Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File:                     CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier:          YhbgpVAXGsw3t28Nn776yWdnbBSuOeof13ZalMHL+Bo=
Subject key identifier:   26:22:8A:FD:42:2C:97:54:DC:F9:27:CF:47:DF:F6:70:35:9E:D4:50
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer:       /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial:       0196846CE2B1046CE7F704AAA669FE7800DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number:          02C5
Signing time:             Wed 30 Apr 2025 02:00:50 +0000
Manifest this update:     Wed 30 Apr 2025 02:00:50 +0000
Manifest next update:     Thu 01 May 2025 02:00:50 +0000
Files and hashes:         1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: GKu+eDOUIOBFlo5SYiaRdjNr9xr5UnoiPSgAgvE2J6Y=)
                          2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:6c:e2:b1:04:6c:e7:f7:04:aa:a6:69:fe:78:00:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
        Validity
            Not Before: Apr 30 02:00:50 2025 GMT
            Not After : May  1 02:00:50 2025 GMT
        Subject: CN=26228afd422c9754dcf927cf47dff670359ed450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:d5:ea:85:44:b9:1e:17:e0:fd:7e:a6:bc:
                    2b:bd:ce:3c:63:4f:1f:7b:45:0e:5c:69:99:d7:70:
                    95:84:5a:f3:04:81:e3:88:90:06:99:60:b5:b1:cb:
                    cd:ca:5f:51:0d:25:4b:1f:68:e2:d4:e3:ba:05:20:
                    69:2f:5b:09:80:85:97:00:86:52:29:77:34:40:13:
                    4b:e0:00:f6:d4:c2:d6:a6:4c:fa:eb:0c:2e:8c:32:
                    3a:cb:60:51:64:fb:82:ff:cd:03:63:64:cf:c8:97:
                    1b:2b:4e:f2:41:67:b6:96:43:31:61:94:c8:ac:9d:
                    02:c2:58:fb:f1:a5:41:66:39:5f:0c:36:29:cf:81:
                    54:f1:71:d6:9f:8c:f1:d2:4d:64:10:23:e2:68:b5:
                    5b:00:d8:82:f1:8e:db:09:f4:dc:4f:e0:d6:55:2f:
                    e9:f7:1a:21:3e:d3:cf:6e:d1:1c:b0:73:8f:f7:3c:
                    4b:2b:32:36:3f:9f:78:ca:1b:00:86:44:17:11:e9:
                    5b:ce:2f:05:0e:83:4e:0f:26:f4:0a:4e:be:e7:5d:
                    1b:60:fc:1c:84:ba:dc:3a:f0:b1:d9:89:dd:37:ad:
                    7e:b5:93:f3:89:1e:61:bb:62:bc:81:a4:53:97:71:
                    68:d7:62:63:95:54:1d:e1:a2:92:6e:a0:24:d6:8b:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:22:8A:FD:42:2C:97:54:DC:F9:27:CF:47:DF:F6:70:35:9E:D4:50
            X509v3 Authority Key Identifier:
                keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:61:f3:57:fd:69:42:c3:ce:c1:94:bb:01:70:75:cb:f2:f2:
         bb:84:51:bf:06:fa:3b:59:06:d7:80:92:54:ba:27:79:23:ac:
         4b:74:f7:93:fe:6a:57:7a:8c:f4:18:9f:35:d5:7b:1b:41:49:
         da:7b:8b:29:e8:1f:2e:c6:3e:e8:5c:1f:44:62:f8:ec:8d:af:
         e2:c8:a1:2b:d4:90:ea:0b:6b:36:79:a6:39:65:11:ba:10:fc:
         dc:e5:5a:e1:11:e3:d7:62:12:c9:86:96:b2:e1:a0:1e:27:ad:
         04:f3:8e:ef:55:be:07:e1:6c:a6:0d:00:96:28:22:c3:3d:dc:
         7e:63:8d:2d:5b:a4:1a:a4:02:88:5d:01:6a:f1:53:76:56:4c:
         51:3c:ba:89:83:dd:f7:2c:3b:d7:cb:8f:43:df:c4:09:9d:52:
         77:0d:2a:d7:40:ea:a0:a2:8f:97:0e:d4:16:14:6c:32:a8:21:
         59:4b:72:09:38:74:c0:04:fb:36:7b:4f:22:e4:3f:57:6e:aa:
         5d:34:d2:d1:73:8f:95:c3:6e:cb:b6:26:da:f7:4e:90:ee:1b:
         84:f5:f8:0c:a9:1a:b8:32:88:d6:aa:5a:3d:2a:d1:67:f3:69:
         a7:4c:fe:16:07:34:24:6c:ca:b3:e0:3d:47:de:84:98:32:c8:
         62:8d:59:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbOKxBGzn9wSqpmn+eADbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy
MGIzOTgwHhcNMjUwNDMwMDIwMDUwWhcNMjUwNTAxMDIwMDUwWjAzMTEwLwYDVQQD
EygyNjIyOGFmZDQyMmM5NzU0ZGNmOTI3Y2Y0N2RmZjY3MDM1OWVkNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3V6oVEuR4X4P1+prwrvc48Y08f
e0UOXGmZ13CVhFrzBIHjiJAGmWC1scvNyl9RDSVLH2ji1OO6BSBpL1sJgIWXAIZS
KXc0QBNL4AD21MLWpkz66wwujDI6y2BRZPuC/80DY2TPyJcbK07yQWe2lkMxYZTI
rJ0Cwlj78aVBZjlfDDYpz4FU8XHWn4zx0k1kECPiaLVbANiC8Y7bCfTcT+DWVS/p
9xohPtPPbtEcsHOP9zxLKzI2P594yhsAhkQXEelbzi8FDoNODyb0Ck6+510bYPwc
hLrcOvCx2YndN61+tZPziR5hu2K8gaRTl3Fo12JjlVQd4aKSbqAk1otjYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYiiv1CLJdU3Pknz0ff9nA1ntRQMB8GA1UdIwQY
MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt
YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx
LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmHzV/1p
QsPOwZS7AXB1y/Lyu4RRvwb6O1kG14CSVLoneSOsS3T3k/5qV3qM9BifNdV7G0FJ
2nuLKegfLsY+6FwfRGL47I2v4sihK9SQ6gtrNnmmOWURuhD83OVa4RHj12ISyYaW
suGgHietBPOO71W+B+Fspg0Aligiwz3cfmONLVukGqQCiF0BavFTdlZMUTy6iYPd
9yw718uPQ9/ECZ1Sdw0q10DqoKKPlw7UFhRsMqghWUtyCTh0wAT7NntPIuQ/V26q
XTTS0XOPlcNuy7Ym2vdOkO4bhPX4DKkauDKI1qpaPSrRZ/Npp0z+Fgc0JGzKs+A9
R96EmDLIYo1Z2g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:35:46 2025 by rpki-client