Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
File:                     FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft (raw, json)
Hash identifier:          U+Cdt6hZJvE+buzc3TO8rHFE71QzIEW8SHfBRVzgYCc=
Subject key identifier:   83:67:2C:B8:91:14:C5:73:4D:6A:04:D1:0D:59:83:6D:5B:14:2A:99
Authority key identifier: 14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
Certificate issuer:       /CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Certificate serial:       019674FA2B3D0BDE8BC91BA4C96682DEF6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
Manifest number:          0E46
Signing time:             Sun 27 Apr 2025 02:01:14 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:14 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:14 +0000
Files and hashes:         1: FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl (hash: RHh0gNS0cRUw1Ew+UTzy6U+7L2b6odXE5ZtTP2+0pU8=)
                          2: rDvgit_zW_J5sBeFSjvWxEfxGEc.roa (hash: Z69AN0vUaJQYCf1e5iHnzpJseConW5EmMiFzG056XPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:2b:3d:0b:de:8b:c9:1b:a4:c9:66:82:de:f6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
        Validity
            Not Before: Apr 27 02:01:14 2025 GMT
            Not After : Apr 28 02:01:14 2025 GMT
        Subject: CN=83672cb89114c5734d6a04d10d59836d5b142a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:24:40:5e:4c:a5:60:ad:40:e3:0d:e9:fc:
                    2e:e8:c9:4b:79:bc:df:2e:b4:ee:91:3f:04:4c:7c:
                    36:7b:a9:b1:e6:36:7f:f5:ca:b4:30:8a:6f:cf:78:
                    7b:ae:fc:1c:5b:0f:34:f9:31:b1:14:8e:bc:dc:6a:
                    72:b5:80:63:ca:82:a4:ae:77:a8:66:b6:8b:99:b0:
                    83:f2:99:b5:4a:f2:14:a4:1e:57:fc:6d:b9:5c:b9:
                    69:5d:12:53:8f:3d:46:dc:2f:11:ac:8f:23:e9:26:
                    4e:aa:e6:a9:9e:e8:bf:20:14:f7:d2:b0:e7:50:83:
                    c3:25:dd:9d:b1:48:ae:06:c8:7f:65:e1:d9:bd:5e:
                    6f:03:12:b5:45:be:0c:d6:6d:55:de:df:d6:22:92:
                    be:6a:e6:58:e8:fc:16:f1:b0:d6:52:93:fe:17:a5:
                    20:87:b2:c3:30:f4:29:c0:90:a9:e0:c3:be:cc:4d:
                    01:99:54:e6:bd:5a:3b:3a:7b:7d:91:03:c1:d8:1a:
                    f6:c5:55:43:9c:f2:61:45:9b:07:b2:90:4a:4a:14:
                    cf:98:e7:33:90:e9:4f:6d:f7:29:cd:a2:11:7d:e1:
                    5c:3f:60:97:9d:42:74:49:a8:82:67:18:35:80:ae:
                    9e:36:b1:ce:f6:01:a6:67:ad:00:33:e6:14:a5:8d:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:2C:B8:91:14:C5:73:4D:6A:04:D1:0D:59:83:6D:5B:14:2A:99
            X509v3 Authority Key Identifier:
