Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File:                     9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier:          smqWgBpz0v4ZDSeY+OckYk5kjz7y0+hPY4IdXJ46q58=
Subject key identifier:   C9:21:61:C7:14:C9:C2:7A:EA:56:D3:ED:9C:F5:B6:E4:E2:69:AB:19
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer:       /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial:       0196753058B3A1DD725096D07CA057D942B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number:          13BC
Signing time:             Sun 27 Apr 2025 03:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:24 +0000
Files and hashes:         1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: paRyIQw027Ro3wYtYVvI3WMeAbLdxQeshkty1ppMs58=)
                          2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:58:b3:a1:dd:72:50:96:d0:7c:a0:57:d9:42:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
        Validity
            Not Before: Apr 27 03:00:24 2025 GMT
            Not After : Apr 28 03:00:24 2025 GMT
        Subject: CN=c92161c714c9c27aea56d3ed9cf5b6e4e269ab19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:14:a7:fd:7d:2b:f6:b7:f4:f8:03:e0:bc:
                    d3:27:51:2d:5d:ce:3c:88:1d:10:dd:ec:b8:b2:ec:
                    68:bc:2a:c4:1e:d8:d7:c4:ed:4b:0e:9b:3f:8d:57:
                    91:18:ad:85:18:bd:0a:e9:f2:eb:20:ae:5b:2f:0f:
                    43:92:5c:2d:e4:a0:78:b1:8c:25:67:6b:35:c7:2d:
                    ac:6c:3d:27:01:ff:e2:35:19:d1:d5:74:2b:59:7c:
                    fa:91:a9:81:ea:eb:b4:8f:eb:23:d7:0d:cb:db:e6:
                    05:00:79:3f:5f:a5:d6:cb:9e:68:c1:b5:8c:8f:8e:
                    79:c1:06:54:de:b1:e9:4b:34:33:19:d0:41:5e:9b:
                    75:3b:ed:0a:fe:46:33:b3:ea:b1:c9:51:a6:f3:97:
                    d9:76:e9:9c:6f:48:9a:77:d1:eb:5c:82:fb:9f:58:
                    d0:71:88:9e:b9:9f:13:d2:95:67:22:ef:08:e9:e8:
                    93:1e:35:a2:96:5a:b8:07:d0:ed:02:44:44:9b:f5:
                    67:a6:17:b2:81:54:f6:93:43:20:bf:0e:49:33:2f:
                    41:6a:42:d0:97:df:f6:d6:f4:68:5d:04:e4:bd:71:
                    09:01:ef:46:82:09:61:e0:a0:af:b5:c7:aa:43:a7:
                    87:d4:db:49:a2:77:fc:ff:f0:c7:94:cd:8a:21:0d:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:61:C7:14:C9:C2:7A:EA:56:D3:ED:9C:F5:B6:E4:E2:69:AB:19
            X509v3 Authority Key Identifier:
                keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:25:92:03:f6:56:90:4b:5c:3a:07:a0:84:e4:06:6b:ee:81:
         1a:20:df:4b:83:12:2a:c4:a4:77:08:ce:6f:ca:79:fe:3d:63:
         91:4e:9b:7b:cd:31:62:3d:b0:b3:ae:6a:b2:36:2e:21:0b:57:
         3c:39:1c:f1:db:6b:06:f0:5e:49:55:9e:9a:f9:01:a6:0f:36:
         49:7b:2e:76:4c:d9:69:b3:57:c1:a2:a9:fb:05:49:0d:b8:57:
         c2:f3:55:14:f5:7f:e8:b4:70:d9:8f:18:90:0f:be:7a:6c:25:
         62:75:2c:04:05:c0:bb:ef:31:e8:f6:36:c3:47:39:1f:3f:9b:
         fc:64:d2:6f:8c:6f:05:e6:31:b9:40:e5:c6:0b:fb:b5:58:12:
         f4:d6:95:19:69:94:dc:1a:c2:9a:aa:aa:41:d7:0e:5e:a0:79:
         3b:1d:db:48:76:08:9a:d1:9b:6e:19:96:c4:45:9a:30:0b:74:
         45:67:a3:95:7e:fb:a3:a3:4a:69:f5:b7:f7:90:85:95:67:f6:
         ad:8e:27:bf:d0:07:2a:8f:65:35:39:35:9b:45:2e:74:00:bf:
         a6:66:61:d6:d8:b0:fc:55:93:87:56:3f:bd:3b:2e:81:00:a0:
         be:00:1c:4f:35:5b:e3:85:c8:22:5f:37:0d:99:c5:ee:2f:4d:
         71:3f:c1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MFizod1yUJbQfKBX2UKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy
MWFjNTcwHhcNMjUwNDI3MDMwMDI0WhcNMjUwNDI4MDMwMDI0WjAzMTEwLwYDVQQD
EyhjOTIxNjFjNzE0YzljMjdhZWE1NmQzZWQ5Y2Y1YjZlNGUyNjlhYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4gUp/19K/a39PgD4LzTJ1EtXc48
iB0Q3ey4suxovCrEHtjXxO1LDps/jVeRGK2FGL0K6fLrIK5bLw9Dklwt5KB4sYwl
Z2s1xy2sbD0nAf/iNRnR1XQrWXz6kamB6uu0j+sj1w3L2+YFAHk/X6XWy55owbWM
j455wQZU3rHpSzQzGdBBXpt1O+0K/kYzs+qxyVGm85fZdumcb0iad9HrXIL7n1jQ
cYieuZ8T0pVnIu8I6eiTHjWillq4B9DtAkREm/VnpheygVT2k0Mgvw5JMy9BakLQ
l9/21vRoXQTkvXEJAe9Ggglh4KCvtceqQ6eH1NtJonf8//DHlM2KIQ0UvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkhYccUycJ66lbT7Zz1tuTiaasZMB8GA1UdIwQY
MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt
Njk5YjIzNGZjNzhjLzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj
LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvSWSA/ZW
kEtcOgeghOQGa+6BGiDfS4MSKsSkdwjOb8p5/j1jkU6be80xYj2ws65qsjYuIQtX
PDkc8dtrBvBeSVWemvkBpg82SXsudkzZabNXwaKp+wVJDbhXwvNVFPV/6LRw2Y8Y
kA++emwlYnUsBAXAu+8x6PY2w0c5Hz+b/GTSb4xvBeYxuUDlxgv7tVgS9NaVGWmU
3BrCmqqqQdcOXqB5Ox3bSHYImtGbbhmWxEWaMAt0RWejlX77o6NKafW395CFlWf2
rY4nv9AHKo9lNTk1m0UudAC/pmZh1tiw/FWTh1Y/vTsugQCgvgAcTzVb44XIIl83
DZnF7i9NcT/BwQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:44:40 2025 by rpki-client