Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File:                     1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier:          Z+iSZ7zV6DK0+Qtal8Lrw0c/dpFRcTw6tFmNa6r4NSI=
Subject key identifier:   4F:BB:C9:65:77:0C:10:E5:96:A1:5E:42:8C:C5:03:9A:C9:1E:EB:9C
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer:       /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial:       0196B5C708815E08A256D5F9555194607300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number:          0210
Signing time:             Fri 09 May 2025 16:00:41 +0000
Manifest this update:     Fri 09 May 2025 16:00:41 +0000
Manifest next update:     Sat 10 May 2025 16:00:41 +0000
Files and hashes:         1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: tPCRSZ2tS7hhdSBl98c7I//MCDUZ7HTdNjFTEqgzVYk=)
                          2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:c7:08:81:5e:08:a2:56:d5:f9:55:51:94:60:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
        Validity
            Not Before: May  9 16:00:41 2025 GMT
            Not After : May 10 16:00:41 2025 GMT
        Subject: CN=4fbbc965770c10e596a15e428cc5039ac91eeb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:cc:6a:27:24:23:cb:a4:f0:2c:91:c9:d6:
                    40:36:98:aa:20:a8:ac:f6:f1:28:9e:f7:89:3c:d2:
                    44:ea:d5:68:02:33:6d:73:eb:a3:52:3f:71:e8:1e:
                    eb:e0:7d:93:e7:a1:3a:65:df:f3:c2:0f:e0:88:0d:
                    3d:ff:41:30:d3:ef:1d:9e:f1:19:68:86:4d:cd:5e:
                    24:ec:83:2b:5e:0b:10:cf:18:64:cd:0c:70:e3:27:
                    b0:49:f5:f4:96:04:f0:b1:ac:c5:4a:ef:ea:5b:b6:
                    89:d3:d5:3f:2f:67:b1:ad:9d:93:c2:51:31:89:cf:
                    6b:dd:f0:12:af:b4:9d:97:c9:8c:c6:4c:d7:df:49:
                    a7:b7:88:6e:c0:07:3d:81:09:06:5f:b3:5d:c4:50:
                    ce:99:b4:0f:09:94:1c:84:a1:25:b1:6c:aa:ae:f5:
                    6b:e0:32:b5:45:2d:40:e2:0a:e7:94:aa:3e:6f:87:
                    87:76:9f:45:b1:14:c4:83:97:1a:ca:b1:19:14:69:
                    7c:a7:a9:19:f5:f0:22:36:07:2d:7c:75:64:c8:6d:
                    02:89:4d:72:c3:a8:4b:71:bb:58:32:7f:20:f0:8b:
                    ae:bf:0c:13:df:1d:02:cc:c5:8b:52:93:d9:fe:e4:
                    ee:1c:a9:f9:22:3e:0e:47:20:de:7f:44:19:8f:86:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:C9:65:77:0C:10:E5:96:A1:5E:42:8C:C5:03:9A:C9:1E:EB:9C
            X509v3 Authority Key Identifier:
                keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6c:2b:f1:e0:77:24:28:5f:5b:9f:c0:0c:9c:db:04:2a:b6:
         4e:58:91:d2:eb:d4:3b:d2:3f:a6:29:17:c1:3f:2a:81:40:51:
         f6:dd:20:b6:97:f4:b8:a2:fe:45:f8:45:6f:6d:73:9b:f7:8e:
         22:ca:99:c7:e9:4b:5d:5f:58:10:80:c7:7e:48:17:c3:01:43:
         57:74:c3:49:5c:86:84:a5:7a:f6:b3:ae:0a:bc:cd:09:2f:88:
         37:20:7b:84:aa:30:57:bc:90:66:a2:43:d2:64:5f:58:c3:cb:
         15:74:df:8d:20:1e:37:d4:09:44:82:62:e8:b2:81:57:72:c0:
         a4:99:94:73:46:b4:4c:90:d1:51:bf:08:02:c5:f5:d2:85:5a:
         42:e4:97:e5:15:52:6d:f6:15:05:36:3c:c4:26:3f:24:ff:b3:
         c5:51:24:15:e1:e7:e2:07:c6:27:d7:61:a4:c1:22:b4:50:63:
         d5:c7:84:1b:48:37:c0:94:37:ec:56:9c:0c:ea:fd:55:73:2e:
         7d:e2:3d:33:9a:14:43:e0:e4:ab:b9:c1:84:b0:09:1d:ae:2d:
         e8:6d:2c:59:3c:d7:c4:d3:33:31:32:11:d4:e0:11:76:ca:25:
         ec:ec:d5:88:7e:08:e7:c7:86:55:b9:ca:56:f3:3a:be:db:d0:
         77:ea:76:65
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZa1xwiBXgiiVtX5VVGUYHMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMDg5NmNmMTgyM2M3NGJmY2I3ZDYyM2UyYzQzODc4N2I5
ZjE2N2IwHhcNMjUwNTA5MTYwMDQxWhcNMjUwNTEwMTYwMDQxWjAzMTEwLwYDVQQD
Eyg0ZmJiYzk2NTc3MGMxMGU1OTZhMTVlNDI4Y2M1MDM5YWM5MWVlYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDLMaickI8uk8CyRydZANpiqIKis
9vEonveJPNJE6tVoAjNtc+ujUj9x6B7r4H2T56E6Zd/zwg/giA09/0Ew0+8dnvEZ
aIZNzV4k7IMrXgsQzxhkzQxw4yewSfX0lgTwsazFSu/qW7aJ09U/L2exrZ2TwlEx
ic9r3fASr7Sdl8mMxkzX30mnt4huwAc9gQkGX7NdxFDOmbQPCZQchKElsWyqrvVr
4DK1RS1A4grnlKo+b4eHdp9FsRTEg5cayrEZFGl8p6kZ9fAiNgctfHVkyG0CiU1y
w6hLcbtYMn8g8IuuvwwT3x0CzMWLUpPZ/uTuHKn5Ij4ORyDef0QZj4YGHQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE+7yWV3DBDllqFeQozFA5rJHuucMB8GA1UdIwQY
MBaAFPoIls8YI8dL/LfWI+LEOHh7nxZ7MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1naVd6eGdqeDB2OHQ5WWo0c1E0ZUh1ZkZucy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYTI3NjIwLWQzMmQtNGU5OC1hZWM0
LWJmNmE5N2E1NmYxMC8xLzEtZ2lXenhnangwdjh0OVlqNHNRNGVIdWZGbnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc5L2EyNzYyMC1kMzJkLTRlOTgtYWVjNC1iZjZhOTdhNTZm
MTAvMS8xLWdpV3p4Z2p4MHY4dDlZajRzUTRlSHVmRm5zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2wr
8eB3JChfW5/ADJzbBCq2TliR0uvUO9I/pikXwT8qgUBR9t0gtpf0uKL+RfhFb21z
m/eOIsqZx+lLXV9YEIDHfkgXwwFDV3TDSVyGhKV69rOuCrzNCS+INyB7hKowV7yQ
ZqJD0mRfWMPLFXTfjSAeN9QJRIJi6LKBV3LApJmUc0a0TJDRUb8IAsX10oVaQuSX
5RVSbfYVBTY8xCY/JP+zxVEkFeHn4gfGJ9dhpMEitFBj1ceEG0g3wJQ37FacDOr9
VXMufeI9M5oUQ+Dkq7nBhLAJHa4t6G0sWTzXxNMzMTIR1OARdsol7OzViH4I58eG
VbnKVvM6vtvQd+p2ZQ==
-----END CERTIFICATE-----
Generated at Fri May 9 20:43:18 2025 by rpki-client