Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File:                     8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier:          BM/Ft3A+rWu7ib5NU1q4f/dMYOwHfvslPVu3lZmsYX4=
Subject key identifier:   9B:1E:96:41:98:C9:12:4F:26:55:BD:CE:CF:68:CF:4E:EE:F5:01:A3
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer:       /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial:       01969898460F0F2AAB02FE14644932F3F672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number:          0F11
Signing time:             Sun 04 May 2025 00:00:38 +0000
Manifest this update:     Sun 04 May 2025 00:00:38 +0000
Manifest next update:     Mon 05 May 2025 00:00:38 +0000
Files and hashes:         1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: lEhaIVXPLVRT1+b4Vulz2+TYkdHh89uHbLxeH65wwK8=)
                          2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:98:98:46:0f:0f:2a:ab:02:fe:14:64:49:32:f3:f6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
        Validity
            Not Before: May  4 00:00:38 2025 GMT
            Not After : May  5 00:00:38 2025 GMT
        Subject: CN=9b1e964198c9124f2655bdcecf68cf4eeef501a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:ce:35:25:3d:5c:d0:e7:e8:33:f0:14:45:
                    e9:9f:4b:a9:74:e5:7c:6a:18:ac:54:b8:d8:d6:b7:
                    04:a0:cc:50:c5:40:4b:e3:53:bc:0e:a5:b0:8e:ed:
                    94:a6:4a:a8:f7:ff:9f:9f:bb:bb:36:e0:e1:e7:0a:
                    98:78:e4:42:fd:85:e0:de:d9:61:49:f0:97:19:d2:
                    1d:69:dc:b3:7e:47:e2:b2:5b:58:ee:99:1e:f3:0e:
                    d7:4c:f5:87:49:26:f3:3d:83:63:99:84:09:19:ec:
                    42:4b:6c:35:39:ea:25:8e:4b:3b:67:d1:b4:45:13:
                    ef:1a:fd:23:2d:83:90:45:74:6f:23:24:12:6c:49:
                    78:67:82:6b:06:d9:eb:bf:b1:df:ed:13:35:54:7e:
                    2f:fa:a3:90:86:c2:4e:48:ab:96:39:c2:a0:65:21:
                    16:a3:fc:a4:b1:bd:98:17:d3:03:7f:1e:33:9c:a8:
                    f7:c8:91:a5:94:54:56:57:0a:49:17:77:ea:08:6d:
                    20:b3:e2:cc:9e:72:47:96:1c:3d:b5:88:87:6c:d9:
                    fa:3d:00:0d:29:03:92:a3:64:76:f1:5a:e4:e1:d5:
                    de:a0:d9:6f:dc:a2:b1:7a:f0:42:fe:38:32:b9:2c:
                    17:e0:6b:17:8b:1a:b2:fe:e2:4e:56:11:1d:bc:af:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1E:96:41:98:C9:12:4F:26:55:BD:CE:CF:68:CF:4E:EE:F5:01:A3
            X509v3 Authority Key Identifier:
                keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d5:c2:88:12:a3:8b:fc:4f:02:59:7f:a5:78:65:61:63:91:
         96:77:f0:b4:3f:12:3e:b1:13:cc:70:e6:68:54:18:29:6a:a2:
         ef:9d:07:c7:51:e3:c1:49:8b:22:22:2d:c7:5b:c9:ee:4d:88:
         f4:a0:47:09:7e:ee:a9:58:19:c1:e1:3c:5a:cf:32:02:ff:17:
         46:5f:8b:76:58:45:37:9b:ca:e6:09:30:0a:00:ec:4a:74:f3:
         64:db:3a:c8:2f:bb:46:60:2a:30:72:50:d2:5b:61:1f:20:0a:
         1c:57:8b:2e:9b:5a:a8:d3:65:74:b0:ca:85:ce:7d:55:5a:ea:
         1e:49:8d:bc:75:3c:91:69:0f:31:02:8b:03:51:cd:f1:0c:e7:
         84:09:1f:58:e4:cd:73:5a:48:22:59:45:09:fe:50:8c:c8:29:
         da:15:0a:73:ce:3a:06:c9:c1:2c:a1:ee:55:49:32:5d:1a:dc:
         70:c3:84:02:d5:d1:ed:c3:24:43:7e:20:2d:4d:64:3d:8b:82:
         48:4c:55:5b:35:8e:9e:b6:47:f6:99:ab:19:ac:c6:a8:d4:91:
         cc:21:1f:a7:c9:55:aa:38:e0:b8:5f:18:78:c1:6e:09:01:13:
         5a:29:65:78:75:37:20:9a:2d:ca:b2:d8:c1:20:2a:8c:01:f6:
         98:93:85:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYmEYPDyqrAv4UZEky8/ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi
NzJiZTUwHhcNMjUwNTA0MDAwMDM4WhcNMjUwNTA1MDAwMDM4WjAzMTEwLwYDVQQD
Eyg5YjFlOTY0MTk4YzkxMjRmMjY1NWJkY2VjZjY4Y2Y0ZWVlZjUwMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN3ONSU9XNDn6DPwFEXpn0updOV8
ahisVLjY1rcEoMxQxUBL41O8DqWwju2Upkqo9/+fn7u7NuDh5wqYeORC/YXg3tlh
SfCXGdIdadyzfkfisltY7pke8w7XTPWHSSbzPYNjmYQJGexCS2w1Oeoljks7Z9G0
RRPvGv0jLYOQRXRvIyQSbEl4Z4JrBtnrv7Hf7RM1VH4v+qOQhsJOSKuWOcKgZSEW
o/yksb2YF9MDfx4znKj3yJGllFRWVwpJF3fqCG0gs+LMnnJHlhw9tYiHbNn6PQAN
KQOSo2R28Vrk4dXeoNlv3KKxevBC/jgyuSwX4GsXixqy/uJOVhEdvK9CpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJselkGYyRJPJlW9zs9oz07u9QGjMB8GA1UdIwQY
MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct
YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm
LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldXCiBKj
i/xPAll/pXhlYWORlnfwtD8SPrETzHDmaFQYKWqi750Hx1HjwUmLIiItx1vJ7k2I
9KBHCX7uqVgZweE8Ws8yAv8XRl+LdlhFN5vK5gkwCgDsSnTzZNs6yC+7RmAqMHJQ
0lthHyAKHFeLLptaqNNldLDKhc59VVrqHkmNvHU8kWkPMQKLA1HN8QznhAkfWOTN
c1pIIllFCf5QjMgp2hUKc846BsnBLKHuVUkyXRrccMOEAtXR7cMkQ34gLU1kPYuC
SExVWzWOnrZH9pmrGazGqNSRzCEfp8lVqjjguF8YeMFuCQETWilleHU3IJotyrLY
wSAqjAH2mJOFtQ==
-----END CERTIFICATE-----
Generated at Sun May 4 09:42:16 2025 by rpki-client