Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File:                     a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier:          0AK5Xnfk6yOBzr/Z1F0kLDKA+MkCZd6Ld7xj04PzuSo=
Subject key identifier:   09:8B:78:E2:8A:A2:0A:10:79:56:AE:B0:E8:29:B7:32:97:11:BF:80
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer:       /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial:       0196AE7BACF2F77B92CC9DF6BA5F72793166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number:          1400
Signing time:             Thu 08 May 2025 06:01:02 +0000
Manifest this update:     Thu 08 May 2025 06:01:02 +0000
Manifest next update:     Fri 09 May 2025 06:01:02 +0000
Files and hashes:         1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: XRsTs+rQ7/UWuK9W2bNYWC/2ASf2HvmcNy8rYYCmL28=)
                          2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:7b:ac:f2:f7:7b:92:cc:9d:f6:ba:5f:72:79:31:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
        Validity
            Not Before: May  8 06:01:02 2025 GMT
            Not After : May  9 06:01:02 2025 GMT
        Subject: CN=098b78e28aa20a107956aeb0e829b7329711bf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:0b:ff:fc:12:e6:6b:0b:d2:96:f4:d6:9f:
                    a8:a6:f5:95:5c:4e:a5:cc:3c:f5:3e:d3:24:f6:19:
                    1b:c1:4f:c9:ab:b0:a4:d9:e3:da:0a:6e:fa:4c:f7:
                    51:e5:ce:0a:72:e2:ec:3f:3a:ca:3c:97:37:8f:1c:
                    e5:11:54:ae:8b:de:c0:5c:9d:13:aa:5c:f4:86:08:
                    73:ed:dd:b1:ab:f1:c0:ad:3d:0e:fe:2e:10:ef:56:
                    d8:30:39:53:7d:b5:e6:24:08:b3:c7:1f:4e:65:f5:
                    20:3c:9b:6f:3a:5a:68:0e:c5:e5:c2:fd:88:b4:22:
                    dd:7c:ba:ad:cf:e5:f2:65:60:80:1d:f5:a4:08:57:
                    75:9c:20:18:ee:8a:fa:1a:4b:df:21:ed:b9:87:6e:
                    ea:a3:c3:fd:59:8f:e4:f0:69:7b:e2:be:22:6d:92:
                    1a:45:3a:8f:7f:b2:52:9b:17:e8:9e:27:5e:fe:c5:
                    d1:32:0d:75:60:9b:db:4a:27:a1:75:bd:9c:ee:28:
                    5c:87:58:d6:1b:f0:43:b0:77:40:0c:d3:f0:5f:bb:
                    9d:cb:2c:e4:76:de:1c:17:73:22:8f:4f:2c:38:13:
                    7d:fb:75:4d:d6:fe:5a:3c:23:08:41:7a:4e:90:e7:
                    94:13:4d:59:d6:a1:b3:6b:0b:72:88:1a:f4:3a:fa:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8B:78:E2:8A:A2:0A:10:79:56:AE:B0:E8:29:B7:32:97:11:BF:80
            X509v3 Authority Key Identifier:
                keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:88:88:3e:d0:b6:24:8f:d7:8d:60:95:13:00:1a:68:a8:42:
         23:23:aa:ec:db:d3:bb:c9:a7:0a:e4:9b:6c:9b:15:51:c4:cc:
         0a:75:da:12:0c:04:fe:ef:15:29:6d:df:b2:8c:fa:45:46:67:
         96:63:d7:93:58:62:3f:1c:41:a4:17:ca:e3:0a:aa:80:a6:7d:
         09:e0:65:a8:3c:c1:7d:97:93:36:d1:e1:51:04:1c:e0:70:14:
         f0:09:9b:66:8b:c1:65:11:c6:fe:1f:4c:6c:7b:3d:13:24:b8:
         95:96:48:78:f6:da:7e:c2:81:7d:3c:85:38:27:50:42:c3:a7:
         db:04:ea:d9:b7:0c:47:f5:3c:d5:6a:76:75:fd:91:47:64:05:
         70:e0:fe:dc:70:74:b4:66:06:35:36:48:cd:c1:be:26:f8:11:
         11:cf:0d:62:fc:24:36:5a:fb:4d:6f:3d:1d:5a:fe:8a:62:c9:
         60:79:26:26:41:51:b0:5e:f6:5b:95:df:3c:59:c3:df:be:1f:
         ff:ee:aa:f1:df:a4:c0:c8:71:3a:2a:0f:c5:95:33:f5:80:78:
         cc:8e:ce:d1:7b:6b:a0:ce:60:85:a3:fb:07:04:66:55:9e:36:
         eb:b9:cd:e5:59:a3:13:bb:cc:f9:ac:f8:a0:ed:18:1b:0b:1a:
         56:f1:6d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaue6zy93uSzJ32ul9yeTFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWU4YjA3MDFlMzVkNjZhOTc4NzZkODA1NTAxMmE4OTY4
MmZkYzMwHhcNMjUwNTA4MDYwMTAyWhcNMjUwNTA5MDYwMTAyWjAzMTEwLwYDVQQD
EygwOThiNzhlMjhhYTIwYTEwNzk1NmFlYjBlODI5YjczMjk3MTFiZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIcL//wS5msL0pb01p+opvWVXE6l
zDz1PtMk9hkbwU/Jq7Ck2ePaCm76TPdR5c4KcuLsPzrKPJc3jxzlEVSui97AXJ0T
qlz0hghz7d2xq/HArT0O/i4Q71bYMDlTfbXmJAizxx9OZfUgPJtvOlpoDsXlwv2I
tCLdfLqtz+XyZWCAHfWkCFd1nCAY7or6GkvfIe25h27qo8P9WY/k8Gl74r4ibZIa
RTqPf7JSmxfonide/sXRMg11YJvbSiehdb2c7ihch1jWG/BDsHdADNPwX7udyyzk
dt4cF3Mij08sOBN9+3VN1v5aPCMIQXpOkOeUE01Z1qGzawtyiBr0OvqvoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmLeOKKogoQeVausOgptzKXEb+AMB8GA1UdIwQY
MBaAFGteiwcB411mqXh22AVQEqiWgv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2Ut
ZDk1NzI2NDY1M2UyLzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2UtZDk1NzI2NDY1M2Uy
LzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIiIPtC2
JI/XjWCVEwAaaKhCIyOq7NvTu8mnCuSbbJsVUcTMCnXaEgwE/u8VKW3fsoz6RUZn
lmPXk1hiPxxBpBfK4wqqgKZ9CeBlqDzBfZeTNtHhUQQc4HAU8AmbZovBZRHG/h9M
bHs9EyS4lZZIePbafsKBfTyFOCdQQsOn2wTq2bcMR/U81Wp2df2RR2QFcOD+3HB0
tGYGNTZIzcG+JvgREc8NYvwkNlr7TW89HVr+imLJYHkmJkFRsF72W5XfPFnD374f
/+6q8d+kwMhxOioPxZUz9YB4zI7O0XtroM5ghaP7BwRmVZ4267nN5VmjE7vM+az4
oO0YGwsaVvFtuQ==
-----END CERTIFICATE-----
Generated at Thu May 8 13:04:55 2025 by rpki-client