                keyid:14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:36:6d:3d:51:af:50:ab:7e:02:25:c6:10:09:70:e0:42:
         45:df:c3:3f:64:1d:dd:c8:03:33:18:23:b6:13:bb:24:16:df:
         42:03:1e:4e:c1:72:9c:0a:55:9d:bb:5b:1d:a3:88:ea:88:03:
         20:e9:3e:0c:ca:55:d3:35:39:4d:3a:56:78:da:e1:fa:97:1d:
         a9:86:8f:4e:2b:c0:22:d8:2d:03:ae:76:b6:12:d0:72:13:56:
         e0:cb:5b:50:ff:0d:85:27:2c:5b:76:d8:42:e8:41:e9:6e:e9:
         86:c4:a1:e7:cd:41:3b:ee:d2:05:92:53:57:75:3c:c1:80:5a:
         53:c6:e7:47:a6:17:86:9b:de:dd:ba:5d:54:11:bd:9b:8e:c0:
         25:7f:49:20:49:10:11:d2:ee:6f:26:b0:7a:7d:f7:dc:65:09:
         92:3e:23:8d:5d:1d:a3:14:77:0a:1f:36:f3:9c:e8:df:2e:8d:
         1c:04:f8:cc:54:3e:4e:69:3b:24:95:9a:c8:40:c4:15:ce:36:
         0a:f4:69:ff:e4:4e:f4:ce:a7:76:09:75:5d:fd:27:4a:0e:0d:
         78:53:c8:14:40:81:80:79:5f:bf:62:b5:a2:f9:41:2e:ad:89:
         11:e1:38:ba:18:87:56:48:b5:f4:6e:9a:7f:ea:bb:8c:41:ad:
         83:6e:39:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+is9C96LyRukyWaC3va9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NDA1ZDIwOWFlY2MzODQ5MjlhMGFkOTY0YjRkYmNkNWMw
NDY4YzIwHhcNMjUwNDI3MDIwMTE0WhcNMjUwNDI4MDIwMTE0WjAzMTEwLwYDVQQD
Eyg4MzY3MmNiODkxMTRjNTczNGQ2YTA0ZDEwZDU5ODM2ZDViMTQyYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kkQF5MpWCtQOMN6fwu6MlLebzf
LrTukT8ETHw2e6mx5jZ/9cq0MIpvz3h7rvwcWw80+TGxFI683GpytYBjyoKkrneo
ZraLmbCD8pm1SvIUpB5X/G25XLlpXRJTjz1G3C8RrI8j6SZOquapnui/IBT30rDn
UIPDJd2dsUiuBsh/ZeHZvV5vAxK1Rb4M1m1V3t/WIpK+auZY6PwW8bDWUpP+F6Ug
h7LDMPQpwJCp4MO+zE0BmVTmvVo7Ont9kQPB2Br2xVVDnPJhRZsHspBKShTPmOcz
kOlPbfcpzaIRfeFcP2CXnUJ0SaiCZxg1gK6eNrHO9gGmZ60AM+YUpY3CNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINnLLiRFMVzTWoE0Q1Zg21bFCqZMB8GA1UdIwQY
MBaAFBRAXSCa7MOEkpoK2WS0281cBGjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVCZElKcnN3NFNTbWdyWlpMVGJ6VndFYU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iY2FmZDgtODAxNC00MTMxLWI3MWIt
NzRjM2E5Nzg5YTFjLzEvRkVCZElKcnN3NFNTbWdyWlpMVGJ6VndFYU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iY2FmZDgtODAxNC00MTMxLWI3MWItNzRjM2E5Nzg5YTFj
LzEvRkVCZElKcnN3NFNTbWdyWlpMVGJ6VndFYU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDs2bT1R
r1CrfgIlxhAJcOBCRd/DP2Qd3cgDMxgjthO7JBbfQgMeTsFynApVnbtbHaOI6ogD
IOk+DMpV0zU5TTpWeNrh+pcdqYaPTivAItgtA652thLQchNW4MtbUP8NhScsW3bY
QuhB6W7phsSh581BO+7SBZJTV3U8wYBaU8bnR6YXhpve3bpdVBG9m47AJX9JIEkQ
EdLubyawen333GUJkj4jjV0doxR3Ch8285zo3y6NHAT4zFQ+Tmk7JJWayEDEFc42
CvRp/+RO9M6ndgl1Xf0nSg4NeFPIFECBgHlfv2K1ovlBLq2JEeE4uhiHVki19G6a
f+q7jEGtg245Fw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:32 2025 by rpki-client