Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File:                     FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier:          QjqcnaWG0G/2JRu2T6ZjGWabhHjcGR0UskTIjZVMfXM=
Subject key identifier:   CE:95:E0:5D:AE:12:E7:CB:08:16:EF:99:CA:CA:C5:D2:12:46:3E:A4
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019671F87BBF7625B900BEA7C1CF370FFA29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number:          1527
Signing time:             Sat 26 Apr 2025 12:00:32 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:32 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:32 +0000
Files and hashes:         1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: S3S7hLoGTuIP+qWESijEz1iXdj373igkh4M3Wd7XIpA=)
                          2: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=)
                          3: ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa (hash: mTx3iBU5+gUzCuwkRIlwRwR4OdmyhWs/YLzJTZWJgsk=)
                          4: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=)
                          5: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=)
                          6: s09aV916ePc245Z9GMH4Ts0cTn8.roa (hash: hdMuDE9zUjm2uLsuj9BEHmHlQ1AMBc0s6keoHZxmUYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:7b:bf:76:25:b9:00:be:a7:c1:cf:37:0f:fa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Apr 26 12:00:32 2025 GMT
            Not After : Apr 27 12:00:32 2025 GMT
        Subject: CN=ce95e05dae12e7cb0816ef99cacac5d212463ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8f:e0:3f:cd:d4:e8:c8:09:f8:77:34:06:0e:
                    9c:62:b2:e3:fe:e6:11:83:77:f6:41:6e:5a:69:c5:
                    b7:1d:ca:6f:ee:5c:eb:ec:4f:29:14:31:cf:74:79:
                    8b:f4:c5:0e:25:b4:7c:1e:1a:b0:ff:f3:d1:fd:e7:
                    e9:1d:24:00:fb:49:6c:28:e1:78:01:87:9e:37:b0:
                    36:4f:3c:2d:32:2e:6a:52:6a:ac:38:39:a7:f7:2f:
                    d1:1b:0a:4e:8c:95:fe:4c:6b:31:52:b9:0a:a6:be:
                    5f:99:5b:f8:74:fb:34:36:7b:e5:a0:10:99:3d:31:
                    02:74:4b:db:b9:28:56:f4:d3:27:fd:80:a5:69:32:
                    9f:5a:84:c8:7f:93:ae:37:5a:24:77:97:c8:e8:9d:
                    2f:4e:c6:2e:31:37:55:a6:1e:15:7b:bb:61:43:5f:
                    d4:28:20:ac:cf:b1:e3:1a:d4:f9:51:aa:b5:92:e0:
                    5e:80:07:7a:9f:31:07:3e:23:e4:1b:c1:82:cc:0d:
                    9a:25:4e:fb:3f:e7:9c:cb:f2:a5:a4:73:cf:de:ea:
                    cc:b3:3f:8e:11:e5:fe:e1:10:63:88:3c:5f:25:95:
                    dd:ed:a4:40:6d:c3:c7:92:d7:09:d4:c6:c0:61:70:
                    54:9a:ef:86:f8:9f:bf:d0:76:d0:8f:cc:d3:0b:db:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:95:E0:5D:AE:12:E7:CB:08:16:EF:99:CA:CA:C5:D2:12:46:3E:A4
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5c:f6:e6:47:c4:54:f4:f2:cd:41:ca:0a:71:53:e9:dd:c5:
         58:9e:72:1f:de:b8:cd:96:5e:d0:0f:4c:0d:ce:ad:42:a4:7f:
         a5:2f:bd:80:a3:46:7f:60:e7:e4:d7:fc:fd:58:be:70:45:b5:
         2c:bc:b6:9b:02:84:8f:bc:54:74:dc:c0:78:2b:dc:75:59:78:
         68:86:4a:f7:0e:df:3a:31:22:99:36:aa:de:0b:5f:03:0b:20:
         6f:67:04:1a:68:64:c9:d5:d4:52:a9:64:fd:9e:2f:bd:bf:0a:
         18:a1:8c:67:ec:e5:d0:0d:20:d0:a2:e8:60:44:79:e0:ca:f8:
         70:47:14:00:30:d9:24:08:6b:29:61:fa:08:77:b7:36:e0:54:
         1a:b5:b2:23:9c:3a:a2:63:d2:b4:00:de:cf:6c:26:dd:76:6c:
         ec:12:23:1f:4d:58:72:5c:f9:1a:5c:59:0d:95:55:53:a9:79:
         e0:5e:a4:d5:ff:98:7f:7f:61:18:de:6e:1b:54:28:0a:7e:6f:
         cc:b4:09:f1:7a:fb:c7:d2:8d:d9:81:49:ab:8b:08:49:15:6e:
         84:cc:cf:05:77:5f:de:b5:76:f6:a5:6b:47:bd:73:cf:53:03:
         07:11:fe:fe:42:b4:22:90:7d:c0:3d:7c:e0:81:a2:99:47:30:
         3c:07:98:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZx+Hu/diW5AL6nwc83D/opMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjUwNDI2MTIwMDMyWhcNMjUwNDI3MTIwMDMyWjAzMTEwLwYDVQQD
EyhjZTk1ZTA1ZGFlMTJlN2NiMDgxNmVmOTljYWNhYzVkMjEyNDYzZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI/gP83U6MgJ+Hc0Bg6cYrLj/uYR
g3f2QW5aacW3Hcpv7lzr7E8pFDHPdHmL9MUOJbR8Hhqw//PR/efpHSQA+0lsKOF4
AYeeN7A2TzwtMi5qUmqsODmn9y/RGwpOjJX+TGsxUrkKpr5fmVv4dPs0NnvloBCZ
PTECdEvbuShW9NMn/YClaTKfWoTIf5OuN1okd5fI6J0vTsYuMTdVph4Ve7thQ1/U
KCCsz7HjGtT5Uaq1kuBegAd6nzEHPiPkG8GCzA2aJU77P+ecy/KlpHPP3urMsz+O
EeX+4RBjiDxfJZXd7aRAbcPHktcJ1MbAYXBUmu+G+J+/0HbQj8zTC9tDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6V4F2uEufLCBbvmcrKxdISRj6kMB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFz25kfE
VPTyzUHKCnFT6d3FWJ5yH964zZZe0A9MDc6tQqR/pS+9gKNGf2Dn5Nf8/Vi+cEW1
LLy2mwKEj7xUdNzAeCvcdVl4aIZK9w7fOjEimTaq3gtfAwsgb2cEGmhkydXUUqlk
/Z4vvb8KGKGMZ+zl0A0g0KLoYER54Mr4cEcUADDZJAhrKWH6CHe3NuBUGrWyI5w6
omPStADez2wm3XZs7BIjH01Yclz5GlxZDZVVU6l54F6k1f+Yf39hGN5uG1QoCn5v
zLQJ8Xr7x9KN2YFJq4sISRVuhMzPBXdf3rV29qVrR71zz1MDBxH+/kK0IpB9wD18
4IGimUcwPAeY9w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:21:06 2025 by rpki-client