Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File:                     PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier:          4jZPQ1mV2TibqcIlgOfvFYp0Zw82uEXz1vx5AlCJUjY=
Subject key identifier:   8B:60:D2:BB:D0:F2:32:E0:11:A8:AE:7A:64:FB:F3:03:43:77:5B:62
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer:       /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial:       0196C984D6F6CC05D1B7CFCEC697FE2CE040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number:          0E7F
Signing time:             Tue 13 May 2025 12:00:48 +0000
Manifest this update:     Tue 13 May 2025 12:00:48 +0000
Manifest next update:     Wed 14 May 2025 12:00:48 +0000
Files and hashes:         1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: oLziOGFb6lY3uAWRQQbdAz5hMrgvcI9zJ7EM/rVSHTs=)
                          2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:84:d6:f6:cc:05:d1:b7:cf:ce:c6:97:fe:2c:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
        Validity
            Not Before: May 13 12:00:48 2025 GMT
            Not After : May 14 12:00:48 2025 GMT
        Subject: CN=8b60d2bbd0f232e011a8ae7a64fbf30343775b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:7e:96:d9:7b:98:26:01:43:df:ff:9c:b1:
                    a3:30:dc:ee:e3:63:0b:38:d6:c4:f1:76:42:60:ce:
                    a9:e6:4f:cd:ed:ee:54:c7:81:df:e4:b8:aa:12:aa:
                    b2:87:f0:6a:79:58:7a:1c:7c:61:14:b0:03:3e:24:
                    30:03:e8:e4:56:b2:b3:90:a2:9f:37:8e:75:d6:5d:
                    14:96:d0:dc:ae:13:c9:84:af:dd:ef:5b:80:58:fa:
                    c0:79:36:8a:5e:60:41:6d:60:28:66:25:71:3d:da:
                    b5:d0:ef:5f:0a:b5:e6:d4:04:cf:22:eb:7f:ee:0f:
                    5e:8f:16:63:1e:50:b6:06:30:70:02:37:e0:45:92:
                    95:7c:dc:16:b8:fd:66:99:42:12:dd:5f:fa:d5:16:
                    cb:2e:95:9f:57:6b:63:19:ff:b9:2d:64:d7:b0:93:
                    5a:f2:73:66:c8:bf:6a:f3:0c:41:f3:2c:a5:2c:8b:
                    bd:18:82:24:dd:8e:76:55:c5:16:52:75:5f:e9:a5:
                    f5:af:25:b8:f4:e6:18:f1:03:e7:5c:93:e6:4c:cd:
                    4f:55:4c:31:a1:7d:a8:e1:9e:61:35:4a:21:25:68:
                    f8:33:19:61:6d:36:6a:ad:59:2a:3b:9b:c2:3b:be:
                    8a:f5:02:8e:98:2a:f5:30:62:c1:5f:eb:0e:48:82:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:D2:BB:D0:F2:32:E0:11:A8:AE:7A:64:FB:F3:03:43:77:5B:62
            X509v3 Authority Key Identifier:
                keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:c4:ea:74:30:49:6c:6b:4d:76:87:db:89:b7:54:5c:eb:52:
         02:12:2a:23:b5:64:6a:11:b4:31:59:7a:11:05:15:60:04:ae:
         b1:d7:1a:9d:0e:4a:29:39:46:ac:b0:9d:a7:58:84:15:0a:27:
         9f:03:cb:d5:d0:1a:2d:ad:67:7b:e3:76:2e:f2:48:d7:dc:50:
         90:08:e1:45:91:1b:34:18:48:33:78:5f:c2:64:35:f3:3c:62:
         8d:4f:9d:35:ce:ff:e5:77:ca:6d:40:79:8c:e8:fd:ff:13:ab:
         91:de:0a:e9:1a:b5:69:41:45:92:56:ce:48:5a:bf:1c:87:d3:
         1c:a4:10:a0:11:1b:28:29:7c:94:0e:6f:b0:48:61:72:a6:1a:
         59:54:a4:f4:c5:33:b5:97:69:d9:30:23:14:d6:b8:3a:31:cd:
         e5:22:b7:13:57:2a:77:d4:48:6f:55:76:4a:d0:56:2e:ff:89:
         54:67:70:50:4f:ad:8c:ea:a8:48:9b:5d:bc:2d:02:af:50:03:
         2f:38:3c:91:13:20:ef:97:0e:24:46:74:8b:fb:e9:08:7d:83:
         b9:02:c7:31:56:e6:7a:22:71:02:28:29:ec:c1:57:76:02:fe:
         44:79:58:87:79:7d:cf:ea:56:20:b3:fe:cb:9e:69:83:06:ef:
         e2:a7:c8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJhNb2zAXRt8/Oxpf+LOBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjZlMjRjZmMwMGQyMmY0ZWZhMzlhNDIxZGFmYjdiYjFk
YTRiODMwHhcNMjUwNTEzMTIwMDQ4WhcNMjUwNTE0MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg4YjYwZDJiYmQwZjIzMmUwMTFhOGFlN2E2NGZiZjMwMzQzNzc1YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD9+ltl7mCYBQ9//nLGjMNzu42ML
ONbE8XZCYM6p5k/N7e5Ux4Hf5LiqEqqyh/BqeVh6HHxhFLADPiQwA+jkVrKzkKKf
N4511l0UltDcrhPJhK/d71uAWPrAeTaKXmBBbWAoZiVxPdq10O9fCrXm1ATPIut/
7g9ejxZjHlC2BjBwAjfgRZKVfNwWuP1mmUIS3V/61RbLLpWfV2tjGf+5LWTXsJNa
8nNmyL9q8wxB8yylLIu9GIIk3Y52VcUWUnVf6aX1ryW49OYY8QPnXJPmTM1PVUwx
oX2o4Z5hNUohJWj4MxlhbTZqrVkqO5vCO76K9QKOmCr1MGLBX+sOSIJjzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItg0rvQ8jLgEaiuemT78wNDd1tiMB8GA1UdIwQY
MBaAFD224kz8ANIvTvo5pCHa+3ux2kuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUt
OTM4MGU1Y2MwNTgwLzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUtOTM4MGU1Y2MwNTgw
LzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1sTqdDBJ
bGtNdofbibdUXOtSAhIqI7VkahG0MVl6EQUVYASusdcanQ5KKTlGrLCdp1iEFQon
nwPL1dAaLa1ne+N2LvJI19xQkAjhRZEbNBhIM3hfwmQ18zxijU+dNc7/5XfKbUB5
jOj9/xOrkd4K6Rq1aUFFklbOSFq/HIfTHKQQoBEbKCl8lA5vsEhhcqYaWVSk9MUz
tZdp2TAjFNa4OjHN5SK3E1cqd9RIb1V2StBWLv+JVGdwUE+tjOqoSJtdvC0Cr1AD
Lzg8kRMg75cOJEZ0i/vpCH2DuQLHMVbmeiJxAigp7MFXdgL+RHlYh3l9z+pWILP+
y55pgwbv4qfIFw==
-----END CERTIFICATE-----
Generated at Tue May 13 20:35:56 2025 by rpki-client