Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File:                     t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier:          WQYNBKKEA0gRqmSfkTVtXKJp9qSmhpMsQaw9fi1ZPyw=
Subject key identifier:   F3:95:51:29:05:9F:B9:B0:22:8B:A8:CF:0C:9B:8D:07:99:67:1F:DC
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer:       /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial:       01969F3F66CAEE8E9F29F20496BF21C8047F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number:          0976
Signing time:             Mon 05 May 2025 07:00:54 +0000
Manifest this update:     Mon 05 May 2025 07:00:54 +0000
Manifest next update:     Tue 06 May 2025 07:00:54 +0000
Files and hashes:         1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: ss4ukFf+ftXI7pLdq2OhWghwxKj3ZK8Fb66O5wLb91c=)
                          2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:3f:66:ca:ee:8e:9f:29:f2:04:96:bf:21:c8:04:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
        Validity
            Not Before: May  5 07:00:54 2025 GMT
            Not After : May  6 07:00:54 2025 GMT
        Subject: CN=f3955129059fb9b0228ba8cf0c9b8d0799671fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:6f:7c:25:a7:2b:96:0e:22:7e:54:04:5e:
                    30:19:32:3f:8a:2a:ea:e3:f7:6f:2b:9b:67:56:b1:
                    ae:eb:93:f2:1e:2c:2a:0f:15:5e:8e:af:57:66:96:
                    f3:ce:d2:f3:7e:38:4c:5d:ae:dc:fd:dd:0e:5d:24:
                    1a:58:61:be:cc:5e:80:3f:00:81:2b:e5:2f:93:d3:
                    2e:29:93:1f:3b:81:f7:57:7c:b0:fc:de:ec:f2:74:
                    ff:95:3b:dd:05:d7:9a:3a:cf:04:8e:6e:c2:61:79:
                    c5:a1:95:d9:d0:25:c0:3e:c1:3c:fc:58:6f:4b:d1:
                    2a:0f:b2:e0:6f:7a:39:f0:d4:36:84:aa:5c:3c:97:
                    26:68:11:0b:6b:b6:66:6e:34:43:f0:d6:78:5d:2c:
                    da:03:7a:98:ce:b2:6b:09:53:bf:22:85:a3:2f:2c:
                    b9:10:23:b5:d1:6a:3f:25:83:fe:26:6c:80:b1:87:
                    ff:37:73:ec:fe:e3:2a:37:ee:96:4a:7c:f0:de:3b:
                    16:6f:bf:b3:3a:8d:29:c7:97:37:c9:43:59:84:51:
                    e9:b6:ff:76:3c:03:6f:99:47:cf:25:23:7e:04:f8:
                    8e:b9:c0:d6:59:d9:fc:f5:dc:3a:22:b5:28:a8:8a:
                    df:88:80:f0:a6:ac:28:e3:6d:22:7f:31:8d:98:2e:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:51:29:05:9F:B9:B0:22:8B:A8:CF:0C:9B:8D:07:99:67:1F:DC
            X509v3 Authority Key Identifier:
                keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:e3:04:ce:9a:9a:3b:14:3e:ef:ef:3f:3e:2f:bc:9a:cd:
         7a:a4:fb:c7:7b:b3:0a:cf:f6:10:8d:ed:9e:01:59:0d:d0:6b:
         4d:e5:81:ff:12:0d:a9:e6:47:47:2a:97:de:79:4f:7b:67:a7:
         27:a3:3d:c9:90:2d:2a:69:b6:58:74:9b:3a:d2:6b:31:ae:f9:
         55:70:42:56:43:b2:46:e6:a3:f7:31:5d:3a:dc:f2:3b:80:20:
         70:41:6b:64:1c:8d:2f:d8:89:58:ae:a9:b3:4d:71:ce:a7:0a:
         1d:5a:a6:25:2e:df:79:2a:12:71:34:41:06:de:ce:9f:7c:ec:
         14:62:f3:44:2c:c9:bc:fc:17:db:be:02:e3:48:6f:ba:dd:68:
         52:fb:ed:20:a2:6a:b6:d2:95:e4:8d:a7:bc:58:52:40:c7:74:
         5e:1b:80:c3:0b:0e:83:e9:10:30:ea:99:14:b2:9e:0a:b2:98:
         04:5e:ed:ba:06:2b:d9:1b:65:41:c1:1d:6e:a7:c3:d8:93:c4:
         5d:1d:15:db:9c:27:7d:d0:c7:bd:45:ff:2e:2b:b5:c0:4a:19:
         d6:f4:91:7c:62:76:df:25:3a:b4:67:bf:9a:a1:86:96:29:52:
         42:3f:e3:59:34:3d:78:3d:b5:70:5e:b2:b1:48:6f:16:5f:44:
         41:0f:1c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafP2bK7o6fKfIElr8hyAR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZjY0NmRlNDE0MDcyZmMxYWI3NmIxYjJjOWUwOGI5YmQy
MWE4NDMwHhcNMjUwNTA1MDcwMDU0WhcNMjUwNTA2MDcwMDU0WjAzMTEwLwYDVQQD
EyhmMzk1NTEyOTA1OWZiOWIwMjI4YmE4Y2YwYzliOGQwNzk5NjcxZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsopvfCWnK5YOIn5UBF4wGTI/iirq
4/dvK5tnVrGu65PyHiwqDxVejq9XZpbzztLzfjhMXa7c/d0OXSQaWGG+zF6APwCB
K+Uvk9MuKZMfO4H3V3yw/N7s8nT/lTvdBdeaOs8Ejm7CYXnFoZXZ0CXAPsE8/Fhv
S9EqD7Lgb3o58NQ2hKpcPJcmaBELa7ZmbjRD8NZ4XSzaA3qYzrJrCVO/IoWjLyy5
ECO10Wo/JYP+JmyAsYf/N3Ps/uMqN+6WSnzw3jsWb7+zOo0px5c3yUNZhFHptv92
PANvmUfPJSN+BPiOucDWWdn89dw6IrUoqIrfiIDwpqwo420ifzGNmC7/9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOVUSkFn7mwIouozwybjQeZZx/cMB8GA1UdIwQY
MBaAFLf2Rt5BQHL8GrdrGyyeCLm9IahDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdF9aRzNrRkFjdndhdDJzYkxKNEl1YjBocUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMmY5ZmYtYzQ2MC00MGEyLWEzNTct
NzdlZjg3YTczZTEzLzEvdF9aRzNrRkFjdndhdDJzYkxKNEl1YjBocUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMmY5ZmYtYzQ2MC00MGEyLWEzNTctNzdlZjg3YTczZTEz
LzEvdF9aRzNrRkFjdndhdDJzYkxKNEl1YjBocUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKzjBM6a
mjsUPu/vPz4vvJrNeqT7x3uzCs/2EI3tngFZDdBrTeWB/xINqeZHRyqX3nlPe2en
J6M9yZAtKmm2WHSbOtJrMa75VXBCVkOyRuaj9zFdOtzyO4AgcEFrZByNL9iJWK6p
s01xzqcKHVqmJS7feSoScTRBBt7On3zsFGLzRCzJvPwX274C40hvut1oUvvtIKJq
ttKV5I2nvFhSQMd0XhuAwwsOg+kQMOqZFLKeCrKYBF7tugYr2RtlQcEdbqfD2JPE
XR0V25wnfdDHvUX/Liu1wEoZ1vSRfGJ23yU6tGe/mqGGlilSQj/jWTQ9eD21cF6y
sUhvFl9EQQ8cKA==
-----END CERTIFICATE-----
Generated at Mon May 5 16:07:32 2025 by rpki-client