Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File:                     A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier:          DbOS2lWHx5kiNFfNClSCowkhdySVeShyOUvKPZquYSI=
Subject key identifier:   51:8D:71:8C:66:4A:ED:36:50:16:A3:2E:9B:1A:E9:F0:D7:0B:D8:9C
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer:       /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial:       0196759E501745CFD65AE5C73ABEB788078C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number:          101F
Signing time:             Sun 27 Apr 2025 05:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:31 +0000
Files and hashes:         1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: Pf49I7CsV8nL9wMR0dkikeN3WvVnpExsFCwgubJx/1U=)
                          2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=)
                          3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=)
                          4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=)
                          5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:50:17:45:cf:d6:5a:e5:c7:3a:be:b7:88:07:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
        Validity
            Not Before: Apr 27 05:00:31 2025 GMT
            Not After : Apr 28 05:00:31 2025 GMT
        Subject: CN=518d718c664aed365016a32e9b1ae9f0d70bd89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:5e:ae:69:18:02:01:86:21:88:b4:09:24:
                    84:31:db:9f:ed:e3:82:1d:23:ab:02:c3:ea:74:27:
                    80:60:4e:ad:52:b8:51:73:3e:0b:f9:cc:cb:11:da:
                    48:b3:02:22:b0:e9:ac:a7:d3:3b:7f:68:0a:71:71:
                    9d:6c:36:30:1f:71:2b:66:40:f9:09:79:bc:09:3e:
                    6f:c3:1f:c1:07:8d:7b:c8:02:4c:65:de:ad:f0:d4:
                    0e:c5:48:9e:cb:6e:e8:49:10:0f:fc:5b:43:8b:e0:
                    6d:c5:fd:b9:80:e1:3d:9b:0d:68:3e:ff:e2:ab:f8:
                    46:b6:f4:fe:fc:8c:55:2f:57:17:c8:a6:a5:8e:74:
                    b3:2e:2e:bc:a8:91:f0:51:70:43:ed:af:61:34:be:
                    97:99:06:5a:d6:4f:7d:b3:e3:f9:cd:be:84:4a:ed:
                    73:4a:56:85:ad:26:59:f0:00:46:97:6f:0a:e8:6e:
                    83:14:52:6b:29:3c:83:7e:a5:f6:c8:d2:47:06:cd:
                    f8:8b:9c:2b:80:7d:a7:3f:39:3d:b1:02:53:98:6b:
                    a4:c6:de:58:fb:57:ae:2b:bd:b4:a4:6a:46:da:28:
                    f9:a1:26:eb:d1:bb:be:45:75:ae:3a:2a:ee:eb:78:
                    58:49:34:f9:e4:19:f7:c1:cc:11:d3:1a:c2:17:ce:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:71:8C:66:4A:ED:36:50:16:A3:2E:9B:1A:E9:F0:D7:0B:D8:9C
            X509v3 Authority Key Identifier:
                keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:17:08:ab:ab:b5:f5:17:95:b9:07:1e:47:98:9b:e7:eb:
         dc:9c:d5:db:1d:85:63:33:86:36:2a:af:92:5d:bb:9f:87:e8:
         57:9c:ed:c2:7b:82:39:03:f4:b2:38:39:9d:88:2d:1d:a2:0e:
         7c:67:ee:5e:99:9a:c9:74:68:d6:56:a7:28:66:73:24:31:5a:
         04:0b:de:32:af:53:46:a6:ff:63:5b:ff:a7:0c:22:1e:ee:2e:
         47:85:59:37:55:12:11:9a:39:09:e6:9f:41:61:af:22:72:11:
         2d:46:d6:aa:64:a1:45:77:b9:2c:0d:15:34:15:ea:85:54:b7:
         40:82:86:93:23:e5:1f:0b:e3:b8:e7:f8:ae:7e:50:80:82:29:
         50:d3:db:97:d6:a0:1d:60:9c:bb:50:4a:bc:df:c7:0f:fa:d2:
         45:84:bd:52:56:30:48:8e:eb:94:48:ce:b3:78:0b:d7:b6:de:
         fe:c2:c1:06:0b:f7:62:c7:b8:50:7f:f7:17:56:bd:5e:8b:65:
         16:08:98:bc:93:d9:02:ea:62:17:ed:cc:34:e3:81:33:52:28:
         e0:d2:61:3f:e9:c0:1d:4d:5c:23:38:5d:29:da:6f:a1:2b:58:
         55:af:8b:aa:a8:ab:1c:09:a3:75:ff:d2:e9:48:c1:ed:0e:03:
         d9:74:8f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nlAXRc/WWuXHOr63iAeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk
ZmUyYTIwHhcNMjUwNDI3MDUwMDMxWhcNMjUwNDI4MDUwMDMxWjAzMTEwLwYDVQQD
Eyg1MThkNzE4YzY2NGFlZDM2NTAxNmEzMmU5YjFhZTlmMGQ3MGJkODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZermkYAgGGIYi0CSSEMduf7eOC
HSOrAsPqdCeAYE6tUrhRcz4L+czLEdpIswIisOmsp9M7f2gKcXGdbDYwH3ErZkD5
CXm8CT5vwx/BB417yAJMZd6t8NQOxUiey27oSRAP/FtDi+Btxf25gOE9mw1oPv/i
q/hGtvT+/IxVL1cXyKaljnSzLi68qJHwUXBD7a9hNL6XmQZa1k99s+P5zb6ESu1z
SlaFrSZZ8ABGl28K6G6DFFJrKTyDfqX2yNJHBs34i5wrgH2nPzk9sQJTmGukxt5Y
+1euK720pGpG2ij5oSbr0bu+RXWuOiru63hYSTT55Bn3wcwR0xrCF86OGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGNcYxmSu02UBajLpsa6fDXC9icMB8GA1UdIwQY
MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt
ZjQ3NGY3YmQzNTMxLzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx
LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULgXCKur
tfUXlbkHHkeYm+fr3JzV2x2FYzOGNiqvkl27n4foV5ztwnuCOQP0sjg5nYgtHaIO
fGfuXpmayXRo1lanKGZzJDFaBAveMq9TRqb/Y1v/pwwiHu4uR4VZN1USEZo5Ceaf
QWGvInIRLUbWqmShRXe5LA0VNBXqhVS3QIKGkyPlHwvjuOf4rn5QgIIpUNPbl9ag
HWCcu1BKvN/HD/rSRYS9UlYwSI7rlEjOs3gL17be/sLBBgv3Yse4UH/3F1a9Xotl
FgiYvJPZAupiF+3MNOOBM1Io4NJhP+nAHU1cIzhdKdpvoStYVa+LqqirHAmjdf/S
6UjB7Q4D2XSP5w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:38:30 2025 by rpki-client