Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File:                     8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier:          zzdg7lQWih/6X1OUT4DGojfoAW21OSSyUIxblD+SIf4=
Subject key identifier:   31:01:9A:42:E6:00:23:E7:83:7B:74:E8:12:6B:69:D5:99:A7:3A:96
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer:       /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial:       019685116F5DCB4687F2EE19A0D381AD6D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number:          F1
Signing time:             Wed 30 Apr 2025 05:00:34 +0000
Manifest this update:     Wed 30 Apr 2025 05:00:34 +0000
Manifest next update:     Thu 01 May 2025 05:00:34 +0000
Files and hashes:         1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: kCGpLbD+TiU4JqgkAj4BDv4/9aqRmUVAyjuvJXWq2fQ=)
                          2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:11:6f:5d:cb:46:87:f2:ee:19:a0:d3:81:ad:6d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
        Validity
            Not Before: Apr 30 05:00:34 2025 GMT
            Not After : May  1 05:00:34 2025 GMT
        Subject: CN=31019a42e60023e7837b74e8126b69d599a73a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:cc:38:ca:1a:99:88:39:39:8f:fc:c6:1b:
                    b4:4d:42:47:8f:3b:66:ef:78:22:87:22:76:d7:d3:
                    1a:c6:55:de:fd:a9:9e:90:4f:2f:fd:9a:99:62:31:
                    2f:8a:d8:80:41:8a:99:68:3f:bc:79:85:49:95:55:
                    2a:f6:43:8b:34:5d:5c:b5:69:8f:d9:fc:53:50:fe:
                    55:5d:81:bf:9d:6a:2b:d9:02:2e:00:82:d1:0e:b5:
                    1b:52:d7:e0:16:9a:74:c5:41:a1:d0:f5:cf:d5:ae:
                    e1:96:f0:9e:42:8d:a3:ca:93:5c:b5:85:45:ab:86:
                    c8:a8:10:22:15:aa:f6:e6:c2:5c:78:a5:f6:f4:08:
                    7e:ae:5e:91:c1:79:fc:67:c7:f7:15:22:13:df:e9:
                    10:ef:04:e7:c1:f2:b2:33:59:d9:eb:a0:c9:c9:26:
                    41:16:f7:54:5b:a3:9b:f8:13:35:e6:53:8a:43:39:
                    30:67:e4:d7:48:4b:60:fe:6b:23:04:59:63:b3:80:
                    46:5d:8b:74:1a:dc:29:7d:e9:64:b1:b3:a5:b8:27:
                    5d:56:99:3a:7c:0f:4f:0c:83:86:aa:40:ec:99:ba:
                    7e:91:67:32:6e:bf:13:a2:14:a8:32:6f:cb:8f:63:
                    45:28:e0:28:0e:ca:6f:d7:19:6a:85:d2:a9:a6:42:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:01:9A:42:E6:00:23:E7:83:7B:74:E8:12:6B:69:D5:99:A7:3A:96
            X509v3 Authority Key Identifier:
                keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9e:d8:d5:c7:6a:68:bf:b2:37:ec:81:cc:fe:4a:9d:33:eb:
         f6:85:4a:e9:db:6c:88:cc:7c:6b:b3:5c:11:45:88:8c:42:e9:
         b6:5f:21:3d:46:99:5c:d4:d8:7c:56:ae:6e:0e:05:28:03:d7:
         db:2c:42:08:ff:1f:2b:29:dd:db:f1:6a:f8:f1:4a:a8:d1:de:
         76:66:4a:e5:52:d9:17:3b:04:44:25:c4:bf:b0:10:e5:bb:ce:
         25:22:ff:bf:93:78:9d:cf:4a:f6:25:fc:c9:4b:36:38:7e:1e:
         6b:da:a9:36:3d:28:9e:dc:ac:ca:ad:a1:56:02:c3:d8:23:30:
         6e:35:bd:80:f2:75:ed:3a:1a:28:48:ca:3c:f4:1b:4e:d4:11:
         47:46:23:e5:37:87:4a:7e:f9:33:8d:57:78:55:18:cd:3b:65:
         1c:a5:26:c8:e4:98:c8:97:d0:ee:53:4d:59:07:ff:fc:4b:35:
         7c:ad:68:69:5a:6a:54:3d:ef:39:7f:fe:e6:2d:ff:d5:9c:63:
         98:b9:2a:fb:02:3b:d5:e7:40:e3:e5:91:88:a5:24:d8:f2:b7:
         e1:f1:af:1d:55:d1:45:52:43:14:a5:03:d4:3d:7c:aa:5b:42:
         6b:95:29:ff:2f:3f:f7:a5:91:b3:d1:6d:86:49:97:e0:10:38:
         80:d7:2c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFEW9dy0aH8u4ZoNOBrW1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTlhYzljZjkwNWExNmM1YWZhMGU1MDM1ZmZhN2EyMzUy
ZTEzZjQwHhcNMjUwNDMwMDUwMDM0WhcNMjUwNTAxMDUwMDM0WjAzMTEwLwYDVQQD
EygzMTAxOWE0MmU2MDAyM2U3ODM3Yjc0ZTgxMjZiNjlkNTk5YTczYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok3MOMoamYg5OY/8xhu0TUJHjztm
73gihyJ219MaxlXe/amekE8v/ZqZYjEvitiAQYqZaD+8eYVJlVUq9kOLNF1ctWmP
2fxTUP5VXYG/nWor2QIuAILRDrUbUtfgFpp0xUGh0PXP1a7hlvCeQo2jypNctYVF
q4bIqBAiFar25sJceKX29Ah+rl6RwXn8Z8f3FSIT3+kQ7wTnwfKyM1nZ66DJySZB
FvdUW6Ob+BM15lOKQzkwZ+TXSEtg/msjBFljs4BGXYt0GtwpfelksbOluCddVpk6
fA9PDIOGqkDsmbp+kWcybr8TohSoMm/Lj2NFKOAoDspv1xlqhdKppkK28wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEBmkLmACPng3t06BJradWZpzqWMB8GA1UdIwQY
MBaAFPDprJz5BaFsWvoOUDX/p6I1LhP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAt
NmFjMTBiNGQyYmJjLzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAtNmFjMTBiNGQyYmJj
LzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ7Y1cdq
aL+yN+yBzP5KnTPr9oVK6dtsiMx8a7NcEUWIjELptl8hPUaZXNTYfFaubg4FKAPX
2yxCCP8fKynd2/Fq+PFKqNHedmZK5VLZFzsERCXEv7AQ5bvOJSL/v5N4nc9K9iX8
yUs2OH4ea9qpNj0ontysyq2hVgLD2CMwbjW9gPJ17ToaKEjKPPQbTtQRR0Yj5TeH
Sn75M41XeFUYzTtlHKUmyOSYyJfQ7lNNWQf//Es1fK1oaVpqVD3vOX/+5i3/1Zxj
mLkq+wI71edA4+WRiKUk2PK34fGvHVXRRVJDFKUD1D18qltCa5Up/y8/96WRs9Ft
hkmX4BA4gNcs0g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:25:54 2025 by rpki-client