Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          kiabwTTUXQTKDCofMVGOj66T4A85Nmkvlzl2tzZVEtw=
Subject key identifier:   FC:F9:03:F8:8C:26:72:1F:A0:DF:6B:9D:87:82:AA:7D:97:B1:6F:AF
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       0196C1261B649308423088F3CA70AB572265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 21:00:22 +0000
Manifest this update:     Sun 11 May 2025 21:00:22 +0000
Manifest next update:     Mon 12 May 2025 21:00:22 +0000
Files and hashes:         1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: 0n9m4iPmSkaYdDyLD5AtiTyN/TqDHnCLjahd7ngPSq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:1b:64:93:08:42:30:88:f3:ca:70:ab:57:22:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: May 11 21:00:22 2025 GMT
            Not After : May 12 21:00:22 2025 GMT
        Subject: CN=fcf903f88c26721fa0df6b9d8782aa7d97b16faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3b:68:c1:eb:64:70:5f:62:11:86:5a:27:4b:
                    84:8c:ea:ad:07:31:1f:3c:5c:bb:da:5a:63:b6:ce:
                    7d:54:2d:6c:43:ac:4e:93:23:cd:73:31:11:82:60:
                    80:e0:60:da:4e:e1:d6:64:ab:8b:6b:14:d9:c4:f4:
                    21:63:b9:7d:8b:1c:c1:8f:7c:b7:16:95:7b:b0:7a:
                    cc:ed:71:ab:5b:33:c4:d1:e0:49:9c:56:3a:52:cb:
                    15:06:f7:9e:79:53:5c:46:36:3c:7d:fd:26:c8:62:
                    21:98:d3:68:89:9f:7f:17:3a:8c:2c:af:04:ba:01:
                    ca:8c:04:d5:c9:fb:01:cf:b9:a0:f6:7a:99:79:84:
                    43:b6:ff:32:40:ad:f1:b6:58:ee:c5:53:d5:75:a7:
                    6f:b4:21:a0:13:3d:3e:d1:0c:ca:1e:5c:04:bb:71:
                    b8:cc:e7:77:f0:e0:2b:69:71:10:51:22:fd:a7:22:
                    eb:81:6e:6c:83:12:59:c5:54:2f:b5:ef:4e:9f:db:
                    25:82:ad:7e:a8:f9:68:9b:93:ee:2b:04:28:4a:e0:
                    03:45:43:4e:67:59:83:a8:a5:3a:bf:ce:93:1f:48:
                    ac:97:56:1f:de:28:08:d7:f1:2e:11:33:74:8e:66:
                    77:73:3d:2a:87:f5:e9:5c:00:9b:5c:2a:c0:b6:77:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F9:03:F8:8C:26:72:1F:A0:DF:6B:9D:87:82:AA:7D:97:B1:6F:AF
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:db:9b:a1:cf:08:53:fb:66:e0:5e:5f:08:72:fc:f3:3c:
         73:34:4a:0a:ec:40:df:4c:59:91:64:b5:69:f1:26:11:f2:b5:
         d3:00:f1:62:fe:7c:ca:42:4f:ec:15:19:f0:de:1b:41:e0:52:
         78:70:37:81:f1:80:c9:9d:05:c5:18:da:17:71:f6:59:04:67:
         7d:f9:ab:0e:c8:f0:35:42:a9:01:1c:ab:ee:63:7c:cd:f5:eb:
         a1:2d:7f:70:dc:f0:fa:ca:7c:fb:d1:23:14:e9:05:93:a1:c4:
         16:da:0c:d7:0a:93:60:57:38:14:85:96:4b:ee:c2:be:d9:cd:
         fd:68:8b:91:36:25:bb:3f:73:7e:23:f3:60:b0:23:2c:05:e6:
         cc:7c:fe:48:17:a4:1e:f4:97:ff:f2:0d:8c:b4:5c:64:79:84:
         98:62:bb:dc:6e:b1:dc:f6:0d:b8:52:9b:ff:05:5e:b4:28:ea:
         96:90:c3:58:0d:53:46:fb:15:0d:df:7b:91:e2:a5:fb:ef:76:
         88:40:6a:21:1d:0f:57:3d:cf:cd:28:48:a5:0d:8f:ee:e9:97:
         1c:7c:dc:52:3e:00:f7:4b:98:94:40:3a:6d:6e:2b:d7:a8:a5:
         45:fd:b2:c3:a7:e3:8d:7e:6c:13:ca:dc:c5:a3:bb:4a:48:ad:
         64:4e:3e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJhtkkwhCMIjzynCrVyJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjlhZGE5YjI4YjY5OTdmZGExYzQ2OGE4ZDg2OTYzODQw
N2EwYmIwHhcNMjUwNTExMjEwMDIyWhcNMjUwNTEyMjEwMDIyWjAzMTEwLwYDVQQD
EyhmY2Y5MDNmODhjMjY3MjFmYTBkZjZiOWQ4NzgyYWE3ZDk3YjE2ZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DtowetkcF9iEYZaJ0uEjOqtBzEf
PFy72lpjts59VC1sQ6xOkyPNczERgmCA4GDaTuHWZKuLaxTZxPQhY7l9ixzBj3y3
FpV7sHrM7XGrWzPE0eBJnFY6UssVBveeeVNcRjY8ff0myGIhmNNoiZ9/FzqMLK8E
ugHKjATVyfsBz7mg9nqZeYRDtv8yQK3xtljuxVPVdadvtCGgEz0+0QzKHlwEu3G4
zOd38OAraXEQUSL9pyLrgW5sgxJZxVQvte9On9slgq1+qPlom5PuKwQoSuADRUNO
Z1mDqKU6v86TH0isl1Yf3igI1/EuETN0jmZ3cz0qh/XpXACbXCrAtncMAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz5A/iMJnIfoN9rnYeCqn2XsW+vMB8GA1UdIwQY
MBaAFPz5ramyi2mX/aHEaKjYaWOEB6C7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUt
MjU5ZmUxNzUwZWViLzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUtMjU5ZmUxNzUwZWVi
LzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtHbm6HP
CFP7ZuBeXwhy/PM8czRKCuxA30xZkWS1afEmEfK10wDxYv58ykJP7BUZ8N4bQeBS
eHA3gfGAyZ0FxRjaF3H2WQRnffmrDsjwNUKpARyr7mN8zfXroS1/cNzw+sp8+9Ej
FOkFk6HEFtoM1wqTYFc4FIWWS+7CvtnN/WiLkTYluz9zfiPzYLAjLAXmzHz+SBek
HvSX//INjLRcZHmEmGK73G6x3PYNuFKb/wVetCjqlpDDWA1TRvsVDd97keKl++92
iEBqIR0PVz3PzShIpQ2P7umXHHzcUj4A90uYlEA6bW4r16ilRf2yw6fjjX5sE8rc
xaO7SkitZE4+Xw==
-----END CERTIFICATE-----
Generated at Sun May 11 23:33:23 2025 by rpki-client