Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          ROZ+CNx2Kr1OPgbBxWPBp1iEx6Raj4zCz0owFxaM7ZY=
Subject key identifier:   09:7A:03:97:AC:7F:C1:A4:6E:A2:23:7A:00:F0:80:E3:7C:F7:50:2F
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019674C288ED2D7516EEABE2C8E1B1DA9C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          0F57
Signing time:             Sun 27 Apr 2025 01:00:28 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:28 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:28 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: 5h3zYUUX9+JfHc8pBegiUwNfbxfuTeaD98cvPNHLTCc=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:88:ed:2d:75:16:ee:ab:e2:c8:e1:b1:da:9c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Apr 27 01:00:28 2025 GMT
            Not After : Apr 28 01:00:28 2025 GMT
        Subject: CN=097a0397ac7fc1a46ea2237a00f080e37cf7502f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:30:30:0e:c0:29:94:b6:8c:90:8a:04:fb:
                    45:34:8a:7e:64:96:52:c4:dd:41:b3:96:1d:78:73:
                    bd:7b:2a:be:34:be:2b:ab:20:e7:92:82:47:ca:45:
                    98:2f:f0:e4:b5:24:fe:b3:b2:a1:9f:b4:ad:ea:cd:
                    4a:00:c8:fe:e5:76:7a:d6:9e:ac:ce:9c:ef:45:4a:
                    bb:33:fa:0c:70:4e:c8:43:d6:6e:f1:60:c5:bc:9d:
                    7b:79:09:56:d9:c1:8a:a6:14:40:b5:eb:85:92:dc:
                    6c:1b:6b:89:9b:d3:68:25:85:4a:b0:bb:26:e5:6d:
                    43:3c:f5:18:44:0d:bb:04:b6:5e:7e:9a:9f:4d:5f:
                    dd:a2:b9:47:b0:2d:14:eb:ae:57:56:83:d4:01:99:
                    e6:12:bd:d9:8a:d4:6d:0f:f5:58:f8:80:11:d0:d5:
                    dc:49:44:7f:c9:2e:93:52:d2:9d:43:c4:0a:2e:04:
                    7b:f8:ab:bc:71:df:7a:b6:d2:c1:8b:6f:48:60:87:
                    67:c4:c1:a3:14:02:5f:f4:f6:79:98:5e:c0:c5:80:
                    c1:5f:8f:e7:44:d1:f1:2a:55:83:57:a1:7c:c0:15:
                    8f:3f:a7:5e:55:4c:3c:38:a3:91:5d:af:c3:81:a9:
                    21:67:0e:43:b6:ac:8c:8b:53:c2:89:37:68:ac:c5:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7A:03:97:AC:7F:C1:A4:6E:A2:23:7A:00:F0:80:E3:7C:F7:50:2F
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:b8:4d:dd:f4:0e:22:e2:a2:d5:4e:f7:5d:90:61:e7:6a:
         39:34:0a:de:f5:c6:e6:27:c5:d5:40:b5:0e:08:3e:56:9b:f3:
         45:90:2d:fa:d4:23:f9:3d:67:eb:a9:d5:62:50:67:34:cb:6d:
         b9:70:57:37:b9:cc:db:ca:6e:a3:69:eb:93:fb:4a:a9:f8:8e:
         be:dd:c1:62:ce:d1:86:02:2f:be:fc:5b:13:dd:8d:e4:d4:86:
         7b:17:25:70:95:f3:bd:84:82:77:e2:10:7b:f6:42:b2:22:b8:
         86:38:ef:23:da:e8:85:10:5f:58:ca:cf:68:e9:a5:14:c5:35:
         29:66:fe:51:99:4e:52:ba:c8:68:40:10:78:be:91:e1:2d:28:
         cf:ac:b1:70:60:a5:de:4d:0b:76:b0:33:33:a4:86:b0:ea:57:
         76:a7:13:fc:7a:be:8e:02:df:9f:43:8c:ed:7b:20:4f:68:35:
         71:6f:8b:c4:38:59:d5:06:3c:1b:9e:e6:37:b2:fb:05:ce:4f:
         3e:08:0c:26:a4:bc:e1:01:1d:8b:53:37:48:e0:16:36:0e:41:
         27:31:0b:ff:ae:06:74:d0:7c:67:e6:44:af:e3:b8:4a:51:4a:
         e3:e6:18:99:f5:2f:47:01:30:f1:a9:1b:4f:4b:36:66:36:da:
         de:49:71:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wojtLXUW7qviyOGx2pw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjUwNDI3MDEwMDI4WhcNMjUwNDI4MDEwMDI4WjAzMTEwLwYDVQQD
EygwOTdhMDM5N2FjN2ZjMWE0NmVhMjIzN2EwMGYwODBlMzdjZjc1MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyUwMA7AKZS2jJCKBPtFNIp+ZJZS
xN1Bs5YdeHO9eyq+NL4rqyDnkoJHykWYL/DktST+s7Khn7St6s1KAMj+5XZ61p6s
zpzvRUq7M/oMcE7IQ9Zu8WDFvJ17eQlW2cGKphRAteuFktxsG2uJm9NoJYVKsLsm
5W1DPPUYRA27BLZefpqfTV/dorlHsC0U665XVoPUAZnmEr3ZitRtD/VY+IAR0NXc
SUR/yS6TUtKdQ8QKLgR7+Ku8cd96ttLBi29IYIdnxMGjFAJf9PZ5mF7AxYDBX4/n
RNHxKlWDV6F8wBWPP6deVUw8OKORXa/DgakhZw5DtqyMi1PCiTdorMW03QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl6A5esf8GkbqIjegDwgON891AvMB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnG4Td30
DiLiotVO912QYedqOTQK3vXG5ifF1UC1Dgg+VpvzRZAt+tQj+T1n66nVYlBnNMtt
uXBXN7nM28puo2nrk/tKqfiOvt3BYs7RhgIvvvxbE92N5NSGexclcJXzvYSCd+IQ
e/ZCsiK4hjjvI9rohRBfWMrPaOmlFMU1KWb+UZlOUrrIaEAQeL6R4S0oz6yxcGCl
3k0LdrAzM6SGsOpXdqcT/Hq+jgLfn0OM7XsgT2g1cW+LxDhZ1QY8G57mN7L7Bc5P
PggMJqS84QEdi1M3SOAWNg5BJzEL/64GdNB8Z+ZEr+O4SlFK4+YYmfUvRwEw8akb
T0s2Zjba3klxGw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:50 2025 by rpki-client