Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File:                     8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier:          hqplkp4V+IFYbVf1oEbEB12JZ1QtcH3uZt8bXgojF6s=
Subject key identifier:   6A:2C:F1:4C:83:3D:43:C3:3F:8E:03:54:B3:D0:12:81:EE:D7:4F:69
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer:       /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial:       01969DBEB9CA1AB671B8C1A4D18AD25FAE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number:          86
Signing time:             Mon 05 May 2025 00:00:44 +0000
Manifest this update:     Mon 05 May 2025 00:00:44 +0000
Manifest next update:     Tue 06 May 2025 00:00:44 +0000
Files and hashes:         1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: E4gvxR/t1eUyAgV7PbJHdLKl8B2CnIOmEJbgBr0F15M=)
                          2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:b9:ca:1a:b6:71:b8:c1:a4:d1:8a:d2:5f:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
        Validity
            Not Before: May  5 00:00:44 2025 GMT
            Not After : May  6 00:00:44 2025 GMT
        Subject: CN=6a2cf14c833d43c33f8e0354b3d01281eed74f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:24:6f:df:11:7a:26:38:e3:7a:86:0b:b7:
                    52:05:00:57:4b:fa:1c:d2:ec:61:4b:e4:11:93:c1:
                    49:28:63:dd:f6:4b:32:f9:4a:3c:63:7d:aa:5b:2d:
                    de:66:97:fe:6f:2d:98:3c:c6:cd:fd:71:98:45:75:
                    d0:ef:6e:59:ca:8d:7f:a4:1d:57:c0:a5:96:38:7c:
                    72:34:e3:e6:12:53:d0:97:12:54:3e:59:36:60:88:
                    20:94:60:cf:26:59:31:fc:01:ed:8e:6c:37:41:7a:
                    c8:93:e6:f0:f9:5c:0a:a3:4d:1b:ce:43:f5:62:7e:
                    97:1d:65:16:3a:25:3c:90:b8:fa:47:50:45:70:5d:
                    fb:c1:01:17:c1:ce:db:c8:e4:7f:73:2d:f9:b7:0b:
                    b6:84:1d:42:f8:38:78:b1:92:90:6c:ca:97:2e:68:
                    5e:84:15:28:ab:a4:41:94:e8:4a:30:26:a6:38:8b:
                    f5:03:7e:1f:ee:59:80:24:f2:50:3f:27:b8:5e:b7:
                    da:b7:55:00:a5:ac:0e:a2:7f:64:ff:09:59:da:16:
                    cc:2d:5f:84:4d:60:05:1f:d7:b8:56:91:65:50:84:
                    25:56:e3:11:7a:f6:0f:b1:67:17:80:f4:4b:d0:87:
                    3d:14:8d:0f:04:55:dc:90:5c:10:48:45:3e:4a:2c:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:F1:4C:83:3D:43:C3:3F:8E:03:54:B3:D0:12:81:EE:D7:4F:69
            X509v3 Authority Key Identifier:
                keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:88:e5:93:5c:09:21:a5:6e:15:cc:2f:a2:38:23:8d:61:e3:
         89:e8:75:3e:80:eb:5c:a2:de:c9:f8:6a:9f:a1:70:04:8f:e9:
         a3:f0:4c:7c:9c:30:46:75:b3:92:f7:33:25:39:7f:1b:38:11:
         e0:a9:bf:35:ef:94:90:82:2c:6b:28:bc:96:4d:ad:cd:ba:fd:
         5a:aa:32:7e:40:ac:38:82:bd:ef:83:0c:59:2c:bd:a9:67:bd:
         d4:0b:a7:6a:20:65:07:ca:79:28:a5:c0:e6:e0:c6:d5:63:95:
         91:b4:6f:15:a2:4d:ce:32:91:09:11:d1:b8:7e:5a:f1:6f:c9:
         d2:3c:82:c0:ac:a5:e0:63:a5:02:68:26:90:96:7f:c2:f0:ea:
         5f:19:c6:21:ff:97:f7:20:09:e7:93:57:a6:85:3d:64:41:de:
         9e:2f:59:69:c4:17:31:9a:c8:df:95:60:8b:d4:34:77:94:59:
         20:49:2b:ac:7c:37:98:13:e6:1b:fc:e3:76:93:8c:45:5f:6d:
         d7:a6:ec:1a:18:70:73:6b:e3:b2:e3:65:8a:68:b4:fa:7e:7f:
         aa:b2:11:01:5f:04:da:2f:ca:4b:ed:f8:da:4d:97:8e:0c:bb:
         60:94:a3:34:62:cb:58:a5:9c:76:2b:b9:0d:1d:fd:93:8b:2b:
         5c:10:16:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadvrnKGrZxuMGk0YrSX64ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx
MjljNGEwHhcNMjUwNTA1MDAwMDQ0WhcNMjUwNTA2MDAwMDQ0WjAzMTEwLwYDVQQD
Eyg2YTJjZjE0YzgzM2Q0M2MzM2Y4ZTAzNTRiM2QwMTI4MWVlZDc0ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon8kb98ReiY443qGC7dSBQBXS/oc
0uxhS+QRk8FJKGPd9ksy+Uo8Y32qWy3eZpf+by2YPMbN/XGYRXXQ725Zyo1/pB1X
wKWWOHxyNOPmElPQlxJUPlk2YIgglGDPJlkx/AHtjmw3QXrIk+bw+VwKo00bzkP1
Yn6XHWUWOiU8kLj6R1BFcF37wQEXwc7byOR/cy35twu2hB1C+Dh4sZKQbMqXLmhe
hBUoq6RBlOhKMCamOIv1A34f7lmAJPJQPye4Xrfat1UApawOon9k/wlZ2hbMLV+E
TWAFH9e4VpFlUIQlVuMRevYPsWcXgPRL0Ic9FI0PBFXckFwQSEU+SiwyuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGos8UyDPUPDP44DVLPQEoHu109pMB8GA1UdIwQY
MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt
ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy
LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIjlk1wJ
IaVuFcwvojgjjWHjieh1PoDrXKLeyfhqn6FwBI/po/BMfJwwRnWzkvczJTl/GzgR
4Km/Ne+UkIIsayi8lk2tzbr9WqoyfkCsOIK974MMWSy9qWe91AunaiBlB8p5KKXA
5uDG1WOVkbRvFaJNzjKRCRHRuH5a8W/J0jyCwKyl4GOlAmgmkJZ/wvDqXxnGIf+X
9yAJ55NXpoU9ZEHeni9ZacQXMZrI35Vgi9Q0d5RZIEkrrHw3mBPmG/zjdpOMRV9t
16bsGhhwc2vjsuNlimi0+n5/qrIRAV8E2i/KS+342k2Xjgy7YJSjNGLLWKWcdiu5
DR39k4srXBAW2A==
-----END CERTIFICATE-----
Generated at Mon May 5 05:27:16 2025 by rpki-client