Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          +9dr+PVyFq7akOYoPgr58hVPG/6ppXVbwzzlYdLuIb8=
Subject key identifier:   E6:F8:05:D2:24:CA:F8:ED:F8:9E:5A:99:F7:92:B8:78:E2:18:EA:41
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       019652000666BFC0A0F047022DCDCB92CA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 07:00:55 +0000
Manifest this update:     Sun 20 Apr 2025 07:00:55 +0000
Manifest next update:     Mon 21 Apr 2025 07:00:55 +0000
Files and hashes:         1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: 0rIVqXkvvop7rKx5j1cQ68w6dWRLZxjXtPs/QC3Ak6w=)
                          3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
                          4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:00:06:66:bf:c0:a0:f0:47:02:2d:cd:cb:92:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Apr 20 07:00:55 2025 GMT
            Not After : Apr 21 07:00:55 2025 GMT
        Subject: CN=e6f805d224caf8edf89e5a99f792b878e218ea41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:11:22:e8:05:a1:43:b6:04:80:1a:5c:78:
                    86:91:11:c9:df:a6:11:a7:cb:9f:f0:6b:ac:ea:cd:
                    88:8c:a7:98:3b:76:4b:28:56:a3:ff:7d:ec:03:78:
                    cc:0c:f7:ac:cf:8c:62:e9:b4:b4:44:88:03:34:2c:
                    b9:c1:e3:70:80:3b:30:8b:0f:4c:fe:ac:a8:01:1b:
                    3b:2f:0f:fe:0c:f4:a0:93:56:66:e3:4c:89:bc:04:
                    e5:2e:ef:20:a6:38:83:17:df:32:2f:7d:76:8f:85:
                    20:56:27:17:1d:b1:f2:4a:0b:6f:76:d6:43:88:d7:
                    f2:b1:8f:4d:63:f9:9b:f6:d0:4a:72:ec:5c:c6:21:
                    67:10:78:a7:a3:e5:a1:b0:1c:0d:d8:7c:35:d9:1c:
                    b9:9b:a1:bf:e0:58:6d:50:68:07:c9:a9:24:9c:96:
                    ef:44:bf:a7:54:04:45:6f:98:cf:85:8d:f6:90:38:
                    4f:78:d0:df:8b:82:85:23:54:65:77:c1:1e:ca:c6:
                    87:3f:16:d3:38:8f:45:13:23:94:b2:4b:25:9c:24:
                    64:68:2b:f8:31:03:05:c9:62:4c:0e:2c:90:6d:d9:
                    41:bf:33:84:eb:a4:10:5e:6a:d1:52:6e:aa:12:29:
                    51:54:f2:ec:94:f1:1a:70:15:7e:c8:0d:e4:44:0e:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F8:05:D2:24:CA:F8:ED:F8:9E:5A:99:F7:92:B8:78:E2:18:EA:41
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:e0:a9:af:4f:fa:79:91:a6:f2:db:82:88:1f:5c:07:da:
         ff:ab:6e:a2:38:a3:2b:f2:1c:5b:87:28:42:35:95:05:b1:4e:
         06:85:2e:f7:46:07:d9:d9:00:22:a5:3f:34:ba:dc:8e:f8:73:
         d0:d1:8b:e7:8a:af:3b:aa:c9:9d:b2:19:30:c5:8f:6a:93:25:
         8c:9a:36:ca:e5:ad:21:47:fb:b8:f4:4f:e6:79:2f:fa:7b:37:
         3f:1d:25:16:2a:c5:43:6b:22:23:7c:b2:6c:7d:07:f7:60:bd:
         45:1c:8d:54:83:9a:52:b9:fe:ab:c6:57:ba:bd:b8:fb:57:d9:
         9b:d4:0b:14:e6:1b:8a:b7:bc:ae:5c:46:b9:bd:00:dc:e9:35:
         87:8b:32:9f:b6:4c:b2:19:04:b7:34:e5:6e:51:d0:13:61:15:
         b2:59:83:c3:36:9c:99:61:d5:1e:20:a5:f1:82:95:40:33:9c:
         a8:a8:35:61:d9:3a:55:6d:2a:ec:f4:ed:8f:9a:5c:0b:eb:b9:
         31:bd:bf:96:05:42:3c:09:d7:e4:49:0e:8e:e4:c1:25:9d:38:
         f2:f9:6e:a4:09:66:ff:1b:9c:74:35:d2:64:9b:c5:44:de:c8:
         45:ec:95:b4:ab:9f:f0:99:cf:e1:98:bd:03:a2:40:e5:3e:1f:
         d7:94:9d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSAAZmv8Cg8EcCLc3LksoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2YzMzcyZGY1N2M4MTRhYmE4YjUxYTkwNzg2MWQ5MmI5
ZTRmNTUwHhcNMjUwNDIwMDcwMDU1WhcNMjUwNDIxMDcwMDU1WjAzMTEwLwYDVQQD
EyhlNmY4MDVkMjI0Y2FmOGVkZjg5ZTVhOTlmNzkyYjg3OGUyMThlYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XMRIugFoUO2BIAaXHiGkRHJ36YR
p8uf8Gus6s2IjKeYO3ZLKFaj/33sA3jMDPesz4xi6bS0RIgDNCy5weNwgDswiw9M
/qyoARs7Lw/+DPSgk1Zm40yJvATlLu8gpjiDF98yL312j4UgVicXHbHySgtvdtZD
iNfysY9NY/mb9tBKcuxcxiFnEHino+WhsBwN2Hw12Ry5m6G/4FhtUGgHyakknJbv
RL+nVARFb5jPhY32kDhPeNDfi4KFI1Rld8EeysaHPxbTOI9FEyOUskslnCRkaCv4
MQMFyWJMDiyQbdlBvzOE66QQXmrRUm6qEilRVPLslPEacBV+yA3kRA4nQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb4BdIkyvjt+J5amfeSuHjiGOpBMB8GA1UdIwQY
MBaAFBN/M3LfV8gUq6i1GpB4Ydkrnk9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMt
YTIyNGZlZmFjMjE4LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMtYTIyNGZlZmFjMjE4
LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakPgqa9P
+nmRpvLbgogfXAfa/6tuojijK/IcW4coQjWVBbFOBoUu90YH2dkAIqU/NLrcjvhz
0NGL54qvO6rJnbIZMMWPapMljJo2yuWtIUf7uPRP5nkv+ns3Px0lFirFQ2siI3yy
bH0H92C9RRyNVIOaUrn+q8ZXur24+1fZm9QLFOYbire8rlxGub0A3Ok1h4syn7ZM
shkEtzTlblHQE2EVslmDwzacmWHVHiCl8YKVQDOcqKg1Ydk6VW0q7PTtj5pcC+u5
Mb2/lgVCPAnX5EkOjuTBJZ048vlupAlm/xucdDXSZJvFRN7IReyVtKuf8JnP4Zi9
A6JA5T4f15Sd3A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:17 2025 by rpki-client