Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          ZA1cbMU/bRTeR3Dv3zU9+9gANuS44Qox1xku+x9Dtm0=
Subject key identifier:   B0:98:C1:2D:0A:6E:97:1E:9C:30:C1:47:23:40:0C:8A:8E:03:FC:28
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       0196ABE82501A0AFB62447FF7F30BD013D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          14BB
Signing time:             Wed 07 May 2025 18:00:39 +0000
Manifest this update:     Wed 07 May 2025 18:00:39 +0000
Manifest next update:     Thu 08 May 2025 18:00:39 +0000
Files and hashes:         1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: BGSYoiFuBb4Xmb9bEbPO81VkzqypqNV2MY2TeYKuVaw=)
                          2: zR4iLeAlwp_N8F3SE1jgzNAAf5g.roa (hash: xWq9xR6Qocj5qbdstuQx7KrJz2/dodBVSQAGA+Ot/AI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e8:25:01:a0:af:b6:24:47:ff:7f:30:bd:01:3d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: May  7 18:00:39 2025 GMT
            Not After : May  8 18:00:39 2025 GMT
        Subject: CN=b098c12d0a6e971e9c30c14723400c8a8e03fc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:e0:fe:99:d3:f2:64:45:4a:87:43:2c:0d:
                    74:58:bb:8e:ff:6d:50:72:38:1d:a1:dd:8d:4e:bf:
                    3d:3d:ac:81:0d:c6:41:39:e1:ad:86:b9:4c:cd:ad:
                    3c:d2:34:4f:2c:ab:7f:25:ba:8e:9b:2e:61:aa:ce:
                    cf:06:d6:62:7b:04:ef:75:64:b0:67:ea:3d:c5:77:
                    9d:3e:b8:b9:e2:5b:93:79:f8:6f:be:48:98:11:96:
                    3a:a9:bf:ff:3f:5d:69:7d:bc:e9:a2:93:bd:81:5d:
                    81:8d:69:b7:54:46:93:31:e5:7f:64:c3:56:21:d6:
                    b7:c1:0c:6d:40:c1:66:87:ff:5d:79:f2:9b:c3:41:
                    7c:91:dd:d8:b4:31:78:48:6c:29:a9:2f:a4:49:e5:
                    2e:73:d6:df:a9:cd:7e:85:5a:a1:6d:f3:92:a6:aa:
                    13:75:82:14:7f:7c:20:8a:df:cf:33:dc:33:67:c1:
                    f4:f8:8b:e3:7a:bc:56:22:db:ca:a2:7e:68:48:e9:
                    fb:55:95:08:9c:a1:2d:4b:a4:a6:7c:d8:cc:84:1a:
                    46:71:12:0b:3e:2e:1d:75:89:fd:5f:5b:e0:29:b7:
                    5d:61:38:7b:5f:44:b4:d4:47:47:df:81:57:d1:ce:
                    47:8f:5c:cc:a9:eb:a2:d2:23:dd:10:2f:58:a3:a6:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:C1:2D:0A:6E:97:1E:9C:30:C1:47:23:40:0C:8A:8E:03:FC:28
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:b9:60:e6:77:e2:f8:7c:7f:b8:0c:30:90:1b:71:f5:fe:24:
         0e:50:5b:c2:22:55:16:22:4e:4f:5f:44:dd:56:ab:28:2f:e0:
         12:94:b2:27:fd:53:61:05:03:c6:e2:a7:eb:1d:96:c3:35:98:
         1e:af:00:c2:8c:37:97:e7:cc:c8:e1:d0:f0:8e:05:85:87:31:
         60:e1:9f:e0:f9:e2:32:8a:f8:63:37:90:14:6f:51:7d:5e:10:
         d1:4d:85:b9:0b:f1:3b:8d:fc:5f:6f:ec:22:aa:29:cd:4b:f4:
         f4:93:1a:ef:b2:fb:e8:40:0f:6a:a2:eb:3d:d1:2b:5e:cc:09:
         60:74:c6:62:ce:c2:ec:1d:6e:19:39:7c:fa:97:d6:24:60:5f:
         cf:6d:e9:cc:fe:96:d3:71:fb:fd:3a:dc:6e:3e:c6:08:e9:a7:
         82:f7:e2:2f:ce:28:f1:bf:6e:59:d8:8e:a5:ec:50:9a:65:c6:
         51:b9:b0:29:c6:9e:8c:47:2b:bd:f2:58:a6:36:3f:19:79:ab:
         bc:d2:f8:25:be:3a:fe:80:50:c9:a0:40:bc:e6:eb:df:43:43:
         73:aa:46:db:c0:16:3f:25:9f:3f:c3:3b:b9:0a:09:fd:3c:74:
         99:bd:7e:4e:1f:61:cd:58:be:41:fa:c0:08:f7:93:63:81:85:
         de:8c:b2:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZar6CUBoK+2JEf/fzC9AT0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzY0YzY2OGVmZjM0NzQwODE2ZWRhODVhNDU5ZDBjNDIy
ZTA2M2MwHhcNMjUwNTA3MTgwMDM5WhcNMjUwNTA4MTgwMDM5WjAzMTEwLwYDVQQD
EyhiMDk4YzEyZDBhNmU5NzFlOWMzMGMxNDcyMzQwMGM4YThlMDNmYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwITg/pnT8mRFSodDLA10WLuO/21Q
cjgdod2NTr89PayBDcZBOeGthrlMza080jRPLKt/JbqOmy5hqs7PBtZiewTvdWSw
Z+o9xXedPri54luTefhvvkiYEZY6qb//P11pfbzpopO9gV2BjWm3VEaTMeV/ZMNW
Ida3wQxtQMFmh/9defKbw0F8kd3YtDF4SGwpqS+kSeUuc9bfqc1+hVqhbfOSpqoT
dYIUf3wgit/PM9wzZ8H0+IvjerxWItvKon5oSOn7VZUInKEtS6SmfNjMhBpGcRIL
Pi4ddYn9X1vgKbddYTh7X0S01EdH34FX0c5Hj1zMqeui0iPdEC9Yo6b3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCYwS0KbpcenDDBRyNADIqOA/woMB8GA1UdIwQY
MBaAFJPGTGaO/zR0CBbtqFpFnQxCLgY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzIt
MTQ3ZWM5NmVhNzMwLzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzItMTQ3ZWM5NmVhNzMw
LzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3rlg5nfi
+Hx/uAwwkBtx9f4kDlBbwiJVFiJOT19E3VarKC/gEpSyJ/1TYQUDxuKn6x2WwzWY
Hq8Awow3l+fMyOHQ8I4FhYcxYOGf4PniMor4YzeQFG9RfV4Q0U2FuQvxO438X2/s
IqopzUv09JMa77L76EAPaqLrPdErXswJYHTGYs7C7B1uGTl8+pfWJGBfz23pzP6W
03H7/Trcbj7GCOmngvfiL84o8b9uWdiOpexQmmXGUbmwKcaejEcrvfJYpjY/GXmr
vNL4Jb46/oBQyaBAvObr30NDc6pG28AWPyWfP8M7uQoJ/Tx0mb1+Th9hzVi+QfrA
CPeTY4GF3oyyLQ==
-----END CERTIFICATE-----
Generated at Wed May 7 22:28:19 2025 by rpki-client