Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          MGPEwp51+UeRHn4cKPJQzp97s5KO3zxALCn3T4BQWmg=
Subject key identifier:   3A:9C:B0:1D:E4:2A:71:39:B9:34:F7:3A:39:D3:ED:EA:DE:D9:A2:1F
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       019677FB7690A0D77EFFF236AD194A2D2798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1522
Signing time:             Sun 27 Apr 2025 16:01:30 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:30 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:30 +0000
Files and hashes:         1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
                          2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=)
                          3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
                          4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
                          5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: C7j0k5LYCC3ogNqQDbWcC7oOYPZzy/y36Ddk2XGHEMQ=)
                          7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:76:90:a0:d7:7e:ff:f2:36:ad:19:4a:2d:27:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Apr 27 16:01:30 2025 GMT
            Not After : Apr 28 16:01:30 2025 GMT
        Subject: CN=3a9cb01de42a7139b934f73a39d3edeaded9a21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:44:8d:8d:7a:f8:42:34:55:6a:42:b4:95:
                    16:66:24:d8:be:fe:4d:94:e5:bf:65:fe:98:56:cc:
                    9c:5d:2e:17:9c:f2:d9:d5:ef:38:28:15:33:d1:9a:
                    99:a4:c2:8b:ac:2f:33:c9:1b:65:ff:ef:8e:df:3b:
                    c7:58:3a:ea:07:ba:fe:e7:4e:5c:3e:80:df:fb:60:
                    07:87:53:59:6d:e6:18:26:9b:ea:ea:a6:d7:ec:b0:
                    fa:5e:df:03:88:8f:c3:3f:61:cb:e2:02:d7:fd:58:
                    a2:70:b4:9c:2d:bd:23:1f:55:59:a8:a7:75:2d:aa:
                    b5:41:c3:80:96:88:19:93:61:34:a3:f9:dd:ee:cc:
                    58:1b:97:59:3f:54:3c:73:13:ce:05:03:ec:c5:99:
                    50:80:f9:be:e1:d6:55:1f:51:3c:20:d3:db:ad:03:
                    de:3b:62:31:66:ba:97:fc:5e:74:84:6c:56:3d:c6:
                    4a:8d:e6:44:89:fe:c1:72:a1:b6:4e:ad:13:ab:2e:
                    15:c2:0e:96:56:da:5a:f2:bc:03:08:70:51:bb:5e:
                    bf:19:bc:9f:5e:21:23:c5:d0:ce:ec:84:64:35:f8:
                    de:b6:6f:f7:a0:45:c9:60:1c:51:15:b5:4f:df:30:
                    a0:34:75:47:84:50:0e:7a:a1:bc:f5:fe:16:eb:db:
                    33:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9C:B0:1D:E4:2A:71:39:B9:34:F7:3A:39:D3:ED:EA:DE:D9:A2:1F
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:9a:16:ad:84:9c:f7:ad:f9:41:39:1e:47:0a:be:9e:96:
         b5:3b:d0:b5:fd:e2:32:6b:66:6c:3a:6c:32:c7:fc:37:9a:df:
         39:35:2d:9f:52:14:4d:5c:8f:6e:a6:0b:5f:31:3f:17:e6:d4:
         67:9e:7f:d3:7d:65:8c:94:cd:f8:96:f5:33:b2:8e:34:f7:2d:
         f5:ff:06:e7:23:b9:9c:18:b2:e3:e4:a8:db:07:70:c6:00:9c:
         9c:8b:b5:24:3a:8d:7d:c2:3e:47:78:de:1a:bc:e1:4f:51:f2:
         fd:cc:2c:18:1b:7d:03:48:11:fb:ee:19:19:6d:93:db:5f:a4:
         ed:3b:5c:97:75:a2:73:5d:24:28:af:b8:cb:f0:42:33:ef:00:
         c6:5a:3f:f2:d6:c1:0d:f2:9e:9d:4a:d2:68:5d:9c:b9:a8:e3:
         82:08:9a:4d:67:15:66:62:ae:ab:91:64:89:57:a8:71:93:26:
         8f:59:b7:73:ca:57:4e:e2:5a:0d:15:49:85:92:70:6d:2e:7a:
         43:0c:21:ab:17:f8:50:6e:2f:03:3a:d8:7c:ac:d8:85:ac:34:
         21:db:c5:40:d5:51:99:66:65:e2:5a:82:4d:c0:3b:28:17:98:
         0f:ae:62:ec:a4:d9:11:d0:5d:74:87:38:fb:b4:f8:ad:33:ac:
         8f:23:f8:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+3aQoNd+//I2rRlKLSeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi
OTdiYTYwHhcNMjUwNDI3MTYwMTMwWhcNMjUwNDI4MTYwMTMwWjAzMTEwLwYDVQQD
EygzYTljYjAxZGU0MmE3MTM5YjkzNGY3M2EzOWQzZWRlYWRlZDlhMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoBEjY16+EI0VWpCtJUWZiTYvv5N
lOW/Zf6YVsycXS4XnPLZ1e84KBUz0ZqZpMKLrC8zyRtl/++O3zvHWDrqB7r+505c
PoDf+2AHh1NZbeYYJpvq6qbX7LD6Xt8DiI/DP2HL4gLX/ViicLScLb0jH1VZqKd1
Laq1QcOAlogZk2E0o/nd7sxYG5dZP1Q8cxPOBQPsxZlQgPm+4dZVH1E8INPbrQPe
O2IxZrqX/F50hGxWPcZKjeZEif7BcqG2Tq0Tqy4Vwg6WVtpa8rwDCHBRu16/Gbyf
XiEjxdDO7IRkNfjetm/3oEXJYBxRFbVP3zCgNHVHhFAOeqG89f4W69szewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqcsB3kKnE5uTT3OjnT7ere2aIfMB8GA1UdIwQY
MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt
MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0
LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXziaFq2E
nPet+UE5HkcKvp6WtTvQtf3iMmtmbDpsMsf8N5rfOTUtn1IUTVyPbqYLXzE/F+bU
Z55/031ljJTN+Jb1M7KONPct9f8G5yO5nBiy4+So2wdwxgCcnIu1JDqNfcI+R3je
GrzhT1Hy/cwsGBt9A0gR++4ZGW2T21+k7Ttcl3Wic10kKK+4y/BCM+8Axlo/8tbB
DfKenUrSaF2cuajjggiaTWcVZmKuq5FkiVeocZMmj1m3c8pXTuJaDRVJhZJwbS56
Qwwhqxf4UG4vAzrYfKzYhaw0IdvFQNVRmWZl4lqCTcA7KBeYD65i7KTZEdBddIc4
+7T4rTOsjyP4Sg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:46:14 2025 by rpki-client