Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File:                     y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier:          ITUDtNFTbz4KKrsIaa3S6hid9gw5L9/MDAEbdVRSJWU=
Subject key identifier:   1D:8B:35:03:50:94:93:7C:2A:FF:98:D5:43:6A:69:63:8A:82:F5:22
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer:       /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial:       01969D8799499FF78E79A6940BB297294904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number:          047F
Signing time:             Sun 04 May 2025 23:00:31 +0000
Manifest this update:     Sun 04 May 2025 23:00:31 +0000
Manifest next update:     Mon 05 May 2025 23:00:31 +0000
Files and hashes:         1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=)
                          2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: o0NlXQwSWKm7PjVLPnlFY62/E3X10pcOl+iNT/j67Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:99:49:9f:f7:8e:79:a6:94:0b:b2:97:29:49:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
        Validity
            Not Before: May  4 23:00:31 2025 GMT
            Not After : May  5 23:00:31 2025 GMT
        Subject: CN=1d8b35035094937c2aff98d5436a69638a82f522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:ba:18:98:78:e0:b5:3c:06:55:83:cc:a6:
                    13:80:af:55:94:93:48:95:0d:45:f4:51:6b:7c:e9:
                    2e:6e:88:63:51:43:1f:20:ba:d3:c7:e9:e8:25:08:
                    eb:c6:ff:42:c4:42:d7:31:85:a1:53:84:72:4b:40:
                    7e:66:7d:07:8f:6d:96:fd:2f:36:42:d4:17:bd:84:
                    ac:76:55:07:f3:72:22:86:3e:18:c9:cf:be:f8:cc:
                    ec:03:a0:51:d2:22:8a:40:e7:47:0d:9d:9d:73:7b:
                    d9:eb:ea:40:b6:60:ac:67:9c:b8:c1:be:55:9b:69:
                    6d:1a:c0:ae:48:cf:26:09:9e:4f:e4:fb:74:2a:4c:
                    a8:c6:09:9a:94:8e:dd:c9:56:91:fc:87:ae:f9:44:
                    6d:3e:84:cb:66:b6:76:cb:45:95:bd:86:f3:17:53:
                    56:80:80:91:c5:06:2d:47:13:e0:fe:4d:24:d0:9d:
                    59:9f:13:7d:01:b8:38:e2:bf:67:d2:46:74:0c:13:
                    e7:34:10:c0:d5:87:a3:9b:e4:4a:65:14:ee:63:42:
                    be:19:68:36:f3:b0:7f:ac:40:0b:eb:e9:7c:46:af:
                    af:af:c2:07:05:0b:7e:bc:c7:c3:e6:9e:03:57:c2:
                    75:2c:d3:e3:2c:bc:c7:80:7d:d7:0c:cc:0c:8d:f9:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8B:35:03:50:94:93:7C:2A:FF:98:D5:43:6A:69:63:8A:82:F5:22
            X509v3 Authority Key Identifier:
                keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:7b:68:04:f4:ff:7a:6e:02:60:44:fe:2e:1f:ce:dc:d0:
         75:16:d1:14:28:e6:c5:c1:18:e6:22:ea:69:5d:9e:a8:00:69:
         71:f6:56:4a:97:10:22:a3:35:57:a0:4b:4c:c9:d8:f8:e0:e3:
         ca:d7:96:4a:65:1b:fa:5a:d6:54:99:47:14:e8:44:1e:0e:39:
         69:43:bb:f7:3f:44:ed:46:c4:8c:93:8e:20:f3:68:f2:5a:23:
         70:b4:8c:c1:bc:4d:88:ed:ad:83:26:c0:f6:d3:01:f5:3d:a4:
         d8:5f:04:69:58:3c:2b:0b:c2:e5:41:27:bd:6f:3c:27:06:f1:
         ee:80:98:89:02:96:c3:10:71:de:18:0c:61:d8:26:44:0a:11:
         5f:df:94:e0:9f:4c:54:21:46:86:32:85:7a:6c:dd:a1:02:3a:
         07:e6:01:eb:92:86:fe:cd:cf:03:0c:b5:1b:12:74:66:eb:ca:
         53:bd:44:8c:4f:97:eb:bd:00:b6:47:aa:3c:b6:34:60:c0:fe:
         3a:7a:00:00:bb:97:9e:8e:ac:8f:76:2a:86:60:2f:54:46:b0:
         5f:5f:1c:1e:92:fd:8e:a2:46:84:cd:d0:b0:c5:15:cf:af:98:
         a9:bf:f9:3b:1c:0d:d6:99:8a:18:85:c9:17:0e:b5:fa:38:91:
         7b:f0:2a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh5lJn/eOeaaUC7KXKUkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmY3ZmQ3ZWUxMWVmZjg5MTRhMzE1MGZjZDE2YTY0OGEz
YzdmMzAwHhcNMjUwNTA0MjMwMDMxWhcNMjUwNTA1MjMwMDMxWjAzMTEwLwYDVQQD
EygxZDhiMzUwMzUwOTQ5MzdjMmFmZjk4ZDU0MzZhNjk2MzhhODJmNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL66GJh44LU8BlWDzKYTgK9VlJNI
lQ1F9FFrfOkubohjUUMfILrTx+noJQjrxv9CxELXMYWhU4RyS0B+Zn0Hj22W/S82
QtQXvYSsdlUH83Iihj4Yyc+++MzsA6BR0iKKQOdHDZ2dc3vZ6+pAtmCsZ5y4wb5V
m2ltGsCuSM8mCZ5P5Pt0KkyoxgmalI7dyVaR/Ieu+URtPoTLZrZ2y0WVvYbzF1NW
gICRxQYtRxPg/k0k0J1ZnxN9Abg44r9n0kZ0DBPnNBDA1Yejm+RKZRTuY0K+GWg2
87B/rEAL6+l8Rq+vr8IHBQt+vMfD5p4DV8J1LNPjLLzHgH3XDMwMjfnmkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2LNQNQlJN8Kv+Y1UNqaWOKgvUiMB8GA1UdIwQY
MBaAFMv/f9fuEe/4kUoxUPzRamSKPH8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEt
OWY1Zjc4MDU2OWExLzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEtOWY1Zjc4MDU2OWEx
LzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRF7aAT0
/3puAmBE/i4fztzQdRbRFCjmxcEY5iLqaV2eqABpcfZWSpcQIqM1V6BLTMnY+ODj
yteWSmUb+lrWVJlHFOhEHg45aUO79z9E7UbEjJOOIPNo8lojcLSMwbxNiO2tgybA
9tMB9T2k2F8EaVg8KwvC5UEnvW88Jwbx7oCYiQKWwxBx3hgMYdgmRAoRX9+U4J9M
VCFGhjKFemzdoQI6B+YB65KG/s3PAwy1GxJ0ZuvKU71EjE+X670AtkeqPLY0YMD+
OnoAALuXno6sj3YqhmAvVEawX18cHpL9jqJGhM3QsMUVz6+Yqb/5OxwN1pmKGIXJ
Fw61+jiRe/AqcQ==
-----END CERTIFICATE-----
Generated at Mon May 5 04:52:44 2025 by rpki-client