Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File:                     CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier:          /xVKWHqa14auWjCYZae+9aUtmXySPc8zs+Ik+mWsLnA=
Subject key identifier:   0C:D5:59:35:C8:30:89:3C:F7:BE:37:8D:FC:74:5C:96:46:4C:C5:4F
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer:       /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial:       0196A6C1D3DBAF45F23D74B41CCE751673B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number:          05E6
Signing time:             Tue 06 May 2025 18:00:42 +0000
Manifest this update:     Tue 06 May 2025 18:00:42 +0000
Manifest next update:     Wed 07 May 2025 18:00:42 +0000
Files and hashes:         1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
                          2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: vGdb9r2m9L8bqsRG8Bxwl8r8eKyrS09GB2kFPP043vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c1:d3:db:af:45:f2:3d:74:b4:1c:ce:75:16:73:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
        Validity
            Not Before: May  6 18:00:42 2025 GMT
            Not After : May  7 18:00:42 2025 GMT
        Subject: CN=0cd55935c830893cf7be378dfc745c96464cc54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:54:3f:ff:d7:8f:93:ea:f0:e3:49:17:0d:
                    74:d4:a3:a0:e6:40:31:65:9e:e1:6a:7a:c2:e7:79:
                    d8:0b:2f:54:65:f2:74:9c:0e:ce:cd:0b:f6:23:7a:
                    a9:15:bd:1a:b4:a2:9f:14:79:4f:b1:12:16:d9:fc:
                    fe:bb:0b:dc:f0:6a:17:54:71:d1:97:18:37:60:f1:
                    89:35:78:b6:be:d2:dc:c4:cd:21:da:85:43:9f:74:
                    43:a3:d3:89:72:ef:28:e1:f7:dc:c6:41:87:d7:e2:
                    fb:6a:c9:b2:c7:13:d8:a0:52:e7:9c:62:5b:00:7d:
                    5d:5e:de:46:80:5d:7c:15:71:25:81:4b:7b:7f:f2:
                    cc:a1:5f:6b:70:33:b2:ff:4d:2d:35:32:d1:10:04:
                    68:53:34:c0:2d:89:f3:38:2c:b6:09:86:26:24:93:
                    21:2c:6e:a9:4c:f1:94:2f:26:51:db:43:8c:fb:93:
                    d2:11:14:64:84:b3:e6:d1:fe:87:6a:1f:dd:dc:d2:
                    47:c2:8d:f0:0d:9a:b8:4f:dc:54:3a:d7:d3:ee:8a:
                    a8:cf:08:2b:ec:dc:ac:2e:99:74:79:26:a4:b8:e9:
                    83:56:e7:47:25:84:0a:fa:fa:b3:fc:4f:81:3a:56:
                    a7:3c:cb:07:96:1b:48:2a:6f:8c:8f:11:45:cc:0c:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:59:35:C8:30:89:3C:F7:BE:37:8D:FC:74:5C:96:46:4C:C5:4F
            X509v3 Authority Key Identifier:
                keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:ca:3d:3d:ed:b9:9f:36:06:6b:44:06:37:2b:0a:ba:cd:
         e3:a5:d9:5f:39:6e:d9:58:f9:d2:d8:26:1c:05:20:9a:95:4f:
         e2:95:b4:88:6b:3b:42:cc:9a:82:d6:d4:14:3f:9a:f4:d7:5e:
         73:ff:90:d7:f0:cd:14:68:5c:8e:40:f5:15:32:4d:c8:c7:11:
         d7:f6:78:17:59:e2:ec:b2:a6:92:72:c2:28:bb:ca:95:61:80:
         f5:50:ee:39:dd:f7:31:f4:54:c0:a5:8b:83:e1:e9:7d:7d:4b:
         01:51:37:cd:5c:d7:61:17:07:2b:4e:b6:f5:69:09:4b:40:ed:
         6c:4e:4d:a7:1b:fd:8c:de:e0:57:8c:58:fc:77:bf:c3:24:55:
         2c:93:fb:86:00:80:fd:b3:8c:bf:44:7d:19:9b:e7:ca:b5:2a:
         26:97:e0:8d:d5:e4:e4:64:dd:98:46:64:16:a1:3a:d5:44:8a:
         4d:04:93:a4:ae:74:c4:97:6a:83:1e:f9:85:4d:20:ad:83:2d:
         08:52:6d:d1:b3:e7:03:79:01:b7:5f:9f:33:cd:0a:b2:82:00:
         20:2b:31:9c:3e:fb:c5:3e:aa:ca:35:60:d4:c1:ca:8d:41:96:
         c8:2d:67:f6:fb:74:35:51:b3:3d:38:aa:76:4c:d6:cf:85:3e:
         62:fe:09:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamwdPbr0XyPXS0HM51FnO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWRhYWQzZDI3ZGJjZjk0ZDMwMDZmYmZiYTdlMWRkZDVk
MjlmMTYwHhcNMjUwNTA2MTgwMDQyWhcNMjUwNTA3MTgwMDQyWjAzMTEwLwYDVQQD
EygwY2Q1NTkzNWM4MzA4OTNjZjdiZTM3OGRmYzc0NWM5NjQ2NGNjNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr9UP//Xj5Pq8ONJFw101KOg5kAx
ZZ7hanrC53nYCy9UZfJ0nA7OzQv2I3qpFb0atKKfFHlPsRIW2fz+uwvc8GoXVHHR
lxg3YPGJNXi2vtLcxM0h2oVDn3RDo9OJcu8o4ffcxkGH1+L7asmyxxPYoFLnnGJb
AH1dXt5GgF18FXElgUt7f/LMoV9rcDOy/00tNTLREARoUzTALYnzOCy2CYYmJJMh
LG6pTPGULyZR20OM+5PSERRkhLPm0f6Hah/d3NJHwo3wDZq4T9xUOtfT7oqozwgr
7NysLpl0eSakuOmDVudHJYQK+vqz/E+BOlanPMsHlhtIKm+MjxFFzAyAhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzVWTXIMIk89743jfx0XJZGTMVPMB8GA1UdIwQY
MBaAFAkdqtPSfbz5TTAG+/un4d3V0p8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGIt
ZWIzN2U3NzZkZGQyLzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGItZWIzN2U3NzZkZGQy
LzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqM7KPT3t
uZ82BmtEBjcrCrrN46XZXzlu2Vj50tgmHAUgmpVP4pW0iGs7QsyagtbUFD+a9Nde
c/+Q1/DNFGhcjkD1FTJNyMcR1/Z4F1ni7LKmknLCKLvKlWGA9VDuOd33MfRUwKWL
g+HpfX1LAVE3zVzXYRcHK0629WkJS0DtbE5Npxv9jN7gV4xY/He/wyRVLJP7hgCA
/bOMv0R9GZvnyrUqJpfgjdXk5GTdmEZkFqE61USKTQSTpK50xJdqgx75hU0grYMt
CFJt0bPnA3kBt1+fM80KsoIAICsxnD77xT6qyjVg1MHKjUGWyC1n9vt0NVGzPTiq
dkzWz4U+Yv4JkQ==
-----END CERTIFICATE-----
Generated at Tue May 6 20:50:48 2025 by rpki-client