Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File:                     Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier:          w9sokmbik6hvXn6mna9jI3Q7/Rp0Ag+rf5OU/Sj0U6U=
Subject key identifier:   76:D2:6D:D5:13:F7:5C:CB:DB:DF:58:C7:69:5D:61:84:96:74:0E:13
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer:       /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial:       019680FD8A7B3516689ADC53605E10E1AD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number:          028D
Signing time:             Tue 29 Apr 2025 10:00:21 +0000
Manifest this update:     Tue 29 Apr 2025 10:00:21 +0000
Manifest next update:     Wed 30 Apr 2025 10:00:21 +0000
Files and hashes:         1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: ElUHPsjMMWvzNBlBNz0+yaLb6fA1ml22k6Mn8CQhmUg=)
                          2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 10:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:fd:8a:7b:35:16:68:9a:dc:53:60:5e:10:e1:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
        Validity
            Not Before: Apr 29 10:00:21 2025 GMT
            Not After : Apr 30 10:00:21 2025 GMT
        Subject: CN=76d26dd513f75ccbdbdf58c7695d618496740e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e6:75:48:d9:56:63:b4:3d:68:1b:a9:5f:ae:
                    fe:4b:04:bf:75:cb:8d:d9:8e:7e:77:2b:9d:35:58:
                    c3:93:74:dd:09:24:52:95:5e:52:36:e2:74:ee:ba:
                    88:0c:5a:70:16:7f:35:0c:9e:74:be:4f:51:a1:33:
                    39:52:1d:0d:f0:bf:7c:8b:ef:0b:f6:01:56:a1:0b:
                    49:58:97:33:f3:a3:01:8f:ae:46:6d:85:fe:30:b2:
                    7f:0c:a9:61:19:db:bb:ce:6f:06:50:f8:58:fa:9c:
                    d0:a9:4a:c5:72:9b:ee:6e:14:2c:41:f2:81:58:b3:
                    8f:ff:f9:93:94:e1:94:09:11:77:ef:55:c5:a1:ca:
                    9b:1b:b4:c2:25:a9:ac:f6:c1:f7:c1:5f:df:57:6d:
                    d1:0b:53:5e:53:42:b3:9e:b6:bc:1a:1f:25:33:38:
                    b7:bd:e5:f0:c5:53:7b:d3:0e:f2:03:1b:a5:44:1f:
                    1a:2e:28:0b:7a:a5:1c:63:e2:fa:e9:5f:44:04:b6:
                    2a:fc:8b:68:5e:05:f2:21:64:ab:5b:87:8b:08:97:
                    f2:bd:e2:07:d8:6c:4d:05:16:0b:30:5a:e3:33:07:
                    30:8d:1e:d4:52:7f:e9:47:fa:c4:d4:bb:b7:98:a4:
                    b6:8c:65:b0:7f:14:21:3d:91:ca:e7:e8:41:05:db:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:6D:D5:13:F7:5C:CB:DB:DF:58:C7:69:5D:61:84:96:74:0E:13
            X509v3 Authority Key Identifier:
                keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:95:2e:db:11:40:9e:c6:41:09:77:df:49:e3:36:a1:8c:01:
         56:b0:bd:f5:8f:f3:a0:cb:d5:c2:8a:d9:dd:e5:c4:a9:f1:b1:
         83:1e:80:5c:a0:3c:6f:53:05:d9:ff:2b:eb:18:b5:05:ed:1c:
         ac:34:32:ba:8d:e8:39:92:87:c3:f3:d1:db:ea:6f:35:40:5c:
         45:ad:ed:45:3b:a7:d2:51:6a:28:b3:df:23:0a:8e:f1:65:01:
         f3:53:27:4a:0f:19:cf:a8:8e:57:b1:2e:98:61:5e:25:d1:b1:
         a9:cc:dd:79:7b:4e:4b:d4:4b:b1:cf:9b:14:24:99:23:e4:9f:
         5b:7b:2a:f0:8c:a2:5d:dc:5e:a8:a7:cc:6c:0d:a2:e4:9e:ca:
         b0:4a:99:46:a5:6c:55:f5:74:76:8d:65:3f:a0:6b:5e:7e:7b:
         d6:ff:5d:10:a8:c8:d7:04:d3:93:aa:61:97:41:58:a7:d2:b1:
         62:07:cd:31:12:00:5d:1a:d9:a9:37:44:dd:1f:d3:88:96:ac:
         6e:e5:b4:6e:90:b6:62:9c:14:33:12:a8:ab:91:b2:ee:71:c5:
         62:08:1a:66:7c:67:fa:3d:2b:0f:33:b9:30:53:bd:d8:51:2f:
         1f:cf:aa:88:25:a3:ec:6b:91:b9:18:c1:b9:aa:6e:98:40:60:
         a6:ab:05:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaA/Yp7NRZomtxTYF4Q4a0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm
ZDdlOGMwHhcNMjUwNDI5MTAwMDIxWhcNMjUwNDMwMTAwMDIxWjAzMTEwLwYDVQQD
Eyg3NmQyNmRkNTEzZjc1Y2NiZGJkZjU4Yzc2OTVkNjE4NDk2NzQwZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OZ1SNlWY7Q9aBupX67+SwS/dcuN
2Y5+dyudNVjDk3TdCSRSlV5SNuJ07rqIDFpwFn81DJ50vk9RoTM5Uh0N8L98i+8L
9gFWoQtJWJcz86MBj65GbYX+MLJ/DKlhGdu7zm8GUPhY+pzQqUrFcpvubhQsQfKB
WLOP//mTlOGUCRF371XFocqbG7TCJams9sH3wV/fV23RC1NeU0Kznra8Gh8lMzi3
veXwxVN70w7yAxulRB8aLigLeqUcY+L66V9EBLYq/ItoXgXyIWSrW4eLCJfyveIH
2GxNBRYLMFrjMwcwjR7UUn/pR/rE1Lu3mKS2jGWwfxQhPZHK5+hBBdv2/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbSbdUT91zL299Yx2ldYYSWdA4TMB8GA1UdIwQY
MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt
NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw
LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZUu2xFA
nsZBCXffSeM2oYwBVrC99Y/zoMvVworZ3eXEqfGxgx6AXKA8b1MF2f8r6xi1Be0c
rDQyuo3oOZKHw/PR2+pvNUBcRa3tRTun0lFqKLPfIwqO8WUB81MnSg8Zz6iOV7Eu
mGFeJdGxqczdeXtOS9RLsc+bFCSZI+SfW3sq8IyiXdxeqKfMbA2i5J7KsEqZRqVs
VfV0do1lP6BrXn571v9dEKjI1wTTk6phl0FYp9KxYgfNMRIAXRrZqTdE3R/TiJas
buW0bpC2YpwUMxKoq5Gy7nHFYggaZnxn+j0rDzO5MFO92FEvH8+qiCWj7GuRuRjB
uapumEBgpqsFXg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:26:58 2025 by rpki-client