Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
File:                     1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft (raw, json)
Hash identifier:          v32rzMS6I2YSa/AJh2m2BtNJcmnSYX+kMliOBCPiBGM=
Subject key identifier:   4B:94:A4:F2:5F:FD:55:3A:B4:6D:52:C8:43:8C:CB:69:71:EF:0A:94
Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
Certificate issuer:       /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Certificate serial:       0196BB5AD2EA0A6D8CF523EB6E78F88EBC9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
Manifest number:          0921
Signing time:             Sat 10 May 2025 18:00:13 +0000
Manifest this update:     Sat 10 May 2025 18:00:13 +0000
Manifest next update:     Sun 11 May 2025 18:00:13 +0000
Files and hashes:         1: 1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl (hash: x6tIovwIU+5YyuypQQdR8feO9iLrIHVN4hpDmdmF8v0=)
                          2: CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa (hash: nPJ41a5MjCCJYxpL+ZRoeblB2rw9Ylu7iDblmReMQHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5a:d2:ea:0a:6d:8c:f5:23:eb:6e:78:f8:8e:bc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
        Validity
            Not Before: May 10 18:00:13 2025 GMT
            Not After : May 11 18:00:13 2025 GMT
        Subject: CN=4b94a4f25ffd553ab46d52c8438ccb6971ef0a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:b5:56:cc:32:56:1a:20:50:ff:ef:82:2f:
                    53:08:e6:ca:d2:6d:48:12:f2:40:76:34:13:e9:9d:
                    30:57:fb:e7:3b:c9:41:bd:d8:30:a4:6e:40:58:c5:
                    88:0c:8c:df:0d:ab:98:98:b0:3b:8a:2c:19:5d:c8:
                    4d:ec:e8:7f:d1:0b:18:1c:83:03:9e:e9:53:76:51:
                    8f:d3:0d:46:e6:ea:fc:cf:a4:50:24:66:8b:44:4b:
                    df:eb:a8:0d:39:a7:cd:ed:cd:41:c1:f8:f5:09:b9:
                    e5:f7:c4:df:c0:56:69:27:9b:b5:01:47:21:bf:73:
                    53:1e:7a:dc:e6:46:10:41:80:da:e1:79:cc:64:2a:
                    8e:7f:52:dd:af:fa:e3:37:d5:ae:f3:43:7a:d1:d0:
                    ab:0b:a6:e3:8a:24:1d:94:1b:f6:4f:7b:cd:39:b2:
                    c7:63:33:8f:da:e9:c7:d6:ae:ab:95:03:bb:b4:78:
                    79:aa:61:cc:36:47:5b:1e:be:3f:29:20:32:47:18:
                    0f:14:2a:65:ec:d0:0a:a6:25:55:0f:0c:b5:ea:73:
                    33:38:77:ac:cf:b3:e5:e4:c3:b0:71:4a:77:db:76:
                    47:b8:84:31:f4:31:e8:d6:ee:8b:7b:13:91:0e:9a:
                    37:8b:5e:fa:3a:93:58:3a:5e:40:e7:1f:e9:17:f5:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:94:A4:F2:5F:FD:55:3A:B4:6D:52:C8:43:8C:CB:69:71:EF:0A:94
            X509v3 Authority Key Identifier:
                keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:42:c6:26:41:de:f9:ba:93:07:d6:0b:cb:c8:c0:21:9c:f0:
         99:f1:63:80:79:a5:89:dd:aa:20:62:fa:17:6e:9b:d9:b0:4a:
         5a:0b:5f:9c:64:3f:39:7b:b3:4e:73:35:15:cc:d8:7d:9b:17:
         db:ce:01:34:ea:2c:d5:d8:ae:70:df:3a:50:a9:25:c2:c6:ef:
         7b:d4:ac:6c:ad:0f:91:15:2e:52:67:9d:eb:d4:84:3e:b9:d5:
         7d:ac:6b:08:52:1d:98:c0:b9:5d:6c:fb:60:6e:21:d1:7c:03:
         21:99:da:1d:a7:9f:81:2e:88:32:88:a5:49:d6:72:df:8c:6e:
         30:c5:12:72:44:1b:40:46:3e:bb:6c:b1:de:50:61:7d:7d:18:
         12:6a:85:c2:01:69:a6:f6:28:4a:6c:d5:96:2d:d9:ae:02:eb:
         f7:5d:ac:a6:17:0d:e9:be:76:c9:d9:c2:68:1a:9e:70:86:8d:
         62:61:d7:44:6e:4a:12:52:42:74:f3:a8:6e:91:73:39:d8:67:
         4b:d8:0c:dd:7d:22:7e:db:cf:e3:b9:d8:1b:7f:1e:39:7d:cc:
         c8:2f:fb:48:03:15:5b:1a:c4:b2:7f:01:73:00:ce:4f:42:3a:
         67:4f:90:48:a4:e7:89:c6:83:c2:35:14:7a:73:cf:75:be:fc:
         73:37:ff:0c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZa7WtLqCm2M9SPrbnj4jrycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2I5NDc2NTEyNjBkOWQ4YjAyZjMxZDViYzdmMWQ1ZDBi
MDE3ODAwHhcNMjUwNTEwMTgwMDEzWhcNMjUwNTExMTgwMDEzWjAzMTEwLwYDVQQD
Eyg0Yjk0YTRmMjVmZmQ1NTNhYjQ2ZDUyYzg0MzhjY2I2OTcxZWYwYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSy1VswyVhogUP/vgi9TCObK0m1I
EvJAdjQT6Z0wV/vnO8lBvdgwpG5AWMWIDIzfDauYmLA7iiwZXchN7Oh/0QsYHIMD
nulTdlGP0w1G5ur8z6RQJGaLREvf66gNOafN7c1Bwfj1Cbnl98TfwFZpJ5u1AUch
v3NTHnrc5kYQQYDa4XnMZCqOf1Ldr/rjN9Wu80N60dCrC6bjiiQdlBv2T3vNObLH
YzOP2unH1q6rlQO7tHh5qmHMNkdbHr4/KSAyRxgPFCpl7NAKpiVVDwy16nMzOHes
z7Pl5MOwcUp323ZHuIQx9DHo1u6LexORDpo3i176OpNYOl5A5x/pF/Vr6wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEuUpPJf/VU6tG1SyEOMy2lx7wqUMB8GA1UdIwQY
MBaAFPvLlHZRJg2diwLzHVvH8dXQsBeAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04dVVkbEVtRFoyTEF2TWRXOGZ4MWRDd0Y0QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZGE3NjU4LWZlNWQtNGY1YS04NjJj
LWI1NmFiMjgyYjFjNy8xLzEtOHVVZGxFbURaMkxBdk1kVzhmeDFkQ3dGNEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgxL2RhNzY1OC1mZTVkLTRmNWEtODYyYy1iNTZhYjI4MmIx
YzcvMS8xLTh1VWRsRW1EWjJMQXZNZFc4ZngxZEN3RjRBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhELG
JkHe+bqTB9YLy8jAIZzwmfFjgHmlid2qIGL6F26b2bBKWgtfnGQ/OXuzTnM1FczY
fZsX284BNOos1diucN86UKklwsbve9SsbK0PkRUuUmed69SEPrnVfaxrCFIdmMC5
XWz7YG4h0XwDIZnaHaefgS6IMoilSdZy34xuMMUSckQbQEY+u2yx3lBhfX0YEmqF
wgFppvYoSmzVli3ZrgLr912sphcN6b52ydnCaBqecIaNYmHXRG5KElJCdPOobpFz
OdhnS9gM3X0iftvP47nYG38eOX3MyC/7SAMVWxrEsn8BcwDOT0I6Z0+QSKTnicaD
wjUUenPPdb78czf/DA==
-----END CERTIFICATE-----
Generated at Sun May 11 04:27:50 2025 by rpki-client