Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File:                     Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier:          8AfLuk15hyn65oIXwXPOKUiLOra5gqdn3zOFJAbgyAc=
Subject key identifier:   45:86:97:55:80:F0:84:8A:84:C8:25:25:99:54:9A:2E:2F:80:23:B4
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer:       /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial:       019677C3F0FBA1B6E2448371250B9EBD3B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number:          14A3
Signing time:             Sun 27 Apr 2025 15:00:52 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:52 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:52 +0000
Files and hashes:         1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=)
                          2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: sQzxQnqjRI3DvDMwKWYKVcMCTtz6Euo7rdOOhOrRQIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:f0:fb:a1:b6:e2:44:83:71:25:0b:9e:bd:3b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
        Validity
            Not Before: Apr 27 15:00:52 2025 GMT
            Not After : Apr 28 15:00:52 2025 GMT
        Subject: CN=4586975580f0848a84c8252599549a2e2f8023b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:44:80:50:3c:0d:85:e6:7c:b6:eb:41:20:
                    07:ce:20:05:3e:cb:50:72:08:3e:5c:f1:f5:bc:a7:
                    9b:36:18:ff:67:09:06:44:38:fb:a2:dc:42:10:85:
                    78:13:e5:40:67:89:65:40:8c:38:97:83:74:69:51:
                    60:27:46:cf:0b:cf:33:8a:75:8b:bd:26:0f:64:b9:
                    77:0e:e2:81:60:47:ee:32:57:3b:52:fa:f8:2f:5c:
                    be:03:e4:d8:df:17:2e:2c:96:7c:70:d5:d8:98:a8:
                    63:10:9b:94:94:d3:78:fa:7d:86:60:8b:c9:48:75:
                    53:ed:c9:3e:76:8b:34:30:8d:cd:70:d6:55:88:78:
                    06:ce:39:11:d7:75:4c:c9:4c:2b:87:1c:b9:d1:16:
                    24:dd:36:3a:bb:3e:ad:a0:34:b1:c5:e0:f7:7a:1d:
                    8b:15:d1:f7:35:47:74:45:2e:8e:e5:b8:3c:d3:b9:
                    e1:ad:ae:fb:01:2f:91:03:c9:92:2c:aa:65:22:89:
                    e7:b7:92:9a:85:31:bb:38:8b:df:a9:c4:4b:6c:d7:
                    ac:47:00:42:de:7b:60:1d:4f:41:0e:12:80:1e:49:
                    9c:b9:12:45:84:a0:4e:cb:27:69:71:3c:44:b2:c1:
                    a8:89:9f:fd:3a:c5:d9:83:d1:80:75:a3:94:9b:0e:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:97:55:80:F0:84:8A:84:C8:25:25:99:54:9A:2E:2F:80:23:B4
            X509v3 Authority Key Identifier:
                keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:cb:c0:91:a3:e3:e2:34:6d:a3:a6:74:88:1d:98:e1:e6:
         38:2a:c9:fd:f6:b3:e2:db:22:68:2f:ce:a7:10:74:2f:e6:a0:
         c6:b9:a1:ef:3e:13:e6:0e:31:fd:10:66:53:16:12:c2:ca:4a:
         73:81:5f:8e:c9:b2:c9:81:b1:8c:11:7e:c8:f6:98:39:23:01:
         69:f4:61:d2:9c:5e:4d:ee:47:5a:47:48:48:43:42:82:02:f8:
         08:7f:0e:7b:87:20:17:e1:97:86:0e:07:11:a5:63:3c:87:29:
         af:0d:97:d0:4a:aa:ca:91:41:c0:e2:8a:c6:5e:62:29:6e:e7:
         d7:29:b1:98:fc:96:75:74:47:af:dc:96:e7:f2:c6:55:99:58:
         bc:00:b0:94:fc:19:2c:2d:bb:ca:a8:8c:26:86:d8:a3:04:f6:
         b5:53:92:15:f1:d6:c3:e9:12:6f:85:0a:10:1b:e7:c9:b8:d2:
         e2:4e:ef:77:f3:98:b2:1f:b1:55:73:e4:45:f8:7f:bb:fd:8d:
         06:6b:01:d4:f7:a8:60:51:a5:1c:c2:cf:d6:3c:65:7f:2c:31:
         fa:bd:0e:91:21:b8:56:51:16:29:af:b2:55:8d:2b:c1:d9:78:
         ca:12:78:18:bb:bb:57:90:3c:ad:fa:2d:1d:1e:6c:d2:80:bf:
         57:f8:5e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w/D7obbiRINxJQuevTsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGU3YzBjZWI0YmEyYTZmNGI5NmZjNGJhZTFhYmI4NTMw
MzVhYmEwHhcNMjUwNDI3MTUwMDUyWhcNMjUwNDI4MTUwMDUyWjAzMTEwLwYDVQQD
Eyg0NTg2OTc1NTgwZjA4NDhhODRjODI1MjU5OTU0OWEyZTJmODAyM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraJEgFA8DYXmfLbrQSAHziAFPstQ
cgg+XPH1vKebNhj/ZwkGRDj7otxCEIV4E+VAZ4llQIw4l4N0aVFgJ0bPC88zinWL
vSYPZLl3DuKBYEfuMlc7Uvr4L1y+A+TY3xcuLJZ8cNXYmKhjEJuUlNN4+n2GYIvJ
SHVT7ck+dos0MI3NcNZViHgGzjkR13VMyUwrhxy50RYk3TY6uz6toDSxxeD3eh2L
FdH3NUd0RS6O5bg807nhra77AS+RA8mSLKplIonnt5KahTG7OIvfqcRLbNesRwBC
3ntgHU9BDhKAHkmcuRJFhKBOyydpcTxEssGoiZ/9OsXZg9GAdaOUmw6ETwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWGl1WA8ISKhMglJZlUmi4vgCO0MB8GA1UdIwQY
MBaAFDIOfAzrS6Km9LlvxLrhq7hTA1q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUt
MThhYWRkNjU5NTY2LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUtMThhYWRkNjU5NTY2
LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWXLwJGj
4+I0baOmdIgdmOHmOCrJ/faz4tsiaC/OpxB0L+agxrmh7z4T5g4x/RBmUxYSwspK
c4FfjsmyyYGxjBF+yPaYOSMBafRh0pxeTe5HWkdISENCggL4CH8Oe4cgF+GXhg4H
EaVjPIcprw2X0EqqypFBwOKKxl5iKW7n1ymxmPyWdXRHr9yW5/LGVZlYvACwlPwZ
LC27yqiMJobYowT2tVOSFfHWw+kSb4UKEBvnybjS4k7vd/OYsh+xVXPkRfh/u/2N
BmsB1PeoYFGlHMLP1jxlfywx+r0OkSG4VlEWKa+yVY0rwdl4yhJ4GLu7V5A8rfot
HR5s0oC/V/hePQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:39 2025 by rpki-client