Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File:                     1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier:          0cnEDf7DRjnpcrMEiH+XPC9Qot6nKgk7gNtKjxTqvQ8=
Subject key identifier:   A7:D1:D0:61:BD:5D:A5:E5:67:90:9F:4B:8E:4D:67:75:6F:21:4D:80
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer:       /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial:       0196760C94F5CC1AEC14099F902CE7F4A9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number:          07F4
Signing time:             Sun 27 Apr 2025 07:00:58 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:58 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:58 +0000
Files and hashes:         1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: xfQvZVvJ/W4NW3cd237KZ6OvB7/rBpJ20/o1kCFe5hU=)
                          2: jkQkzhHIzOVrF_0fWTHIXX9_5I0.roa (hash: pncVkUUAmmkI3mdScp/gmzGpZATl1M0Wr97+Y7euT/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:94:f5:cc:1a:ec:14:09:9f:90:2c:e7:f4:a9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
        Validity
            Not Before: Apr 27 07:00:58 2025 GMT
            Not After : Apr 28 07:00:58 2025 GMT
        Subject: CN=a7d1d061bd5da5e567909f4b8e4d67756f214d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:48:a3:b3:10:e0:df:56:31:85:8e:28:9a:
                    3a:91:96:9b:2f:bd:83:2f:39:dc:b3:78:ff:10:69:
                    52:ae:39:e5:6e:1b:96:4d:8d:2c:cd:9a:b3:f5:b1:
                    7a:28:dc:d3:5c:0b:99:25:82:a3:58:e9:12:66:df:
                    33:74:17:a6:46:50:3f:ae:59:74:98:bd:66:e4:14:
                    87:81:36:8b:a5:07:5c:27:19:97:f3:85:d4:cc:d4:
                    c3:55:1f:a4:d3:06:2e:81:91:79:c7:1d:1c:29:82:
                    fa:e0:6b:f5:96:67:75:f7:c3:bc:93:b8:a7:1c:16:
                    71:95:21:1b:1b:12:3d:31:2c:8b:fd:42:11:cb:bd:
                    2b:a2:1c:2f:08:18:ef:7c:d4:c8:ca:71:88:89:48:
                    f8:82:2b:23:81:f0:b0:d1:0b:69:28:84:30:4a:03:
                    4d:64:81:55:c0:c8:7e:be:d8:19:52:2c:e5:c4:cd:
                    bc:6d:b4:8d:31:fe:10:7a:33:77:9f:30:9e:f1:90:
                    60:c1:f6:d2:30:7c:3e:bd:bc:03:27:f1:d8:01:7d:
                    c1:6f:b6:d6:d3:58:8d:ad:e0:a2:43:d3:fd:9c:03:
                    31:90:30:0e:3b:72:6f:98:7a:32:cd:00:b1:41:84:
                    0b:16:fc:03:b2:82:3a:94:d3:58:c1:ce:38:87:88:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D1:D0:61:BD:5D:A5:E5:67:90:9F:4B:8E:4D:67:75:6F:21:4D:80
            X509v3 Authority Key Identifier:
                keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:34:c2:bb:cf:44:89:5d:89:1f:c4:79:b7:5c:5a:aa:17:
         b0:a5:33:4f:c2:e1:03:d2:c2:73:14:52:3e:24:48:08:b2:08:
         a8:70:83:b9:63:1d:ad:38:b7:62:c1:8a:73:7d:ee:69:28:1e:
         1f:54:13:e6:9e:86:b9:47:cb:37:f4:4c:48:d1:5d:3e:76:43:
         ad:92:1a:57:37:6b:14:e5:59:71:1f:8c:ac:20:81:e3:1b:3e:
         ac:c2:a6:a2:62:26:ac:35:97:d5:2c:ca:0a:18:98:63:9e:9f:
         f6:c8:15:8b:ec:e8:12:6d:a6:d9:0b:95:8c:2c:62:89:4c:b7:
         46:a1:db:0d:1a:df:68:f8:47:18:3f:62:18:fb:b1:98:51:d7:
         ff:ab:51:ee:df:5e:e8:50:e6:ca:6c:cd:cd:d4:bf:60:11:ff:
         48:b9:be:74:f6:da:83:fd:27:02:f9:bb:49:15:99:c3:cb:24:
         fb:ee:2a:43:66:98:83:6f:ae:35:df:71:70:90:ca:81:0a:02:
         1c:2f:f3:9b:59:3a:87:5f:f8:3f:8d:89:1b:e7:97:00:fd:b8:
         fe:a1:d7:0c:25:91:8e:65:22:f8:cf:b4:9e:e3:58:6c:a6:ae:
         0f:ac:39:b2:bf:2d:44:b7:36:e2:e7:97:e0:50:80:e5:55:6c:
         2b:e3:93:50
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ2DJT1zBrsFAmfkCzn9Km4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjUwNDI3MDcwMDU4WhcNMjUwNDI4MDcwMDU4WjAzMTEwLwYDVQQD
EyhhN2QxZDA2MWJkNWRhNWU1Njc5MDlmNGI4ZTRkNjc3NTZmMjE0ZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmhIo7MQ4N9WMYWOKJo6kZabL72D
Lzncs3j/EGlSrjnlbhuWTY0szZqz9bF6KNzTXAuZJYKjWOkSZt8zdBemRlA/rll0
mL1m5BSHgTaLpQdcJxmX84XUzNTDVR+k0wYugZF5xx0cKYL64Gv1lmd198O8k7in
HBZxlSEbGxI9MSyL/UIRy70rohwvCBjvfNTIynGIiUj4gisjgfCw0QtpKIQwSgNN
ZIFVwMh+vtgZUizlxM28bbSNMf4QejN3nzCe8ZBgwfbSMHw+vbwDJ/HYAX3Bb7bW
01iNreCiQ9P9nAMxkDAOO3JvmHoyzQCxQYQLFvwDsoI6lNNYwc44h4jkCQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKfR0GG9XaXlZ5CfS45NZ3VvIU2AMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJkLzNiNTExMC01MTY3LTQ4ZTAtODU5Ny02MWQ3MzMzZjg1
NzAvMS8xLTgwQ000Q0ZjT01mLXlfTjRiaDNCeHk4WmdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANf80
wrvPRIldiR/EebdcWqoXsKUzT8LhA9LCcxRSPiRICLIIqHCDuWMdrTi3YsGKc33u
aSgeH1QT5p6GuUfLN/RMSNFdPnZDrZIaVzdrFOVZcR+MrCCB4xs+rMKmomImrDWX
1SzKChiYY56f9sgVi+zoEm2m2QuVjCxiiUy3RqHbDRrfaPhHGD9iGPuxmFHX/6tR
7t9e6FDmymzNzdS/YBH/SLm+dPbag/0nAvm7SRWZw8sk++4qQ2aYg2+uNd9xcJDK
gQoCHC/zm1k6h1/4P42JG+eXAP24/qHXDCWRjmUi+M+0nuNYbKauD6w5sr8tRLc2
4ueX4FCA5VVsK+OTUA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:19:54 2025 by rpki-client