Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File:                     1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier:          TjOS/btJcz9IY+G0+LG9Ik5xeneUI0yZI8GMlxNoAJ4=
Subject key identifier:   B0:B9:8B:D4:F5:11:E0:A7:C3:71:82:01:9E:5A:48:FE:A5:DD:89:79
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer:       /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial:       019677C3BDE0241EBD67925B6931BB439A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number:          0606
Signing time:             Sun 27 Apr 2025 15:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:38 +0000
Files and hashes:         1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: c9Njb87FUBQZ3U14S/jfMyj9CTJyBfOfNBGJzsebJLo=)
                          2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:bd:e0:24:1e:bd:67:92:5b:69:31:bb:43:9a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
        Validity
            Not Before: Apr 27 15:00:38 2025 GMT
            Not After : Apr 28 15:00:38 2025 GMT
        Subject: CN=b0b98bd4f511e0a7c37182019e5a48fea5dd8979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:3d:86:df:b6:78:68:16:d3:83:6f:fc:ac:
                    7f:98:92:f6:b7:ea:6e:f1:26:6a:78:38:29:90:16:
                    5d:46:e7:93:f3:fa:ae:17:46:4f:45:12:be:7a:f1:
                    78:1b:a4:83:86:92:2c:08:d7:2e:28:32:bf:bd:2e:
                    ce:10:36:60:1f:0a:e3:6c:d2:b9:b5:cc:88:4e:a0:
                    26:51:41:d2:33:f7:74:80:86:01:15:61:ce:df:5b:
                    27:b4:68:7b:82:80:b8:73:e0:d2:79:75:14:15:20:
                    7a:bf:f3:a2:3e:ff:a9:72:2b:9c:9f:dc:b0:25:4b:
                    7c:fe:bb:33:59:c9:5b:6d:fd:b0:c8:6e:33:51:e0:
                    29:8e:01:19:ef:fd:25:da:47:6a:1e:35:50:e1:db:
                    77:aa:18:79:38:5e:c9:3d:ca:b7:aa:57:25:4b:01:
                    2a:3f:d8:d8:1e:f4:f3:6a:fc:6c:f7:7d:36:62:7d:
                    b6:c3:3e:b5:4e:69:50:73:fe:8d:24:13:2d:37:3a:
                    6d:84:d4:70:18:f0:a9:b1:f9:bd:29:17:e5:ed:7a:
                    0f:19:f3:f7:6c:fa:08:d5:23:43:ed:bf:86:a1:92:
                    4d:71:5b:45:1a:ff:6e:db:cf:bc:3d:1a:a5:5d:20:
                    c9:3a:5a:8b:b6:c5:6c:14:07:f5:eb:e9:62:f9:45:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B9:8B:D4:F5:11:E0:A7:C3:71:82:01:9E:5A:48:FE:A5:DD:89:79
            X509v3 Authority Key Identifier:
                keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:91:4a:2f:7f:2e:de:76:5c:dc:3b:a2:b4:9a:5b:a2:fc:
         5a:01:84:f9:92:2c:22:01:76:5d:93:e9:a2:2f:90:4c:3a:13:
         5c:62:88:b4:2c:7a:4c:7c:c3:48:e5:5d:47:35:84:07:e4:3d:
         af:33:ff:3f:f8:5a:73:1b:d4:8e:c8:cf:27:ef:d1:ca:00:6c:
         e4:79:f1:84:23:08:1e:79:55:e4:37:70:3e:ec:6f:7b:d9:88:
         43:a0:5d:a1:1a:1f:99:44:13:8b:c3:22:94:43:2b:2d:47:8c:
         1f:d1:25:7c:ad:57:13:c2:d2:8d:6f:95:ef:48:1a:98:70:f2:
         8d:ab:a1:a0:2c:54:ae:0c:ca:3a:b6:df:92:b0:6c:3d:73:b4:
         c4:78:be:16:a7:21:05:cb:94:93:6a:a1:c8:ec:ad:6a:8e:57:
         93:6a:28:10:33:d3:a8:22:c7:f1:66:87:15:87:a3:1c:d8:05:
         82:0d:37:7e:a2:20:5c:4d:59:7b:f8:56:a1:84:3b:5a:a3:2a:
         bd:14:4b:4c:9f:ac:13:99:03:60:08:56:af:70:9b:a5:ef:69:
         df:f2:70:e4:30:fd:08:31:ea:69:f9:43:12:78:d2:58:6d:b8:
         6b:ee:ec:5a:ca:60:c5:73:66:ce:dc:d9:04:55:2a:c5:1b:e2:
         6a:3a:71:fa
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ3w73gJB69Z5JbaTG7Q5qDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2JhZDdkMDY4NTk5NWNlZDM1MTA4YjJlMTE1MjVhN2Fh
YjE0MTgwHhcNMjUwNDI3MTUwMDM4WhcNMjUwNDI4MTUwMDM4WjAzMTEwLwYDVQQD
EyhiMGI5OGJkNGY1MTFlMGE3YzM3MTgyMDE5ZTVhNDhmZWE1ZGQ4OTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9E9ht+2eGgW04Nv/Kx/mJL2t+pu
8SZqeDgpkBZdRueT8/quF0ZPRRK+evF4G6SDhpIsCNcuKDK/vS7OEDZgHwrjbNK5
tcyITqAmUUHSM/d0gIYBFWHO31sntGh7goC4c+DSeXUUFSB6v/OiPv+pciucn9yw
JUt8/rszWclbbf2wyG4zUeApjgEZ7/0l2kdqHjVQ4dt3qhh5OF7JPcq3qlclSwEq
P9jYHvTzavxs9302Yn22wz61TmlQc/6NJBMtNzpthNRwGPCpsfm9KRfl7XoPGfP3
bPoI1SND7b+GoZJNcVtFGv9u28+8PRqlXSDJOlqLtsVsFAf16+li+UXCZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLC5i9T1EeCnw3GCAZ5aSP6l3Yl5MB8GA1UdIwQY
MBaAFPs7rX0GhZlc7TUQiy4RUlp6qxQYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16dXRmUWFGbVZ6dE5SQ0xMaEZTV25xckZCZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNzlkNzQ2LTAzZjktNGM3MS1hZmM3
LWU1ZDBiNzZkZTViOC8xLzEtenV0ZlFhRm1WenROUkNMTGhGU1ducXJGQmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdhLzc5ZDc0Ni0wM2Y5LTRjNzEtYWZjNy1lNWQwYjc2ZGU1
YjgvMS8xLXp1dGZRYUZtVnp0TlJDTExoRlNXbnFyRkJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTKR
Si9/Lt52XNw7orSaW6L8WgGE+ZIsIgF2XZPpoi+QTDoTXGKItCx6THzDSOVdRzWE
B+Q9rzP/P/hacxvUjsjPJ+/RygBs5HnxhCMIHnlV5DdwPuxve9mIQ6BdoRofmUQT
i8MilEMrLUeMH9ElfK1XE8LSjW+V70gamHDyjauhoCxUrgzKOrbfkrBsPXO0xHi+
FqchBcuUk2qhyOytao5Xk2ooEDPTqCLH8WaHFYejHNgFgg03fqIgXE1Ze/hWoYQ7
WqMqvRRLTJ+sE5kDYAhWr3Cbpe9p3/Jw5DD9CDHqaflDEnjSWG24a+7sWspgxXNm
ztzZBFUqxRviajpx+g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:24 2025 by rpki-client