Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File:                     mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier:          8gj5Z6laVe4q4EITn0Nqhy97q8UCPRn0g3LiuZFox3U=
Subject key identifier:   13:73:4A:D6:AA:98:D4:4C:16:FC:05:D4:DF:7F:A7:B6:02:52:47:63
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer:       /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial:       019680222B837D20CAB9FFEEE661DCE03F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number:          14A6
Signing time:             Tue 29 Apr 2025 06:00:45 +0000
Manifest this update:     Tue 29 Apr 2025 06:00:45 +0000
Manifest next update:     Wed 30 Apr 2025 06:00:45 +0000
Files and hashes:         1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
                          2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: mtD2ZTlr+0b+4ZkaxkMt5xGUdST3RWQmVdkuOuUGzvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:2b:83:7d:20:ca:b9:ff:ee:e6:61:dc:e0:3f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
        Validity
            Not Before: Apr 29 06:00:45 2025 GMT
            Not After : Apr 30 06:00:45 2025 GMT
        Subject: CN=13734ad6aa98d44c16fc05d4df7fa7b602524763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:14:0e:86:a6:60:74:ae:78:11:4e:f4:c8:
                    8a:98:c6:bc:9f:b3:a1:f4:11:6a:17:c5:60:a4:8d:
                    c3:fe:f6:aa:62:ea:66:2a:57:c1:1d:f9:86:26:eb:
                    b0:4c:44:1c:26:bf:4a:2e:ea:8e:ee:2f:4b:3d:35:
                    62:e9:5d:7c:f8:09:0c:5b:e6:99:20:c2:98:e8:0b:
                    7b:52:6a:fc:2f:73:1a:32:0c:f6:64:c7:65:37:7d:
                    2f:6c:4d:ba:61:32:69:a8:4b:f6:b6:b4:47:d0:4d:
                    69:ec:04:48:2c:9b:2d:48:aa:5a:d7:56:99:e5:98:
                    ff:22:ba:5d:ee:c3:41:23:a5:56:ab:1f:c9:f9:7e:
                    ae:40:06:cb:c0:c1:d6:e9:43:2d:ee:ca:7e:d7:4c:
                    e1:b1:5c:6f:0a:23:ed:08:f9:aa:22:a0:64:7f:a6:
                    be:fe:2a:ac:46:d7:22:40:23:74:b4:4f:aa:a6:b8:
                    49:9f:41:d3:cf:e0:a0:1e:22:f4:6d:a3:8a:6c:1e:
                    51:48:35:a9:fa:86:69:4b:74:6a:e8:5e:ef:4f:b4:
                    63:af:22:7b:7e:f2:78:c4:d6:9f:e7:33:53:83:67:
                    91:8e:a6:6c:7f:e8:fc:55:36:cb:5e:85:1c:29:08:
                    56:6a:9d:e3:40:db:d6:5b:bc:6b:39:9c:d3:d1:54:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:4A:D6:AA:98:D4:4C:16:FC:05:D4:DF:7F:A7:B6:02:52:47:63
            X509v3 Authority Key Identifier:
                keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:f6:fe:26:fa:4a:d9:f2:ba:32:ef:fe:c1:ee:00:78:12:fd:
         63:c0:e7:38:a5:86:a1:11:55:da:58:fc:96:28:be:30:c2:4f:
         96:c4:36:14:88:e8:4c:3b:84:e5:d8:ae:f8:05:b9:94:b3:b1:
         6b:92:60:90:27:e6:92:6d:41:ac:1d:9b:fd:38:cf:5a:73:d1:
         75:1c:31:34:25:60:60:69:a5:b7:9d:46:e2:d3:a4:1c:70:a0:
         5d:a3:e4:77:7b:53:cb:34:4a:40:13:21:81:cf:e7:1d:02:96:
         79:8c:a2:59:e4:a2:d7:88:01:7e:29:b9:3e:84:7e:f7:f4:b7:
         b8:e5:4a:aa:cc:28:0b:3d:a3:77:18:07:3f:a7:23:2f:9e:dc:
         a2:89:af:56:b2:1d:8a:a1:31:47:0d:85:3a:fc:4f:1e:ff:2c:
         59:88:b4:bd:d9:b3:d0:a6:de:62:cc:79:b1:ee:74:1b:dc:f5:
         33:d4:e8:02:be:40:30:6c:d9:54:ba:5d:b9:01:1c:d6:1f:aa:
         af:7e:dd:25:47:b7:21:77:1c:bb:e3:40:7e:bc:e8:62:e6:bc:
         1c:1e:b3:74:a8:46:f1:78:cc:5e:bc:9f:bb:1e:c3:28:6c:70:
         eb:f2:64:ef:47:cd:5a:bc:82:9a:12:db:45:ab:f5:e4:d5:1d:
         71:e6:88:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIiuDfSDKuf/u5mHc4D8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTVmMGQ2YTk2MWFhZWJjNmIwYjUwODlkYTAyOTM5YjMx
MGE1MWMwHhcNMjUwNDI5MDYwMDQ1WhcNMjUwNDMwMDYwMDQ1WjAzMTEwLwYDVQQD
EygxMzczNGFkNmFhOThkNDRjMTZmYzA1ZDRkZjdmYTdiNjAyNTI0NzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhAUDoamYHSueBFO9MiKmMa8n7Oh
9BFqF8VgpI3D/vaqYupmKlfBHfmGJuuwTEQcJr9KLuqO7i9LPTVi6V18+AkMW+aZ
IMKY6At7Umr8L3MaMgz2ZMdlN30vbE26YTJpqEv2trRH0E1p7ARILJstSKpa11aZ
5Zj/Irpd7sNBI6VWqx/J+X6uQAbLwMHW6UMt7sp+10zhsVxvCiPtCPmqIqBkf6a+
/iqsRtciQCN0tE+qprhJn0HTz+CgHiL0baOKbB5RSDWp+oZpS3Rq6F7vT7RjryJ7
fvJ4xNaf5zNTg2eRjqZsf+j8VTbLXoUcKQhWap3jQNvWW7xrOZzT0VTB6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNzStaqmNRMFvwF1N9/p7YCUkdjMB8GA1UdIwQY
MBaAFJkV8NapYarrxrC1CJ2gKTmzEKUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUt
YmYyNmE3ZmFhNjAzLzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUtYmYyNmE3ZmFhNjAz
LzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Pb+JvpK
2fK6Mu/+we4AeBL9Y8DnOKWGoRFV2lj8lii+MMJPlsQ2FIjoTDuE5diu+AW5lLOx
a5JgkCfmkm1BrB2b/TjPWnPRdRwxNCVgYGmlt51G4tOkHHCgXaPkd3tTyzRKQBMh
gc/nHQKWeYyiWeSi14gBfim5PoR+9/S3uOVKqswoCz2jdxgHP6cjL57coomvVrId
iqExRw2FOvxPHv8sWYi0vdmz0KbeYsx5se50G9z1M9ToAr5AMGzZVLpduQEc1h+q
r37dJUe3IXccu+NAfrzoYua8HB6zdKhG8XjMXryfux7DKGxw6/Jk70fNWryCmhLb
Rav15NUdceaIFA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:17 2025 by rpki-client