Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File:                     31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier:          ENlx1Gxq2fbvby+5x389UJyasXVyHTys2Uv7b4mgfWA=
Subject key identifier:   6C:C5:18:2B:C3:37:C7:F2:62:30:0A:95:D7:70:AA:28:64:1F:57:BE
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer:       /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial:       01964EFECB949016702BE2692DFCA4320558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 17:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:43 +0000
Files and hashes:         1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: lQw9harVnO3oMCFDMjvEWpH7sGCItoTf9ZH04+Oqe4Y=)
                          2: Cre1atzMDwt4GowPQslT1BJNz70.roa (hash: AgobKkjGt4zwBE8+8mA/MF95V2kw1GXZGBf2IpysMAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:cb:94:90:16:70:2b:e2:69:2d:fc:a4:32:05:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
        Validity
            Not Before: Apr 19 17:00:43 2025 GMT
            Not After : Apr 20 17:00:43 2025 GMT
        Subject: CN=6cc5182bc337c7f262300a95d770aa28641f57be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:3c:27:50:55:ef:08:29:e6:9e:81:66:00:
                    97:4e:d5:41:16:c0:33:d1:62:24:b4:21:14:e2:29:
                    cd:3c:db:72:e7:81:7e:ea:21:ad:75:56:be:62:94:
                    48:4e:67:e9:9f:cb:de:82:61:65:a2:fa:ff:7f:7b:
                    aa:88:36:53:e7:cc:d1:9b:12:2e:82:30:e0:a1:21:
                    ed:a2:ac:73:fd:da:5e:9e:c2:16:69:6b:19:ea:46:
                    a0:d4:ac:07:3d:58:17:05:df:6b:90:af:67:d7:2d:
                    6c:0d:9f:a6:14:fb:98:ff:4d:6b:85:31:95:72:8a:
                    e2:46:d4:a5:74:10:a7:d1:ee:e6:91:cf:19:52:19:
                    f7:f5:40:0a:95:6d:d5:24:5d:bc:ab:2c:04:f4:e4:
                    4a:c7:3e:44:fe:7f:90:b2:86:3b:be:31:42:11:68:
                    4f:20:86:15:38:73:07:4c:0d:52:e3:82:96:ae:99:
                    da:47:68:56:f3:fb:48:40:51:bb:3e:2f:ac:54:f7:
                    d2:8d:eb:e4:8a:05:51:f4:de:82:44:25:20:6c:b3:
                    54:b5:e7:53:e6:0d:88:9e:9e:b8:e2:42:66:20:cb:
                    5e:4d:0e:50:42:6b:15:eb:60:b4:c7:45:2a:86:63:
                    51:ec:1d:a9:9d:8b:50:dd:d8:f4:d0:6e:7f:c0:b5:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:18:2B:C3:37:C7:F2:62:30:0A:95:D7:70:AA:28:64:1F:57:BE
            X509v3 Authority Key Identifier:
                keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:80:fe:a9:7c:ac:ab:a3:ee:22:8a:f0:a2:80:e3:03:09:0a:
         28:1f:f4:3e:6f:2d:e6:57:3c:ce:18:61:ae:13:6f:d5:32:b7:
         87:aa:5d:07:81:2b:8b:fb:7b:98:d2:56:71:50:ed:87:ae:32:
         49:ca:e2:29:3b:9e:f7:64:bd:ff:9d:ac:12:f3:3b:24:a0:2d:
         0b:09:bd:e3:04:a1:b8:1b:a5:df:da:13:2a:be:2f:35:70:2c:
         c0:8b:d5:65:14:08:56:c8:a6:28:6c:94:ba:c1:30:fa:b5:c6:
         46:4c:c9:e3:9e:39:23:03:f8:bf:32:60:5a:78:75:7e:f6:fa:
         7c:95:d7:99:4a:14:c9:e8:5c:d5:e3:5c:e4:25:d9:70:ea:17:
         d5:a8:8c:e5:fe:9e:0a:1c:58:7f:9c:37:03:6c:70:a6:5c:65:
         b4:af:80:3e:6c:1c:8f:d2:69:d8:ac:06:af:d9:78:62:1a:60:
         72:7d:11:88:ab:06:ea:c3:d3:44:dd:b0:07:ff:56:06:ba:6e:
         cf:02:95:88:61:99:e3:f8:33:13:1d:f2:99:bf:0d:67:ef:f9:
         af:0c:90:d1:82:18:d4:a8:db:5b:aa:52:fe:af:d9:6f:4b:c7:
         62:d0:f1:ae:31:a4:bf:6b:05:10:f1:11:8b:21:2b:c4:51:9a:
         a2:54:25:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZO/suUkBZwK+JpLfykMgVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh
Yjc1NzAwHhcNMjUwNDE5MTcwMDQzWhcNMjUwNDIwMTcwMDQzWjAzMTEwLwYDVQQD
Eyg2Y2M1MTgyYmMzMzdjN2YyNjIzMDBhOTVkNzcwYWEyODY0MWY1N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0E8J1BV7wgp5p6BZgCXTtVBFsAz
0WIktCEU4inNPNty54F+6iGtdVa+YpRITmfpn8vegmFlovr/f3uqiDZT58zRmxIu
gjDgoSHtoqxz/dpensIWaWsZ6kag1KwHPVgXBd9rkK9n1y1sDZ+mFPuY/01rhTGV
coriRtSldBCn0e7mkc8ZUhn39UAKlW3VJF28qywE9ORKxz5E/n+QsoY7vjFCEWhP
IIYVOHMHTA1S44KWrpnaR2hW8/tIQFG7Pi+sVPfSjevkigVR9N6CRCUgbLNUtedT
5g2Inp644kJmIMteTQ5QQmsV62C0x0UqhmNR7B2pnYtQ3dj00G5/wLViNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzFGCvDN8fyYjAKlddwqihkH1e+MB8GA1UdIwQY
MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt
YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk
LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4D+qXys
q6PuIorwooDjAwkKKB/0Pm8t5lc8zhhhrhNv1TK3h6pdB4Eri/t7mNJWcVDth64y
ScriKTue92S9/52sEvM7JKAtCwm94wShuBul39oTKr4vNXAswIvVZRQIVsimKGyU
usEw+rXGRkzJ4545IwP4vzJgWnh1fvb6fJXXmUoUyehc1eNc5CXZcOoX1aiM5f6e
ChxYf5w3A2xwplxltK+APmwcj9Jp2KwGr9l4Yhpgcn0RiKsG6sPTRN2wB/9WBrpu
zwKViGGZ4/gzEx3ymb8NZ+/5rwyQ0YIY1KjbW6pS/q/Zb0vHYtDxrjGkv2sFEPER
iyErxFGaolQlSg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:06 2025 by rpki-client