Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File:                     ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier:          ebnlGs9Cn8tTEhM1JqsdnA67GZauFQsCSviv92iSs9E=
Subject key identifier:   AE:80:B4:73:DC:D5:B0:B8:D3:38:4B:07:AC:75:00:FB:76:EB:64:F3
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer:       /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial:       019606414C1170F0F4327FCEE544CC9AB3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number:          0609
Signing time:             Sat 05 Apr 2025 14:01:04 +0000
Manifest this update:     Sat 05 Apr 2025 14:01:04 +0000
Manifest next update:     Sun 06 Apr 2025 14:01:04 +0000
Files and hashes:         1: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: hBXKlcrwbWUXoRy7neOnU1CF0SUyB+EVb5/g37npJfc=)
                          2: OgXWLzQBIYvEON5mUedF6bX5aTo.roa (hash: nqpCSiGASiQpy5G6Vl9R55sQwkNptiylFtL8c3H2opE=)
                          3: yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa (hash: 0sZjX5MFgI0oqX6xUWy5gWW3/d8I6ijHH576HLysTY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:06:41:4c:11:70:f0:f4:32:7f:ce:e5:44:cc:9a:b3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
        Validity
            Not Before: Apr  5 14:01:04 2025 GMT
            Not After : Apr  6 14:01:04 2025 GMT
        Subject: CN=ae80b473dcd5b0b8d3384b07ac7500fb76eb64f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:36:2e:90:42:fc:07:38:02:fe:3b:92:e5:
                    97:b6:fe:ea:51:40:68:c0:1d:36:05:84:b6:41:06:
                    b9:71:5c:74:0b:3b:c2:d1:a2:05:6c:ac:6b:44:66:
                    ef:55:80:08:ba:0f:ae:0e:e6:ac:21:79:e5:14:78:
                    3c:28:b3:34:81:f2:38:61:22:6f:87:76:0a:db:60:
                    42:9f:52:98:d2:6c:e8:e4:77:fa:cc:2a:09:e8:6e:
                    34:45:f3:c8:4c:33:e4:50:03:fc:54:04:93:a6:41:
                    99:cf:d6:af:ff:25:4b:6e:72:db:1b:b8:bb:ad:7c:
                    5d:ea:2e:da:b2:95:d1:37:41:9f:06:17:a7:d0:5e:
                    ea:54:e7:37:4b:cc:89:a8:4f:fe:02:0f:2d:b3:dc:
                    1c:38:d4:ad:89:e2:bc:51:b2:9b:06:32:26:60:67:
                    23:3a:45:03:72:7d:6c:a6:92:91:89:c2:16:73:be:
                    97:09:27:f8:45:01:4f:1f:59:32:34:cf:90:99:2d:
                    98:2b:00:8c:8f:c4:79:ea:22:1e:e5:80:b3:e7:77:
                    cc:97:2e:a7:d5:b0:4e:29:13:6f:03:fb:2d:9e:19:
                    11:96:fd:6f:35:6c:cd:a7:3c:97:c7:1e:58:b2:7c:
                    75:1b:ba:90:e9:03:38:d5:a2:63:93:b5:ae:7a:9c:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:B4:73:DC:D5:B0:B8:D3:38:4B:07:AC:75:00:FB:76:EB:64:F3
            X509v3 Authority Key Identifier:
                keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:df:02:55:7e:7b:a5:26:88:9b:83:2a:f3:07:db:ab:83:39:
         d2:a8:e6:d3:2c:a0:48:e8:3d:2a:4a:05:6b:a3:52:a6:5d:e9:
         da:79:20:78:08:52:3b:52:e2:e6:c8:0a:96:e8:5e:c8:c8:93:
         f3:9e:e3:2d:9c:ef:a1:cc:91:9c:0c:75:8b:71:7a:48:2a:3c:
         64:a5:91:ac:22:d1:40:11:42:e7:f9:60:9a:74:ba:be:08:8f:
         10:02:ed:03:eb:b3:8c:94:3e:88:66:6b:83:3b:21:33:db:bf:
         d6:8c:c0:30:b2:97:b6:2a:2a:2a:0a:d9:ee:93:9a:a5:8d:e6:
         9a:8f:68:cf:21:77:28:21:c4:0a:43:50:70:ce:bb:e9:1c:af:
         6f:a7:ae:93:28:c2:8a:49:57:c7:16:50:b7:30:7e:b8:ce:9d:
         fb:c5:1c:ba:77:25:e0:08:4b:d9:c7:18:07:56:f4:a5:66:62:
         3e:77:3d:37:ef:b0:61:01:42:7c:7f:16:d8:30:aa:3b:38:d3:
         0a:32:34:8c:95:29:54:4d:b9:6a:84:e2:62:eb:5e:69:97:60:
         eb:4e:ee:bb:51:91:d6:87:32:18:a3:54:1d:ce:8b:e0:30:fa:
         9e:6b:4d:2f:ea:eb:96:83:ac:6b:f1:fd:0c:4c:32:3d:58:92:
         c5:25:cd:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYGQUwRcPD0Mn/O5UTMmrPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw
NTIxZGIwHhcNMjUwNDA1MTQwMTA0WhcNMjUwNDA2MTQwMTA0WjAzMTEwLwYDVQQD
EyhhZTgwYjQ3M2RjZDViMGI4ZDMzODRiMDdhYzc1MDBmYjc2ZWI2NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIQ2LpBC/Ac4Av47kuWXtv7qUUBo
wB02BYS2QQa5cVx0CzvC0aIFbKxrRGbvVYAIug+uDuasIXnlFHg8KLM0gfI4YSJv
h3YK22BCn1KY0mzo5Hf6zCoJ6G40RfPITDPkUAP8VASTpkGZz9av/yVLbnLbG7i7
rXxd6i7aspXRN0GfBhen0F7qVOc3S8yJqE/+Ag8ts9wcONStieK8UbKbBjImYGcj
OkUDcn1sppKRicIWc76XCSf4RQFPH1kyNM+QmS2YKwCMj8R56iIe5YCz53fMly6n
1bBOKRNvA/stnhkRlv1vNWzNpzyXxx5Ysnx1G7qQ6QM41aJjk7WuepzL0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6AtHPc1bC40zhLB6x1APt262TzMB8GA1UdIwQY
MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt
NThmMjg3NWNhMGJmLzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm
LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN8CVX57
pSaIm4Mq8wfbq4M50qjm0yygSOg9KkoFa6NSpl3p2nkgeAhSO1Li5sgKluheyMiT
857jLZzvocyRnAx1i3F6SCo8ZKWRrCLRQBFC5/lgmnS6vgiPEALtA+uzjJQ+iGZr
gzshM9u/1ozAMLKXtioqKgrZ7pOapY3mmo9ozyF3KCHECkNQcM676Ryvb6eukyjC
iklXxxZQtzB+uM6d+8Ucuncl4AhL2ccYB1b0pWZiPnc9N++wYQFCfH8W2DCqOzjT
CjI0jJUpVE25aoTiYuteaZdg607uu1GR1ocyGKNUHc6L4DD6nmtNL+rrloOsa/H9
DEwyPViSxSXNeA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:22:42 2025 by rpki-client