Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File:                     RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier:          me+qG/phwA7craa77BBsI3PQDAN3zv97vK+1G5c6SB4=
Subject key identifier:   64:C6:A9:AD:E4:9B:50:E4:BE:8B:88:0D:EB:CA:30:91:11:3A:A4:3D
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer:       /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial:       0196767A99C808DEBEA4AF13BBC523F75252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number:          063F
Signing time:             Sun 27 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 27 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 28 Apr 2025 09:01:08 +0000
Files and hashes:         1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=)
                          2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: oK4/QAGX9RCbbFDQ2WCoozIC4A0mQbRguea1bcJQJWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:99:c8:08:de:be:a4:af:13:bb:c5:23:f7:52:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
        Validity
            Not Before: Apr 27 09:01:08 2025 GMT
            Not After : Apr 28 09:01:08 2025 GMT
        Subject: CN=64c6a9ade49b50e4be8b880debca3091113aa43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:8b:b9:33:8b:80:91:7c:6d:4a:cb:a5:65:
                    6e:57:28:3d:bd:8c:25:19:8a:e6:67:28:6b:0d:d0:
                    16:d5:20:1b:73:b0:80:98:a9:81:ce:ca:2d:a3:06:
                    71:bf:88:f2:68:9e:10:4a:6e:0b:08:16:0a:89:72:
                    a1:3c:2a:f2:bc:aa:68:99:bd:39:90:14:18:14:0d:
                    73:79:20:5b:9e:85:94:36:64:be:b7:ce:3f:4c:54:
                    4d:f0:8c:d8:37:c9:ad:64:97:f7:32:02:62:a3:af:
                    c6:04:6f:da:5f:a9:e8:06:2d:76:0b:a7:f7:42:43:
                    71:57:d7:25:5e:9b:2c:9f:e5:b7:ea:1e:7f:9b:51:
                    3a:71:b9:0e:91:9d:ec:9d:93:6a:1d:8e:03:38:14:
                    3e:9a:52:d5:de:0f:a5:10:01:74:0a:59:04:15:ab:
                    81:98:66:e4:00:0a:e6:12:21:cf:33:88:33:6b:fb:
                    6a:42:b3:31:e0:55:29:a4:a3:cb:7e:46:9a:f5:9e:
                    6b:8c:fd:6e:da:c0:64:ab:d9:89:c7:27:03:54:37:
                    76:a8:ab:df:ee:aa:88:7c:c2:88:58:83:b1:d8:69:
                    76:4d:73:00:e4:ad:df:bf:50:41:8f:92:0a:2b:d3:
                    de:39:ad:b9:f5:e4:00:d4:08:e9:31:33:99:03:07:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C6:A9:AD:E4:9B:50:E4:BE:8B:88:0D:EB:CA:30:91:11:3A:A4:3D
            X509v3 Authority Key Identifier:
                keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:39:74:3f:b8:0e:ca:84:de:a6:44:2a:4b:c9:a6:9b:a2:07:
         f5:01:b5:bf:be:de:a7:d0:61:84:e9:90:f3:b6:32:9b:ff:4d:
         0b:6a:0f:ce:64:1d:0c:59:af:8d:b5:b0:67:06:12:3c:97:f5:
         aa:94:96:de:8a:1f:67:1b:6c:ce:cb:0a:ce:86:11:b9:d3:ae:
         ba:3d:1b:07:0d:74:26:9c:eb:db:e6:f3:1e:37:98:68:c2:58:
         7e:62:0c:2a:4e:fe:9c:44:32:fc:7c:10:aa:32:c8:7e:fb:c8:
         33:b0:35:88:ae:75:cb:a7:11:98:21:87:ed:aa:a1:78:dc:32:
         83:d9:1c:f1:c0:41:58:4e:43:c5:e9:6d:10:58:c9:4c:8d:58:
         e0:d3:0e:56:98:af:24:f4:9b:07:83:7b:d4:41:b4:06:67:d7:
         15:cb:ed:34:60:be:5a:50:cb:84:df:fa:36:dd:ca:c5:52:ed:
         2e:0a:f3:36:30:ed:9b:55:4b:a7:c2:81:7b:4a:42:91:bb:e2:
         63:b1:e0:6f:48:32:9e:8b:29:bf:a5:85:65:24:31:ab:0f:46:
         69:cc:2e:3b:6a:20:84:81:69:ed:22:18:66:f5:7c:93:e3:63:
         5b:96:eb:7b:85:a3:12:55:45:50:45:58:a3:4a:03:02:f7:97:
         87:e1:f6:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2epnICN6+pK8Tu8Uj91JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy
ZTRiMDQwHhcNMjUwNDI3MDkwMTA4WhcNMjUwNDI4MDkwMTA4WjAzMTEwLwYDVQQD
Eyg2NGM2YTlhZGU0OWI1MGU0YmU4Yjg4MGRlYmNhMzA5MTExM2FhNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCaLuTOLgJF8bUrLpWVuVyg9vYwl
GYrmZyhrDdAW1SAbc7CAmKmBzsotowZxv4jyaJ4QSm4LCBYKiXKhPCryvKpomb05
kBQYFA1zeSBbnoWUNmS+t84/TFRN8IzYN8mtZJf3MgJio6/GBG/aX6noBi12C6f3
QkNxV9clXpssn+W36h5/m1E6cbkOkZ3snZNqHY4DOBQ+mlLV3g+lEAF0ClkEFauB
mGbkAArmEiHPM4gza/tqQrMx4FUppKPLfkaa9Z5rjP1u2sBkq9mJxycDVDd2qKvf
7qqIfMKIWIOx2Gl2TXMA5K3fv1BBj5IKK9PeOa259eQA1AjpMTOZAwdtlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTGqa3km1DkvouIDevKMJEROqQ9MB8GA1UdIwQY
MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt
YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz
LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTl0P7gO
yoTepkQqS8mmm6IH9QG1v77ep9BhhOmQ87Yym/9NC2oPzmQdDFmvjbWwZwYSPJf1
qpSW3oofZxtszssKzoYRudOuuj0bBw10Jpzr2+bzHjeYaMJYfmIMKk7+nEQy/HwQ
qjLIfvvIM7A1iK51y6cRmCGH7aqheNwyg9kc8cBBWE5DxeltEFjJTI1Y4NMOVpiv
JPSbB4N71EG0BmfXFcvtNGC+WlDLhN/6Nt3KxVLtLgrzNjDtm1VLp8KBe0pCkbvi
Y7Hgb0gynospv6WFZSQxqw9GacwuO2oghIFp7SIYZvV8k+NjW5bre4WjElVFUEVY
o0oDAveXh+H2XQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:09:01 2025 by rpki-client