Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          JCdPqEmmcfOFluUiby9Ujg7NbD6sPsYv7YgW8saiDN0=
Subject key identifier:   69:F0:C2:29:78:ED:AF:3A:59:55:53:D4:AA:7D:B5:80:53:02:36:C1
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       019640678869740F7BA88C52945E71C1E4C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          1409
Signing time:             Wed 16 Apr 2025 21:00:48 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:48 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:48 +0000
Files and hashes:         1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: 7AvjFH5o7UENI+xC+PfLHzL6J6SDSrBG/yqIHJ+w6Qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:88:69:74:0f:7b:a8:8c:52:94:5e:71:c1:e4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: Apr 16 21:00:48 2025 GMT
            Not After : Apr 17 21:00:48 2025 GMT
        Subject: CN=69f0c22978edaf3a595553d4aa7db580530236c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:3f:e9:2f:fe:56:d7:6f:03:c3:82:a5:fb:
                    13:32:cc:3f:ad:e9:f7:dc:ac:bf:08:cc:12:5e:3b:
                    48:9c:21:82:05:d1:d1:37:a5:36:bb:e2:57:c1:ce:
                    c1:d3:6a:1d:2e:57:28:2c:1e:76:b8:12:04:5c:10:
                    59:d9:fb:89:39:e2:19:79:a4:e1:5d:0a:08:4b:60:
                    2b:f6:cb:82:6e:73:a5:4d:db:81:69:9e:d3:50:78:
                    32:5b:de:40:3f:e9:49:13:49:90:7b:68:9a:87:0b:
                    3a:02:e8:0d:9b:eb:91:fc:81:a4:cd:e1:73:e2:00:
                    23:1b:88:7c:0a:0b:74:d6:a5:5c:0a:19:58:c9:3a:
                    76:1f:21:d2:cd:4e:d2:b9:99:16:08:93:d4:16:5b:
                    c3:9b:de:14:c1:10:0e:c1:14:97:0f:64:b4:42:d1:
                    84:fd:74:77:84:6e:94:fc:79:4f:e7:c4:e6:ef:94:
                    0b:f0:1a:83:37:9a:53:4a:a8:e5:3c:2c:07:35:2f:
                    5a:77:df:be:c8:91:22:00:45:6d:7a:a7:52:2e:69:
                    01:90:a5:29:21:8f:f3:5f:27:6d:0b:ba:4c:d0:ea:
                    db:f6:0e:72:d2:1c:c7:0c:9d:d0:27:67:60:39:63:
                    14:78:ab:fe:18:f5:95:dc:68:18:9d:5a:b7:8a:cf:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F0:C2:29:78:ED:AF:3A:59:55:53:D4:AA:7D:B5:80:53:02:36:C1
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:69:fb:ba:2a:6b:62:a2:f2:fb:53:71:fa:49:b7:a4:ad:d0:
         af:be:a9:bb:25:9f:b5:13:5a:9b:03:f7:26:a7:5a:74:e0:b4:
         23:04:c9:38:fa:95:c8:5c:41:bf:a5:dc:0f:70:6f:42:ac:71:
         af:cf:93:c4:ae:f3:a1:4e:7c:18:74:ba:1d:8d:2c:f8:26:18:
         30:6b:8b:27:99:e1:27:c2:01:a1:d6:fc:e5:e7:32:01:46:a7:
         a8:a6:22:9a:0a:2a:15:45:f5:d5:3b:8a:ea:33:ba:eb:78:76:
         97:8e:8c:6f:bd:48:1f:25:46:d9:26:61:5c:0f:4a:d0:d4:36:
         41:88:63:d5:36:39:d8:cd:4e:c9:35:67:0e:36:a3:39:5b:33:
         21:39:5d:c1:0e:b0:ac:dd:1e:70:64:c2:36:58:e2:9a:a6:7a:
         2c:5a:5f:2b:25:b6:24:0d:39:fd:bf:41:15:28:16:cd:6d:5c:
         c0:bf:68:67:ed:ac:3c:b1:db:0e:58:12:b8:0f:c4:a6:4a:28:
         63:56:85:62:b6:9d:b4:25:90:2e:15:96:93:2e:b7:c9:60:4a:
         56:49:8f:70:7c:26:f5:9c:1b:10:16:75:f2:7b:7b:0a:0f:df:
         a5:04:0b:68:75:bc:c4:75:76:00:b9:e0:c1:d9:57:af:13:5e:
         41:4d:87:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAZ4hpdA97qIxSlF5xweTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWVmMmFiM2YyZTlkOWFjMDFmNzI3ZjczMGFmN2RmMWQw
NDE4MGYwHhcNMjUwNDE2MjEwMDQ4WhcNMjUwNDE3MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg2OWYwYzIyOTc4ZWRhZjNhNTk1NTUzZDRhYTdkYjU4MDUzMDIzNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq18/6S/+VtdvA8OCpfsTMsw/ren3
3Ky/CMwSXjtInCGCBdHRN6U2u+JXwc7B02odLlcoLB52uBIEXBBZ2fuJOeIZeaTh
XQoIS2Ar9suCbnOlTduBaZ7TUHgyW95AP+lJE0mQe2iahws6AugNm+uR/IGkzeFz
4gAjG4h8Cgt01qVcChlYyTp2HyHSzU7SuZkWCJPUFlvDm94UwRAOwRSXD2S0QtGE
/XR3hG6U/HlP58Tm75QL8BqDN5pTSqjlPCwHNS9ad9++yJEiAEVteqdSLmkBkKUp
IY/zXydtC7pM0Orb9g5y0hzHDJ3QJ2dgOWMUeKv+GPWV3GgYnVq3is/8AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnwwil47a86WVVT1Kp9tYBTAjbBMB8GA1UdIwQY
MBaAFMeu8qs/Lp2awB9yf3MK998dBBgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAt
OTJlZDJhMDAwZjFmLzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAtOTJlZDJhMDAwZjFm
LzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2n7uipr
YqLy+1Nx+km3pK3Qr76puyWftRNamwP3JqdadOC0IwTJOPqVyFxBv6XcD3BvQqxx
r8+TxK7zoU58GHS6HY0s+CYYMGuLJ5nhJ8IBodb85ecyAUanqKYimgoqFUX11TuK
6jO663h2l46Mb71IHyVG2SZhXA9K0NQ2QYhj1TY52M1OyTVnDjajOVszITldwQ6w
rN0ecGTCNljimqZ6LFpfKyW2JA05/b9BFSgWzW1cwL9oZ+2sPLHbDlgSuA/Epkoo
Y1aFYradtCWQLhWWky63yWBKVkmPcHwm9ZwbEBZ18nt7Cg/fpQQLaHW8xHV2ALng
wdlXrxNeQU2Hjg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:13:16 2025 by rpki-client