Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          fUxyNjNsdAo6bnExcACxZ5jmvg5Yo0UH27kT55oiNJU=
Subject key identifier:   DF:53:9D:62:0C:05:C4:7D:AE:5F:AF:21:17:EA:A6:68:66:09:91:D8
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       019683FFD8995EA5CFBA886C7044ABE8E489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          094D
Signing time:             Wed 30 Apr 2025 00:01:44 +0000
Manifest this update:     Wed 30 Apr 2025 00:01:44 +0000
Manifest next update:     Thu 01 May 2025 00:01:44 +0000
Files and hashes:         1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: ynxncCmnxIiGPzPAj7+8GBPZ6PdzMpYa5FHb1sfkfm0=)
                          2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:ff:d8:99:5e:a5:cf:ba:88:6c:70:44:ab:e8:e4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Apr 30 00:01:44 2025 GMT
            Not After : May  1 00:01:44 2025 GMT
        Subject: CN=df539d620c05c47dae5faf2117eaa668660991d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:83:df:c5:39:a0:dc:2a:d8:ea:0f:eb:91:
                    0a:66:67:cc:4d:ab:1b:a9:d3:46:67:10:bc:f8:90:
                    50:f6:12:e8:66:6b:60:52:ca:ae:65:0e:b7:60:f9:
                    b9:8f:24:1f:76:86:cf:44:59:96:7a:59:c8:e6:31:
                    5a:5f:93:5a:a9:0b:01:87:a9:a7:49:58:ba:f7:b5:
                    ef:5a:8c:38:ba:4e:31:f2:a4:49:29:9c:46:da:1d:
                    bc:ed:92:e9:87:54:b0:37:f4:a4:74:b6:32:08:ff:
                    c3:a7:ad:c3:6d:39:f8:ef:6e:a7:0d:bd:5d:02:31:
                    17:aa:19:3b:35:53:7d:3f:33:74:d7:96:f7:45:92:
                    cd:55:3e:a0:01:7d:ab:25:1a:3a:94:99:97:bb:51:
                    e1:f0:d5:37:54:ba:fc:36:3c:19:1c:90:7b:85:95:
                    b2:26:f4:97:d5:62:df:06:67:d4:fc:bd:f1:d4:1a:
                    a6:84:ee:a7:d3:46:ec:89:66:5c:05:08:a4:b0:b6:
                    6e:a5:a2:be:2e:e1:c8:0a:51:b8:ed:ea:c8:53:5b:
                    f7:a1:71:89:63:d7:bf:0d:c0:40:dd:14:c8:f4:55:
                    b0:98:69:7a:e3:67:71:ee:64:c9:60:36:69:f4:42:
                    d6:bc:85:e6:0b:cc:ba:01:1b:35:e7:88:27:64:53:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:9D:62:0C:05:C4:7D:AE:5F:AF:21:17:EA:A6:68:66:09:91:D8
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:bd:ae:2d:04:51:7d:b5:03:30:f3:e4:b4:41:e2:35:60:
         ba:8a:13:44:d7:58:2a:69:f5:40:c9:a2:d5:ac:2f:a8:de:5d:
         ed:d5:37:87:b8:18:b9:34:1f:de:e7:5b:81:f6:e6:36:4b:f5:
         5a:1c:6d:b5:e9:c8:3e:e6:af:bc:5f:a0:e4:ce:11:b4:90:bc:
         68:b6:01:19:7a:3d:87:42:88:01:45:bf:00:0a:1f:d5:32:b9:
         d5:2d:75:34:27:b3:93:38:06:2d:9e:46:6a:7c:21:ca:f1:ff:
         cb:07:8c:9e:f9:c4:39:5f:53:3a:e5:e8:b4:2a:22:94:e1:fd:
         b2:39:39:7f:88:69:a0:4b:31:51:27:d2:b7:a0:db:02:91:e4:
         5a:b1:e9:05:eb:14:5d:df:51:e6:d3:dc:65:0d:ce:d8:eb:f1:
         c7:73:da:0a:8c:e3:89:d8:e5:d9:90:a9:6e:d6:64:b3:15:04:
         3c:5c:34:9b:53:a2:6c:57:91:13:2f:23:44:ae:48:19:63:9c:
         fc:3e:f9:8b:08:30:a6:3a:0e:a2:48:fe:9b:96:3c:2b:5f:4e:
         11:68:0e:0b:c0:7b:12:f3:d0:08:ff:f5:fa:ca:26:9e:48:e1:
         17:6d:3d:81:bf:51:fa:0c:1c:bf:5b:96:ba:fa:84:9a:60:5f:
         06:44:42:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/9iZXqXPuohscESr6OSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk
NDQ3NTQwHhcNMjUwNDMwMDAwMTQ0WhcNMjUwNTAxMDAwMTQ0WjAzMTEwLwYDVQQD
EyhkZjUzOWQ2MjBjMDVjNDdkYWU1ZmFmMjExN2VhYTY2ODY2MDk5MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtCD38U5oNwq2OoP65EKZmfMTasb
qdNGZxC8+JBQ9hLoZmtgUsquZQ63YPm5jyQfdobPRFmWelnI5jFaX5NaqQsBh6mn
SVi697XvWow4uk4x8qRJKZxG2h287ZLph1SwN/SkdLYyCP/Dp63DbTn4726nDb1d
AjEXqhk7NVN9PzN015b3RZLNVT6gAX2rJRo6lJmXu1Hh8NU3VLr8NjwZHJB7hZWy
JvSX1WLfBmfU/L3x1BqmhO6n00bsiWZcBQiksLZupaK+LuHIClG47erIU1v3oXGJ
Y9e/DcBA3RTI9FWwmGl642dx7mTJYDZp9ELWvIXmC8y6ARs154gnZFMA0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9TnWIMBcR9rl+vIRfqpmhmCZHYMB8GA1UdIwQY
MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt
NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3
LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsW9ri0E
UX21AzDz5LRB4jVguooTRNdYKmn1QMmi1awvqN5d7dU3h7gYuTQf3udbgfbmNkv1
WhxttenIPuavvF+g5M4RtJC8aLYBGXo9h0KIAUW/AAof1TK51S11NCezkzgGLZ5G
anwhyvH/yweMnvnEOV9TOuXotCoilOH9sjk5f4hpoEsxUSfSt6DbApHkWrHpBesU
Xd9R5tPcZQ3O2Ovxx3PaCozjidjl2ZCpbtZksxUEPFw0m1OibFeREy8jRK5IGWOc
/D75iwgwpjoOokj+m5Y8K19OEWgOC8B7EvPQCP/1+somnkjhF209gb9R+gwcv1uW
uvqEmmBfBkRCuA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:00:13 2025 by rpki-client