Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
File:                     1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft (raw, json)
Hash identifier:          KDGw3EE/HbpS4J01sqXHItmbmz7lOVS4nT+P/MhMh64=
Subject key identifier:   C8:33:11:B2:9D:64:30:11:81:63:49:6E:3C:2A:4F:F9:BE:DF:66:DA
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Certificate issuer:       /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial:       01963EE6709C7DB5500FE29995EB5E6980C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
Manifest number:          0AFA
Signing time:             Wed 16 Apr 2025 14:00:11 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:11 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:11 +0000
Files and hashes:         1: 1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl (hash: g/Z+EotkcKYU085J0S2nSrSDHpuRILKOoY9xyNVvSmE=)
                          2: Ye-1b3Oqv586dqfuogOZnzwmKao.roa (hash: M9y1SazElcLTZkq2/3rTLHzloUqVKkD3eSc9q5agDu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e6:70:9c:7d:b5:50:0f:e2:99:95:eb:5e:69:80:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
        Validity
            Not Before: Apr 16 14:00:11 2025 GMT
            Not After : Apr 17 14:00:11 2025 GMT
        Subject: CN=c83311b29d6430118163496e3c2a4ff9bedf66da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:46:31:3e:a7:e4:92:3e:4f:57:62:3a:aa:
                    d9:f6:7b:60:84:3b:40:fd:c8:af:5c:ac:19:87:50:
                    59:2a:5c:19:0a:66:4d:7c:69:9a:9c:d3:1e:2b:87:
                    03:e8:78:63:1a:ce:29:9a:c5:10:a5:cf:ee:ee:0e:
                    2c:c5:ff:39:d8:d1:91:fb:93:d1:2d:1a:6d:da:d9:
                    b4:45:2a:17:87:f6:7b:9a:69:6e:25:0d:48:f7:d6:
                    c8:a4:52:88:63:99:5c:15:a4:d9:b1:15:40:79:56:
                    f8:28:06:c1:d8:e2:b3:45:2d:39:0b:21:fa:0b:11:
                    4b:c6:81:17:55:89:61:6f:af:b2:f9:52:29:8c:7b:
                    9c:ec:ad:a5:f2:e7:a1:37:9b:bb:43:4b:5e:ec:70:
                    3f:9d:34:e8:15:71:0e:97:a9:d6:df:e7:89:f7:02:
                    1d:a6:de:a1:28:3e:e3:1c:41:cf:16:5b:7b:99:2a:
                    ee:7c:36:3e:20:9f:08:f2:1b:ed:1c:75:28:f9:cb:
                    8b:09:cd:a9:c6:51:43:58:85:0c:1d:ac:c2:31:e2:
                    d9:43:1c:7c:24:8a:e2:9b:ec:08:f7:10:ef:07:aa:
                    c3:d7:0e:34:2a:30:f0:7c:b7:61:df:55:a9:ff:5d:
                    a6:c3:65:f5:09:fd:90:8f:93:ec:45:4d:f9:0e:43:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:33:11:B2:9D:64:30:11:81:63:49:6E:3C:2A:4F:F9:BE:DF:66:DA
            X509v3 Authority Key Identifier:
                keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:70:42:ea:b0:ae:bc:3c:55:95:52:b3:fc:ed:35:6a:39:54:
         63:35:01:ed:b9:71:7f:3e:06:9c:4c:29:a6:69:0d:47:9c:03:
         0d:d8:6e:3e:f2:6e:0b:ed:38:56:0a:a8:34:44:7d:84:d3:d3:
         57:9b:f9:20:ca:31:28:82:ac:b8:5a:a5:46:68:bf:1e:6f:a1:
         36:df:3a:cb:5a:a8:be:c0:3a:46:ac:16:5e:2f:2c:b4:dd:bc:
         1e:95:38:44:2d:e9:5f:6d:16:cd:ac:fd:2b:51:97:21:4c:46:
         86:e0:9d:56:bd:96:e3:ff:c8:77:8b:15:d8:24:96:a3:8d:2a:
         49:fd:16:2e:3f:bc:7b:d6:8e:be:3b:8f:71:b2:6d:6e:00:f6:
         22:fa:bb:d8:1a:f1:5c:14:8f:e0:03:89:75:ce:70:41:83:a6:
         43:06:e6:5c:59:64:79:3e:ec:7f:8a:f4:c7:77:78:65:45:8b:
         b1:c4:52:08:f3:7c:0a:e3:2a:d2:28:b7:9a:ff:47:85:61:4b:
         a7:19:e1:42:46:53:c3:1d:aa:30:1a:71:d1:6e:d8:b2:0c:31:
         06:00:d5:7c:7b:4b:a9:73:b5:98:91:b7:58:49:75:40:da:81:
         22:7d:e0:15:1b:e3:e8:2c:31:46:cd:df:eb:92:74:36:c7:b3:
         f9:31:55:ca
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZY+5nCcfbVQD+KZleteaYDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDU2MjkyZDg1YTBiODZjNGUyNTM0YjI3ZDI2YjQ3YmZl
MDQzMTcwHhcNMjUwNDE2MTQwMDExWhcNMjUwNDE3MTQwMDExWjAzMTEwLwYDVQQD
EyhjODMzMTFiMjlkNjQzMDExODE2MzQ5NmUzYzJhNGZmOWJlZGY2NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/FGMT6n5JI+T1diOqrZ9ntghDtA
/civXKwZh1BZKlwZCmZNfGmanNMeK4cD6HhjGs4pmsUQpc/u7g4sxf852NGR+5PR
LRpt2tm0RSoXh/Z7mmluJQ1I99bIpFKIY5lcFaTZsRVAeVb4KAbB2OKzRS05CyH6
CxFLxoEXVYlhb6+y+VIpjHuc7K2l8uehN5u7Q0te7HA/nTToFXEOl6nW3+eJ9wId
pt6hKD7jHEHPFlt7mSrufDY+IJ8I8hvtHHUo+cuLCc2pxlFDWIUMHazCMeLZQxx8
JIrim+wI9xDvB6rD1w40KjDwfLdh31Wp/12mw2X1Cf2Qj5PsRU35DkPvBwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMgzEbKdZDARgWNJbjwqT/m+32baMB8GA1UdIwQY
MBaAFPhFYpLYWguGxOJTSyfSa0e/4EMXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FVmlrdGhhQzRiRTRsTkxKOUpyUjdfZ1F4Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNzQ2NzY3LWVmNWYtNDM2Yy1iZDVk
LThlOGI3OTkyNmFhMy8xLzEtRVZpa3RoYUM0YkU0bE5MSjlKclI3X2dReGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1Lzc0Njc2Ny1lZjVmLTQzNmMtYmQ1ZC04ZThiNzk5MjZh
YTMvMS8xLUVWaWt0aGFDNGJFNGxOTEo5SnJSN19nUXhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHBC
6rCuvDxVlVKz/O01ajlUYzUB7blxfz4GnEwppmkNR5wDDdhuPvJuC+04VgqoNER9
hNPTV5v5IMoxKIKsuFqlRmi/Hm+hNt86y1qovsA6RqwWXi8stN28HpU4RC3pX20W
zaz9K1GXIUxGhuCdVr2W4//Id4sV2CSWo40qSf0WLj+8e9aOvjuPcbJtbgD2Ivq7
2BrxXBSP4AOJdc5wQYOmQwbmXFlkeT7sf4r0x3d4ZUWLscRSCPN8CuMq0ii3mv9H
hWFLpxnhQkZTwx2qMBpx0W7YsgwxBgDVfHtLqXO1mJG3WEl1QNqBIn3gFRvj6Cwx
Rs3f65J0Nsez+TFVyg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:57 2025 by rpki-client