e8:c5:
         c9:c4:69:87:7e:68:52:78:eb:2b:c6:31:78:3a:17:68:8f:a7:
         0c:7e:78:8a:2b:06:06:54:8a:24:37:80:42:82:0a:b0:d6:bd:
         00:8f:02:84:c0:77:bc:a2:66:d8:f2:c8:cc:02:f1:d8:a3:d1:
         c4:e3:b1:cf:28:fe:de:d9:aa:92:7b:d3:b3:b6:23:94:2e:59:
         36:2e:96:e2:33:fa:77:6f:bb:ea:9b:3a:e7:fc:12:2d:a1:81:
         10:48:f0:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYpcmdVek1zSDBxM0MrCUxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmViOWFlMGZhODkyNzA0NWY4MzQyMzc0M2M0YTczYTI3
YTc0YTcwHhcNMjUwNDEyMTAwMTI1WhcNMjUwNDEzMTAwMTI1WjAzMTEwLwYDVQQD
EyhkMjAyNWNiNTA0OTU0N2U5Y2RmODkyOTUyZTA0ODA2Y2Y5NWY4MWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6do5ivplL/KqFS8fLHWIoixt3MiK
kC+/bpeBspVE1+mjXniZ+5+yYDU5JE8wrKKnDtuBgd4+YySwOZXYErCFgqyIRE5C
jJxelUt34lXbU4w+96bq9miTLs3yO2baQ2JraSc1Z5vwQ5Si2ntt7s5YTJoZhcFv
c5qb2fR8mdNiWV5aVfNGLlA/leoTwqtdeH28LhnR2RpyqWzfCeLNX+wIcksqe34Q
IEfNpHrsSJ97+cAmxB0fHb5MZIQxw0E7/5Q422eKBnINAECgi1WPr9HHWRr9n7kL
4qgB+lgBsYz5MwKm/xs70POAKpdh9LptUmxlL+AOAEqZPSJP0PZbLiP3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNICXLUElUfpzfiSlS4EgGz5X4G4MB8GA1UdIwQY
MBaAFAf+ua4PqJJwRfg0I3Q8SnOienSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAt
ZGM3M2Y5ZDliZTI5LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAtZGM3M2Y5ZDliZTI5
LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO17a6dh
yopF6Zr8EcCgfY5R+OMH8oGiNLYjoVD4/P/Qc4zXAVQh6LKBS5gUpEHzJn1vsfGn
qdZG6bfQ6vc1AUhKeZ6KxcpLkZv4duAgksN//wzFgjjceAIguSd06PczOzGAlijm
vyLMwVUiGVQV+IzRYI2Q651kPpGdiunwTn5jN77ToVCUhzJvHOSLAL8HhxLbigFy
lX5Wq1vxQCdOYujFycRph35oUnjrK8YxeDoXaI+nDH54iisGBlSKJDeAQoIKsNa9
AI8ChMB3vKJm2PLIzALx2KPRxOOxzyj+3tmqknvTs7YjlC5ZNi6W4jP6d2+76ps6
5/wSLaGBEEjwdA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:21:47 2025 by rpki-client