Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File:                     8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier:          tZg8HD/uMLYzcWXxThy+2+agjWNvEBQVBbLpSV732ik=
Subject key identifier:   58:AA:13:4B:F3:C3:94:4C:81:C1:54:5F:76:19:DA:E5:85:06:7E:D6
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer:       /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial:       01969039D89FE746BD851E7850B203764D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number:          02ED
Signing time:             Fri 02 May 2025 09:00:32 +0000
Manifest this update:     Fri 02 May 2025 09:00:32 +0000
Manifest next update:     Sat 03 May 2025 09:00:32 +0000
Files and hashes:         1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: 1cF8riHLXAE0uq9K8XCxn8wfISjrgMK0v4SsrBw63ME=)
                          2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:39:d8:9f:e7:46:bd:85:1e:78:50:b2:03:76:4d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
        Validity
            Not Before: May  2 09:00:32 2025 GMT
            Not After : May  3 09:00:32 2025 GMT
        Subject: CN=58aa134bf3c3944c81c1545f7619dae585067ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:bf:0a:f5:c7:e2:f7:d3:64:f3:b5:98:3c:
                    52:03:ce:34:83:e1:aa:4a:ed:68:0d:6b:fe:c6:d3:
                    4c:65:d5:30:0c:fe:b9:1b:02:86:14:08:88:6a:82:
                    f0:6d:da:b2:22:84:b2:3b:6b:d9:37:60:3d:be:e7:
                    ee:7b:b6:21:65:71:3b:14:7c:51:6c:c0:f7:c4:05:
                    95:13:75:ca:d6:30:3f:13:c1:8e:67:72:f6:7a:78:
                    17:5b:c2:fc:cf:c1:87:7e:e1:d1:dd:cd:43:7d:c9:
                    70:b5:4f:b1:09:b9:54:01:46:4c:da:e1:91:0e:09:
                    75:ab:1e:6f:07:df:cb:be:80:6f:7c:e2:13:d1:44:
                    31:20:25:5c:00:c7:55:7d:c7:75:5d:20:6d:a6:51:
                    8c:97:6b:30:55:a8:c6:e2:97:0b:de:2b:b9:16:97:
                    4c:4d:bd:04:aa:5a:b4:b8:22:af:4b:8a:bb:fb:de:
                    cd:a9:e1:48:14:2d:46:72:e6:21:d3:64:b5:38:a6:
                    e0:e3:ce:a9:84:6a:91:c8:65:06:03:7e:75:dc:07:
                    ef:e2:95:9c:1d:2d:09:0e:a5:c5:9d:bd:37:fb:36:
                    01:c3:fe:94:27:0f:fb:bf:10:ce:18:37:1a:ac:8d:
                    8b:bc:71:10:e9:fa:42:44:d1:de:44:d2:48:df:c7:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AA:13:4B:F3:C3:94:4C:81:C1:54:5F:76:19:DA:E5:85:06:7E:D6
            X509v3 Authority Key Identifier:
                keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2f:54:85:38:67:02:75:c1:72:17:23:10:c6:8f:57:d8:5b:
         14:dc:14:fd:ef:a5:7b:97:37:db:f0:65:04:6e:3e:5e:ab:6e:
         49:fc:12:74:02:76:1d:fe:4d:55:9e:87:a6:60:c9:ef:3c:bc:
         c0:7c:5a:79:8f:10:e5:59:d1:b0:c0:94:9a:8e:7e:92:91:4a:
         57:60:38:ed:5a:2b:a9:b7:36:bf:4e:c4:75:54:b9:0f:8b:71:
         dc:b3:53:85:15:cb:e8:d3:8f:1b:8c:ab:09:95:65:e0:94:77:
         be:d4:fd:c0:0f:74:7b:3b:13:0c:b0:85:b6:ae:47:1d:51:4b:
         b5:cb:33:a9:c9:a5:63:ad:68:35:1b:7e:6b:25:e6:b9:ec:ff:
         be:e1:33:72:9c:05:20:60:82:57:d3:cd:9f:d0:fd:2b:ac:cf:
         7d:90:e3:ab:f9:0b:7a:40:05:a4:a2:c6:e7:46:37:9b:78:af:
         27:21:fb:9d:0f:7f:e0:a5:7b:d2:f6:83:a6:f1:cf:e8:74:70:
         e6:3e:12:23:dc:04:46:72:de:fd:e8:8d:4c:3b:9b:58:77:b9:
         a5:a8:0c:e2:00:e7:06:00:70:45:68:fc:5d:37:30:2f:5e:5f:
         bf:a1:a7:8e:7c:11:58:3c:68:11:c2:bd:1e:90:bb:af:59:3a:
         b3:7f:53:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQOdif50a9hR54ULIDdk0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjI3YWViZjAyYWJjMzU1MjEyYWZiZjE2MjFlM2UwZDRh
NzYwNTcwHhcNMjUwNTAyMDkwMDMyWhcNMjUwNTAzMDkwMDMyWjAzMTEwLwYDVQQD
Eyg1OGFhMTM0YmYzYzM5NDRjODFjMTU0NWY3NjE5ZGFlNTg1MDY3ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUu/CvXH4vfTZPO1mDxSA840g+Gq
Su1oDWv+xtNMZdUwDP65GwKGFAiIaoLwbdqyIoSyO2vZN2A9vufue7YhZXE7FHxR
bMD3xAWVE3XK1jA/E8GOZ3L2engXW8L8z8GHfuHR3c1DfclwtU+xCblUAUZM2uGR
Dgl1qx5vB9/LvoBvfOIT0UQxICVcAMdVfcd1XSBtplGMl2swVajG4pcL3iu5FpdM
Tb0Eqlq0uCKvS4q7+97NqeFIFC1GcuYh02S1OKbg486phGqRyGUGA3513Afv4pWc
HS0JDqXFnb03+zYBw/6UJw/7vxDOGDcarI2LvHEQ6fpCRNHeRNJI38d5ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiqE0vzw5RMgcFUX3YZ2uWFBn7WMB8GA1UdIwQY
MBaAFPDyeuvwKrw1UhKvvxYh4+DUp2BXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgt
YzQ1ZjhlMjUxMjQ4LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgtYzQ1ZjhlMjUxMjQ4
LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS9UhThn
AnXBchcjEMaPV9hbFNwU/e+le5c32/BlBG4+XqtuSfwSdAJ2Hf5NVZ6HpmDJ7zy8
wHxaeY8Q5VnRsMCUmo5+kpFKV2A47Vorqbc2v07EdVS5D4tx3LNThRXL6NOPG4yr
CZVl4JR3vtT9wA90ezsTDLCFtq5HHVFLtcszqcmlY61oNRt+ayXmuez/vuEzcpwF
IGCCV9PNn9D9K6zPfZDjq/kLekAFpKLG50Y3m3ivJyH7nQ9/4KV70vaDpvHP6HRw
5j4SI9wERnLe/eiNTDubWHe5pagM4gDnBgBwRWj8XTcwL15fv6GnjnwRWDxoEcK9
HpC7r1k6s39T8Q==
-----END CERTIFICATE-----
Generated at Fri May 2 13:40:40 2025 by rpki-client