Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File:                     haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier:          Lzcr/U3ZSEtRDkRrrFsTokirWGgAb0peIpUNHgczwEQ=
Subject key identifier:   F3:A6:3E:95:0C:12:5D:B7:F7:28:D5:57:D6:DC:5E:07:D6:BF:80:1B
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer:       /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial:       01964A467D3DA87B64E2A27F47A09FE32852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number:          047B
Signing time:             Fri 18 Apr 2025 19:00:55 +0000
Manifest this update:     Fri 18 Apr 2025 19:00:55 +0000
Manifest next update:     Sat 19 Apr 2025 19:00:55 +0000
Files and hashes:         1: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (hash: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=)
                          2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: BVjxKB6Y8YAQ9FDX72g04XZrlwHF/NBMfLu9/PZ2EuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:7d:3d:a8:7b:64:e2:a2:7f:47:a0:9f:e3:28:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
        Validity
            Not Before: Apr 18 19:00:55 2025 GMT
            Not After : Apr 19 19:00:55 2025 GMT
        Subject: CN=f3a63e950c125db7f728d557d6dc5e07d6bf801b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:a3:7b:10:a3:2b:ab:97:11:87:e8:b1:68:
                    3c:1c:e4:85:7f:5c:54:eb:fd:70:42:dc:63:f5:a1:
                    b3:d8:30:37:1b:e0:70:d4:07:79:0a:24:5b:bd:e7:
                    f6:38:7a:1c:d4:69:66:6f:8e:34:04:18:c1:04:06:
                    19:7f:5a:8c:f7:5c:4b:c8:65:29:48:50:6b:62:84:
                    e9:2c:46:3d:fb:87:4b:cd:e5:23:68:6b:1f:90:30:
                    ed:54:38:6e:c0:12:c3:96:af:91:c0:4c:9b:be:b5:
                    ea:0c:57:41:f5:12:4a:21:d2:bc:ad:c5:47:d7:20:
                    8a:fd:19:2a:61:89:73:f0:ad:87:99:74:4a:96:ac:
                    51:86:84:c6:95:b0:21:1e:9c:0f:ec:07:76:c5:74:
                    4d:00:4a:c4:1f:74:1d:00:dc:27:9b:72:3e:66:be:
                    0b:06:3a:96:97:e7:83:47:89:88:e4:95:cc:06:29:
                    bd:47:ad:fc:2e:66:dd:1d:b7:b6:31:0b:62:7d:27:
                    4b:7a:6f:cc:f8:c0:f3:a6:6d:34:e7:a3:a7:47:d6:
                    7e:89:4c:74:99:8c:02:8c:c4:a2:ed:74:6e:7b:58:
                    cb:b7:bb:7d:86:3e:b1:fb:f9:b8:3b:6f:8d:bb:c2:
                    43:3c:ac:c4:32:92:2c:42:78:09:ff:a4:d7:a3:a7:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:3E:95:0C:12:5D:B7:F7:28:D5:57:D6:DC:5E:07:D6:BF:80:1B
            X509v3 Authority Key Identifier:
                keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2b:23:d4:db:d1:e8:86:63:8a:84:a7:51:96:1c:7d:da:7a:
         80:3a:1f:53:e7:ea:4b:13:77:dc:e4:52:c1:7c:0a:08:25:5f:
         38:b4:64:6d:ea:17:8c:3c:5a:99:f3:5c:ed:f8:70:6b:7c:30:
         74:d5:b3:76:8a:ee:17:6d:ad:7e:03:6b:45:fa:a5:f8:8a:98:
         0e:7e:68:ef:a9:10:9c:67:b4:ec:5f:8c:9c:9f:e3:60:b6:be:
         b6:54:cf:2b:87:70:da:57:fa:3d:8f:26:ef:d6:c7:76:bb:46:
         c6:e7:a2:69:aa:fe:33:2c:91:4d:39:81:b0:9f:eb:b1:a0:4c:
         45:ea:c4:8d:3c:3d:02:a3:73:b3:9e:83:43:1c:49:fa:24:fa:
         8e:97:29:e2:07:16:06:ea:0d:f4:6b:17:bf:f1:d0:cf:cb:ae:
         7d:98:91:71:68:5a:7d:6f:ee:53:6a:18:3d:47:8b:cb:20:12:
         ae:ba:ff:f6:66:85:13:0b:53:a9:0f:11:40:6f:5d:7e:f4:3b:
         1d:1c:29:c1:83:f1:c7:36:5c:82:f1:bc:7d:05:d0:a8:a5:fc:
         5f:48:76:eb:87:04:1e:f8:9e:65:fe:65:67:68:07:fd:f4:a2:
         c5:3b:a9:b6:3f:8f:d5:c5:8d:21:14:2a:e4:08:8f:82:b8:b2:
         6c:7f:a5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKRn09qHtk4qJ/R6Cf4yhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWNmYjlhZDNhNTBjZTE1MzMxY2ZmNGViYTg4YmNjMDdi
N2EyODIwHhcNMjUwNDE4MTkwMDU1WhcNMjUwNDE5MTkwMDU1WjAzMTEwLwYDVQQD
EyhmM2E2M2U5NTBjMTI1ZGI3ZjcyOGQ1NTdkNmRjNWUwN2Q2YmY4MDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFWjexCjK6uXEYfosWg8HOSFf1xU
6/1wQtxj9aGz2DA3G+Bw1Ad5CiRbvef2OHoc1Glmb440BBjBBAYZf1qM91xLyGUp
SFBrYoTpLEY9+4dLzeUjaGsfkDDtVDhuwBLDlq+RwEybvrXqDFdB9RJKIdK8rcVH
1yCK/RkqYYlz8K2HmXRKlqxRhoTGlbAhHpwP7Ad2xXRNAErEH3QdANwnm3I+Zr4L
BjqWl+eDR4mI5JXMBim9R638LmbdHbe2MQtifSdLem/M+MDzpm0056OnR9Z+iUx0
mYwCjMSi7XRue1jLt7t9hj6x+/m4O2+Nu8JDPKzEMpIsQngJ/6TXo6dMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOmPpUMEl239yjVV9bcXgfWv4AbMB8GA1UdIwQY
MBaAFIWs+5rTpQzhUzHP9Ouoi8wHt6KCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgt
NmQ3N2YwNjVhMmMzLzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgtNmQ3N2YwNjVhMmMz
LzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfysj1NvR
6IZjioSnUZYcfdp6gDofU+fqSxN33ORSwXwKCCVfOLRkbeoXjDxamfNc7fhwa3ww
dNWzdoruF22tfgNrRfql+IqYDn5o76kQnGe07F+MnJ/jYLa+tlTPK4dw2lf6PY8m
79bHdrtGxueiaar+MyyRTTmBsJ/rsaBMRerEjTw9AqNzs56DQxxJ+iT6jpcp4gcW
BuoN9GsXv/HQz8uufZiRcWhafW/uU2oYPUeLyyASrrr/9maFEwtTqQ8RQG9dfvQ7
HRwpwYPxxzZcgvG8fQXQqKX8X0h264cEHvieZf5lZ2gH/fSixTuptj+P1cWNIRQq
5AiPgriybH+lzQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:13:20 2025 by rpki-client