Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File:                     sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier:          06NgH/ge9/7CNQvCO9z/NBFzd0wjGM9QEzlRlxaPF5E=
Subject key identifier:   66:A0:95:DD:A5:33:55:58:73:DA:C2:D9:3D:F4:FF:E3:9A:15:4A:C6
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer:       /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial:       019578A20695DC309FF65CCE7C9963FD0EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number:          1370
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
Manifest this update:     Sun 09 Mar 2025 02:00:39 +0000
Manifest next update:     Mon 10 Mar 2025 02:00:39 +0000
Files and hashes:         1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=)
                          2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: XL1z6CKZrmWEWVRd6/oaEQo8o0EdcbjAFkyxHWvzR4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:78:a2:06:95:dc:30:9f:f6:5c:ce:7c:99:63:fd:0e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Mar 10 02:00:39 2025 GMT
        Subject: CN=66a095dda533555873dac2d93df4ffe39a154ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:1c:05:f7:63:a6:67:9b:09:44:b7:c9:c2:
                    a4:99:e6:c9:88:88:f2:e0:8a:25:cc:15:15:94:da:
                    e6:c8:7b:f1:9e:e9:ee:30:6e:e7:f6:57:72:78:8f:
                    e0:34:db:2e:6e:19:e5:e0:3e:13:f4:eb:85:0a:0a:
                    9a:cd:4a:2c:89:70:cc:f1:10:38:a8:e0:94:75:25:
                    63:7d:62:c9:a0:52:4c:42:43:b7:e4:b9:44:95:20:
                    14:c3:69:1a:bf:b7:47:6e:5e:f9:a0:f2:01:78:b9:
                    8e:f1:0c:d2:03:68:29:f4:2e:71:7f:34:24:d4:52:
                    92:c1:b9:90:bc:3c:26:12:7a:c4:82:d4:8c:3b:99:
                    81:18:c3:61:f3:8a:35:c0:f9:6a:be:93:f7:16:e3:
                    b9:01:db:aa:e6:81:50:41:ca:fe:7f:2e:5e:33:be:
                    f5:0c:e2:b4:21:80:2f:42:bb:86:47:1a:f9:61:db:
                    8d:b1:a2:16:3b:a8:41:7b:8b:60:8d:1c:44:c6:e6:
                    93:c2:27:f8:7a:3e:ed:29:b9:6d:dd:e1:da:0f:cc:
                    82:df:1b:9b:5e:03:76:0c:76:31:e2:fc:8f:bf:bc:
                    42:ed:27:0f:0b:31:cb:03:d3:94:cb:33:30:17:46:
                    59:99:1a:24:28:51:a8:16:ff:55:b9:1b:15:f4:ac:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A0:95:DD:A5:33:55:58:73:DA:C2:D9:3D:F4:FF:E3:9A:15:4A:C6
            X509v3 Authority Key Identifier:
                keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:6e:a7:0e:37:71:5f:3d:66:ad:c9:38:27:a9:84:f3:43:
         49:46:6e:8c:51:2a:71:37:df:6b:c3:2d:fa:e5:bb:ba:04:c2:
         03:ee:d3:ca:be:ef:53:37:96:07:d6:28:00:d1:22:62:cf:90:
         ab:3f:f3:c3:59:11:60:37:2e:b5:5d:1a:6b:3f:4b:da:f6:d9:
         b2:51:14:9a:ee:ac:14:a8:63:43:6d:d8:33:e2:91:86:db:6b:
         37:3b:41:7b:18:26:8a:47:ea:e1:01:c1:38:5d:d2:fc:df:e3:
         7c:49:17:42:e7:b0:22:c8:a7:5d:72:e8:2e:2f:42:bd:49:ee:
         b5:43:d8:5f:be:ef:f4:b5:ab:20:e4:7a:6e:b5:12:0b:3e:34:
         4c:10:ee:42:d6:db:0d:29:1b:3f:b0:4a:e2:e4:43:51:6f:e6:
         1c:e0:c2:72:10:c1:60:e4:cc:34:b8:70:c1:41:e8:d2:2e:fa:
         27:37:cf:84:66:94:10:81:16:70:06:81:d1:6e:7e:8e:08:48:
         68:9e:01:04:9b:84:00:86:46:f0:76:a0:7e:a4:a2:2d:66:fc:
         f0:56:24:9a:53:6f:25:97:73:16:cd:ce:1d:9b:ea:87:09:68:
         09:cc:d7:e7:c4:40:df:c1:f9:fb:9a:00:11:1c:08:13:e0:e5:
         a3:15:1a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV4ogaV3DCf9lzOfJlj/Q6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGQ1ODhkZjIwYjMyZGI5Nzg3ZDc3ODY0Mzk0Y2Q3YTY2
ZDQwMzAwHhcNMjUwMzA5MDIwMDM5WhcNMjUwMzEwMDIwMDM5WjAzMTEwLwYDVQQD
Eyg2NmEwOTVkZGE1MzM1NTU4NzNkYWMyZDkzZGY0ZmZlMzlhMTU0YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bYcBfdjpmebCUS3ycKkmebJiIjy
4IolzBUVlNrmyHvxnunuMG7n9ldyeI/gNNsubhnl4D4T9OuFCgqazUosiXDM8RA4
qOCUdSVjfWLJoFJMQkO35LlElSAUw2kav7dHbl75oPIBeLmO8QzSA2gp9C5xfzQk
1FKSwbmQvDwmEnrEgtSMO5mBGMNh84o1wPlqvpP3FuO5Aduq5oFQQcr+fy5eM771
DOK0IYAvQruGRxr5YduNsaIWO6hBe4tgjRxExuaTwif4ej7tKblt3eHaD8yC3xub
XgN2DHYx4vyPv7xC7ScPCzHLA9OUyzMwF0ZZmRokKFGoFv9VuRsV9KwU0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGagld2lM1VYc9rC2T30/+OaFUrGMB8GA1UdIwQY
MBaAFLJNWI3yCzLbl4fXeGQ5TNembUAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgt
ZDdiNjRiN2NjNTgzLzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgtZDdiNjRiN2NjNTgz
LzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7dupw43
cV89Zq3JOCephPNDSUZujFEqcTffa8Mt+uW7ugTCA+7Tyr7vUzeWB9YoANEiYs+Q
qz/zw1kRYDcutV0aaz9L2vbZslEUmu6sFKhjQ23YM+KRhttrNztBexgmikfq4QHB
OF3S/N/jfEkXQuewIsinXXLoLi9CvUnutUPYX77v9LWrIOR6brUSCz40TBDuQtbb
DSkbP7BK4uRDUW/mHODCchDBYOTMNLhwwUHo0i76JzfPhGaUEIEWcAaB0W5+jghI
aJ4BBJuEAIZG8HagfqSiLWb88FYkmlNvJZdzFs3OHZvqhwloCczX58RA38H5+5oA
ERwIE+DloxUajg==
-----END CERTIFICATE-----
Generated at Sun Mar 9 10:18:14 2025 by rpki-client