Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File:                     RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier:          jPLl3pl2aTpM2lGqISB3o//RNo1JI01M50NK+A1SBlU=
Subject key identifier:   A5:4A:91:AC:9C:C4:B3:ED:33:63:83:66:FA:0D:38:2A:1B:28:F0:31
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer:       /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial:       019674C26AC2CE78E88F322AFDF776E4AC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number:          1516
Signing time:             Sun 27 Apr 2025 01:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:20 +0000
Files and hashes:         1: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: FYJyXtoGi457QDiOf1HmAjA7JUi32Y5OUUI98kKsJnw=)
                          2: uD_ngmtNEJDgxKTmDs0dfRFETyw.roa (hash: 4vDT31Aj0L6dgxcGHMciEeqVCA7CQgG4yXo6DYN6amk=)
                          3: yu9wHeNN9TadONpdFJDPVyyoWGY.roa (hash: PEOTovTwm3OBSyT0paVn7ex6UZ0Hs/vcgcpTRm80FKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:6a:c2:ce:78:e8:8f:32:2a:fd:f7:76:e4:ac:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
        Validity
            Not Before: Apr 27 01:00:20 2025 GMT
            Not After : Apr 28 01:00:20 2025 GMT
        Subject: CN=a54a91ac9cc4b3ed33638366fa0d382a1b28f031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:82:4b:44:8d:d6:c3:9e:67:e8:20:ac:00:
                    80:dd:84:9c:12:d0:86:9f:43:31:82:09:e0:28:43:
                    40:0a:53:21:35:4e:a7:0f:36:e4:0f:99:38:50:b3:
                    34:9c:f0:9c:a5:5a:89:9c:b8:4e:f3:4e:85:d0:db:
                    2b:b1:b2:17:07:fb:6e:28:b7:eb:28:85:47:fc:e3:
                    a9:b6:d8:8a:d5:ef:da:02:c0:01:4c:d8:ba:ca:3e:
                    b9:fa:08:21:dd:bd:f2:fa:46:5d:d5:5e:0a:42:fd:
                    b5:4d:5d:c7:7b:4f:e7:b8:46:8e:09:e4:ed:c6:b9:
                    16:a3:56:65:6e:db:37:20:67:27:fc:1b:a9:f9:a2:
                    37:eb:3e:c4:20:9b:87:52:c0:48:0f:d8:35:37:30:
                    a5:e7:69:32:c7:09:26:c9:22:56:5b:73:1f:7c:8e:
                    2a:b5:4b:3d:bf:3b:9a:2c:47:7c:d5:b7:42:43:be:
                    b6:f8:21:1a:3d:d3:48:e1:38:41:a0:c2:bc:96:a1:
                    96:1d:8c:a7:70:5c:56:6e:e5:e1:a1:0f:7b:d6:82:
                    24:bd:39:64:fa:b4:d1:ec:09:66:b8:ca:1b:2c:16:
                    97:40:3b:18:36:bd:03:fc:4c:ec:3d:d8:a9:96:bc:
                    14:bd:4a:2a:ac:69:dc:4d:c1:d2:e8:65:85:46:29:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:91:AC:9C:C4:B3:ED:33:63:83:66:FA:0D:38:2A:1B:28:F0:31
            X509v3 Authority Key Identifier:
                keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:56:cc:e4:50:7a:5f:91:91:d5:5c:93:ef:8d:bd:ea:fa:b0:
         e1:bd:2d:4a:7b:b9:a6:1a:b0:90:8e:2a:b9:cd:f1:48:0e:42:
         0c:f3:55:72:0b:84:f5:04:9d:70:12:07:e6:12:7f:85:66:29:
         ca:4e:a1:c8:7a:e3:99:68:b5:8a:93:d0:16:9c:c6:cc:24:30:
         fc:00:8c:c6:2c:20:4e:1d:4a:5c:7c:43:06:1e:ce:4b:6f:9e:
         f1:c3:c7:9e:d7:95:ae:7f:e3:a8:2c:56:76:3d:82:f3:95:88:
         6e:93:10:4a:9e:bd:96:62:62:7b:1b:76:bb:a9:7f:4e:bc:9e:
         a1:44:eb:b2:85:b6:41:6f:eb:ee:f7:2b:cf:e8:a4:04:34:bb:
         88:7b:b8:f0:5c:90:f3:87:f8:bd:21:f9:78:f7:03:2a:ba:75:
         8b:f5:15:67:e7:26:99:a6:f8:ba:47:73:cd:ad:6e:34:29:af:
         63:68:56:9b:1f:4f:fe:8f:bc:5f:20:c9:c7:49:f8:33:47:a0:
         70:49:36:f2:68:48:47:dd:9a:ee:1f:5b:3d:60:1e:8e:4b:4c:
         6d:33:de:49:90:ed:3e:39:dd:45:45:19:96:b7:6f:c1:96:fd:
         a4:df:c3:74:48:19:7f:8d:1f:08:93:e7:1b:4c:f7:ee:f4:00:
         06:0a:fd:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wmrCznjojzIq/fd25KwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjUwNDI3MDEwMDIwWhcNMjUwNDI4MDEwMDIwWjAzMTEwLwYDVQQD
EyhhNTRhOTFhYzljYzRiM2VkMzM2MzgzNjZmYTBkMzgyYTFiMjhmMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9mCS0SN1sOeZ+ggrACA3YScEtCG
n0MxggngKENAClMhNU6nDzbkD5k4ULM0nPCcpVqJnLhO806F0NsrsbIXB/tuKLfr
KIVH/OOpttiK1e/aAsABTNi6yj65+ggh3b3y+kZd1V4KQv21TV3He0/nuEaOCeTt
xrkWo1Zlbts3IGcn/Bup+aI36z7EIJuHUsBID9g1NzCl52kyxwkmySJWW3MffI4q
tUs9vzuaLEd81bdCQ762+CEaPdNI4ThBoMK8lqGWHYyncFxWbuXhoQ971oIkvTlk
+rTR7AlmuMobLBaXQDsYNr0D/EzsPdiplrwUvUoqrGncTcHS6GWFRilKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVKkaycxLPtM2ODZvoNOCobKPAxMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVbM5FB6
X5GR1VyT74296vqw4b0tSnu5phqwkI4quc3xSA5CDPNVcguE9QSdcBIH5hJ/hWYp
yk6hyHrjmWi1ipPQFpzGzCQw/ACMxiwgTh1KXHxDBh7OS2+e8cPHnteVrn/jqCxW
dj2C85WIbpMQSp69lmJiext2u6l/TryeoUTrsoW2QW/r7vcrz+ikBDS7iHu48FyQ
84f4vSH5ePcDKrp1i/UVZ+cmmab4ukdzza1uNCmvY2hWmx9P/o+8XyDJx0n4M0eg
cEk28mhIR92a7h9bPWAejktMbTPeSZDtPjndRUUZlrdvwZb9pN/DdEgZf40fCJPn
G0z37vQABgr96Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:02 2025 by rpki-client