Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          AZhgj+xyQw1RdPJxqNczwsqyKlWFUDjg9Sggye5S0NQ=
Subject key identifier:   1C:69:4A:B9:FD:91:C7:DC:45:40:96:6A:EB:02:4B:26:51:F5:80:26
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       019691BAA6B6C943D8875BAE6F0ECBD6158C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0A0F
Signing time:             Fri 02 May 2025 16:00:50 +0000
Manifest this update:     Fri 02 May 2025 16:00:50 +0000
Manifest next update:     Sat 03 May 2025 16:00:50 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: tq9PLdnmOoBWnsN7AFixQVwNdyls18Ul0El2620VpUA=)
                          2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=)
                          3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=)
                          4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=)
                          5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=)
                          6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:ba:a6:b6:c9:43:d8:87:5b:ae:6f:0e:cb:d6:15:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: May  2 16:00:50 2025 GMT
            Not After : May  3 16:00:50 2025 GMT
        Subject: CN=1c694ab9fd91c7dc4540966aeb024b2651f58026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:0e:48:cf:3a:79:23:35:41:17:a6:68:25:
                    2f:ae:14:3b:5d:a6:b7:c1:6e:fc:28:8e:7c:e1:04:
                    78:6f:74:77:44:28:a1:f6:b7:0d:e0:65:7a:78:10:
                    84:fb:45:9c:c8:9c:04:33:24:3e:a5:62:36:fa:42:
                    b4:b1:2c:40:2f:31:8d:56:9f:03:a6:4b:ea:9a:52:
                    c6:f6:d0:79:e3:d0:27:70:69:fd:2e:77:a5:f6:bb:
                    8f:1e:ff:26:5b:cd:82:61:c9:3f:b6:69:60:e5:a5:
                    01:58:2c:68:5d:12:be:88:eb:bc:35:68:55:02:4c:
                    13:c9:d6:ee:92:4b:52:6c:5e:ce:78:63:3e:c5:13:
                    81:05:96:ad:58:22:61:05:01:a9:b1:e7:5a:7d:a4:
                    bf:65:ff:99:90:f8:77:f3:12:8e:53:b9:c4:a7:3f:
                    c1:1c:00:d8:96:68:e0:9f:5c:7f:b5:68:b9:de:b5:
                    df:5f:9f:c0:d3:49:2f:a6:66:97:b1:44:a8:81:2b:
                    74:58:1a:0d:80:00:63:f4:30:9b:85:a3:4b:50:3f:
                    00:32:35:20:18:67:fb:ca:91:d5:6f:33:c1:f2:d3:
                    2b:8e:8c:31:ea:fa:a9:8f:75:5f:a9:18:c5:04:5f:
                    47:08:23:79:b1:f4:61:c1:74:48:87:c2:aa:64:58:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:4A:B9:FD:91:C7:DC:45:40:96:6A:EB:02:4B:26:51:F5:80:26
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:db:16:bd:89:28:34:d1:a6:86:d1:a3:69:93:e2:e9:e1:
         6f:cb:b8:76:51:48:b2:17:a6:80:83:24:83:63:61:8f:e0:37:
         cd:19:78:1a:c8:2b:d6:f7:8e:2a:ac:d8:5f:18:47:7e:17:07:
         4e:f9:d1:dd:93:57:1d:3f:23:c3:c4:b8:bf:03:e1:71:91:2c:
         22:59:e7:e1:d4:e9:fa:36:86:5c:c2:0a:48:81:53:a1:f7:7e:
         ba:40:4d:b5:25:4d:6b:e9:21:f7:0f:43:47:c1:db:40:72:8d:
         b9:12:4f:f0:b8:fd:9b:03:7a:0c:cb:10:e4:59:ec:b7:b3:78:
         3d:19:28:97:a3:e9:39:17:da:59:d5:09:76:c7:bb:0f:91:73:
         e1:cd:de:5c:41:98:2d:68:17:4a:b0:2e:57:49:fd:0c:43:01:
         55:b5:f9:bc:32:b2:67:a9:1a:71:54:d1:71:d5:e4:f1:df:f9:
         e4:d9:c3:24:4f:11:9f:9b:da:81:ff:4d:c2:32:32:08:3b:57:
         5b:42:44:72:72:29:ba:7d:d4:25:d6:59:a2:ae:7b:4d:9d:7d:
         d7:11:c8:bd:68:1b:7d:7f:a3:85:d6:49:4f:8d:e9:25:0e:82:
         a0:f5:79:90:4e:d9:7f:97:76:be:cf:ce:fc:ea:ec:a4:c3:7d:
         7d:85:49:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRuqa2yUPYh1uubw7L1hWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx
ODkwM2MwHhcNMjUwNTAyMTYwMDUwWhcNMjUwNTAzMTYwMDUwWjAzMTEwLwYDVQQD
EygxYzY5NGFiOWZkOTFjN2RjNDU0MDk2NmFlYjAyNGIyNjUxZjU4MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwEOSM86eSM1QRemaCUvrhQ7Xaa3
wW78KI584QR4b3R3RCih9rcN4GV6eBCE+0WcyJwEMyQ+pWI2+kK0sSxALzGNVp8D
pkvqmlLG9tB549AncGn9Lnel9ruPHv8mW82CYck/tmlg5aUBWCxoXRK+iOu8NWhV
AkwTydbukktSbF7OeGM+xROBBZatWCJhBQGpsedafaS/Zf+ZkPh38xKOU7nEpz/B
HADYlmjgn1x/tWi53rXfX5/A00kvpmaXsUSogSt0WBoNgABj9DCbhaNLUD8AMjUg
GGf7ypHVbzPB8tMrjowx6vqpj3VfqRjFBF9HCCN5sfRhwXRIh8KqZFgK9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxpSrn9kcfcRUCWausCSyZR9YAmMB8GA1UdIwQY
MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt
ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1
LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFvbFr2J
KDTRpobRo2mT4unhb8u4dlFIshemgIMkg2Nhj+A3zRl4Gsgr1veOKqzYXxhHfhcH
TvnR3ZNXHT8jw8S4vwPhcZEsIlnn4dTp+jaGXMIKSIFTofd+ukBNtSVNa+kh9w9D
R8HbQHKNuRJP8Lj9mwN6DMsQ5Fnst7N4PRkol6PpORfaWdUJdse7D5Fz4c3eXEGY
LWgXSrAuV0n9DEMBVbX5vDKyZ6kacVTRcdXk8d/55NnDJE8Rn5vagf9NwjIyCDtX
W0JEcnIpun3UJdZZoq57TZ191xHIvWgbfX+jhdZJT43pJQ6CoPV5kE7Zf5d2vs/O
/OrspMN9fYVJIw==
-----END CERTIFICATE-----
Generated at Fri May 2 22:01:33 2025 by rpki-client