Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File:                     fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier:          DpCy0z8xlpFu7SRg1rH4bonZXDnlPyLNuTqmncVs83E=
Subject key identifier:   D0:D6:31:EA:19:DF:5F:78:89:89:BB:13:9C:E3:7E:A7:2B:0F:A7:B7
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer:       /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial:       019673E6A3D1B07B230FBE872D5693526B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number:          0A6F
Signing time:             Sat 26 Apr 2025 21:00:17 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:17 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:17 +0000
Files and hashes:         1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: UrJ2TPSqekqNRaS76csl3Q8xTdYgfuyHBNDhaEDFE1c=)
                          2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:a3:d1:b0:7b:23:0f:be:87:2d:56:93:52:6b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9656d5867b43ce506445290bba705722260586
        Validity
            Not Before: Apr 26 21:00:17 2025 GMT
            Not After : Apr 27 21:00:17 2025 GMT
        Subject: CN=d0d631ea19df5f788989bb139ce37ea72b0fa7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:e3:8b:d8:00:d0:f7:93:8f:2f:59:5a:2f:
                    da:2e:4a:d4:bd:d0:95:91:f6:24:29:05:4a:08:f9:
                    b0:7e:71:f9:05:97:40:11:0e:c5:2b:7e:42:fe:cc:
                    3c:e2:6a:ae:a2:26:31:60:e2:7b:f9:e7:b1:38:1c:
                    25:8a:22:21:6d:0e:0f:5b:14:d1:90:ac:a0:24:f8:
                    bb:7c:5e:ef:af:7a:8d:4e:68:7e:27:12:1e:7f:43:
                    e5:ec:15:bf:fc:d1:82:03:23:19:e4:58:65:4b:bd:
                    28:e0:fe:bd:68:40:16:42:ba:30:e0:a6:d5:14:47:
                    46:9c:74:16:3e:69:c9:c8:55:0e:8b:10:c6:e7:d7:
                    4a:4d:bc:3e:f4:73:86:c6:b5:c9:a7:d3:0c:4d:c6:
                    40:48:06:72:1a:12:7d:cb:15:6a:f2:85:97:a8:bd:
                    9e:3d:85:a3:61:6a:6d:4d:e1:2d:c6:d2:56:3b:34:
                    6d:39:52:cb:4d:0a:34:ad:19:36:93:8d:3c:62:3b:
                    db:c4:9e:af:60:cf:52:3c:59:51:5d:fa:c6:14:4f:
                    1a:7f:52:03:99:e5:9d:3c:a3:82:ca:14:32:cb:80:
                    34:9c:b2:51:ff:20:4b:b0:ec:66:9e:1a:51:6c:fb:
                    15:45:3f:dd:0f:aa:1e:39:7e:d0:57:b8:d7:aa:5b:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D6:31:EA:19:DF:5F:78:89:89:BB:13:9C:E3:7E:A7:2B:0F:A7:B7
            X509v3 Authority Key Identifier:
                keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2f:26:d9:43:87:7d:e7:e9:c1:86:69:c2:ab:ef:f9:1c:45:
         7d:92:92:11:74:e2:7f:55:78:3c:a6:c8:48:4b:33:d0:86:df:
         3f:a0:65:65:ae:9a:47:f9:dd:c4:b4:bc:7a:34:8d:c8:a1:06:
         55:8d:bb:a2:d1:d8:a7:66:d2:7f:54:e5:28:fb:7d:20:8c:5a:
         e8:c9:3b:85:c6:40:6d:aa:54:45:56:61:c9:22:c0:1f:95:39:
         b9:35:90:4b:be:1d:9c:b9:2e:e5:77:e7:ca:58:18:4d:f4:18:
         20:c0:19:8b:63:af:8e:77:85:f5:9f:3f:b5:ed:95:50:a9:39:
         de:90:48:6e:1a:0b:ab:8d:a6:d7:27:46:52:13:a1:02:9c:5e:
         5a:29:ee:25:8d:b3:76:0b:3a:d9:e9:07:05:74:ad:77:47:17:
         b9:dd:97:1c:b5:17:64:12:21:8c:f5:a7:3a:00:b5:90:8b:1c:
         64:eb:bb:f4:d7:08:b3:2b:85:fc:43:43:0c:25:09:0a:58:0d:
         08:86:8a:d4:b4:d3:42:f3:98:95:3f:fa:31:30:69:22:ba:6e:
         84:f1:b9:59:ca:5d:04:f4:42:d1:e2:95:9a:23:de:a5:11:41:
         5a:07:05:6a:31:58:3b:f9:3f:af:f5:80:12:06:1c:e5:99:e5:
         1c:07:e0:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5qPRsHsjD76HLVaTUmtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOTY1NmQ1ODY3YjQzY2U1MDY0NDUyOTBiYmE3MDU3MjIy
NjA1ODYwHhcNMjUwNDI2MjEwMDE3WhcNMjUwNDI3MjEwMDE3WjAzMTEwLwYDVQQD
EyhkMGQ2MzFlYTE5ZGY1Zjc4ODk4OWJiMTM5Y2UzN2VhNzJiMGZhN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Tji9gA0PeTjy9ZWi/aLkrUvdCV
kfYkKQVKCPmwfnH5BZdAEQ7FK35C/sw84mquoiYxYOJ7+eexOBwliiIhbQ4PWxTR
kKygJPi7fF7vr3qNTmh+JxIef0Pl7BW//NGCAyMZ5FhlS70o4P69aEAWQrow4KbV
FEdGnHQWPmnJyFUOixDG59dKTbw+9HOGxrXJp9MMTcZASAZyGhJ9yxVq8oWXqL2e
PYWjYWptTeEtxtJWOzRtOVLLTQo0rRk2k408YjvbxJ6vYM9SPFlRXfrGFE8af1ID
meWdPKOCyhQyy4A0nLJR/yBLsOxmnhpRbPsVRT/dD6oeOX7QV7jXqlto+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDWMeoZ3194iYm7E5zjfqcrD6e3MB8GA1UdIwQY
MBaAFH2WVtWGe0POUGRFKQu6cFciJgWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2Qt
MGE2YjUzNmM0Mzk0LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2QtMGE2YjUzNmM0Mzk0
LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUi8m2UOH
fefpwYZpwqvv+RxFfZKSEXTif1V4PKbISEsz0IbfP6BlZa6aR/ndxLS8ejSNyKEG
VY27otHYp2bSf1TlKPt9IIxa6Mk7hcZAbapURVZhySLAH5U5uTWQS74dnLku5Xfn
ylgYTfQYIMAZi2OvjneF9Z8/te2VUKk53pBIbhoLq42m1ydGUhOhApxeWinuJY2z
dgs62ekHBXStd0cXud2XHLUXZBIhjPWnOgC1kIscZOu79NcIsyuF/ENDDCUJClgN
CIaK1LTTQvOYlT/6MTBpIrpuhPG5WcpdBPRC0eKVmiPepRFBWgcFajFYO/k/r/WA
EgYc5ZnlHAfgEA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:01 2025 by rpki-client