Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          n3mf5UMHazbuDhErIZN8kZqHc47clKbCbqgMg8CTTQI=
Subject key identifier:   E0:D1:D5:7F:DD:75:BF:B7:56:10:6F:99:DA:36:BC:A6:6B:7F:D4:66
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       019650B6933B54614C133D8D62A301B87879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0A56
Signing time:             Sun 20 Apr 2025 01:01:04 +0000
Manifest this update:     Sun 20 Apr 2025 01:01:04 +0000
Manifest next update:     Mon 21 Apr 2025 01:01:04 +0000
Files and hashes:         1: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: ccW0sdj1EqhIywzi5n9ZA4G24WKpWWmg/RRpmza2i6o=)
                          2: zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa (hash: us40hEG1NcVWjJDpzrMVHHjC6ox4uAMOwbjwuL6+2HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:93:3b:54:61:4c:13:3d:8d:62:a3:01:b8:78:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: Apr 20 01:01:04 2025 GMT
            Not After : Apr 21 01:01:04 2025 GMT
        Subject: CN=e0d1d57fdd75bfb756106f99da36bca66b7fd466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:18:ca:72:80:16:cb:15:91:3e:1e:06:81:
                    33:bd:78:0c:32:b5:79:be:f6:21:96:62:a8:b8:a4:
                    9e:b7:26:72:fd:e7:47:38:2c:6a:ec:45:19:e9:64:
                    84:d0:6f:20:d2:fe:b1:fb:35:52:22:fc:d6:65:1f:
                    e6:a9:91:fd:33:a6:fa:06:42:9d:17:7a:14:0b:71:
                    83:2d:65:da:bd:2f:b9:5d:df:cc:b2:25:15:d8:94:
                    cf:1c:dd:84:0b:c1:dd:95:4c:bc:56:94:59:dd:be:
                    75:d8:ed:ec:7f:73:8f:c9:22:31:f6:a6:0c:98:01:
                    1f:3c:35:bf:d6:5d:78:00:8f:00:8f:db:e2:86:ed:
                    09:18:1b:70:10:73:b8:f4:14:a2:9f:01:d9:65:aa:
                    34:9f:c3:38:00:5d:b3:89:d8:97:1c:26:b2:22:3b:
                    53:43:30:29:90:b0:83:6f:d7:2a:4d:73:20:b5:eb:
                    f6:2c:89:6f:8f:f4:e3:47:5e:e2:bc:52:1f:53:b9:
                    79:ed:7f:63:60:ad:6e:cb:52:f2:d0:d3:7c:62:02:
                    5a:84:68:d9:87:83:62:0c:6b:d5:aa:22:2f:d1:ad:
                    46:ae:75:4b:be:cc:fc:51:83:bf:24:a1:ca:1b:70:
                    a9:e1:9b:93:0f:fa:71:7e:6e:b3:67:3b:c4:35:8e:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D1:D5:7F:DD:75:BF:B7:56:10:6F:99:DA:36:BC:A6:6B:7F:D4:66
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:de:69:c8:d1:0a:c6:66:03:6d:7e:e6:b9:dc:fe:6c:42:d8:
         ba:5f:a0:78:13:dc:1a:ee:f8:4e:44:1f:55:c2:08:a7:99:4f:
         b0:1c:a3:e5:31:ed:fb:c7:17:72:52:6b:74:c6:f4:87:d7:ba:
         15:0e:56:89:89:9e:0e:9b:cf:8e:fe:8a:69:75:fe:ec:ba:e4:
         f8:4c:4d:a6:a4:03:fb:ef:3e:0c:35:ff:fc:54:b3:e1:c8:df:
         85:00:b0:02:ae:c6:42:22:0d:3f:82:0b:c5:fc:e7:40:5b:90:
         4c:1f:ae:68:57:b9:e2:cb:d7:0f:04:1c:f2:4b:ec:d3:38:36:
         b2:17:dc:08:79:f8:8a:e5:fb:d3:b6:ab:48:81:cc:de:40:70:
         0c:bf:3f:34:cd:1c:db:c5:d1:b9:71:ba:63:cf:43:2d:d2:83:
         26:78:51:a7:a5:0c:74:40:90:ec:e6:70:8a:ac:c9:58:15:07:
         5d:a4:13:9c:2d:63:f5:d7:c7:2a:c2:94:36:ca:8e:e1:d3:77:
         ff:2b:2c:ef:c6:16:9b:3f:33:ec:0b:fc:e3:45:2d:15:92:a7:
         d7:4e:d1:a4:80:d6:69:e4:ca:ea:3a:8d:d7:74:fe:59:98:fc:
         71:ed:5e:e6:8a:f6:f8:a5:64:43:dd:b3:dd:21:06:c6:0f:3d:
         56:50:7a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtpM7VGFMEz2NYqMBuHh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JkNGMyMzA2MmQ2OTUzN2ZiMmU4YThhY2NiZmIwMjdm
MmI1MjUwHhcNMjUwNDIwMDEwMTA0WhcNMjUwNDIxMDEwMTA0WjAzMTEwLwYDVQQD
EyhlMGQxZDU3ZmRkNzViZmI3NTYxMDZmOTlkYTM2YmNhNjZiN2ZkNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiAYynKAFssVkT4eBoEzvXgMMrV5
vvYhlmKouKSetyZy/edHOCxq7EUZ6WSE0G8g0v6x+zVSIvzWZR/mqZH9M6b6BkKd
F3oUC3GDLWXavS+5Xd/MsiUV2JTPHN2EC8HdlUy8VpRZ3b512O3sf3OPySIx9qYM
mAEfPDW/1l14AI8Aj9vihu0JGBtwEHO49BSinwHZZao0n8M4AF2zidiXHCayIjtT
QzApkLCDb9cqTXMgtev2LIlvj/TjR17ivFIfU7l57X9jYK1uy1Ly0NN8YgJahGjZ
h4NiDGvVqiIv0a1GrnVLvsz8UYO/JKHKG3Cp4ZuTD/pxfm6zZzvENY623QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODR1X/ddb+3VhBvmdo2vKZrf9RmMB8GA1UdIwQY
MBaAFOjL1MIwYtaVN/suiorMv7An8rUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYt
NzgyM2JjY2E1OTcwLzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYtNzgyM2JjY2E1OTcw
LzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD95pyNEK
xmYDbX7mudz+bELYul+geBPcGu74TkQfVcIIp5lPsByj5THt+8cXclJrdMb0h9e6
FQ5WiYmeDpvPjv6KaXX+7Lrk+ExNpqQD++8+DDX//FSz4cjfhQCwAq7GQiINP4IL
xfznQFuQTB+uaFe54svXDwQc8kvs0zg2shfcCHn4iuX707arSIHM3kBwDL8/NM0c
28XRuXG6Y89DLdKDJnhRp6UMdECQ7OZwiqzJWBUHXaQTnC1j9dfHKsKUNsqO4dN3
/yss78YWmz8z7Av840UtFZKn107RpIDWaeTK6jqN13T+WZj8ce1e5or2+KVkQ92z
3SEGxg89VlB67w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:51 2025 by rpki-client