Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File:                     0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier:          vVzJ+oqq5959J1zj2SJjnp/Rd4UlQGjVmj0vD1mgdW0=
Subject key identifier:   7A:45:85:70:A1:5E:DA:F8:50:24:9B:69:70:D2:2F:B6:D2:BB:AB:2D
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer:       /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial:       0196B5FDB5ECB499216EAF0C64FEABC12E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number:          0E71
Signing time:             Fri 09 May 2025 17:00:25 +0000
Manifest this update:     Fri 09 May 2025 17:00:25 +0000
Manifest next update:     Sat 10 May 2025 17:00:25 +0000
Files and hashes:         1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: tpA0tE/d1E/iyWUsq+1kg3K0P88MLT4t2q4YQP6+RmI=)
                          2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:fd:b5:ec:b4:99:21:6e:af:0c:64:fe:ab:c1:2e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3277a239664d245becf4214dde15923042a142f
        Validity
            Not Before: May  9 17:00:25 2025 GMT
            Not After : May 10 17:00:25 2025 GMT
        Subject: CN=7a458570a15edaf850249b6970d22fb6d2bbab2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:53:d5:f7:eb:24:2c:76:ba:3c:9a:c7:61:59:
                    f4:15:f9:fa:62:87:01:20:42:96:06:d8:a1:e3:94:
                    5e:a8:34:6d:57:71:be:6c:62:c3:f2:af:c7:2c:23:
                    0c:da:b1:3d:9c:68:39:07:6c:84:e8:eb:55:e4:62:
                    39:c6:e5:10:1c:b9:21:7f:3c:14:b0:ea:0c:eb:d7:
                    4b:bf:45:70:69:c6:ae:bb:af:5b:9a:29:e5:5f:8b:
                    62:f2:f8:e4:13:6b:62:0b:1d:25:3e:93:00:0e:12:
                    8e:c6:e3:1c:f1:d2:73:dd:b1:d1:47:8c:bb:d0:26:
                    df:3a:02:65:ec:39:30:4e:3e:f1:3f:63:c8:e4:4e:
                    15:f5:ce:ec:d9:17:3b:ed:02:a5:77:1a:8f:cb:f0:
                    b6:5a:e6:34:ce:fe:14:02:79:9f:f1:81:0d:ee:ba:
                    34:20:97:23:ed:93:7b:93:5d:44:54:9c:01:93:ed:
                    bf:8f:96:00:be:e2:d1:1e:12:25:26:3f:cd:35:57:
                    f3:69:97:a9:f1:a7:0c:83:d3:85:09:dc:c2:77:20:
                    49:8d:71:14:44:dd:00:3d:f5:c3:62:e0:6c:f5:c5:
                    33:64:3c:bd:9c:1d:7f:b6:9c:f6:cb:6b:e7:e4:9d:
                    c7:99:b3:aa:dc:b3:83:51:0d:1b:4c:30:b3:4b:fe:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:85:70:A1:5E:DA:F8:50:24:9B:69:70:D2:2F:B6:D2:BB:AB:2D
            X509v3 Authority Key Identifier:
                keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:83:8d:56:f9:44:3f:6a:42:6a:43:c6:45:f5:de:8b:71:
         31:1e:ab:33:77:a9:da:07:5c:a9:36:08:68:0f:f7:1c:94:86:
         a9:f2:a2:d6:b5:54:2a:a0:4b:9c:e2:94:93:5b:37:6d:dc:05:
         5f:bf:0a:57:e2:9e:16:ad:a5:86:08:4a:62:c7:f1:9f:3d:c1:
         41:f6:66:54:d7:97:67:16:ef:24:c1:f0:20:c6:7a:15:ff:42:
         ed:e0:b1:99:46:51:67:4f:84:47:00:0c:18:c1:25:e3:b5:4a:
         44:25:60:87:77:a0:31:4d:78:7c:16:3e:a4:c0:f3:2b:60:2e:
         79:13:3c:0a:d3:31:ae:00:d8:2a:13:ca:36:97:e4:d5:e2:60:
         dc:d7:45:21:4d:12:81:00:5c:5a:c1:47:b7:7d:77:52:54:87:
         e1:a5:1b:f1:46:01:c3:29:a4:ee:a7:6c:a9:7b:43:22:0a:fc:
         9b:1e:05:8e:dd:fb:e9:30:b8:0d:8b:6e:9c:cc:0b:e0:a6:21:
         fa:29:2c:96:6d:af:3b:93:f8:fe:4d:36:a2:83:1a:33:aa:73:
         8e:f2:2b:11:35:87:82:e4:43:83:24:be:a7:9a:f7:8a:06:89:
         2d:37:3f:d3:06:9f:3c:3c:25:43:c8:e9:1c:7d:c4:01:00:7d:
         58:0b:9f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1/bXstJkhbq8MZP6rwS44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjc3YTIzOTY2NGQyNDViZWNmNDIxNGRkZTE1OTIzMDQy
YTE0MmYwHhcNMjUwNTA5MTcwMDI1WhcNMjUwNTEwMTcwMDI1WjAzMTEwLwYDVQQD
Eyg3YTQ1ODU3MGExNWVkYWY4NTAyNDliNjk3MGQyMmZiNmQyYmJhYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91PV9+skLHa6PJrHYVn0Ffn6YocB
IEKWBtih45ReqDRtV3G+bGLD8q/HLCMM2rE9nGg5B2yE6OtV5GI5xuUQHLkhfzwU
sOoM69dLv0Vwacauu69bminlX4ti8vjkE2tiCx0lPpMADhKOxuMc8dJz3bHRR4y7
0CbfOgJl7DkwTj7xP2PI5E4V9c7s2Rc77QKldxqPy/C2WuY0zv4UAnmf8YEN7ro0
IJcj7ZN7k11EVJwBk+2/j5YAvuLRHhIlJj/NNVfzaZep8acMg9OFCdzCdyBJjXEU
RN0APfXDYuBs9cUzZDy9nB1/tpz2y2vn5J3HmbOq3LODUQ0bTDCzS/6NJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpFhXChXtr4UCSbaXDSL7bSu6stMB8GA1UdIwQY
MBaAFNMneiOWZNJFvs9CFN3hWSMEKhQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMt
YzM3M2Y0NTNhMjQ1LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMtYzM3M2Y0NTNhMjQ1
LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjiDjVb5
RD9qQmpDxkX13otxMR6rM3ep2gdcqTYIaA/3HJSGqfKi1rVUKqBLnOKUk1s3bdwF
X78KV+KeFq2lhghKYsfxnz3BQfZmVNeXZxbvJMHwIMZ6Ff9C7eCxmUZRZ0+ERwAM
GMEl47VKRCVgh3egMU14fBY+pMDzK2AueRM8CtMxrgDYKhPKNpfk1eJg3NdFIU0S
gQBcWsFHt313UlSH4aUb8UYBwymk7qdsqXtDIgr8mx4Fjt376TC4DYtunMwL4KYh
+ikslm2vO5P4/k02ooMaM6pzjvIrETWHguRDgyS+p5r3igaJLTc/0wafPDwlQ8jp
HH3EAQB9WAufvQ==
-----END CERTIFICATE-----
Generated at Sat May 10 00:52:55 2025 by rpki-client