Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File:                     v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier:          rIHGCz80eKuUbdNccqs8Vh4AmH/xMtMLuT5rjDD+EBw=
Subject key identifier:   76:90:1A:C6:E5:EB:82:30:24:B2:2C:66:3D:7B:92:4F:62:A9:AA:59
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer:       /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial:       0194C4D0F532FA30C4EDB4DBB03CF238B4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number:          16
Signing time:             Sun 02 Feb 2025 04:00:16 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:16 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:16 +0000
Files and hashes:         1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
                          2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: 8LTc+mkOpEdd/sK6ai0Mits7aIWA6iWcsR2qDz03qiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d0:f5:32:fa:30:c4:ed:b4:db:b0:3c:f2:38:b4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
        Validity
            Not Before: Feb  2 04:00:16 2025 GMT
            Not After : Feb  3 04:00:16 2025 GMT
        Subject: CN=76901ac6e5eb823024b22c663d7b924f62a9aa59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:ac:5f:02:76:11:e9:a4:79:f4:26:18:95:
                    06:e5:ae:8a:bb:5e:b8:88:c3:e8:36:67:66:d7:49:
                    8f:32:69:a8:05:4c:9d:63:1f:81:bb:a4:52:dc:46:
                    91:26:a0:8e:0c:e0:ad:53:ad:b5:a4:fa:d7:69:f9:
                    7a:1e:ad:69:22:0c:fb:fd:fa:9c:b5:ba:72:eb:a7:
                    b6:ea:bf:f9:36:bf:4b:c6:8a:35:d5:87:70:a0:9a:
                    8e:d7:9a:aa:2b:b3:b7:1b:25:9f:5a:29:c3:16:3f:
                    86:0c:bd:db:18:18:d0:2d:37:dd:aa:5b:f0:62:d6:
                    de:01:fa:83:61:5a:8f:1b:3b:09:50:2b:7b:1d:f8:
                    c1:0a:3f:86:c0:e5:22:4f:84:b2:7f:b3:ad:f9:ea:
                    69:0a:ce:98:68:5f:12:f1:4a:1b:03:4a:95:21:fd:
                    05:08:3a:d2:a5:44:d4:c7:11:d6:1b:f4:d2:2a:d0:
                    6c:ae:31:d2:d8:e5:81:bf:4c:73:ca:37:a4:e1:9f:
                    f6:b1:be:28:18:d5:42:e1:7c:20:2a:22:9b:af:40:
                    f6:3f:11:6f:f6:97:52:17:12:c8:af:aa:4a:20:05:
                    af:85:a5:24:3a:f3:55:aa:82:95:d6:ae:50:9f:e8:
                    ea:82:24:68:96:ab:1d:48:26:8f:3f:3d:74:f2:42:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:1A:C6:E5:EB:82:30:24:B2:2C:66:3D:7B:92:4F:62:A9:AA:59
            X509v3 Authority Key Identifier:
                keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:5f:fb:19:9a:7c:60:8a:2d:a6:a0:4b:40:4f:8c:78:a0:
         ef:96:b6:8f:7d:18:7d:9d:7c:4d:f9:fc:d3:98:ae:53:9a:05:
         ba:3e:1e:d2:8d:e4:e6:91:76:04:04:2f:34:a0:48:0f:80:0d:
         16:a1:19:7c:44:9d:ee:48:2c:8d:27:6b:fb:0e:9b:7b:5f:3f:
         48:86:f0:b7:99:d4:c8:aa:cd:00:29:57:8b:cb:01:cb:2a:93:
         21:04:20:09:aa:6e:0f:7e:a7:22:05:2c:db:23:54:bd:74:43:
         f7:57:66:97:1b:8a:7c:ed:6f:0d:df:ab:7d:91:0f:82:09:f1:
         9e:68:e1:35:6a:c6:cd:cb:7c:f8:4d:73:62:60:56:ec:32:2b:
         d4:8e:ba:ad:82:45:55:e2:0e:a8:20:0e:58:91:1c:2f:b5:f3:
         e5:1b:2a:00:91:59:6a:66:b9:ad:a3:1b:33:18:46:d5:b5:4c:
         31:0a:99:6c:66:bc:38:52:1e:f0:24:b9:19:4e:79:4c:27:5b:
         e2:af:05:25:99:8e:f6:17:c4:be:c5:c4:14:c4:f2:53:ad:9b:
         37:65:0f:dd:ae:39:95:e1:f0:96:9a:a7:ef:73:1b:cb:0b:bd:
         d3:2a:33:a3:98:4b:5f:4f:ee:f5:b6:44:7b:48:03:96:24:e9:
         6a:e7:22:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0PUy+jDE7bTbsDzyOLTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWMxMmRhYjc1ZDljMDlmMzEyMDE3OTM3M2U5OTVhZTM5
MTc5MTEwHhcNMjUwMjAyMDQwMDE2WhcNMjUwMjAzMDQwMDE2WjAzMTEwLwYDVQQD
Eyg3NjkwMWFjNmU1ZWI4MjMwMjRiMjJjNjYzZDdiOTI0ZjYyYTlhYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiasXwJ2EemkefQmGJUG5a6Ku164
iMPoNmdm10mPMmmoBUydYx+Bu6RS3EaRJqCODOCtU621pPrXafl6Hq1pIgz7/fqc
tbpy66e26r/5Nr9Lxoo11YdwoJqO15qqK7O3GyWfWinDFj+GDL3bGBjQLTfdqlvw
YtbeAfqDYVqPGzsJUCt7HfjBCj+GwOUiT4Syf7Ot+eppCs6YaF8S8UobA0qVIf0F
CDrSpUTUxxHWG/TSKtBsrjHS2OWBv0xzyjek4Z/2sb4oGNVC4XwgKiKbr0D2PxFv
9pdSFxLIr6pKIAWvhaUkOvNVqoKV1q5Qn+jqgiRolqsdSCaPPz108kLA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaQGsbl64IwJLIsZj17kk9iqapZMB8GA1UdIwQY
MBaAFL+sEtq3XZwJ8xIBeTc+mVrjkXkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kOTA3NGQtNzdkYy00OWZjLWFjYjMt
MDNkOWJhNTAzZGMxLzEvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kOTA3NGQtNzdkYy00OWZjLWFjYjMtMDNkOWJhNTAzZGMx
LzEvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboVf+xma
fGCKLaagS0BPjHig75a2j30YfZ18Tfn805iuU5oFuj4e0o3k5pF2BAQvNKBID4AN
FqEZfESd7kgsjSdr+w6be18/SIbwt5nUyKrNAClXi8sByyqTIQQgCapuD36nIgUs
2yNUvXRD91dmlxuKfO1vDd+rfZEPggnxnmjhNWrGzct8+E1zYmBW7DIr1I66rYJF
VeIOqCAOWJEcL7Xz5RsqAJFZama5raMbMxhG1bVMMQqZbGa8OFIe8CS5GU55TCdb
4q8FJZmO9hfEvsXEFMTyU62bN2UP3a45leHwlpqn73Mbywu90yozo5hLX0/u9bZE
e0gDliTpauci0g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:12 2025 by rpki-client