Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File:                     FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier:          DMe6wo1ymzK7MmprgXXdgFtardeNiWNoDRgU8uK6GRs=
Subject key identifier:   DA:FC:0D:7B:EB:BD:A5:61:05:23:11:ED:06:C1:02:89:F5:FC:45:75
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer:       /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial:       0196C2A6EC681A184EBA1A2152753F06125F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number:          1535
Signing time:             Mon 12 May 2025 04:00:41 +0000
Manifest this update:     Mon 12 May 2025 04:00:41 +0000
Manifest next update:     Tue 13 May 2025 04:00:41 +0000
Files and hashes:         1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
                          2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: tdtfL0OxjEY0vImKwfLgkQreXmZqw6kGpFLnIPFpZcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a6:ec:68:1a:18:4e:ba:1a:21:52:75:3f:06:12:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
        Validity
            Not Before: May 12 04:00:41 2025 GMT
            Not After : May 13 04:00:41 2025 GMT
        Subject: CN=dafc0d7bebbda561052311ed06c10289f5fc4575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:02:f2:d2:0e:02:d3:af:ad:ce:5b:05:0e:
                    f1:91:f1:e3:60:a8:d7:de:54:d7:ed:28:3d:6f:c6:
                    ce:27:8e:e4:72:f8:a5:6c:c3:e4:e7:7d:30:6c:d0:
                    62:c3:d6:e9:f9:48:c5:74:b2:6d:bd:d8:97:d2:9c:
                    71:45:c5:2d:b5:3c:e4:2a:23:fb:0d:9a:2c:ed:50:
                    9f:8f:da:17:21:79:75:73:75:8a:cf:10:2a:df:d5:
                    33:3d:aa:dc:3a:d0:e7:b5:f2:dd:4f:0a:ca:b4:f0:
                    11:9e:7f:fb:63:ed:43:ee:52:b9:5d:a9:91:cf:bb:
                    c5:23:4b:22:4f:a9:07:6f:b0:77:43:63:02:e2:36:
                    1c:bd:31:5a:08:f2:66:75:5b:af:07:0e:1c:eb:0b:
                    a1:d1:c4:c7:0e:7c:70:c2:6d:c8:ce:d8:18:48:7c:
                    b9:0b:27:5a:c9:54:56:f2:04:27:e4:6b:1d:9f:dd:
                    58:3f:36:53:67:b4:74:04:08:74:f0:60:7b:c2:e3:
                    46:34:18:81:d8:53:ad:f6:5d:37:93:58:1e:de:57:
                    1a:f1:87:90:b3:9d:44:bd:e0:7b:45:c9:70:00:dc:
                    a0:65:ee:f5:25:f6:24:a5:be:05:76:02:1d:6b:0b:
                    0b:24:37:f7:f3:6d:3e:4e:40:10:a1:5b:7f:a9:11:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FC:0D:7B:EB:BD:A5:61:05:23:11:ED:06:C1:02:89:F5:FC:45:75
            X509v3 Authority Key Identifier:
                keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:14:05:e4:1a:db:41:c5:9f:7a:99:a3:33:16:4a:d6:4a:
         ee:55:32:fe:11:a7:cf:de:6a:f4:70:af:41:e9:0c:95:02:aa:
         80:30:58:24:da:25:67:7e:09:d1:e4:27:45:a6:f3:d8:78:15:
         b6:48:5e:22:fc:91:62:02:e9:7d:2c:92:f3:fb:50:c5:a7:46:
         36:9e:90:8d:3f:1b:a5:12:6a:ad:53:96:71:35:24:df:c0:8a:
         00:28:68:37:d5:45:95:19:9b:39:1f:42:8b:8b:d1:e2:29:a1:
         ac:1d:28:1a:bc:fb:11:ea:f9:32:7b:08:3e:53:29:0d:0b:9c:
         29:39:81:03:12:ae:c9:10:2a:b9:13:5b:fc:49:1e:89:3e:63:
         fd:32:d1:78:4b:79:98:7e:7b:9f:07:b8:6b:da:87:95:c1:26:
         ad:e1:95:cb:12:ec:59:85:8e:80:9c:92:12:6c:ea:ab:1b:8b:
         ec:0d:19:41:17:03:72:54:5c:6b:91:d2:3e:b7:f2:d8:79:0e:
         91:a2:cf:d1:ba:77:38:2f:36:4d:41:a2:48:97:67:f5:c7:0e:
         37:a7:6e:b4:4a:54:b3:95:37:6b:54:be:d3:42:a3:b8:b1:da:
         27:8a:41:f2:0a:af:c6:df:fa:ae:90:d2:be:7c:92:d1:56:3f:
         79:5f:49:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpuxoGhhOuhohUnU/BhJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTA0ZWUwNGIxMjgyM2U4NTNmZjI0M2QzNjU1MWU0Y2U2
ODNhNzMwHhcNMjUwNTEyMDQwMDQxWhcNMjUwNTEzMDQwMDQxWjAzMTEwLwYDVQQD
EyhkYWZjMGQ3YmViYmRhNTYxMDUyMzExZWQwNmMxMDI4OWY1ZmM0NTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKMC8tIOAtOvrc5bBQ7xkfHjYKjX
3lTX7Sg9b8bOJ47kcvilbMPk530wbNBiw9bp+UjFdLJtvdiX0pxxRcUttTzkKiP7
DZos7VCfj9oXIXl1c3WKzxAq39UzParcOtDntfLdTwrKtPARnn/7Y+1D7lK5XamR
z7vFI0siT6kHb7B3Q2MC4jYcvTFaCPJmdVuvBw4c6wuh0cTHDnxwwm3IztgYSHy5
CydayVRW8gQn5Gsdn91YPzZTZ7R0BAh08GB7wuNGNBiB2FOt9l03k1ge3lca8YeQ
s51EveB7RclwANygZe71JfYkpb4FdgIdawsLJDf3820+TkAQoVt/qRGvOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr8DXvrvaVhBSMR7QbBAon1/EV1MB8GA1UdIwQY
MBaAFBagTuBLEoI+hT/yQ9NlUeTOaDpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYt
NTkwZmI5NDlkMTA0LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYtNTkwZmI5NDlkMTA0
LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1oUBeQa
20HFn3qZozMWStZK7lUy/hGnz95q9HCvQekMlQKqgDBYJNolZ34J0eQnRabz2HgV
tkheIvyRYgLpfSyS8/tQxadGNp6QjT8bpRJqrVOWcTUk38CKAChoN9VFlRmbOR9C
i4vR4imhrB0oGrz7Eer5MnsIPlMpDQucKTmBAxKuyRAquRNb/EkeiT5j/TLReEt5
mH57nwe4a9qHlcEmreGVyxLsWYWOgJySEmzqqxuL7A0ZQRcDclRca5HSPrfy2HkO
kaLP0bp3OC82TUGiSJdn9ccON6dutEpUs5U3a1S+00KjuLHaJ4pB8gqvxt/6rpDS
vnyS0VY/eV9Jfg==
-----END CERTIFICATE-----
Generated at Mon May 12 13:43:21 2025 by rpki-client