Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          VVs56K6iNKBVg+ok/99QBnUuzDieOLouuP4YnEky6hA=
Subject key identifier:   A7:3C:0E:AD:9D:D7:2A:5D:29:F2:FD:98:29:AE:5B:57:D8:C3:F7:F6
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       019675307311C4AC17855384DF881F7CB727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          1489
Signing time:             Sun 27 Apr 2025 03:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:31 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: RW/BrAu0BcjBF9qMPTdLa1If9oHmxB51UuFGLuwJXlo=)
                          2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:73:11:c4:ac:17:85:53:84:df:88:1f:7c:b7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Apr 27 03:00:31 2025 GMT
            Not After : Apr 28 03:00:31 2025 GMT
        Subject: CN=a73c0ead9dd72a5d29f2fd9829ae5b57d8c3f7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:67:2b:c5:53:b5:44:77:4b:83:40:23:63:
                    52:6a:dc:ba:16:6b:0c:27:be:fb:2d:bd:fe:0c:b5:
                    d7:61:32:2c:b8:ed:90:b2:e3:5e:04:d2:9b:de:8d:
                    cc:dc:22:d0:08:74:b3:b3:c7:0c:9f:ca:11:2c:3e:
                    2a:ea:b5:bc:c1:45:5d:0f:0c:03:c8:09:cb:d1:36:
                    6b:29:f0:e2:7d:56:d8:c4:8d:2e:29:b5:dc:33:c1:
                    47:74:59:75:a5:45:39:17:55:c1:ac:2c:08:dd:4f:
                    b3:35:ab:a9:a0:67:44:52:28:a7:d0:6b:8d:61:62:
                    cb:62:5f:4a:66:fb:5e:65:49:d7:0e:0c:8b:fe:a0:
                    2e:6a:5b:1c:b1:25:07:67:ff:6d:a2:fa:a8:23:45:
                    e9:80:e5:9c:b8:37:79:00:57:59:53:aa:8e:5e:e2:
                    af:20:5c:8f:94:06:8b:0d:33:4a:92:ce:71:ae:15:
                    24:45:e0:1a:b3:2d:ca:68:99:03:1d:c9:dd:20:96:
                    55:63:72:4a:14:e2:af:06:dc:50:b1:32:14:06:5f:
                    ce:32:87:66:fb:f5:1a:60:1a:49:53:dd:5f:f4:20:
                    a3:f1:41:5f:9a:c1:0f:64:f9:41:2e:39:83:9e:45:
                    98:a8:71:1c:9a:7f:41:f2:80:2c:15:c9:c7:b9:81:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3C:0E:AD:9D:D7:2A:5D:29:F2:FD:98:29:AE:5B:57:D8:C3:F7:F6
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:bb:f7:fe:33:3d:1a:79:1e:8c:94:2c:85:2c:58:ff:11:26:
         6e:1d:06:2d:a4:62:65:8c:48:61:1e:5d:39:e0:20:c1:38:77:
         ae:3e:db:89:fb:6a:b7:d4:3d:94:90:bd:3b:c5:a9:62:59:2b:
         50:e9:fc:f1:9c:30:5c:83:43:fc:06:7d:73:38:24:c1:40:84:
         13:9c:a9:d6:8d:af:fd:f1:37:b8:7d:62:e7:09:3a:d7:31:6f:
         18:dc:d4:da:1c:15:ea:07:bc:3f:db:73:20:52:35:fc:4d:31:
         da:c6:56:f3:21:7e:88:fc:8a:0d:3d:74:39:89:4c:38:87:38:
         0f:26:f4:c5:5b:86:6b:f1:09:1e:49:c4:ca:a8:be:f5:8f:f5:
         fc:72:c9:bd:18:54:83:f3:c3:30:16:0a:2f:40:aa:02:82:e3:
         cf:4d:1b:c2:7b:a4:16:64:b6:a9:ac:49:70:f4:c6:2d:0e:ec:
         26:69:d8:88:5a:f9:57:c6:c5:44:d4:d8:83:28:06:46:bd:a9:
         40:fa:71:82:0f:95:a0:39:b8:6a:d4:00:26:fb:ea:4f:a1:2f:
         53:c7:67:5c:2f:7d:db:77:15:82:64:73:4e:92:3f:7e:08:01:
         aa:a0:bb:f9:a8:8e:6a:22:a4:c3:0d:4b:43:da:37:a4:51:c6:
         88:c0:a5:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MHMRxKwXhVOE34gffLcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTE3YzBhZmRhNDQ5ZWNjMDQyOWMwNDZkZjUwZmJjOTU5
YjRlZWEwHhcNMjUwNDI3MDMwMDMxWhcNMjUwNDI4MDMwMDMxWjAzMTEwLwYDVQQD
EyhhNzNjMGVhZDlkZDcyYTVkMjlmMmZkOTgyOWFlNWI1N2Q4YzNmN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTNnK8VTtUR3S4NAI2NSaty6FmsM
J777Lb3+DLXXYTIsuO2QsuNeBNKb3o3M3CLQCHSzs8cMn8oRLD4q6rW8wUVdDwwD
yAnL0TZrKfDifVbYxI0uKbXcM8FHdFl1pUU5F1XBrCwI3U+zNaupoGdEUiin0GuN
YWLLYl9KZvteZUnXDgyL/qAualscsSUHZ/9tovqoI0XpgOWcuDd5AFdZU6qOXuKv
IFyPlAaLDTNKks5xrhUkReAasy3KaJkDHcndIJZVY3JKFOKvBtxQsTIUBl/OModm
+/UaYBpJU91f9CCj8UFfmsEPZPlBLjmDnkWYqHEcmn9B8oAsFcnHuYGvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc8Dq2d1ypdKfL9mCmuW1fYw/f2MB8GA1UdIwQY
MBaAFOyRfAr9pEnswEKcBG31D7yVm07qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYt
ZDI1MmE1NzRhZThkLzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYtZDI1MmE1NzRhZThk
LzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbv3/jM9
GnkejJQshSxY/xEmbh0GLaRiZYxIYR5dOeAgwTh3rj7biftqt9Q9lJC9O8WpYlkr
UOn88ZwwXIND/AZ9czgkwUCEE5yp1o2v/fE3uH1i5wk61zFvGNzU2hwV6ge8P9tz
IFI1/E0x2sZW8yF+iPyKDT10OYlMOIc4Dyb0xVuGa/EJHknEyqi+9Y/1/HLJvRhU
g/PDMBYKL0CqAoLjz00bwnukFmS2qaxJcPTGLQ7sJmnYiFr5V8bFRNTYgygGRr2p
QPpxgg+VoDm4atQAJvvqT6EvU8dnXC9923cVgmRzTpI/fggBqqC7+aiOaiKkww1L
Q9o3pFHGiMClsQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:43 2025 by rpki-client