Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File:                     27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier:          AFXJvTsYN8hMPBbFOnnwL7Agal3JZQTupt+QgG/LYoc=
Subject key identifier:   DB:65:73:E4:07:E8:09:8C:14:BC:B4:32:24:15:2A:DB:EA:B1:39:85
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer:       /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial:       019644447D2E618E9275BAE54D9776EC797D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number:          08D4
Signing time:             Thu 17 Apr 2025 15:01:01 +0000
Manifest this update:     Thu 17 Apr 2025 15:01:01 +0000
Manifest next update:     Fri 18 Apr 2025 15:01:01 +0000
Files and hashes:         1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: KLZTsRVNq0xkQTUt/w7sdVIn9WlIn2Jkyn5FfuLBQ+k=)
                          2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
                          3: neN1QwNYSQjNWxXWAsZe6DG1rPc.roa (hash: Z0Ho0Y/N/zGAg76im8e3nFlaRKeJIa8WBq6ey1xBkt4=)
                          4: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:7d:2e:61:8e:92:75:ba:e5:4d:97:76:ec:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
        Validity
            Not Before: Apr 17 15:01:01 2025 GMT
            Not After : Apr 18 15:01:01 2025 GMT
        Subject: CN=db6573e407e8098c14bcb43224152adbeab13985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:af:f7:94:6c:ea:8f:6f:ea:77:e3:01:31:
                    51:e3:68:b1:93:5f:aa:f9:f9:d5:b3:6d:70:0a:55:
                    76:a3:a7:b3:66:fc:61:bc:7c:2c:90:45:6a:91:d6:
                    bf:55:75:18:85:26:00:f5:0c:cd:f8:e4:7a:ed:ad:
                    55:af:ad:1c:0e:ee:79:58:7d:9a:26:a5:dc:27:80:
                    18:84:51:fa:8f:7a:7b:06:6a:81:bc:78:5d:d6:e6:
                    9d:d6:54:cf:e7:9f:b2:d7:19:b7:d2:bb:9f:36:96:
                    70:dd:1d:be:a6:00:62:39:69:d0:ae:12:58:ad:aa:
                    bd:be:d2:10:22:8a:c8:e6:70:8b:03:9c:2f:1a:72:
                    a8:d9:17:47:56:62:c1:5e:b0:67:b2:88:8d:65:87:
                    c1:2d:60:ea:d2:05:27:39:8d:9e:25:f5:93:d5:07:
                    19:f1:8a:f3:b8:73:34:4d:d4:20:72:86:24:85:79:
                    58:dc:72:c1:3d:47:53:df:86:05:44:4a:28:c5:91:
                    be:af:14:bd:b8:98:87:87:d2:60:35:5c:6b:56:0f:
                    94:9a:12:c5:8a:ce:1f:0e:9d:17:1f:22:f2:45:bc:
                    ed:bb:dc:f0:79:f6:ac:45:22:ba:84:30:2b:59:15:
                    98:cc:de:dc:ed:5a:c7:76:ef:3d:3a:01:9e:c8:9a:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:65:73:E4:07:E8:09:8C:14:BC:B4:32:24:15:2A:DB:EA:B1:39:85
            X509v3 Authority Key Identifier:
                keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:f6:e8:35:38:3f:4c:33:50:db:e8:d2:b1:97:f4:31:9a:
         83:ac:06:c6:15:dd:49:26:1f:bc:f6:5e:5e:25:db:fe:5e:2e:
         26:ef:87:60:77:ce:4a:64:96:1c:12:4b:6d:d5:21:93:78:f2:
         ce:e7:45:5a:79:00:52:c8:1b:68:36:a7:dd:d3:e9:88:2b:b3:
         07:ba:8a:a8:d0:f9:ac:a3:5d:3c:bf:fb:b5:3f:70:81:8d:16:
         12:cb:03:39:03:06:c2:57:57:43:51:f5:3f:0a:9d:91:df:98:
         49:ce:18:2d:69:43:6e:7a:e9:83:c5:66:2d:d6:02:95:bc:9d:
         2b:95:fe:b5:d4:aa:4f:c0:2b:45:73:b2:c6:6f:de:07:13:6a:
         03:9d:ae:3a:61:c3:c2:b0:36:bb:c8:ad:6e:c0:12:bf:5f:83:
         2b:9e:ae:2b:dc:52:33:0f:55:79:cb:9c:93:70:52:92:c2:5f:
         a7:8f:9c:72:bf:de:8c:f7:29:b2:b0:45:d3:26:1d:b0:7d:31:
         44:09:72:f8:60:2a:2d:a7:68:9d:8f:a1:29:8b:dd:66:46:84:
         22:54:af:98:2b:c4:2c:1a:50:2c:c4:5e:fe:a3:2f:6e:6e:fe:
         aa:f6:ce:4c:9d:22:0d:57:af:89:d9:7b:a0:4a:b9:91:b0:5f:
         05:e7:0e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERH0uYY6SdbrlTZd27Hl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux
YjBmM2YwHhcNMjUwNDE3MTUwMTAxWhcNMjUwNDE4MTUwMTAxWjAzMTEwLwYDVQQD
EyhkYjY1NzNlNDA3ZTgwOThjMTRiY2I0MzIyNDE1MmFkYmVhYjEzOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Ov95Rs6o9v6nfjATFR42ixk1+q
+fnVs21wClV2o6ezZvxhvHwskEVqkda/VXUYhSYA9QzN+OR67a1Vr60cDu55WH2a
JqXcJ4AYhFH6j3p7BmqBvHhd1uad1lTP55+y1xm30rufNpZw3R2+pgBiOWnQrhJY
raq9vtIQIorI5nCLA5wvGnKo2RdHVmLBXrBnsoiNZYfBLWDq0gUnOY2eJfWT1QcZ
8YrzuHM0TdQgcoYkhXlY3HLBPUdT34YFREooxZG+rxS9uJiHh9JgNVxrVg+UmhLF
is4fDp0XHyLyRbztu9zwefasRSK6hDArWRWYzN7c7VrHdu89OgGeyJoKYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtlc+QH6AmMFLy0MiQVKtvqsTmFMB8GA1UdIwQY
MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt
ZGY1NzJmZTk2NzJhLzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh
LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ326DU4
P0wzUNvo0rGX9DGag6wGxhXdSSYfvPZeXiXb/l4uJu+HYHfOSmSWHBJLbdUhk3jy
zudFWnkAUsgbaDan3dPpiCuzB7qKqND5rKNdPL/7tT9wgY0WEssDOQMGwldXQ1H1
Pwqdkd+YSc4YLWlDbnrpg8VmLdYClbydK5X+tdSqT8ArRXOyxm/eBxNqA52uOmHD
wrA2u8itbsASv1+DK56uK9xSMw9Vecuck3BSksJfp4+ccr/ejPcpsrBF0yYdsH0x
RAly+GAqLadonY+hKYvdZkaEIlSvmCvELBpQLMRe/qMvbm7+qvbOTJ0iDVevidl7
oEq5kbBfBecO8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:29 2025 by rpki-client