Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          2wPvhw8lVumdQjTXRYLnqm/yxFyxfH/8l+gpBJO69jo=
Subject key identifier:   A0:B6:CF:8D:D0:DD:76:3A:D9:66:E4:26:94:4A:A0:18:7E:EF:AC:C8
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       01968812A4CD2D7E852B49EA918AA26BE7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0925
Signing time:             Wed 30 Apr 2025 19:00:45 +0000
Manifest this update:     Wed 30 Apr 2025 19:00:45 +0000
Manifest next update:     Thu 01 May 2025 19:00:45 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: bRg5FBbFRdJ3AjvJDmpTyjwAZ2WOF77fjnM0VfULYLQ=)
                          2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:12:a4:cd:2d:7e:85:2b:49:ea:91:8a:a2:6b:e7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Apr 30 19:00:45 2025 GMT
            Not After : May  1 19:00:45 2025 GMT
        Subject: CN=a0b6cf8dd0dd763ad966e426944aa0187eefacc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6b:28:dc:d9:d1:1a:c5:32:41:c7:9b:8e:bb:
                    b7:f7:a1:94:05:ab:66:d8:5a:47:6b:cc:f2:40:5a:
                    08:2d:f2:0d:08:9a:b8:8e:a0:f4:5f:dc:05:ad:25:
                    67:d9:81:be:50:8a:dd:85:7b:95:e7:55:98:2a:c5:
                    97:7d:37:b0:03:b9:bc:f0:6c:ab:ea:44:9b:87:8c:
                    64:f2:4e:c0:29:97:bf:8b:c2:68:21:62:63:04:a6:
                    f6:1f:b3:49:1a:98:d1:d1:cc:57:cd:30:bf:35:d1:
                    b0:e5:5c:91:51:79:d4:f4:97:fc:25:fe:b2:98:78:
                    52:42:4c:61:5d:84:61:82:78:98:c3:22:e0:a8:11:
                    8e:a7:bf:ac:10:09:56:95:55:81:2c:d6:33:cf:7e:
                    55:59:d8:f0:e7:b7:7b:35:b0:08:8c:fe:73:55:97:
                    01:bc:89:31:64:dc:53:bf:1e:a9:7c:ef:f3:29:b4:
                    a2:15:a9:e8:d1:bb:ae:57:4e:97:70:3a:b0:04:f5:
                    3e:4d:10:74:2e:b7:7c:bd:8d:d3:21:14:f2:2d:35:
                    a1:41:82:e3:e6:a1:ff:fb:66:e4:c9:f5:ef:b7:41:
                    23:cf:9e:d2:71:6e:dc:e3:bd:0b:ac:0a:7c:53:27:
                    d6:13:72:bd:bf:03:4a:08:fe:6c:37:6c:de:a8:7f:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B6:CF:8D:D0:DD:76:3A:D9:66:E4:26:94:4A:A0:18:7E:EF:AC:C8
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:85:fc:31:e9:aa:7d:cc:4a:56:40:8f:b7:93:ca:fd:7e:
         d7:23:bc:23:14:94:5a:8b:f2:9f:71:df:04:40:51:5e:2c:66:
         49:15:7d:f9:f8:77:48:c1:9d:1f:de:4c:6c:ef:b8:f2:e4:2b:
         60:3f:8c:16:b0:69:61:8b:d0:9c:bc:de:56:0a:3f:6d:bc:08:
         ad:75:43:df:65:51:19:88:4f:23:fd:e8:d8:5f:21:09:87:43:
         e5:56:1f:c1:f6:63:33:60:33:9e:cf:88:ee:ee:2c:46:c2:ae:
         9d:32:e8:8e:f1:8c:23:91:0d:bf:b4:3c:26:d9:c9:d4:11:a7:
         3f:d2:c1:f3:a7:c1:37:c8:73:9a:30:63:4e:a0:bf:1b:37:1b:
         10:3c:eb:04:ac:61:83:a5:89:7a:17:89:7e:32:9c:69:46:b6:
         0e:95:58:32:a4:b8:1f:33:3c:e8:a1:33:58:c6:b6:ec:81:4e:
         a9:f6:e5:b7:aa:15:9c:33:05:92:e3:3b:ed:2b:12:6e:c7:1f:
         03:39:25:91:4f:de:9f:c7:94:58:c6:8a:ff:27:0b:9b:41:f8:
         f6:c5:16:34:05:24:72:5a:a0:c9:d6:93:b9:de:d1:c0:32:f7:
         11:23:b7:14:a9:66:0f:61:bf:f1:16:0f:a5:c9:c8:c2:4f:66:
         c4:d1:4a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIEqTNLX6FK0nqkYqia+fqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0
OWFhNmMwHhcNMjUwNDMwMTkwMDQ1WhcNMjUwNTAxMTkwMDQ1WjAzMTEwLwYDVQQD
EyhhMGI2Y2Y4ZGQwZGQ3NjNhZDk2NmU0MjY5NDRhYTAxODdlZWZhY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22so3NnRGsUyQcebjru396GUBatm
2FpHa8zyQFoILfINCJq4jqD0X9wFrSVn2YG+UIrdhXuV51WYKsWXfTewA7m88Gyr
6kSbh4xk8k7AKZe/i8JoIWJjBKb2H7NJGpjR0cxXzTC/NdGw5VyRUXnU9Jf8Jf6y
mHhSQkxhXYRhgniYwyLgqBGOp7+sEAlWlVWBLNYzz35VWdjw57d7NbAIjP5zVZcB
vIkxZNxTvx6pfO/zKbSiFano0buuV06XcDqwBPU+TRB0Lrd8vY3TIRTyLTWhQYLj
5qH/+2bkyfXvt0Ejz57ScW7c470LrAp8UyfWE3K9vwNKCP5sN2zeqH+KXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC2z43Q3XY62WbkJpRKoBh+76zIMB8GA1UdIwQY
MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt
MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj
LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOGF/DHp
qn3MSlZAj7eTyv1+1yO8IxSUWovyn3HfBEBRXixmSRV9+fh3SMGdH95MbO+48uQr
YD+MFrBpYYvQnLzeVgo/bbwIrXVD32VRGYhPI/3o2F8hCYdD5VYfwfZjM2Azns+I
7u4sRsKunTLojvGMI5ENv7Q8JtnJ1BGnP9LB86fBN8hzmjBjTqC/GzcbEDzrBKxh
g6WJeheJfjKcaUa2DpVYMqS4HzM86KEzWMa27IFOqfblt6oVnDMFkuM77SsSbscf
AzklkU/en8eUWMaK/ycLm0H49sUWNAUkclqgydaTud7RwDL3ESO3FKlmD2G/8RYP
pcnIwk9mxNFKGA==
-----END CERTIFICATE-----
Generated at Thu May 1 04:12:12 2025 by rpki-client