Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
File:                     METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json)
Hash identifier:          xOrDWg6dBkBW+u7wojZMXTHfsuc45V50jycHIgmfbpk=
Subject key identifier:   A7:86:9B:11:3C:7A:C7:22:49:5B:96:82:91:AE:51:DE:09:CE:D2:99
Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Certificate issuer:       /CN=3044e60bb97132ea849a53fc554bbbc63948b016
Certificate serial:       019679E8FE110AE30ED038DED0DB5457A659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
Manifest number:          0F94
Signing time:             Mon 28 Apr 2025 01:00:34 +0000
Manifest this update:     Mon 28 Apr 2025 01:00:34 +0000
Manifest next update:     Tue 29 Apr 2025 01:00:34 +0000
Files and hashes:         1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: Mbi0YKyCSPshE6+Ne3M7tu/Bo8yX/VsLtg8Uo9NpNCo=)
                          2: iSTM7V9FE-bUzbrQTSi6w3GvF8M.roa (hash: YbbyUOZzyme9AkFEQT1yyfiS1x2+GwCoOxsJ23F9SW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e8:fe:11:0a:e3:0e:d0:38:de:d0:db:54:57:a6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016
        Validity
            Not Before: Apr 28 01:00:34 2025 GMT
            Not After : Apr 29 01:00:34 2025 GMT
        Subject: CN=a7869b113c7ac722495b968291ae51de09ced299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:07:ec:05:22:fc:d8:9d:29:1f:50:d7:d9:
                    42:40:0c:49:5b:b9:12:10:2a:03:c6:67:75:7b:51:
                    33:43:90:0e:f3:89:db:cb:c3:9b:a7:25:15:0b:c2:
                    15:ed:c4:5e:79:3d:af:e3:44:c7:a9:b1:28:13:fa:
                    cb:cf:bd:4b:a3:6f:92:04:cc:38:51:b5:90:31:1c:
                    5b:27:54:24:10:0d:d6:35:80:81:15:19:d3:f4:6c:
                    29:31:04:4c:c2:1c:bc:de:a8:bc:70:7c:0c:7c:1d:
                    f9:b8:ea:ac:e7:14:7d:57:5d:c6:77:96:3c:ad:55:
                    f9:75:77:5f:5f:3a:65:a3:a7:87:73:02:f7:27:f2:
                    91:74:1d:26:76:e1:e7:70:ad:6d:fa:55:35:ba:1c:
                    61:53:42:f9:c2:17:b8:75:61:ce:06:fc:52:72:e4:
                    91:ba:a2:56:8e:76:98:c5:6c:a1:4d:1b:28:72:74:
                    f1:8d:47:5b:34:f4:18:4a:2d:e1:db:ef:65:c6:8b:
                    47:30:ac:69:13:4e:71:45:b1:2d:b6:55:35:78:b1:
                    02:76:60:3a:84:f5:cf:29:17:01:9e:0e:98:ef:c2:
                    fc:5e:82:44:0f:ba:4d:e5:0b:f0:89:40:5e:a4:10:
                    90:f5:93:14:8a:a2:e5:7a:a5:75:e2:1b:88:85:cc:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:9B:11:3C:7A:C7:22:49:5B:96:82:91:AE:51:DE:09:CE:D2:99
            X509v3 Authority Key Identifier:
                keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0f:21:e1:fd:b9:01:af:d1:d9:33:53:8d:b6:f2:3b:66:6d:
         27:74:96:2c:52:25:9c:da:6c:b4:21:c0:f2:85:f0:71:2f:27:
         46:66:a0:1b:da:fd:c8:45:39:61:94:77:94:31:4c:4f:b1:dc:
         43:23:5d:f3:60:4f:27:0e:2c:37:f7:f7:de:3b:24:ba:5a:89:
         25:2a:b3:7c:c4:e4:cc:ba:a0:a7:81:ab:fd:e7:38:1a:62:8c:
         9b:09:0c:2b:fe:ac:76:11:ab:88:7c:14:13:5a:b5:a6:81:1e:
         c2:91:c9:a4:97:2e:74:e7:22:46:cd:89:e2:41:23:d9:d8:52:
         88:4a:57:89:7d:b9:15:a6:19:bb:19:86:55:fc:b8:1f:8a:44:
         e0:f5:c0:57:cc:bb:d7:7b:fb:fd:9b:0f:2f:94:99:bc:af:66:
         75:db:16:29:2b:f8:4a:9f:b2:af:bf:a1:3c:0c:7f:62:c6:be:
         cf:36:ae:88:bb:92:36:da:2a:fd:ea:6e:d1:bf:ff:fd:71:d8:
         70:71:f9:c3:c4:f7:59:23:f0:d8:b6:aa:a0:75:35:2a:00:12:
         0f:74:0f:7f:05:08:b3:2c:33:29:6c:52:e2:9b:cf:59:ab:e2:
         f0:b4:1d:82:a8:45:d5:6f:07:fc:f5:77:1c:04:27:02:a1:09:
         11:74:d0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56P4RCuMO0Dje0NtUV6ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNDRlNjBiYjk3MTMyZWE4NDlhNTNmYzU1NGJiYmM2Mzk0
OGIwMTYwHhcNMjUwNDI4MDEwMDM0WhcNMjUwNDI5MDEwMDM0WjAzMTEwLwYDVQQD
EyhhNzg2OWIxMTNjN2FjNzIyNDk1Yjk2ODI5MWFlNTFkZTA5Y2VkMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcIH7AUi/NidKR9Q19lCQAxJW7kS
ECoDxmd1e1EzQ5AO84nby8ObpyUVC8IV7cReeT2v40THqbEoE/rLz71Lo2+SBMw4
UbWQMRxbJ1QkEA3WNYCBFRnT9GwpMQRMwhy83qi8cHwMfB35uOqs5xR9V13Gd5Y8
rVX5dXdfXzplo6eHcwL3J/KRdB0mduHncK1t+lU1uhxhU0L5whe4dWHOBvxScuSR
uqJWjnaYxWyhTRsocnTxjUdbNPQYSi3h2+9lxotHMKxpE05xRbEttlU1eLECdmA6
hPXPKRcBng6Y78L8XoJED7pN5QvwiUBepBCQ9ZMUiqLleqV14huIhczrXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeGmxE8esciSVuWgpGuUd4JztKZMB8GA1UdIwQY
MBaAFDBE5gu5cTLqhJpT/FVLu8Y5SLAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTkt
NDMxZjkxZGE0ZTI4LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTktNDMxZjkxZGE0ZTI4
LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtA8h4f25
Aa/R2TNTjbbyO2ZtJ3SWLFIlnNpstCHA8oXwcS8nRmagG9r9yEU5YZR3lDFMT7Hc
QyNd82BPJw4sN/f33jskulqJJSqzfMTkzLqgp4Gr/ec4GmKMmwkMK/6sdhGriHwU
E1q1poEewpHJpJcudOciRs2J4kEj2dhSiEpXiX25FaYZuxmGVfy4H4pE4PXAV8y7
13v7/ZsPL5SZvK9mddsWKSv4Sp+yr7+hPAx/Ysa+zzauiLuSNtoq/epu0b///XHY
cHH5w8T3WSPw2LaqoHU1KgASD3QPfwUIsywzKWxS4pvPWavi8LQdgqhF1W8H/PV3
HAQnAqEJEXTQBw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:36 2025 by rpki-client