Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File:                     0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier:          t5/QU2mJnv/6uINpVxh3iCjCJLjItAvJWapiSSkTD5U=
Subject key identifier:   DC:57:35:6C:66:E7:B0:EC:AA:30:E0:D7:F0:CF:FA:BA:C6:53:50:F4
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer:       /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial:       0194BAF20FA70933620CB0A81881A398DC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number:          07BF
Signing time:             Fri 31 Jan 2025 06:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:13 +0000
Files and hashes:         1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: xj9umm6zF430I7HMiBs1EwOfMw8OBgExU/ZKk8konyU=)
                          2: 2uZxWNiiNlEm9OoKKcdvwT2HKMw.roa (hash: REMiCEt16bcTQl/DRObAABSgLCCm5EBbI6gqnj1bf4c=)
                          3: 9GRLI99QW8AowW4BJrB_YuATNFA.roa (hash: Uy9rlczyVO0kznBabdNTB+yXy+eaioNFTev/vrARLbs=)
                          4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
                          5: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
                          6: cI1qFFeQv-6tmDlJXHdCtLb_xvk.roa (hash: N30f4uK70/lBJN5T3lYk5uifE1IRPljUC2AIj2qvivY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:0f:a7:09:33:62:0c:b0:a8:18:81:a3:98:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
        Validity
            Not Before: Jan 31 06:00:13 2025 GMT
            Not After : Feb  1 06:00:13 2025 GMT
        Subject: CN=dc57356c66e7b0ecaa30e0d7f0cffabac65350f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:90:1b:41:3d:ab:47:9c:2c:37:f4:12:18:
                    be:71:f2:5f:d0:be:bd:14:fe:ee:18:4d:35:2a:0e:
                    d0:77:19:54:ce:01:d9:48:97:07:3e:4b:5f:58:cb:
                    31:0a:4f:2f:f5:14:ee:09:45:1e:22:1a:9f:d8:8f:
                    07:e6:54:03:61:d3:11:c0:5c:12:b4:56:dc:30:b3:
                    e7:eb:63:c8:77:fc:33:02:dc:d2:cd:20:b3:11:10:
                    48:b3:1e:86:c1:ca:6c:07:e8:27:ea:b9:06:ee:64:
                    da:7b:99:0c:bd:9e:89:78:36:16:10:6b:31:e4:52:
                    43:fd:ca:6b:72:bf:7d:20:76:b2:13:1e:ed:ee:2e:
                    7f:08:12:95:c0:8e:41:c9:46:00:39:dc:91:92:cb:
                    11:16:4f:e7:06:2f:3b:85:95:b3:9c:49:88:53:c6:
                    ad:70:ad:e2:19:88:95:ac:6e:3e:6f:d0:c9:2e:7b:
                    38:6b:00:1b:05:8e:98:cc:8e:ba:ea:e9:99:42:67:
                    32:67:d9:39:f1:a2:8b:2e:74:b8:ed:ff:87:c8:5c:
                    ef:16:21:8f:9f:9d:87:f4:ee:93:89:59:64:96:9e:
                    ac:49:9d:29:28:03:9b:76:5b:f8:f7:b3:28:e1:c0:
                    35:af:f4:75:a1:9d:65:a8:a5:9f:47:fb:f2:f2:7b:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:35:6C:66:E7:B0:EC:AA:30:E0:D7:F0:CF:FA:BA:C6:53:50:F4
            X509v3 Authority Key Identifier:
                keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:79:85:05:ec:47:5b:ca:0d:68:f5:a9:cb:d3:3b:21:c9:
         d4:89:b0:da:c8:c7:c5:74:4b:c3:9d:b9:68:40:96:99:ca:4a:
         cb:9a:59:36:ee:1e:bd:51:d2:38:e2:c7:42:fc:be:96:15:4d:
         e9:9c:62:a5:df:5d:54:51:4f:6c:ff:69:e3:ba:f3:0d:63:dc:
         4f:65:4b:99:9f:ea:84:2b:26:84:f5:f1:28:51:6d:be:0e:2d:
         97:9f:b2:1a:35:76:b8:c2:54:14:af:4c:52:0d:86:b3:65:96:
         59:cf:07:f2:2c:79:04:32:64:f4:ee:83:c4:c9:cf:1f:30:f9:
         ee:39:ce:75:5a:86:89:52:6a:b4:20:a3:ab:11:ba:fe:00:40:
         a7:10:46:17:3c:52:89:66:9f:fa:85:6d:c6:f6:3b:2b:eb:d0:
         d6:c7:f4:ad:e0:f2:fb:a4:c7:e2:29:f8:a6:f1:f8:9a:d2:af:
         91:61:b5:9e:f7:19:18:dd:70:1e:ba:68:cc:5e:1f:06:d3:16:
         cd:f1:db:57:86:8e:65:e3:20:3d:10:ed:9a:a7:00:36:d3:5e:
         79:53:40:22:d4:95:51:07:aa:e8:0e:89:6e:4b:60:fa:7b:c8:
         b7:9e:4f:a5:0b:61:eb:38:86:54:3e:f2:c7:45:ec:b7:b3:7a:
         2f:e9:da:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68g+nCTNiDLCoGIGjmNwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjUwMTMxMDYwMDEzWhcNMjUwMjAxMDYwMDEzWjAzMTEwLwYDVQQD
EyhkYzU3MzU2YzY2ZTdiMGVjYWEzMGUwZDdmMGNmZmFiYWM2NTM1MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMmQG0E9q0ecLDf0Ehi+cfJf0L69
FP7uGE01Kg7QdxlUzgHZSJcHPktfWMsxCk8v9RTuCUUeIhqf2I8H5lQDYdMRwFwS
tFbcMLPn62PId/wzAtzSzSCzERBIsx6GwcpsB+gn6rkG7mTae5kMvZ6JeDYWEGsx
5FJD/cprcr99IHayEx7t7i5/CBKVwI5ByUYAOdyRkssRFk/nBi87hZWznEmIU8at
cK3iGYiVrG4+b9DJLns4awAbBY6YzI666umZQmcyZ9k58aKLLnS47f+HyFzvFiGP
n52H9O6TiVlklp6sSZ0pKAObdlv497Mo4cA1r/R1oZ1lqKWfR/vy8nvmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxXNWxm57DsqjDg1/DP+rrGU1D0MB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxp5hQXs
R1vKDWj1qcvTOyHJ1Imw2sjHxXRLw525aECWmcpKy5pZNu4evVHSOOLHQvy+lhVN
6Zxipd9dVFFPbP9p47rzDWPcT2VLmZ/qhCsmhPXxKFFtvg4tl5+yGjV2uMJUFK9M
Ug2Gs2WWWc8H8ix5BDJk9O6DxMnPHzD57jnOdVqGiVJqtCCjqxG6/gBApxBGFzxS
iWaf+oVtxvY7K+vQ1sf0reDy+6TH4in4pvH4mtKvkWG1nvcZGN1wHrpozF4fBtMW
zfHbV4aOZeMgPRDtmqcANtNeeVNAItSVUQeq6A6Jbktg+nvIt55PpQth6ziGVD7y
x0Xst7N6L+na0g==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:39 2025 by rpki-client on console-fra.rpki-client.org