Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File:                     F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier:          XXESn1F0ArUqVjduPQ/qrXWR7unv8N+Wc4hhlbr+3Os=
Subject key identifier:   4F:A1:52:79:67:2D:D5:6D:A3:69:B5:E9:B0:29:36:F8:77:5D:71:56
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer:       /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial:       01968435A6C111754EF8275B47C8E0751FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number:          0BA9
Signing time:             Wed 30 Apr 2025 01:00:30 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:30 +0000
Manifest next update:     Thu 01 May 2025 01:00:30 +0000
Files and hashes:         1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: s988xwB52OCvn6FlHRFqhceMVVUDfEdTGP1kQuCfwMs=)
                          2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:a6:c1:11:75:4e:f8:27:5b:47:c8:e0:75:1f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
        Validity
            Not Before: Apr 30 01:00:30 2025 GMT
            Not After : May  1 01:00:30 2025 GMT
        Subject: CN=4fa15279672dd56da369b5e9b02936f8775d7156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:7c:00:db:8b:3c:5a:2b:8f:78:7e:f7:a1:
                    bb:bd:5c:aa:d7:be:1d:9b:9e:f4:5d:fc:35:71:f3:
                    31:28:1c:f1:30:5b:f7:2f:b9:47:62:f3:1a:86:25:
                    31:1c:6a:62:32:b7:4d:09:d7:25:35:04:4a:be:f1:
                    d8:d1:ef:1d:a4:3d:ce:2d:11:75:d1:bd:fe:0f:62:
                    c9:ab:6d:99:3a:c9:66:fc:68:80:9f:58:8d:a3:bd:
                    21:04:64:44:aa:9e:4a:41:31:50:f7:1d:17:0e:3d:
                    8b:d2:87:de:90:1e:9f:05:ee:1f:cc:f0:1c:46:f7:
                    06:4e:45:ed:27:22:b9:48:18:04:17:49:7a:21:af:
                    df:9e:7b:db:40:e8:7a:67:fc:5e:ed:4d:34:ca:26:
                    0f:83:67:ec:a6:a2:54:e7:a1:f1:d4:2c:85:17:a5:
                    75:74:a3:84:8f:37:5d:f9:27:28:0b:0d:a6:56:21:
                    08:17:cd:da:d6:0c:90:5e:a1:58:48:97:e1:8b:39:
                    9d:ee:3a:64:7e:83:f2:89:70:dc:22:ac:d0:62:17:
                    54:0f:25:0e:6e:c6:fb:8a:24:7b:b4:ce:12:3b:7e:
                    d2:23:c1:0d:01:c9:e3:b2:2b:7f:39:bd:8d:ab:67:
                    e1:fd:b3:41:9d:e9:2c:b2:02:86:83:d9:ee:a1:e2:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A1:52:79:67:2D:D5:6D:A3:69:B5:E9:B0:29:36:F8:77:5D:71:56
            X509v3 Authority Key Identifier:
                keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:26:e0:2a:ef:cf:53:ea:2a:8b:c4:1f:b5:6d:cf:15:61:af:
         f0:cc:a8:41:ed:34:05:fd:c2:d7:0a:c6:57:9a:d9:55:75:26:
         e7:b1:75:a2:d5:14:e7:a4:37:ea:d3:18:81:b2:0b:12:86:63:
         0a:53:24:06:2a:c5:b5:26:f3:80:f3:7e:86:ee:87:e2:f5:2e:
         eb:1d:cb:71:c0:07:1d:a6:6e:bc:0e:8e:4c:7d:0a:03:a5:43:
         28:01:ca:b0:76:b9:4c:c1:a8:ec:19:d1:39:3d:7d:1f:4a:65:
         1b:9e:17:a6:be:b2:99:44:1c:24:5a:52:11:02:74:11:19:4c:
         ef:ef:49:b4:1e:47:8e:b6:8d:eb:59:10:ae:4b:7f:a1:28:32:
         ca:40:4b:7d:a3:ec:e6:8c:13:04:22:f0:f3:28:a7:95:aa:13:
         ea:69:51:af:4c:4c:21:2a:37:1f:b1:c5:cf:1a:52:df:0b:24:
         35:74:6e:6b:67:6d:82:8f:3a:bf:eb:84:22:14:7d:92:c9:0f:
         cd:a1:bc:c1:8e:01:bc:f9:4f:66:de:f7:98:46:52:5d:b7:60:
         6d:e6:46:58:4f:fe:88:08:a3:ca:4e:80:34:08:b8:c5:81:4f:
         66:58:ad:6f:75:fb:ca:c4:25:08:b9:60:cc:b1:74:bb:b5:1b:
         77:24:37:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENabBEXVO+CdbR8jgdR/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjMyMTQyODAwNTVhNDdkZWI1NTRmZTljYjI4ZGMwYzE3
OTIzMDIwHhcNMjUwNDMwMDEwMDMwWhcNMjUwNTAxMDEwMDMwWjAzMTEwLwYDVQQD
Eyg0ZmExNTI3OTY3MmRkNTZkYTM2OWI1ZTliMDI5MzZmODc3NWQ3MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok18ANuLPForj3h+96G7vVyq174d
m570Xfw1cfMxKBzxMFv3L7lHYvMahiUxHGpiMrdNCdclNQRKvvHY0e8dpD3OLRF1
0b3+D2LJq22ZOslm/GiAn1iNo70hBGREqp5KQTFQ9x0XDj2L0ofekB6fBe4fzPAc
RvcGTkXtJyK5SBgEF0l6Ia/fnnvbQOh6Z/xe7U00yiYPg2fspqJU56Hx1CyFF6V1
dKOEjzdd+ScoCw2mViEIF83a1gyQXqFYSJfhizmd7jpkfoPyiXDcIqzQYhdUDyUO
bsb7iiR7tM4SO37SI8ENAcnjsit/Ob2Nq2fh/bNBnekssgKGg9nuoeKDUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+hUnlnLdVto2m16bApNvh3XXFWMB8GA1UdIwQY
MBaAFBdjIUKABVpH3rVU/pyyjcDBeSMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEt
Nzk2Nzk2MmU3Yzc1LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEtNzk2Nzk2MmU3Yzc1
LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCbgKu/P
U+oqi8QftW3PFWGv8MyoQe00Bf3C1wrGV5rZVXUm57F1otUU56Q36tMYgbILEoZj
ClMkBirFtSbzgPN+hu6H4vUu6x3LccAHHaZuvA6OTH0KA6VDKAHKsHa5TMGo7BnR
OT19H0plG54Xpr6ymUQcJFpSEQJ0ERlM7+9JtB5HjraN61kQrkt/oSgyykBLfaPs
5owTBCLw8yinlaoT6mlRr0xMISo3H7HFzxpS3wskNXRua2dtgo86v+uEIhR9kskP
zaG8wY4BvPlPZt73mEZSXbdgbeZGWE/+iAijyk6ANAi4xYFPZlitb3X7ysQlCLlg
zLF0u7UbdyQ3vw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:10:18 2025 by rpki-client