Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File:                     vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier:          k+8NiG86bEcHvTrpt2AUBhrHGKCOdVo/K9Tqy8aMJ0Y=
Subject key identifier:   9B:F1:CB:D6:D2:83:BD:75:14:84:5F:BE:0E:DE:8A:57:81:AD:5A:6E
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer:       /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial:       0196CB73256C67D84CED1182526ADF58743E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number:          1249
Signing time:             Tue 13 May 2025 21:00:42 +0000
Manifest this update:     Tue 13 May 2025 21:00:42 +0000
Manifest next update:     Wed 14 May 2025 21:00:42 +0000
Files and hashes:         1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=)
                          2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: kX7riKjGS15z+U66JquAIQHm9eMH3+SMOjQfeYw1paQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:25:6c:67:d8:4c:ed:11:82:52:6a:df:58:74:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
        Validity
            Not Before: May 13 21:00:42 2025 GMT
            Not After : May 14 21:00:42 2025 GMT
        Subject: CN=9bf1cbd6d283bd7514845fbe0ede8a5781ad5a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:6f:b2:da:56:36:58:b6:a9:59:5d:56:41:
                    ff:9d:ad:ca:80:55:d1:f0:2b:2b:be:fc:dc:b0:ee:
                    50:86:a9:eb:4e:a2:c0:4e:d9:bf:74:ff:57:88:84:
                    e9:68:b8:72:84:96:66:38:e1:d7:81:f3:8c:7e:6f:
                    51:bb:8b:b6:49:ae:c6:58:34:ef:10:fa:19:3f:c2:
                    ad:75:31:29:2f:4f:c4:91:a0:4d:0d:dd:cb:f4:47:
                    cd:b1:3d:42:0b:ea:f7:e8:3c:f3:4b:d8:99:5c:01:
                    69:7a:32:2e:0e:8a:fa:0f:ee:da:29:06:48:b9:d3:
                    a8:16:e1:5c:ef:e8:c1:bb:ff:cd:a1:cc:fe:be:80:
                    23:7e:0b:0f:c9:09:04:af:ac:b9:54:28:77:e3:2e:
                    c2:27:42:c4:16:6e:72:c1:57:2e:96:22:96:70:ee:
                    2a:7f:d9:e7:16:24:d7:79:91:c6:b7:0f:ae:a3:7e:
                    bc:bd:c7:de:da:8e:15:4c:bf:af:c8:f3:73:0d:b4:
                    6f:0e:16:b0:5f:75:88:f6:1a:7d:18:b4:67:75:ba:
                    75:69:a0:68:09:d9:e8:30:6b:98:74:62:6c:7d:00:
                    02:dd:6a:e5:ea:69:ba:e2:26:02:48:e7:b0:ed:80:
                    49:37:53:40:43:56:1b:62:94:ab:f4:fa:d0:1d:4a:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F1:CB:D6:D2:83:BD:75:14:84:5F:BE:0E:DE:8A:57:81:AD:5A:6E
            X509v3 Authority Key Identifier:
                keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:89:7d:da:ac:81:b1:33:ee:c0:ae:69:a9:c2:37:9c:1a:
         00:89:ea:ea:58:5e:0d:21:bb:98:a5:78:3b:35:21:68:45:d7:
         0e:dc:21:f6:ed:8d:fd:88:fd:d0:2b:63:1a:e6:08:f5:2e:14:
         36:8a:f4:27:cc:00:ee:5d:88:33:13:39:f8:c4:43:74:1f:04:
         54:ab:3d:d7:08:aa:1f:a7:0f:f4:54:cd:d1:fe:1f:2c:62:6b:
         24:ec:e9:88:71:af:7b:7c:12:a8:b3:da:d7:ef:7e:41:6c:eb:
         e4:2f:9c:88:0e:79:7c:47:76:93:8f:09:0d:83:f7:f8:31:22:
         f1:51:fa:0c:1e:29:2e:c6:ea:f4:9a:4d:0b:04:1e:56:4b:c1:
         05:be:52:c0:48:00:6d:1f:6e:66:ac:ec:08:e1:5d:ed:02:64:
         a9:06:0a:ca:93:8c:e2:ee:0f:a8:00:e1:65:88:7c:6b:c7:4f:
         af:3e:e1:6f:75:bd:39:e0:fc:d7:19:a1:6a:e0:bb:55:b0:74:
         4b:9e:d8:a3:b2:83:8c:56:05:1a:43:7f:4f:c7:c6:31:da:26:
         a7:9c:81:77:9f:73:35:66:5a:f5:7a:46:ae:f3:d9:af:83:4d:
         29:16:1b:59:6e:b8:a1:54:2f:cd:79:cd:de:37:2f:e5:fe:44:
         52:9b:a3:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLcyVsZ9hM7RGCUmrfWHQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmYwOWMyZjhmZmY5N2VmOGFlYzJmODE3MzU3OGQwYTNh
NzRjODEwHhcNMjUwNTEzMjEwMDQyWhcNMjUwNTE0MjEwMDQyWjAzMTEwLwYDVQQD
Eyg5YmYxY2JkNmQyODNiZDc1MTQ4NDVmYmUwZWRlOGE1NzgxYWQ1YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B5vstpWNli2qVldVkH/na3KgFXR
8CsrvvzcsO5QhqnrTqLATtm/dP9XiITpaLhyhJZmOOHXgfOMfm9Ru4u2Sa7GWDTv
EPoZP8KtdTEpL0/EkaBNDd3L9EfNsT1CC+r36DzzS9iZXAFpejIuDor6D+7aKQZI
udOoFuFc7+jBu//Nocz+voAjfgsPyQkEr6y5VCh34y7CJ0LEFm5ywVculiKWcO4q
f9nnFiTXeZHGtw+uo368vcfe2o4VTL+vyPNzDbRvDhawX3WI9hp9GLRndbp1aaBo
CdnoMGuYdGJsfQAC3Wrl6mm64iYCSOew7YBJN1NAQ1YbYpSr9PrQHUoSywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvxy9bSg711FIRfvg7eileBrVpuMB8GA1UdIwQY
MBaAFL6/CcL4//l++K7C+Bc1eNCjp0yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kYzFjNTAtNjUwZC00M2M0LTllNzYt
Y2NkNGZhZDk1MGVkLzEvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kYzFjNTAtNjUwZC00M2M0LTllNzYtY2NkNGZhZDk1MGVk
LzEvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNqJfdqs
gbEz7sCuaanCN5waAInq6lheDSG7mKV4OzUhaEXXDtwh9u2N/Yj90CtjGuYI9S4U
Nor0J8wA7l2IMxM5+MRDdB8EVKs91wiqH6cP9FTN0f4fLGJrJOzpiHGve3wSqLPa
1+9+QWzr5C+ciA55fEd2k48JDYP3+DEi8VH6DB4pLsbq9JpNCwQeVkvBBb5SwEgA
bR9uZqzsCOFd7QJkqQYKypOM4u4PqADhZYh8a8dPrz7hb3W9OeD81xmhauC7VbB0
S57Yo7KDjFYFGkN/T8fGMdomp5yBd59zNWZa9XpGrvPZr4NNKRYbWW64oVQvzXnN
3jcv5f5EUpujVg==
-----END CERTIFICATE-----
Generated at Wed May 14 07:08:12 2025 by rpki-client