Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File:                     2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier:          F37SsZil2xY9Z2AIMgdQ5MaYty4kE+5vWFwck7er94w=
Subject key identifier:   E3:6F:F8:5D:A4:9B:9F:13:0F:4D:86:43:E7:1B:66:4D:13:F5:12:D5
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer:       /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial:       0196A7666E159B772E1B429D0CE65C53F7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number:          08AB
Signing time:             Tue 06 May 2025 21:00:30 +0000
Manifest this update:     Tue 06 May 2025 21:00:30 +0000
Manifest next update:     Wed 07 May 2025 21:00:30 +0000
Files and hashes:         1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: meRVqy8CSarZvClE7hlDYzda19m2eS8kEnvNJ8r3/C8=)
                          2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
                          3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
                          4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:66:6e:15:9b:77:2e:1b:42:9d:0c:e6:5c:53:f7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
        Validity
            Not Before: May  6 21:00:30 2025 GMT
            Not After : May  7 21:00:30 2025 GMT
        Subject: CN=e36ff85da49b9f130f4d8643e71b664d13f512d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:3b:fd:db:32:ea:89:cd:1e:c1:28:b2:42:
                    66:a5:2b:1c:ee:1d:22:6c:79:fa:13:f1:56:33:bf:
                    25:b4:5c:af:0f:bd:a8:f9:62:17:2f:91:2a:fd:ef:
                    de:2f:c9:f5:7d:7f:fa:8d:8f:63:58:5e:f3:68:83:
                    cf:81:fe:3d:a6:e6:f7:59:d5:8c:f0:32:9d:c1:d9:
                    b3:25:9e:2f:f0:11:1a:fc:5c:01:53:26:91:86:86:
                    50:bf:64:63:73:30:70:43:8a:11:d4:16:4a:d0:7a:
                    40:4a:2d:4e:98:a4:f1:3e:c7:58:a6:0f:cd:e5:72:
                    4f:c9:a2:fd:75:50:5d:af:9e:53:4a:de:36:10:81:
                    a5:f8:34:66:49:d1:d9:63:88:40:40:e7:91:c6:0e:
                    a3:a5:c3:1c:36:2c:dc:9b:48:c2:3b:05:8e:3e:40:
                    10:28:18:52:e3:49:2e:48:41:fe:32:fb:1e:dd:e7:
                    ed:0f:5f:41:24:be:34:5b:7c:3d:40:a4:af:9a:e0:
                    fb:5e:ef:d2:23:f1:69:da:65:3b:29:b6:b6:5d:ad:
                    2a:f8:ca:8b:9a:05:52:0b:99:08:bd:33:50:f7:37:
                    7b:83:99:5f:59:6a:d8:f2:d6:7e:47:3b:97:cb:55:
                    6c:cd:f0:96:59:33:9e:67:36:47:95:df:77:53:0e:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:F8:5D:A4:9B:9F:13:0F:4D:86:43:E7:1B:66:4D:13:F5:12:D5
            X509v3 Authority Key Identifier:
                keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:08:98:e9:5e:a3:36:02:d8:56:a5:e1:e1:68:d0:35:5f:30:
         6c:08:53:69:12:77:7e:d7:94:19:41:53:4b:87:96:7c:f7:2f:
         6b:a6:07:7d:b5:3c:13:5a:91:c9:71:07:d7:3c:8d:4d:5d:80:
         a2:a1:ec:46:22:6d:36:47:55:74:d8:6b:c9:28:88:80:d4:dd:
         2e:50:ee:23:ce:c5:59:c8:b6:f6:b9:2c:ea:f7:4e:29:e5:11:
         51:6b:a4:6e:f2:ad:07:7b:59:57:dc:97:a6:ad:15:4f:5a:f3:
         51:ec:20:8b:bd:bd:4f:35:ca:bc:7e:9b:85:9a:c7:af:fd:c1:
         22:cb:30:c6:99:3d:83:04:75:5d:bc:5d:e1:d1:21:0e:36:cc:
         47:c5:cf:9d:77:e3:12:9c:95:a6:05:89:3e:cd:91:7f:5d:c2:
         eb:b8:4a:59:4d:0b:3c:78:23:96:a7:c7:f8:df:23:29:3d:16:
         2d:2e:ff:71:1c:e8:49:87:75:49:e0:56:fb:08:0a:eb:78:0b:
         c2:7f:cb:16:78:d6:b7:6c:bf:47:df:9e:80:ce:7c:67:9d:9e:
         05:51:ef:e0:4c:5b:47:ba:83:a6:fc:c2:86:51:e3:78:31:dd:
         6d:34:b6:75:51:9d:71:d3:97:3a:f2:8d:58:97:49:cc:05:bd:
         17:44:e1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZanZm4Vm3cuG0KdDOZcU/fxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5
MWJlYjAwHhcNMjUwNTA2MjEwMDMwWhcNMjUwNTA3MjEwMDMwWjAzMTEwLwYDVQQD
EyhlMzZmZjg1ZGE0OWI5ZjEzMGY0ZDg2NDNlNzFiNjY0ZDEzZjUxMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowg7/dsy6onNHsEoskJmpSsc7h0i
bHn6E/FWM78ltFyvD72o+WIXL5Eq/e/eL8n1fX/6jY9jWF7zaIPPgf49pub3WdWM
8DKdwdmzJZ4v8BEa/FwBUyaRhoZQv2RjczBwQ4oR1BZK0HpASi1OmKTxPsdYpg/N
5XJPyaL9dVBdr55TSt42EIGl+DRmSdHZY4hAQOeRxg6jpcMcNizcm0jCOwWOPkAQ
KBhS40kuSEH+Mvse3eftD19BJL40W3w9QKSvmuD7Xu/SI/Fp2mU7Kba2Xa0q+MqL
mgVSC5kIvTNQ9zd7g5lfWWrY8tZ+RzuXy1VszfCWWTOeZzZHld93Uw4qzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONv+F2km58TD02GQ+cbZk0T9RLVMB8GA1UdIwQY
MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt
MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl
LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwiY6V6j
NgLYVqXh4WjQNV8wbAhTaRJ3fteUGUFTS4eWfPcva6YHfbU8E1qRyXEH1zyNTV2A
oqHsRiJtNkdVdNhrySiIgNTdLlDuI87FWci29rks6vdOKeURUWukbvKtB3tZV9yX
pq0VT1rzUewgi729TzXKvH6bhZrHr/3BIsswxpk9gwR1Xbxd4dEhDjbMR8XPnXfj
EpyVpgWJPs2Rf13C67hKWU0LPHgjlqfH+N8jKT0WLS7/cRzoSYd1SeBW+wgK63gL
wn/LFnjWt2y/R9+egM58Z52eBVHv4ExbR7qDpvzChlHjeDHdbTS2dVGdcdOXOvKN
WJdJzAW9F0Thgw==
-----END CERTIFICATE-----
Generated at Tue May 6 23:02:48 2025 by rpki-client