Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File:                     Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier:          6JXBWoRQ7mv2MOxUhXBmp+5NoXRoGol264InWxk5R2M=
Subject key identifier:   F7:1A:5C:F9:90:5B:0C:D6:48:E1:C1:1F:CA:DA:06:10:F3:39:9A:43
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer:       /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial:       01964255B6B4A56B375635BD8623BBDAEE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number:          1501
Signing time:             Thu 17 Apr 2025 06:00:35 +0000
Manifest this update:     Thu 17 Apr 2025 06:00:35 +0000
Manifest next update:     Fri 18 Apr 2025 06:00:35 +0000
Files and hashes:         1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=)
                          2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: lr7NJIjRIE61w0bVtNyEXBYMyB0Blm+9QEa5Yh3sGyI=)
                          3: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (hash: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=)
                          4: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=)
                          5: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=)
                          6: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:55:b6:b4:a5:6b:37:56:35:bd:86:23:bb:da:ee:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
        Validity
            Not Before: Apr 17 06:00:35 2025 GMT
            Not After : Apr 18 06:00:35 2025 GMT
        Subject: CN=f71a5cf9905b0cd648e1c11fcada0610f3399a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:96:af:9b:99:60:42:55:12:76:e6:1b:3e:
                    98:0c:3d:65:c3:93:38:9c:6c:f5:5e:0e:71:0d:a5:
                    62:22:fa:88:77:c4:cb:31:2d:a0:db:11:3b:8c:e4:
                    3c:45:2f:97:27:5b:5d:94:da:8b:6c:78:23:b3:51:
                    fa:2b:87:88:06:be:27:28:23:09:31:35:ef:48:79:
                    fa:75:64:c7:9d:14:6b:68:21:32:b1:3f:3b:2c:43:
                    24:e1:7f:84:14:03:85:7d:de:f9:98:c5:e1:e6:66:
                    87:93:c2:1e:58:bd:cf:05:79:3b:85:b3:b9:24:47:
                    20:3b:5a:78:80:25:6f:b7:05:ea:fe:95:67:98:7b:
                    45:1f:21:29:c6:cc:30:99:3e:42:dc:61:d6:e5:18:
                    ea:66:1a:ec:de:b8:cf:6e:d6:96:14:40:68:47:51:
                    5e:08:b2:0e:b8:50:f0:a5:3c:34:23:ce:a6:88:ef:
                    1f:5d:d5:50:f3:8a:18:f5:be:b7:4a:af:16:23:ce:
                    b0:60:cb:5d:eb:59:fa:ba:c6:e1:c8:06:fd:9f:29:
                    29:2e:26:85:4c:4c:0e:d3:5a:10:41:10:70:de:cf:
                    12:29:a3:44:fe:e0:bf:7d:92:94:59:bd:89:58:ce:
                    20:66:4e:88:b2:76:a0:30:e8:ed:3f:a7:db:a5:ae:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:5C:F9:90:5B:0C:D6:48:E1:C1:1F:CA:DA:06:10:F3:39:9A:43
            X509v3 Authority Key Identifier:
                keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:71:17:8c:44:78:f6:8e:c8:62:93:6b:7d:5f:2e:d7:93:
         ef:13:b4:40:5d:96:de:05:ea:05:16:76:7f:0e:37:0c:63:f9:
         e4:de:7c:1a:12:9f:25:db:93:a0:e4:ff:fc:35:1d:a5:b8:f7:
         6b:be:7a:5f:b5:6d:29:ab:23:9d:21:cd:e8:4a:fc:c2:e3:54:
         3e:b2:5b:cb:e8:5c:8f:89:39:09:e4:c4:41:bc:48:79:18:f3:
         04:fe:47:ce:3e:82:a9:95:ee:73:68:93:6f:46:98:e8:97:f3:
         ff:15:71:06:b2:5f:f8:6e:4d:9b:b5:b1:17:3e:05:85:7f:90:
         a5:bc:b7:89:f1:e1:13:67:f5:68:6d:0f:8c:e7:cf:e1:9c:d4:
         c7:99:09:86:ba:1d:13:35:1e:66:1b:bf:a2:44:e7:ec:5c:89:
         16:06:cd:af:be:45:0c:67:0c:7b:9e:61:df:a8:0d:80:ab:84:
         8e:06:56:dd:74:83:62:9c:a1:45:9d:e0:2f:c1:41:f0:5d:89:
         27:db:98:07:94:8e:d9:af:4b:5b:21:66:f0:a4:95:b0:50:62:
         5b:6a:51:39:c0:39:67:3f:56:f1:8f:2e:c2:4e:db:55:bc:ae:
         85:f0:9c:9f:65:21:ea:e6:3e:bd:a8:e6:c6:b1:29:1a:38:77:
         17:74:87:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZCVba0pWs3VjW9hiO72u4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2
Y2QxYTMwHhcNMjUwNDE3MDYwMDM1WhcNMjUwNDE4MDYwMDM1WjAzMTEwLwYDVQQD
EyhmNzFhNWNmOTkwNWIwY2Q2NDhlMWMxMWZjYWRhMDYxMGYzMzk5YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjSWr5uZYEJVEnbmGz6YDD1lw5M4
nGz1Xg5xDaViIvqId8TLMS2g2xE7jOQ8RS+XJ1tdlNqLbHgjs1H6K4eIBr4nKCMJ
MTXvSHn6dWTHnRRraCEysT87LEMk4X+EFAOFfd75mMXh5maHk8IeWL3PBXk7hbO5
JEcgO1p4gCVvtwXq/pVnmHtFHyEpxswwmT5C3GHW5RjqZhrs3rjPbtaWFEBoR1Fe
CLIOuFDwpTw0I86miO8fXdVQ84oY9b63Sq8WI86wYMtd61n6usbhyAb9nykpLiaF
TEwO01oQQRBw3s8SKaNE/uC/fZKUWb2JWM4gZk6IsnagMOjtP6fbpa7QKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcaXPmQWwzWSOHBH8raBhDzOZpDMB8GA1UdIwQY
MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt
MmVjZGExMWRlMTUzLzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz
LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCxxF4xE
ePaOyGKTa31fLteT7xO0QF2W3gXqBRZ2fw43DGP55N58GhKfJduToOT//DUdpbj3
a756X7VtKasjnSHN6Er8wuNUPrJby+hcj4k5CeTEQbxIeRjzBP5Hzj6CqZXuc2iT
b0aY6Jfz/xVxBrJf+G5Nm7WxFz4FhX+Qpby3ifHhE2f1aG0PjOfP4ZzUx5kJhrod
EzUeZhu/okTn7FyJFgbNr75FDGcMe55h36gNgKuEjgZW3XSDYpyhRZ3gL8FB8F2J
J9uYB5SO2a9LWyFm8KSVsFBiW2pROcA5Zz9W8Y8uwk7bVbyuhfCcn2Uh6uY+vajm
xrEpGjh3F3SHew==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:11 2025 by rpki-client