Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File:                     9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier:          eJlgiG1Uf40A2+O+936ZGNpWDJOke75pCHEWZA25d5M=
Subject key identifier:   A9:2D:4F:4D:D5:AD:4D:74:13:6C:F5:51:8A:AC:5C:13:33:72:84:1B
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer:       /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial:       0196CF86FDA141026E2EDCD9D1C5615A26CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number:          1279
Signing time:             Wed 14 May 2025 16:00:52 +0000
Manifest this update:     Wed 14 May 2025 16:00:52 +0000
Manifest next update:     Thu 15 May 2025 16:00:52 +0000
Files and hashes:         1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: NX8kFB9qepf5RC2eScLVsrYBBKkGu1hdG7jEVIf14o8=)
                          2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:86:fd:a1:41:02:6e:2e:dc:d9:d1:c5:61:5a:26:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f501b9e20616d686b405da906afa597635063640
        Validity
            Not Before: May 14 16:00:52 2025 GMT
            Not After : May 15 16:00:52 2025 GMT
        Subject: CN=a92d4f4dd5ad4d74136cf5518aac5c133372841b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:4f:f2:86:f7:2f:6b:a7:bd:d6:8f:ef:2a:
                    ce:8c:64:dc:e7:da:fa:d8:f5:e1:a3:41:4e:15:27:
                    91:d7:03:3b:9e:01:00:c3:f8:cb:5a:18:0e:4c:41:
                    c2:1a:be:84:08:00:04:2a:35:cc:74:4d:09:e1:7f:
                    44:80:90:3e:cb:df:11:ee:b4:19:cf:0c:fa:2a:8d:
                    c5:9a:10:f5:39:5e:24:da:99:8f:90:45:a8:0f:4c:
                    d8:c3:0b:44:80:76:02:7e:99:df:bd:b0:60:ef:9e:
                    4c:42:52:56:81:a6:97:cb:71:40:3a:b1:71:b6:9e:
                    ea:8e:eb:d8:b7:33:52:5e:fa:ca:cc:d0:5b:17:16:
                    81:be:08:8e:18:5b:75:39:d1:5b:15:ac:16:a0:bc:
                    c8:a8:e4:4a:f7:9b:62:83:e6:68:50:81:aa:70:2a:
                    f4:ad:94:b5:7d:fd:cd:84:ef:66:bd:5b:98:2f:8c:
                    e7:17:2c:3b:ba:ba:ec:23:6f:8a:ad:94:e8:07:3d:
                    8f:a4:96:d6:32:19:d6:79:23:06:49:83:f1:07:4b:
                    b3:be:2b:99:d0:46:a6:06:5e:f0:6c:b1:9f:7a:0b:
                    fb:8d:ff:04:8e:83:ca:78:ee:4d:a8:7f:b7:58:97:
                    ba:4a:f9:23:b2:8f:76:04:56:46:46:5c:47:2b:f8:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2D:4F:4D:D5:AD:4D:74:13:6C:F5:51:8A:AC:5C:13:33:72:84:1B
            X509v3 Authority Key Identifier:
                keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:16:d4:71:50:89:37:b0:10:b9:52:cf:39:9f:35:0a:e4:
         00:88:6d:a7:3b:9c:52:24:dd:c8:f4:16:dc:55:2d:af:75:52:
         81:91:f0:a4:cd:d0:bd:28:d5:1e:72:d7:4e:a0:52:57:e4:f2:
         44:4c:7c:a1:5d:de:f1:cb:8c:ca:aa:1a:90:34:13:ea:f0:73:
         5f:2c:42:03:e9:a6:f5:89:10:26:c8:d8:3d:26:3c:3b:5f:b1:
         5a:84:aa:0f:92:6b:54:12:67:4b:1e:e9:4b:20:7b:cd:b1:df:
         a7:b2:a4:92:6f:23:1c:bb:62:9c:af:33:49:f4:2e:4e:24:be:
         bb:d4:62:0e:11:38:0e:b4:64:81:f1:61:48:3e:4b:52:5d:2f:
         3d:ec:45:e7:1a:db:53:1f:ad:6f:2a:0a:67:d7:5a:ba:ee:2f:
         bb:67:2b:b3:36:9c:c1:0e:da:19:c3:c0:22:31:76:4d:73:3a:
         f6:12:65:05:54:7b:21:18:32:05:72:b0:90:8a:8b:e2:52:c7:
         7d:9f:ca:21:2d:57:4d:1c:b2:a3:1a:96:18:cd:87:ae:51:5e:
         5f:41:a2:0f:c8:62:36:c1:57:78:30:c8:1e:9d:7b:b7:57:95:
         08:d0:5b:9a:b4:dc:f2:c6:3b:f2:e3:89:b7:f6:ac:8b:34:7c:
         22:15:96:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPhv2hQQJuLtzZ0cVhWibNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw
NjM2NDAwHhcNMjUwNTE0MTYwMDUyWhcNMjUwNTE1MTYwMDUyWjAzMTEwLwYDVQQD
EyhhOTJkNGY0ZGQ1YWQ0ZDc0MTM2Y2Y1NTE4YWFjNWMxMzMzNzI4NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fhP8ob3L2unvdaP7yrOjGTc59r6
2PXho0FOFSeR1wM7ngEAw/jLWhgOTEHCGr6ECAAEKjXMdE0J4X9EgJA+y98R7rQZ
zwz6Ko3FmhD1OV4k2pmPkEWoD0zYwwtEgHYCfpnfvbBg755MQlJWgaaXy3FAOrFx
tp7qjuvYtzNSXvrKzNBbFxaBvgiOGFt1OdFbFawWoLzIqORK95tig+ZoUIGqcCr0
rZS1ff3NhO9mvVuYL4znFyw7urrsI2+KrZToBz2PpJbWMhnWeSMGSYPxB0uzviuZ
0EamBl7wbLGfegv7jf8EjoPKeO5NqH+3WJe6Svkjso92BFZGRlxHK/jJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKktT03VrU10E2z1UYqsXBMzcoQbMB8GA1UdIwQY
MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt
NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5
LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNwW1HFQ
iTewELlSzzmfNQrkAIhtpzucUiTdyPQW3FUtr3VSgZHwpM3QvSjVHnLXTqBSV+Ty
REx8oV3e8cuMyqoakDQT6vBzXyxCA+mm9YkQJsjYPSY8O1+xWoSqD5JrVBJnSx7p
SyB7zbHfp7Kkkm8jHLtinK8zSfQuTiS+u9RiDhE4DrRkgfFhSD5LUl0vPexF5xrb
Ux+tbyoKZ9dauu4vu2crszacwQ7aGcPAIjF2TXM69hJlBVR7IRgyBXKwkIqL4lLH
fZ/KIS1XTRyyoxqWGM2HrlFeX0GiD8hiNsFXeDDIHp17t1eVCNBbmrTc8sY78uOJ
t/asizR8IhWWog==
-----END CERTIFICATE-----
Generated at Wed May 14 20:40:40 2025 by rpki-client