Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          VpfV88FyVzfZjQdgelT/b164W0PGQWJcmQIIcAwMiHk=
Subject key identifier:   5F:27:3B:04:3D:71:BF:03:90:59:6F:59:15:8B:B7:F4:2F:3D:75:D9
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       019674C2B47175B672310A0D2D4BED70AEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          13E0
Signing time:             Sun 27 Apr 2025 01:00:39 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:39 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:39 +0000
Files and hashes:         1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
                          2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: dC5Md35Z3zV623q6CyO0TF1ilL0yEMoooZNjnDYGDWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:b4:71:75:b6:72:31:0a:0d:2d:4b:ed:70:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: Apr 27 01:00:39 2025 GMT
            Not After : Apr 28 01:00:39 2025 GMT
        Subject: CN=5f273b043d71bf0390596f59158bb7f42f3d75d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:6e:ed:1f:95:89:fd:a5:34:a0:48:6c:7f:
                    75:86:b5:c5:66:a8:c0:1d:e4:74:37:e6:54:61:80:
                    01:42:06:d9:2e:df:25:e9:64:6d:f1:9f:84:9d:71:
                    f4:d7:46:3d:cb:1b:28:5a:70:c6:eb:23:f8:4f:65:
                    b1:97:bc:10:91:1c:e9:b6:e7:84:70:51:d4:40:f6:
                    09:e6:40:f9:fa:0a:59:74:62:d3:34:c6:45:20:3e:
                    76:72:cc:a5:8a:65:66:e9:05:83:ae:e2:96:b7:83:
                    de:3f:ab:55:61:c2:e8:e6:26:1f:87:23:3f:63:28:
                    fd:70:c4:4e:05:c6:84:a6:55:f4:cc:2d:e5:5d:e8:
                    15:1d:88:7f:1d:fc:65:e7:6f:a0:0d:d2:27:36:eb:
                    81:78:2c:13:71:f1:1b:1e:fa:58:1e:b2:d2:7b:b1:
                    87:da:ae:dd:52:05:18:69:4a:b0:21:51:f2:5f:a7:
                    66:42:ff:d6:28:30:24:cc:50:1a:db:6b:a6:c3:c4:
                    06:30:c6:98:c4:83:c8:15:42:10:e3:3e:fc:57:5d:
                    9b:ed:2d:55:93:79:e2:b4:e3:74:08:e7:21:6f:0a:
                    3c:a3:51:80:d1:81:10:33:eb:26:82:76:ca:9c:c8:
                    f9:e2:3d:be:9a:7b:68:97:8a:fc:77:d7:4d:c0:bc:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:3B:04:3D:71:BF:03:90:59:6F:59:15:8B:B7:F4:2F:3D:75:D9
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:82:ab:20:b5:8e:9a:bf:41:ef:cb:47:a9:e7:4d:c9:e0:9a:
         2d:99:f5:72:2b:1e:d3:07:3d:9d:4a:de:ca:1a:a1:f7:ae:84:
         d7:fa:ba:a5:c4:0c:7f:5f:68:0e:a9:6d:77:46:51:17:c8:a7:
         da:2c:8c:50:d5:f0:9e:7e:16:53:46:28:31:b9:49:79:47:da:
         08:1c:42:07:7c:81:5b:a1:9b:d5:15:e9:46:57:a8:22:83:e5:
         95:80:3e:78:38:ad:07:dc:00:f8:10:af:75:b2:bc:1d:bc:3a:
         c6:6b:e2:d1:2d:eb:ff:b7:2e:8b:75:70:14:6b:b8:c5:e5:71:
         dc:86:d1:7a:e9:11:71:4a:03:ea:ad:b3:cb:20:d7:35:21:f0:
         a0:a3:48:bb:35:f0:d5:e2:a7:10:43:4a:64:42:d6:31:db:e6:
         ba:da:c3:9a:35:96:87:6d:a1:5e:92:ee:d6:f1:44:5d:81:ae:
         70:f2:47:34:25:b4:83:d6:76:86:c0:08:09:be:be:19:34:0a:
         d2:34:5e:2b:ef:e0:8f:87:cb:00:be:2f:73:2b:15:aa:c4:12:
         8f:bd:ca:f8:c2:18:cb:c1:04:db:5b:62:5a:0c:2b:c7:47:6a:
         ab:b8:75:cb:46:d3:05:dc:63:b1:9c:e7:e2:81:57:57:cd:f7:
         b4:dd:87:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wrRxdbZyMQoNLUvtcK7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZWJjODZkODUzZjdlM2E5MjAxNTNmMWZiMGIxOWY3YjBl
NDFhN2YwHhcNMjUwNDI3MDEwMDM5WhcNMjUwNDI4MDEwMDM5WjAzMTEwLwYDVQQD
Eyg1ZjI3M2IwNDNkNzFiZjAzOTA1OTZmNTkxNThiYjdmNDJmM2Q3NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Nu7R+Vif2lNKBIbH91hrXFZqjA
HeR0N+ZUYYABQgbZLt8l6WRt8Z+EnXH010Y9yxsoWnDG6yP4T2Wxl7wQkRzptueE
cFHUQPYJ5kD5+gpZdGLTNMZFID52csylimVm6QWDruKWt4PeP6tVYcLo5iYfhyM/
Yyj9cMROBcaEplX0zC3lXegVHYh/Hfxl52+gDdInNuuBeCwTcfEbHvpYHrLSe7GH
2q7dUgUYaUqwIVHyX6dmQv/WKDAkzFAa22umw8QGMMaYxIPIFUIQ4z78V12b7S1V
k3nitON0COchbwo8o1GA0YEQM+smgnbKnMj54j2+mntol4r8d9dNwLx53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8nOwQ9cb8DkFlvWRWLt/QvPXXZMB8GA1UdIwQY
MBaAFBfryG2FP346kgFT8fsLGfew5Bp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTIt
Zjc1NjE4YmU2MmQ3LzEvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTItZjc1NjE4YmU2MmQ3
LzEvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4KrILWO
mr9B78tHqedNyeCaLZn1cise0wc9nUreyhqh966E1/q6pcQMf19oDqltd0ZRF8in
2iyMUNXwnn4WU0YoMblJeUfaCBxCB3yBW6Gb1RXpRleoIoPllYA+eDitB9wA+BCv
dbK8Hbw6xmvi0S3r/7cui3VwFGu4xeVx3IbReukRcUoD6q2zyyDXNSHwoKNIuzXw
1eKnEENKZELWMdvmutrDmjWWh22hXpLu1vFEXYGucPJHNCW0g9Z2hsAICb6+GTQK
0jReK+/gj4fLAL4vcysVqsQSj73K+MIYy8EE21tiWgwrx0dqq7h1y0bTBdxjsZzn
4oFXV833tN2Hjw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:45 2025 by rpki-client