Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File:                     r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier:          zZH1eZpVt92mY+CiqMIhXq1KMkF0G57xQqr3+MtUgpk=
Subject key identifier:   F9:24:F6:7D:37:B0:5F:B2:67:04:40:28:02:B5:34:32:74:59:62:1F
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer:       /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial:       019510C7C710B02E2576CBB393A79DC050B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number:          1453
Signing time:             Sun 16 Feb 2025 22:01:22 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:22 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:22 +0000
Files and hashes:         1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
                          2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: DFt70LpnzQgDaUJ0xQ0+nUmqixWVy6qv2It+NDIN/hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:c7:10:b0:2e:25:76:cb:b3:93:a7:9d:c0:50:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
        Validity
            Not Before: Feb 16 22:01:22 2025 GMT
            Not After : Feb 17 22:01:22 2025 GMT
        Subject: CN=f924f67d37b05fb26704402802b534327459621f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:ef:63:4c:84:98:fd:51:9e:44:67:01:6a:
                    0c:03:22:9d:34:e0:2d:a9:92:d4:de:b0:1b:1c:da:
                    ed:20:25:aa:d0:e4:ec:44:07:25:e0:b7:9b:18:26:
                    c6:9b:2c:45:94:1d:f7:e1:be:38:d4:a2:94:c4:2b:
                    70:3a:4b:d5:f4:50:7c:2c:10:1c:81:d0:28:00:03:
                    70:3a:5c:43:38:f8:67:f9:f0:9a:60:c4:24:be:27:
                    5f:6b:04:ff:d3:e9:1d:59:99:d9:9a:ea:5f:07:23:
                    77:cb:ff:b2:33:9f:e2:bb:76:d9:8b:08:02:35:93:
                    dd:cb:b3:84:8d:7f:41:ae:c7:00:eb:b3:94:a8:65:
                    d5:3e:ed:b7:12:bc:49:a4:49:3b:05:e7:77:9e:2e:
                    d3:ea:cb:d5:9e:0f:d3:36:3f:40:ed:a6:46:21:d3:
                    5c:62:fb:b5:58:56:e6:93:32:d6:bd:94:2d:91:9a:
                    9f:2f:cc:32:53:31:e1:4b:d4:49:67:07:04:79:3e:
                    f4:a6:5a:12:06:8d:64:0b:5e:45:d1:1f:3d:3a:9f:
                    4a:a3:a3:b3:58:8b:49:85:89:05:00:84:e0:8a:a8:
                    da:0b:db:8d:0d:1e:f5:6d:52:62:ad:76:0c:72:dd:
                    87:15:0a:5b:a6:48:6f:38:15:6d:87:b5:38:5c:60:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:24:F6:7D:37:B0:5F:B2:67:04:40:28:02:B5:34:32:74:59:62:1F
            X509v3 Authority Key Identifier:
                keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c0:81:34:5a:4d:5d:04:8a:c0:e7:9c:51:b3:31:c2:59:89:
         cb:77:9d:2d:df:62:85:f5:4e:58:62:60:00:3d:e7:82:4d:4f:
         06:48:9d:88:28:e5:44:e6:70:f2:5d:8b:f9:1f:42:54:39:a1:
         77:63:b2:44:37:e4:8f:51:0c:ae:4a:ce:17:de:4d:ea:5e:5c:
         77:d5:d2:d4:46:3c:2e:cf:cb:85:a5:57:d1:af:e5:ee:2a:6e:
         56:f8:d2:2d:4e:db:ee:c2:8f:1c:9d:5e:94:02:bf:0a:cb:1d:
         b5:09:48:6a:8a:ea:5a:23:cf:b9:03:28:77:d3:42:c1:4b:03:
         82:c7:af:a3:c3:da:34:85:1f:5e:49:34:00:04:0d:95:d2:ad:
         29:32:63:05:a5:f9:2c:5e:f0:1e:d5:a0:fc:19:f5:c2:bf:d9:
         a4:3e:55:a5:d0:31:a6:97:aa:dc:36:70:80:39:b2:d8:18:e6:
         68:68:e3:99:15:ed:54:61:eb:c1:5b:00:93:9e:cf:ac:9b:97:
         02:d4:a7:18:76:ea:de:cd:08:b5:03:d6:aa:24:74:9b:80:ff:
         10:53:91:ef:cf:8b:4d:39:10:88:88:ba:d0:85:62:7c:3c:9a:
         14:bd:28:44:54:55:76:df:7e:c9:39:52:3b:81:88:c6:8a:bb:
         5b:b9:43:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx8cQsC4ldsuzk6edwFCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYWRmN2M1ZjgyZGJjMGIxZGJhMzI4Mjg2MmQ1M2VjODg3
ZDVjNjYwHhcNMjUwMjE2MjIwMTIyWhcNMjUwMjE3MjIwMTIyWjAzMTEwLwYDVQQD
EyhmOTI0ZjY3ZDM3YjA1ZmIyNjcwNDQwMjgwMmI1MzQzMjc0NTk2MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvvvY0yEmP1RnkRnAWoMAyKdNOAt
qZLU3rAbHNrtICWq0OTsRAcl4LebGCbGmyxFlB334b441KKUxCtwOkvV9FB8LBAc
gdAoAANwOlxDOPhn+fCaYMQkvidfawT/0+kdWZnZmupfByN3y/+yM5/iu3bZiwgC
NZPdy7OEjX9BrscA67OUqGXVPu23ErxJpEk7Bed3ni7T6svVng/TNj9A7aZGIdNc
Yvu1WFbmkzLWvZQtkZqfL8wyUzHhS9RJZwcEeT70ploSBo1kC15F0R89Op9Ko6Oz
WItJhYkFAITgiqjaC9uNDR71bVJirXYMct2HFQpbpkhvOBVth7U4XGDFUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkk9n03sF+yZwRAKAK1NDJ0WWIfMB8GA1UdIwQY
MBaAFK+t98X4LbwLHboygoYtU+yIfVxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAt
NzhmNmM4MDQ3NzNkLzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAtNzhmNmM4MDQ3NzNk
LzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8CBNFpN
XQSKwOecUbMxwlmJy3edLd9ihfVOWGJgAD3ngk1PBkidiCjlROZw8l2L+R9CVDmh
d2OyRDfkj1EMrkrOF95N6l5cd9XS1EY8Ls/LhaVX0a/l7ipuVvjSLU7b7sKPHJ1e
lAK/CssdtQlIaorqWiPPuQMod9NCwUsDgsevo8PaNIUfXkk0AAQNldKtKTJjBaX5
LF7wHtWg/Bn1wr/ZpD5VpdAxppeq3DZwgDmy2BjmaGjjmRXtVGHrwVsAk57PrJuX
AtSnGHbq3s0ItQPWqiR0m4D/EFOR78+LTTkQiIi60IVifDyaFL0oRFRVdt9+yTlS
O4GIxoq7W7lD7Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:34 2025 by rpki-client