Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File:                     4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier:          EOJjeamfHUmyB8OoR0VkAPqwQXiNLjUA9XkzSxVU0u8=
Subject key identifier:   BD:FC:01:1A:51:1A:80:22:77:DD:D5:79:C4:9F:25:FD:25:51:B5:41
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       0196A4D3A7B1A7651BB73F661F8F7F1509FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number:          0FEA
Signing time:             Tue 06 May 2025 09:00:56 +0000
Manifest this update:     Tue 06 May 2025 09:00:56 +0000
Manifest next update:     Wed 07 May 2025 09:00:56 +0000
Files and hashes:         1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
                          2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: vfajNX13JBxtKjcQv8l6P/MkJKiA5uky/dwCQa8WK5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:d3:a7:b1:a7:65:1b:b7:3f:66:1f:8f:7f:15:09:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: May  6 09:00:56 2025 GMT
            Not After : May  7 09:00:56 2025 GMT
        Subject: CN=bdfc011a511a802277ddd579c49f25fd2551b541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:77:19:df:b1:24:0f:40:e1:3e:48:1e:b5:
                    56:e7:a6:7e:a1:c9:a8:2a:50:8b:b1:f0:f9:a7:8f:
                    8c:c4:65:ff:13:fd:8c:9a:4f:d1:c9:8f:f7:77:5c:
                    3f:0b:df:ac:d8:81:7e:91:1e:f8:2e:d9:74:d7:3b:
                    39:f7:1a:52:10:0a:e6:9a:fa:4a:2d:81:c8:00:3f:
                    65:db:d4:7c:0e:f1:85:c8:5b:d6:cc:51:e6:c0:0e:
                    94:9a:2c:96:82:fe:39:a0:fc:31:e9:f2:03:25:57:
                    1a:14:8b:2c:92:09:6c:ab:96:36:2c:3e:d7:f7:ad:
                    d9:c9:62:77:f1:cf:9a:d2:28:13:f2:c7:0b:f9:71:
                    18:10:a3:e7:a8:58:87:be:87:e3:4b:02:a4:66:fe:
                    00:6d:46:d4:f4:b3:56:6a:4d:c5:70:1c:84:8b:59:
                    3f:6c:1c:60:11:3f:80:9c:01:b8:cc:f6:29:9f:ed:
                    91:a9:f2:5e:b1:fa:99:57:d4:c0:9f:dc:fc:1c:a8:
                    89:4f:e6:54:b8:cd:94:4b:53:df:9f:08:8f:6e:61:
                    0a:d1:08:2a:99:82:5f:29:93:6b:f0:82:a3:8b:f7:
                    90:72:97:c6:8c:3f:b4:ce:4e:f2:d3:6c:cf:b6:6b:
                    f5:e6:28:d8:ac:b5:35:3e:eb:db:f8:2f:7f:e0:c5:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:01:1A:51:1A:80:22:77:DD:D5:79:C4:9F:25:FD:25:51:B5:41
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7f:c7:fa:b9:29:77:eb:65:42:ea:5c:0a:a9:b9:0d:f6:22:
         3b:b5:9a:1f:e8:c6:56:08:14:70:2e:d2:80:e4:74:3f:48:75:
         10:5f:3f:46:29:d2:53:e9:74:88:0f:a4:ca:a7:7c:42:87:52:
         b2:03:c9:c8:ab:89:a8:2f:e5:c3:c6:1b:e9:1b:d6:75:d4:3a:
         bf:ce:3f:00:b7:bb:ce:6a:5c:77:a1:2a:1e:88:01:70:db:36:
         31:d7:92:9a:bb:e8:39:e9:e1:cf:77:3d:aa:db:e4:6c:9c:fd:
         30:c8:63:3e:1f:3f:b0:5f:ae:bc:44:b0:50:6b:cc:9f:ea:4a:
         9b:14:fe:0b:07:ba:4e:9b:e2:b4:67:8e:30:56:a6:1b:08:58:
         1e:77:5e:28:1c:ad:4d:9b:ad:20:0c:c7:b8:70:57:40:7d:68:
         df:fb:87:6c:c1:28:25:be:ce:b1:94:05:e0:32:f4:2c:26:c3:
         11:82:45:8a:f5:4f:68:2c:38:5a:19:f0:30:98:b2:bc:2d:94:
         e7:17:a4:17:f9:7e:a7:a1:f5:92:81:58:b1:89:f1:8c:76:59:
         a5:e5:6e:63:21:3e:2d:c3:e3:24:bc:84:66:2a:73:7c:f9:4f:
         62:2b:40:96:a4:4b:54:ad:3d:8e:7a:aa:30:97:27:cb:37:2f:
         76:9e:6c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZak06exp2Ubtz9mH49/FQn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTlmZTNjOGE2OWQ1MDkzNWExZjc0OTY2NmUwOGRjNzU0
NTk0ZGQwHhcNMjUwNTA2MDkwMDU2WhcNMjUwNTA3MDkwMDU2WjAzMTEwLwYDVQQD
EyhiZGZjMDExYTUxMWE4MDIyNzdkZGQ1NzljNDlmMjVmZDI1NTFiNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aN3Gd+xJA9A4T5IHrVW56Z+ocmo
KlCLsfD5p4+MxGX/E/2Mmk/RyY/3d1w/C9+s2IF+kR74Ltl01zs59xpSEArmmvpK
LYHIAD9l29R8DvGFyFvWzFHmwA6UmiyWgv45oPwx6fIDJVcaFIsskglsq5Y2LD7X
963ZyWJ38c+a0igT8scL+XEYEKPnqFiHvofjSwKkZv4AbUbU9LNWak3FcByEi1k/
bBxgET+AnAG4zPYpn+2RqfJesfqZV9TAn9z8HKiJT+ZUuM2US1PfnwiPbmEK0Qgq
mYJfKZNr8IKji/eQcpfGjD+0zk7y02zPtmv15ijYrLU1Puvb+C9/4MV0ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL38ARpRGoAid93VecSfJf0lUbVBMB8GA1UdIwQY
MBaAFOGp/jyKadUJNaH3SWZuCNx1RZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGIt
NmI2ZmRiNTRiYTMxLzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGItNmI2ZmRiNTRiYTMx
LzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH/H+rkp
d+tlQupcCqm5DfYiO7WaH+jGVggUcC7SgOR0P0h1EF8/RinSU+l0iA+kyqd8QodS
sgPJyKuJqC/lw8Yb6RvWddQ6v84/ALe7zmpcd6EqHogBcNs2MdeSmrvoOenhz3c9
qtvkbJz9MMhjPh8/sF+uvESwUGvMn+pKmxT+Cwe6TpvitGeOMFamGwhYHndeKByt
TZutIAzHuHBXQH1o3/uHbMEoJb7OsZQF4DL0LCbDEYJFivVPaCw4WhnwMJiyvC2U
5xekF/l+p6H1koFYsYnxjHZZpeVuYyE+LcPjJLyEZipzfPlPYitAlqRLVK09jnqq
MJcnyzcvdp5siQ==
-----END CERTIFICATE-----
Generated at Tue May 6 17:16:35 2025 by rpki-client