Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          4BiM2NPZYvwZGOerC7gL3wZgsPrRAeUYiK+rTdngaKA=
Subject key identifier:   07:B5:AB:BD:E0:3F:09:8E:26:35:31:4D:88:E0:42:D8:97:AA:69:A3
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       019651C9280116B7194BB32CA9699CE5F0C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          073F
Signing time:             Sun 20 Apr 2025 06:00:59 +0000
Manifest this update:     Sun 20 Apr 2025 06:00:59 +0000
Manifest next update:     Mon 21 Apr 2025 06:00:59 +0000
Files and hashes:         1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: 9Ch2BxkkeE4T5pO7OoGgTdGvqcFLTz+Y7h5f66wtxCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:28:01:16:b7:19:4b:b3:2c:a9:69:9c:e5:f0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Apr 20 06:00:59 2025 GMT
            Not After : Apr 21 06:00:59 2025 GMT
        Subject: CN=07b5abbde03f098e2635314d88e042d897aa69a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:06:63:d8:ba:4a:93:b9:4b:bd:5d:52:c8:
                    c2:6e:21:aa:59:61:c3:80:69:fd:29:bd:5f:21:1b:
                    31:4f:32:dc:d8:5b:f5:e3:7a:a4:50:6b:6e:cb:8d:
                    61:a6:25:7b:d3:c5:a3:06:ce:67:e4:1d:10:be:31:
                    28:ab:b5:b7:66:f4:e8:2c:d7:eb:c8:68:8a:21:d3:
                    fe:3f:49:5e:ba:fb:c4:a7:95:2e:cb:82:e6:ef:2b:
                    d6:70:17:57:9a:e8:a8:c5:60:e7:d4:bd:b9:7d:1d:
                    b7:9b:34:8d:8a:11:dd:15:b7:af:b8:85:82:2f:f9:
                    1f:29:d3:70:67:88:cb:2d:59:92:7a:80:cf:87:1d:
                    88:26:82:f7:54:77:07:8e:63:65:aa:90:59:b3:69:
                    37:b5:c9:f1:4b:51:29:bc:60:4c:8a:ea:4f:65:5d:
                    b2:ce:e0:e2:45:84:8f:83:27:6b:fa:72:93:cd:3a:
                    05:48:d3:52:6b:e9:ad:c8:92:9b:2d:9d:89:19:06:
                    7f:09:c1:8d:5c:4b:9c:e2:17:51:77:dd:d6:bb:4b:
                    83:12:0e:55:4b:33:a2:ba:cb:db:31:63:60:a3:63:
                    56:7d:03:25:6f:d9:f2:db:19:29:94:ca:c8:66:d9:
                    c7:56:60:dc:7a:b7:30:be:66:94:9b:16:97:03:d3:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:AB:BD:E0:3F:09:8E:26:35:31:4D:88:E0:42:D8:97:AA:69:A3
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5f:82:95:cd:7e:ff:01:40:93:89:10:a5:03:6c:53:1e:31:
         a7:4f:76:0c:20:e6:61:7c:8f:1d:f7:80:2e:d9:09:8b:27:f6:
         87:0f:53:6c:d2:ac:8a:b1:b0:4c:f4:60:a6:93:89:1a:d3:20:
         b3:95:92:cb:d7:f5:fe:f9:c9:6e:40:57:0a:a4:22:25:20:67:
         59:7a:69:9e:1b:ec:09:dd:ad:7d:7e:14:21:7b:26:c8:65:62:
         a1:22:f7:22:6e:41:db:c1:23:57:40:f8:7d:3d:93:66:97:74:
         d8:55:4b:b1:2b:a5:b2:ce:77:e5:4c:ab:23:4b:23:53:d5:42:
         c5:27:fa:2d:f9:46:1d:ea:b6:2f:94:a8:b0:81:c8:e2:15:2f:
         7a:0e:02:b3:3e:45:80:8f:79:55:a3:1f:eb:81:7f:bd:77:43:
         7b:86:d6:9e:4a:a1:13:c3:69:58:8e:b2:b5:fa:16:39:57:8e:
         67:ae:b9:55:02:03:a3:7a:4a:5e:e0:54:0c:4b:8c:a0:0b:c3:
         b5:c9:d0:76:3f:63:c4:5a:f9:39:97:f1:39:2e:55:15:91:1e:
         6b:98:23:9f:ae:cb:14:67:43:bd:a5:32:0e:97:8d:41:1d:27:
         35:d1:cc:8c:2b:90:fd:7b:50:19:e9:f8:33:f6:98:d2:66:50:
         fd:6b:ee:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRySgBFrcZS7MsqWmc5fDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNDE1YTAzMDU5ZmIyOTVhNGI5NmM5Y2U1ZWFkYjU4ZmU5
OGZhODYwHhcNMjUwNDIwMDYwMDU5WhcNMjUwNDIxMDYwMDU5WjAzMTEwLwYDVQQD
EygwN2I1YWJiZGUwM2YwOThlMjYzNTMxNGQ4OGUwNDJkODk3YWE2OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnwGY9i6SpO5S71dUsjCbiGqWWHD
gGn9Kb1fIRsxTzLc2Fv143qkUGtuy41hpiV708WjBs5n5B0QvjEoq7W3ZvToLNfr
yGiKIdP+P0leuvvEp5Uuy4Lm7yvWcBdXmuioxWDn1L25fR23mzSNihHdFbevuIWC
L/kfKdNwZ4jLLVmSeoDPhx2IJoL3VHcHjmNlqpBZs2k3tcnxS1EpvGBMiupPZV2y
zuDiRYSPgydr+nKTzToFSNNSa+mtyJKbLZ2JGQZ/CcGNXEuc4hdRd93Wu0uDEg5V
SzOiusvbMWNgo2NWfQMlb9ny2xkplMrIZtnHVmDcercwvmaUmxaXA9NrwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe1q73gPwmOJjUxTYjgQtiXqmmjMB8GA1UdIwQY
MBaAFJtBWgMFn7KVpLlsnOXq21j+mPqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEt
MTgwMWI1NDRiOWZlLzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEtMTgwMWI1NDRiOWZl
LzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1+Clc1+
/wFAk4kQpQNsUx4xp092DCDmYXyPHfeALtkJiyf2hw9TbNKsirGwTPRgppOJGtMg
s5WSy9f1/vnJbkBXCqQiJSBnWXppnhvsCd2tfX4UIXsmyGVioSL3Im5B28EjV0D4
fT2TZpd02FVLsSulss535UyrI0sjU9VCxSf6LflGHeq2L5SosIHI4hUveg4Csz5F
gI95VaMf64F/vXdDe4bWnkqhE8NpWI6ytfoWOVeOZ665VQIDo3pKXuBUDEuMoAvD
tcnQdj9jxFr5OZfxOS5VFZEea5gjn67LFGdDvaUyDpeNQR0nNdHMjCuQ/XtQGen4
M/aY0mZQ/WvuKw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:58 2025 by rpki-client