Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File:                     KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier:          aAHTAJvUJ2Iz7/q6BMlf0Ir6bel37MAKFH/woV+h3ag=
Subject key identifier:   7B:7A:80:44:88:C9:FD:A2:55:2F:1B:F6:11:15:E2:2A:24:E7:99:2E
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer:       /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial:       0196790D74063D7B51DA6073F3184A5D9290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number:          0909
Signing time:             Sun 27 Apr 2025 21:00:46 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:46 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:46 +0000
Files and hashes:         1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: o+FFHtKV9hc0/SN6plchsKd3mO0OVoyepqz+OmqFX9Q=)
                          2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0d:74:06:3d:7b:51:da:60:73:f3:18:4a:5d:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
        Validity
            Not Before: Apr 27 21:00:46 2025 GMT
            Not After : Apr 28 21:00:46 2025 GMT
        Subject: CN=7b7a804488c9fda2552f1bf61115e22a24e7992e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:02:41:a5:40:6b:1e:f7:90:74:d5:8a:83:
                    ad:84:ff:24:1e:ec:d6:cb:8f:85:23:a9:6f:01:2b:
                    3e:f5:48:90:10:f5:1e:52:64:6b:76:5d:3a:cf:07:
                    ce:67:69:94:b0:83:6e:e4:e1:fd:fb:92:e6:db:57:
                    48:6b:e4:5e:3f:29:08:c0:db:f9:9f:2e:e9:aa:bd:
                    46:cb:55:f0:d7:53:1f:02:08:41:84:1e:92:a6:33:
                    db:d4:61:46:9b:1a:c6:08:c3:57:9b:06:a8:34:a7:
                    f7:46:63:90:50:a2:aa:de:ae:c4:2a:c5:bc:e8:34:
                    54:31:54:43:97:ae:ae:3e:21:0a:97:db:c2:48:87:
                    cb:c1:3a:fa:a0:46:77:b8:85:ee:f9:ac:d5:a4:c6:
                    4e:5c:d8:40:a3:38:37:c4:8c:13:c7:ef:ec:d1:d4:
                    f4:49:06:17:0d:90:5e:40:9f:b7:8a:50:af:fc:b5:
                    ef:11:ad:bc:06:3b:12:3d:d5:46:27:63:44:d9:a6:
                    c4:a1:da:91:de:6d:cb:0a:f7:df:4a:30:85:f7:37:
                    98:76:e3:14:43:1f:09:55:f7:2b:df:1c:91:3f:33:
                    df:12:16:c7:0d:98:84:52:39:38:bb:c8:73:1d:d7:
                    09:a7:6b:39:e6:8d:25:56:6b:2d:e1:ff:7e:02:3f:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:80:44:88:C9:FD:A2:55:2F:1B:F6:11:15:E2:2A:24:E7:99:2E
            X509v3 Authority Key Identifier:
                keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bb:a2:eb:3c:dc:bb:35:67:40:c2:fc:dc:7b:77:d7:4c:75:
         55:d6:9f:b4:57:f8:98:8b:6a:5b:cd:61:36:70:fb:1e:8a:81:
         87:e0:df:1d:55:48:75:e6:ed:86:40:48:85:9b:e5:69:a2:be:
         ae:96:a4:00:79:c7:33:c5:e3:d6:fa:b7:1b:63:c4:46:e7:7c:
         43:b6:6b:03:be:0c:c9:51:25:a8:e5:26:c4:78:f0:82:36:1f:
         bd:4c:f1:f3:e4:b4:38:34:6a:93:aa:27:06:3a:46:af:62:2d:
         81:06:a3:1c:92:bb:06:cb:0a:ef:01:c9:be:40:df:bd:2c:83:
         8f:8f:88:71:21:a1:03:4d:66:b2:3a:a1:11:9f:62:60:aa:c0:
         22:16:19:86:71:46:7a:b9:fe:91:f3:e9:22:d2:39:2f:4a:a7:
         8c:cb:cb:0a:f3:cf:03:f5:f7:7b:b5:3b:80:87:08:32:55:f5:
         40:2b:16:94:91:d6:34:4a:39:d3:b5:1f:9a:ed:a3:37:73:dc:
         62:89:21:61:a2:4c:0d:14:e1:6b:77:87:31:57:91:22:c2:31:
         5e:92:48:19:5b:9d:a3:c6:2f:05:5a:51:58:96:96:b4:4b:a5:
         a5:3a:e6:73:bf:b6:98:af:b6:06:c0:e3:04:2f:83:8e:01:fb:
         e2:f1:d6:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5DXQGPXtR2mBz8xhKXZKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzZmNjQzMjhjMWU2NjkxMTQwOWVhN2M2OTcyMmY4ZDI2
MjY2YjUwHhcNMjUwNDI3MjEwMDQ2WhcNMjUwNDI4MjEwMDQ2WjAzMTEwLwYDVQQD
Eyg3YjdhODA0NDg4YzlmZGEyNTUyZjFiZjYxMTE1ZTIyYTI0ZTc5OTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqsCQaVAax73kHTVioOthP8kHuzW
y4+FI6lvASs+9UiQEPUeUmRrdl06zwfOZ2mUsINu5OH9+5Lm21dIa+RePykIwNv5
ny7pqr1Gy1Xw11MfAghBhB6SpjPb1GFGmxrGCMNXmwaoNKf3RmOQUKKq3q7EKsW8
6DRUMVRDl66uPiEKl9vCSIfLwTr6oEZ3uIXu+azVpMZOXNhAozg3xIwTx+/s0dT0
SQYXDZBeQJ+3ilCv/LXvEa28BjsSPdVGJ2NE2abEodqR3m3LCvffSjCF9zeYduMU
Qx8JVfcr3xyRPzPfEhbHDZiEUjk4u8hzHdcJp2s55o0lVmst4f9+Aj9q0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt6gESIyf2iVS8b9hEV4iok55kuMB8GA1UdIwQY
MBaAFCk29kMoweZpEUCep8aXIvjSYma1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUt
MzlkYzUzZTM3ODJmLzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUtMzlkYzUzZTM3ODJm
LzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLui6zzc
uzVnQML83Ht310x1VdaftFf4mItqW81hNnD7HoqBh+DfHVVIdebthkBIhZvlaaK+
rpakAHnHM8Xj1vq3G2PERud8Q7ZrA74MyVElqOUmxHjwgjYfvUzx8+S0ODRqk6on
BjpGr2ItgQajHJK7BssK7wHJvkDfvSyDj4+IcSGhA01msjqhEZ9iYKrAIhYZhnFG
ern+kfPpItI5L0qnjMvLCvPPA/X3e7U7gIcIMlX1QCsWlJHWNEo507Ufmu2jN3Pc
YokhYaJMDRTha3eHMVeRIsIxXpJIGVudo8YvBVpRWJaWtEulpTrmc7+2mK+2BsDj
BC+DjgH74vHWVw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:21 2025 by rpki-client