Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          uVECedw3ATqlNTs5tKZKi3h63it3okpMoWsL4EG8RJI=
Subject key identifier:   DA:07:18:E0:DD:C8:11:9F:C4:DF:55:68:A4:4C:3B:DC:0F:6F:CA:DC
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       01967868FBFF7009A54E0793FBDC95FE10E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          1513
Signing time:             Sun 27 Apr 2025 18:01:08 +0000
Manifest this update:     Sun 27 Apr 2025 18:01:08 +0000
Manifest next update:     Mon 28 Apr 2025 18:01:08 +0000
Files and hashes:         1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
                          2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: f2RNpY0fsuWanyAys5Qtil+4HFDqfYzBoGuez8pRh2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:fb:ff:70:09:a5:4e:07:93:fb:dc:95:fe:10:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: Apr 27 18:01:08 2025 GMT
            Not After : Apr 28 18:01:08 2025 GMT
        Subject: CN=da0718e0ddc8119fc4df5568a44c3bdc0f6fcadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:8f:c7:b9:c7:14:69:3b:8d:63:03:b9:ab:
                    70:d8:94:2f:ea:82:13:de:c3:f7:30:f9:13:b5:fb:
                    c7:95:7c:65:07:7f:87:c0:b6:11:59:8e:88:d0:67:
                    2e:f7:07:c5:52:e2:1b:42:c3:14:05:fa:64:4c:35:
                    e8:24:53:8b:74:39:c2:ba:a8:e0:d7:f4:b0:26:a1:
                    66:8c:38:d7:7f:6d:26:b3:cf:21:a8:63:55:81:9b:
                    d4:b6:a4:a5:eb:43:bf:93:60:f8:35:1f:9f:48:f6:
                    64:d2:d7:b7:5d:52:67:b5:c0:b9:1c:57:7c:ca:b6:
                    d0:72:d5:03:8a:38:0a:a3:b3:16:ff:c6:96:b3:d4:
                    78:e5:38:6f:e8:b4:64:55:37:dd:15:a0:36:7c:ec:
                    2d:fe:d0:43:95:f6:7c:da:9b:b5:f2:66:7e:9d:95:
                    18:b0:38:17:bd:b2:12:91:0c:60:40:8e:97:63:d7:
                    cd:cd:b5:48:80:e2:72:fb:c9:20:22:c6:2c:ba:83:
                    dc:30:e0:72:f8:88:91:58:ce:c0:a8:92:af:83:73:
                    e4:03:6e:7f:4e:be:04:a6:59:da:fb:73:da:31:8f:
                    04:cd:97:20:ca:ed:c9:84:da:21:3c:d7:99:f7:79:
                    19:3b:f5:d9:33:e6:db:93:dc:59:99:ac:cc:f5:08:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:07:18:E0:DD:C8:11:9F:C4:DF:55:68:A4:4C:3B:DC:0F:6F:CA:DC
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fb:fe:8b:8d:75:89:16:f8:8b:a4:dc:ed:c8:57:2f:7a:45:
         ef:04:3c:ba:9b:da:5c:59:47:45:0a:88:cc:dd:97:1e:1a:4e:
         a6:4f:69:b1:05:9e:4f:52:5d:14:f8:5d:84:8a:bb:05:d8:48:
         89:3c:39:ed:fc:d1:f2:9d:04:4e:28:f5:df:71:8f:88:71:f5:
         84:f8:ac:be:7b:ee:d2:ed:34:62:e4:98:86:fe:88:28:c8:28:
         1a:ab:01:06:51:6c:98:8c:b4:91:99:9c:cb:0b:a4:ff:85:cc:
         90:ac:42:42:d5:b4:60:cc:db:24:82:94:f1:a2:9e:0e:1b:56:
         c8:dc:67:4a:2f:5e:04:5c:e7:e2:1a:c0:a5:07:d2:36:4d:99:
         a0:e5:fe:c3:47:d7:ca:6a:36:48:be:96:c0:f0:a2:0c:06:0b:
         c3:6e:d8:17:40:6f:ab:ae:86:6c:d7:7a:0b:74:6b:f2:ca:6e:
         e5:7d:63:62:dc:83:18:01:c0:b0:d2:9b:5d:81:41:21:57:cd:
         a9:d0:48:62:77:2a:8c:d1:fc:5c:ee:f2:59:a5:34:fe:be:a7:
         7f:bc:41:8b:d9:62:f5:64:bc:c4:26:37:3e:2e:8f:4e:c8:98:
         9e:01:2a:47:52:aa:f3:86:2b:da:3c:56:1a:ef:e5:cf:21:02:
         22:cc:79:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aPv/cAmlTgeT+9yV/hDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjUwNDI3MTgwMTA4WhcNMjUwNDI4MTgwMTA4WjAzMTEwLwYDVQQD
EyhkYTA3MThlMGRkYzgxMTlmYzRkZjU1NjhhNDRjM2JkYzBmNmZjYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv2Px7nHFGk7jWMDuatw2JQv6oIT
3sP3MPkTtfvHlXxlB3+HwLYRWY6I0Gcu9wfFUuIbQsMUBfpkTDXoJFOLdDnCuqjg
1/SwJqFmjDjXf20ms88hqGNVgZvUtqSl60O/k2D4NR+fSPZk0te3XVJntcC5HFd8
yrbQctUDijgKo7MW/8aWs9R45Thv6LRkVTfdFaA2fOwt/tBDlfZ82pu18mZ+nZUY
sDgXvbISkQxgQI6XY9fNzbVIgOJy+8kgIsYsuoPcMOBy+IiRWM7AqJKvg3PkA25/
Tr4Eplna+3PaMY8EzZcgyu3JhNohPNeZ93kZO/XZM+bbk9xZmazM9QhkWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoHGODdyBGfxN9VaKRMO9wPb8rcMB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvv+i411
iRb4i6Tc7chXL3pF7wQ8upvaXFlHRQqIzN2XHhpOpk9psQWeT1JdFPhdhIq7BdhI
iTw57fzR8p0ETij133GPiHH1hPisvnvu0u00YuSYhv6IKMgoGqsBBlFsmIy0kZmc
ywuk/4XMkKxCQtW0YMzbJIKU8aKeDhtWyNxnSi9eBFzn4hrApQfSNk2ZoOX+w0fX
ymo2SL6WwPCiDAYLw27YF0Bvq66GbNd6C3Rr8spu5X1jYtyDGAHAsNKbXYFBIVfN
qdBIYncqjNH8XO7yWaU0/r6nf7xBi9li9WS8xCY3Pi6PTsiYngEqR1Kq84Yr2jxW
Gu/lzyECIsx5Ew==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:54:45 2025 by rpki-client