Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File:                     E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier:          w815NTeTkxamauhrtct0RHE6bgwjYtAtQqkqLXZ+acM=
Subject key identifier:   3B:7B:D1:9F:87:D8:F6:6C:CE:9F:1B:D0:09:A1:12:11:99:C2:7D:BA
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer:       /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial:       019677C3944E64E113EB3184BC6511140246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number:          0643
Signing time:             Sun 27 Apr 2025 15:00:28 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:28 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:28 +0000
Files and hashes:         1: 9Z1MbiRMYxp2gP8MxCFrNvXKHOQ.roa (hash: VEHI4wOUfy63wDjHbpWMSX4O+o3FhB3BTr504lTLiwE=)
                          2: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: V2oF4h3CCpExo45AWbxQ62LYte613KL6Kju5Bua3xEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:94:4e:64:e1:13:eb:31:84:bc:65:11:14:02:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
        Validity
            Not Before: Apr 27 15:00:28 2025 GMT
            Not After : Apr 28 15:00:28 2025 GMT
        Subject: CN=3b7bd19f87d8f66cce9f1bd009a1121199c27dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:71:dc:a2:9a:e0:b1:a8:6f:4e:c5:b6:78:
                    99:0d:3c:d6:d4:6e:1a:20:ba:e2:db:80:87:49:9e:
                    d8:e4:5b:51:e2:f5:39:5d:5d:65:a2:87:aa:d1:2c:
                    e1:05:31:03:11:01:b1:78:95:fc:98:7f:39:93:fb:
                    34:6a:53:86:dd:77:27:62:6a:d2:62:ba:33:3f:38:
                    d9:f5:a4:72:53:d4:ce:9c:78:6b:83:39:21:46:87:
                    d9:d6:b0:fd:de:c5:c4:08:b6:51:ad:1c:32:66:b3:
                    09:bd:10:64:32:0a:cf:86:10:77:3a:e3:26:41:e6:
                    ff:ca:b9:3d:8c:bb:11:c9:d3:4d:0d:74:b5:c2:64:
                    ad:a7:18:12:3d:77:f7:02:e6:e5:b3:ee:c8:5b:6c:
                    2e:a7:02:2b:7f:e7:03:d6:3e:d8:b7:36:45:37:25:
                    2e:d2:0c:63:9f:64:81:75:43:41:7f:17:50:f0:15:
                    69:c6:73:b8:dc:7e:f9:c3:8f:bd:3b:ac:74:26:3e:
                    c2:2b:47:af:87:83:76:0a:82:43:73:10:64:a0:2e:
                    e5:72:f2:ac:03:70:1b:ad:92:c4:f1:7f:09:62:ec:
                    5c:4b:29:48:f2:51:20:c3:2d:7a:ab:80:a7:0b:7d:
                    df:9c:78:75:7c:03:98:01:89:48:0b:a1:19:71:41:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:D1:9F:87:D8:F6:6C:CE:9F:1B:D0:09:A1:12:11:99:C2:7D:BA
            X509v3 Authority Key Identifier:
                keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:59:b0:91:74:4d:a6:27:a7:8c:e3:90:33:58:38:3f:53:
         bb:c8:31:f0:bb:9c:b1:e8:20:db:00:3c:1e:1e:dc:45:7a:f1:
         94:ec:4a:c4:78:5a:19:ee:a9:f3:b1:ee:a9:94:02:fb:41:c4:
         35:12:41:77:0d:5e:41:6f:45:7c:1c:41:f5:47:99:b8:8d:de:
         6f:c1:83:d9:35:ce:17:30:3e:f5:b9:b1:70:d1:a9:da:69:0a:
         12:dc:70:0b:2a:13:65:02:10:f0:3c:82:0f:e3:3c:a0:27:8e:
         be:8e:d1:fb:06:9a:a0:ea:ef:07:a2:65:ed:ba:02:15:57:97:
         45:da:1e:86:a5:5a:f6:28:a9:3b:3f:ae:60:41:e3:70:ad:0b:
         50:2a:9d:83:b4:a9:a4:7f:48:2b:12:5b:24:a9:17:c4:04:60:
         b6:4d:b0:bd:5a:09:77:ef:c4:0d:73:fe:c3:b2:f4:21:13:e3:
         98:b8:70:c5:5a:3a:de:27:69:10:79:29:8c:35:98:55:24:d5:
         92:9e:4d:7a:c0:73:19:91:7c:ab:00:ea:4b:2c:7a:c3:0b:09:
         a8:6d:21:e9:eb:17:71:5e:4b:34:62:f3:53:bb:72:be:96:ac:
         1d:c1:4e:8d:31:20:41:8a:3c:b0:54:e0:2b:df:e0:ba:c6:0b:
         26:be:7c:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w5ROZOET6zGEvGURFAJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjliMjFjMDA4MWQyM2M0YTIxZjYwYTA4NGE3NWNiNWY5
NWJlYTIwHhcNMjUwNDI3MTUwMDI4WhcNMjUwNDI4MTUwMDI4WjAzMTEwLwYDVQQD
EygzYjdiZDE5Zjg3ZDhmNjZjY2U5ZjFiZDAwOWExMTIxMTk5YzI3ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW1x3KKa4LGob07FtniZDTzW1G4a
ILri24CHSZ7Y5FtR4vU5XV1looeq0SzhBTEDEQGxeJX8mH85k/s0alOG3XcnYmrS
YrozPzjZ9aRyU9TOnHhrgzkhRofZ1rD93sXECLZRrRwyZrMJvRBkMgrPhhB3OuMm
Qeb/yrk9jLsRydNNDXS1wmStpxgSPXf3Aubls+7IW2wupwIrf+cD1j7YtzZFNyUu
0gxjn2SBdUNBfxdQ8BVpxnO43H75w4+9O6x0Jj7CK0evh4N2CoJDcxBkoC7lcvKs
A3AbrZLE8X8JYuxcSylI8lEgwy16q4CnC33fnHh1fAOYAYlIC6EZcUFurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDt70Z+H2PZszp8b0AmhEhGZwn26MB8GA1UdIwQY
MBaAFBO5shwAgdI8SiH2CghKdctflb6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAt
YmY5MjRhODI1ZjU4LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAtYmY5MjRhODI1ZjU4
LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRlZsJF0
TaYnp4zjkDNYOD9Tu8gx8Lucsegg2wA8Hh7cRXrxlOxKxHhaGe6p87HuqZQC+0HE
NRJBdw1eQW9FfBxB9UeZuI3eb8GD2TXOFzA+9bmxcNGp2mkKEtxwCyoTZQIQ8DyC
D+M8oCeOvo7R+waaoOrvB6Jl7boCFVeXRdoehqVa9iipOz+uYEHjcK0LUCqdg7Sp
pH9IKxJbJKkXxARgtk2wvVoJd+/EDXP+w7L0IRPjmLhwxVo63idpEHkpjDWYVSTV
kp5NesBzGZF8qwDqSyx6wwsJqG0h6esXcV5LNGLzU7tyvpasHcFOjTEgQYo8sFTg
K9/gusYLJr58Lg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:15 2025 by rpki-client