Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File:                     kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier:          rXSOGRXxmf9QbCrG6xAH6A1aiK9/vAomPkHjq5nXAEM=
Subject key identifier:   44:95:7D:54:12:D5:A6:F1:DC:15:5F:AA:82:93:55:88:9B:F1:C7:A4
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer:       /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial:       01965191B9036B5F9F38CB0906A195305087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 05:00:26 +0000
Manifest this update:     Sun 20 Apr 2025 05:00:26 +0000
Manifest next update:     Mon 21 Apr 2025 05:00:26 +0000
Files and hashes:         1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: AyPVcpQWWrO/LqG92DFi2if0q/d/riCfi9kt8dFVZ58=)
                          2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:91:b9:03:6b:5f:9f:38:cb:09:06:a1:95:30:50:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
        Validity
            Not Before: Apr 20 05:00:26 2025 GMT
            Not After : Apr 21 05:00:26 2025 GMT
        Subject: CN=44957d5412d5a6f1dc155faa829355889bf1c7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:58:bd:15:c7:d5:0d:be:44:8f:fc:0f:63:
                    1c:dc:8d:60:2c:b2:d6:5c:31:78:18:75:cf:d5:95:
                    84:b2:03:d2:08:ef:87:d9:df:20:21:48:b3:1c:c6:
                    ab:be:cb:de:b1:e0:78:63:0c:2a:20:77:5c:86:85:
                    23:0c:1e:74:a6:b5:d9:a6:f5:c6:c9:9d:99:4b:54:
                    d5:1e:a9:da:31:35:1f:ac:d8:c0:6e:07:72:fe:6b:
                    0e:56:91:28:38:99:5a:d6:b5:8c:7b:34:a9:26:e4:
                    44:2a:bb:7c:14:81:b3:42:48:ba:fa:28:6a:70:38:
                    c7:4d:4d:fc:d6:3d:de:54:d7:cf:ed:e1:c2:21:2e:
                    a6:d5:f1:63:77:d7:c1:0c:ec:b6:c2:42:ad:8f:98:
                    c4:1e:4f:80:6e:69:02:d4:6e:bd:d7:43:d2:1d:de:
                    e3:4f:80:cc:bb:2e:c9:d0:de:ef:02:69:96:08:6e:
                    11:5d:c4:66:eb:02:a5:d5:f1:ac:13:99:2e:0d:5f:
                    31:84:14:f1:e8:df:05:59:a7:92:a9:7a:3d:d9:b4:
                    9f:b7:fc:2d:87:92:ce:d3:2a:b4:68:0e:3d:8f:b3:
                    09:23:93:a1:6f:8d:c3:16:0e:f6:16:5a:6d:a2:e5:
                    5e:1e:2e:75:f8:04:8b:52:1c:5b:e1:a0:80:18:64:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:7D:54:12:D5:A6:F1:DC:15:5F:AA:82:93:55:88:9B:F1:C7:A4
            X509v3 Authority Key Identifier:
                keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:a8:05:06:00:33:33:53:0a:88:fe:ae:b2:c7:6f:84:26:
         e2:b9:db:38:b1:50:d5:53:92:f2:ac:0a:28:2f:c5:82:2e:7c:
         ea:2f:c7:8f:07:ce:15:1d:09:3d:31:f9:c5:66:59:9a:75:c4:
         f6:21:ca:91:bb:87:79:df:c7:01:62:dd:3d:07:1b:5b:f3:00:
         bd:22:be:d7:a2:48:27:2e:b0:64:b6:f5:dc:8d:80:76:c9:c9:
         17:4b:0b:5c:01:b2:7c:38:75:2a:cc:62:59:d8:75:99:33:71:
         70:b8:a6:5f:46:c4:c3:d8:ff:dd:94:1f:30:c7:19:56:bf:61:
         87:51:ea:ac:c2:6a:b0:4b:98:8d:68:2e:38:f2:60:28:b7:25:
         85:cc:bc:b9:de:f7:ec:e0:8d:d0:70:23:2b:fa:63:34:93:1c:
         34:67:3e:fa:4d:b7:2b:49:8a:a7:f3:05:51:dc:70:a1:5f:d9:
         62:31:b9:a2:61:ee:ce:0e:7e:27:6b:8e:ad:ac:ad:b8:bf:e6:
         14:df:f1:b5:1f:1b:a2:a1:07:06:1a:11:b0:cc:0f:f6:d7:68:
         8c:6b:1f:ef:22:86:f9:e1:72:23:0f:6d:fd:06:6f:87:08:c9:
         db:52:6b:ea:09:b0:7e:ba:cf:57:50:cc:66:0b:d3:22:86:27:
         f3:87:1c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRkbkDa1+fOMsJBqGVMFCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMWY4NDNhYzk0NDhjYjA3NzkxOTE3YjkwMzU0MDE1ZmZl
MjNkYjcwHhcNMjUwNDIwMDUwMDI2WhcNMjUwNDIxMDUwMDI2WjAzMTEwLwYDVQQD
Eyg0NDk1N2Q1NDEyZDVhNmYxZGMxNTVmYWE4MjkzNTU4ODliZjFjN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21BYvRXH1Q2+RI/8D2Mc3I1gLLLW
XDF4GHXP1ZWEsgPSCO+H2d8gIUizHMarvsveseB4YwwqIHdchoUjDB50prXZpvXG
yZ2ZS1TVHqnaMTUfrNjAbgdy/msOVpEoOJla1rWMezSpJuREKrt8FIGzQki6+ihq
cDjHTU381j3eVNfP7eHCIS6m1fFjd9fBDOy2wkKtj5jEHk+AbmkC1G6910PSHd7j
T4DMuy7J0N7vAmmWCG4RXcRm6wKl1fGsE5kuDV8xhBTx6N8FWaeSqXo92bSft/wt
h5LO0yq0aA49j7MJI5Ohb43DFg72FlptouVeHi51+ASLUhxb4aCAGGTdvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESVfVQS1abx3BVfqoKTVYib8cekMB8GA1UdIwQY
MBaAFJAfhDrJRIywd5GRe5A1QBX/4j23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEt
YjIwNGY5ZmNhZGI2LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEtYjIwNGY5ZmNhZGI2
LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAOoBQYA
MzNTCoj+rrLHb4Qm4rnbOLFQ1VOS8qwKKC/Fgi586i/HjwfOFR0JPTH5xWZZmnXE
9iHKkbuHed/HAWLdPQcbW/MAvSK+16JIJy6wZLb13I2AdsnJF0sLXAGyfDh1Ksxi
Wdh1mTNxcLimX0bEw9j/3ZQfMMcZVr9hh1HqrMJqsEuYjWguOPJgKLclhcy8ud73
7OCN0HAjK/pjNJMcNGc++k23K0mKp/MFUdxwoV/ZYjG5omHuzg5+J2uOraytuL/m
FN/xtR8boqEHBhoRsMwP9tdojGsf7yKG+eFyIw9t/QZvhwjJ21Jr6gmwfrrPV1DM
ZgvTIoYn84ccJQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:18:59 2025 by rpki-client