Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          x/Ogru9GNrRnyeKZxMtY12ihbvnciJxconlkxmR/tEc=
Subject key identifier:   BA:8D:1A:1F:CA:F5:AE:FC:DF:B2:4E:FD:7D:43:D4:35:C3:95:35:01
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       01967D20D82EA0EBD28C919AF317AD37542B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          1330
Signing time:             Mon 28 Apr 2025 16:00:26 +0000
Manifest this update:     Mon 28 Apr 2025 16:00:26 +0000
Manifest next update:     Tue 29 Apr 2025 16:00:26 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: G0aGjt6tZoenrmkxxr73TOBr4m/wZChnj2OrcOZO2ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:20:d8:2e:a0:eb:d2:8c:91:9a:f3:17:ad:37:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Apr 28 16:00:26 2025 GMT
            Not After : Apr 29 16:00:26 2025 GMT
        Subject: CN=ba8d1a1fcaf5aefcdfb24efd7d43d435c3953501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:20:21:a5:32:e2:b7:38:c9:d0:11:7f:70:
                    0f:2f:32:89:3c:b4:ac:35:16:df:81:a2:51:12:04:
                    a2:35:75:bc:bc:68:4d:95:93:81:50:17:82:1e:f8:
                    9b:93:26:ab:ba:11:f0:cc:c3:66:eb:f2:dd:c9:9d:
                    53:7b:09:0f:ce:35:c3:a7:c0:08:a5:38:02:91:92:
                    f1:5f:58:1a:0a:f7:3b:fa:e9:59:61:de:a9:34:11:
                    34:09:7e:db:18:9d:8d:01:7e:2b:4e:cd:07:3a:ad:
                    02:5f:f8:5e:f9:7a:9b:b4:13:dc:2f:f4:a4:02:b8:
                    a8:75:06:8c:6b:dd:69:2a:7b:bc:3b:8b:0d:bb:e7:
                    d3:f2:66:a9:c0:77:5f:f9:67:22:ad:d6:39:81:d9:
                    ff:fc:45:a4:a0:d7:d1:b2:a8:cb:a1:99:1b:04:15:
                    70:cb:6f:23:6b:fe:74:d6:86:4f:68:c1:6a:f9:20:
                    25:bb:53:0a:c3:49:44:4d:5d:7b:2d:ce:80:af:74:
                    3c:22:2f:58:08:e1:61:78:43:cb:da:fa:40:5f:e8:
                    b6:7f:dd:49:1b:8f:cd:0a:a9:90:6d:ba:49:25:61:
                    19:d7:b1:b5:f6:48:4b:4f:ce:14:74:4c:06:b4:67:
                    75:bc:27:49:d3:72:2c:ab:58:7c:8c:8c:b6:81:90:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:1A:1F:CA:F5:AE:FC:DF:B2:4E:FD:7D:43:D4:35:C3:95:35:01
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:80:15:1f:1c:74:72:bb:d0:e4:01:57:c8:c8:b7:82:d1:03:
         da:e2:bb:15:7e:0d:79:c8:d0:fc:2e:33:ad:c2:72:2f:51:2e:
         f4:80:0e:33:ba:13:9e:45:44:16:4f:28:3d:5f:59:57:03:74:
         4c:6f:89:ce:ad:75:ba:59:b3:41:15:05:b5:b5:71:ff:f8:cf:
         a8:a2:5f:45:e0:df:ef:0f:d0:da:5f:1e:06:18:e8:d9:42:5a:
         ad:e3:11:e7:b6:5c:59:45:e4:90:6c:bc:dd:9f:b1:87:2b:97:
         38:d4:a0:45:06:ad:8a:de:49:cf:fe:54:dc:ef:67:05:2c:59:
         b2:ab:90:4b:9e:d9:20:aa:48:b8:fa:9e:c7:1a:9a:b3:bc:02:
         96:de:04:65:11:3a:f9:d4:b3:45:46:25:dc:4a:dc:0f:2c:db:
         39:3f:52:b2:fa:fe:82:f1:51:1f:18:88:bb:34:d0:2d:1b:38:
         0d:34:35:a4:db:6d:ba:72:f3:59:1f:50:49:13:97:20:ea:4c:
         31:78:6b:cb:0c:ff:3a:02:81:4d:45:73:ba:ca:e5:14:d3:95:
         24:e2:1a:cc:a8:6e:8e:0e:41:38:fd:98:cb:71:9b:b7:fa:48:
         59:59:09:d8:b0:08:6d:60:5a:e3:9a:a7:6a:8a:6a:ba:26:dc:
         76:d8:69:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9INguoOvSjJGa8xetN1QrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1
ZDQxZjkwHhcNMjUwNDI4MTYwMDI2WhcNMjUwNDI5MTYwMDI2WjAzMTEwLwYDVQQD
EyhiYThkMWExZmNhZjVhZWZjZGZiMjRlZmQ3ZDQzZDQzNWMzOTUzNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd4gIaUy4rc4ydARf3APLzKJPLSs
NRbfgaJREgSiNXW8vGhNlZOBUBeCHvibkyaruhHwzMNm6/LdyZ1TewkPzjXDp8AI
pTgCkZLxX1gaCvc7+ulZYd6pNBE0CX7bGJ2NAX4rTs0HOq0CX/he+XqbtBPcL/Sk
AriodQaMa91pKnu8O4sNu+fT8mapwHdf+WcirdY5gdn//EWkoNfRsqjLoZkbBBVw
y28ja/501oZPaMFq+SAlu1MKw0lETV17Lc6Ar3Q8Ii9YCOFheEPL2vpAX+i2f91J
G4/NCqmQbbpJJWEZ17G19khLT84UdEwGtGd1vCdJ03Isq1h8jIy2gZCSbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqNGh/K9a7837JO/X1D1DXDlTUBMB8GA1UdIwQY
MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct
NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2
LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIAVHxx0
crvQ5AFXyMi3gtED2uK7FX4NecjQ/C4zrcJyL1Eu9IAOM7oTnkVEFk8oPV9ZVwN0
TG+Jzq11ulmzQRUFtbVx//jPqKJfReDf7w/Q2l8eBhjo2UJareMR57ZcWUXkkGy8
3Z+xhyuXONSgRQatit5Jz/5U3O9nBSxZsquQS57ZIKpIuPqexxqas7wClt4EZRE6
+dSzRUYl3ErcDyzbOT9Ssvr+gvFRHxiIuzTQLRs4DTQ1pNttunLzWR9QSROXIOpM
MXhrywz/OgKBTUVzusrlFNOVJOIazKhujg5BOP2Yy3Gbt/pIWVkJ2LAIbWBa45qn
aopquibcdthpUQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:02:31 2025 by rpki-client