Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File:                     fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier:          wLOd89/DdFKusF3DnIwJ3cAfQ/cL4x1CvLztRruoHx8=
Subject key identifier:   7E:DA:0B:7D:91:32:80:60:44:DD:89:8C:6F:8C:92:42:CB:4C:E5:5F
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer:       /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial:       0196C238E4F0A3DC42C4F0B31C77C7C00308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number:          1438
Signing time:             Mon 12 May 2025 02:00:30 +0000
Manifest this update:     Mon 12 May 2025 02:00:30 +0000
Manifest next update:     Tue 13 May 2025 02:00:30 +0000
Files and hashes:         1: EIKOgQFi5mojMPucev_-8ewm_-E.roa (hash: a2bhdKBZ8yPIzwYvUQAAVhbdMilJSR3ugkNV2LMmk80=)
                          2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: Z7v2AsKoVnh4m9SqbUpK2ontTXuHymloOWEJqtYGL/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:e4:f0:a3:dc:42:c4:f0:b3:1c:77:c7:c0:03:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
        Validity
            Not Before: May 12 02:00:30 2025 GMT
            Not After : May 13 02:00:30 2025 GMT
        Subject: CN=7eda0b7d9132806044dd898c6f8c9242cb4ce55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:73:f4:4d:04:28:56:e6:5f:43:5c:9b:74:
                    c1:fd:d4:60:b9:30:59:8e:ed:c7:73:69:04:f4:e6:
                    3b:1d:1a:0b:3d:46:7e:49:c4:8c:5f:22:3d:39:ba:
                    29:51:81:ca:9e:dc:5e:c0:50:d2:51:0b:a5:e8:c7:
                    fe:b2:b3:60:9e:2d:4c:55:53:8f:7a:4f:4b:89:93:
                    c0:f7:26:68:d8:14:6c:42:e6:cd:56:5b:72:ae:1e:
                    f5:8f:c7:34:99:3d:ab:a4:3b:ef:ac:c6:06:20:2d:
                    5a:a8:09:65:32:25:65:ac:ed:4c:5a:38:4b:1b:9e:
                    8d:39:a0:8f:9a:5e:19:3b:5f:20:7f:46:9c:8b:18:
                    89:a7:f9:fa:4f:bb:4b:5f:9a:30:d3:8c:ad:b3:38:
                    7f:db:45:8f:9c:4e:10:c6:6b:67:c5:9d:e4:5a:0e:
                    f9:62:36:4f:22:ae:ae:d3:70:6b:b1:a2:ad:03:12:
                    15:cf:e3:e8:65:7c:39:60:98:66:4b:47:53:31:b2:
                    55:10:a7:13:16:90:78:7c:19:ef:f1:09:af:ca:85:
                    f3:cf:10:68:94:1d:50:85:47:47:57:c0:af:98:c7:
                    40:a3:ab:9b:13:a8:08:fe:b0:34:91:28:fc:7e:5f:
                    a8:13:b6:5c:63:19:68:01:5c:3a:66:e0:f9:e8:45:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DA:0B:7D:91:32:80:60:44:DD:89:8C:6F:8C:92:42:CB:4C:E5:5F
            X509v3 Authority Key Identifier:
                keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:66:c1:07:ab:7e:6e:36:1a:db:2a:cf:15:dd:fb:ec:cb:
         ad:55:75:bd:a4:59:83:b6:83:e1:a7:42:34:37:71:bf:3a:1d:
         6c:e6:5b:b5:e9:90:f6:fb:0d:cf:14:88:3f:bf:83:9e:54:cd:
         0a:8d:92:d2:28:a6:0f:5e:38:29:af:2a:33:2c:89:f7:f9:71:
         f4:70:0b:ce:bf:ce:69:4a:fa:0a:c3:b4:8d:a5:70:12:e5:bb:
         c5:31:ea:8c:64:9d:3b:59:2a:03:a8:66:a8:a0:9f:90:45:69:
         00:a1:e9:79:25:cb:d4:37:ae:66:ef:d4:d8:8e:09:48:f8:e5:
         ee:8c:41:b9:2d:0f:80:b2:f3:e7:3e:67:02:a9:0d:ae:03:c1:
         a1:48:85:4f:7d:ee:9c:61:4c:71:e8:f6:46:05:67:f0:c1:93:
         ba:58:81:72:22:18:07:fb:8a:4f:cd:76:07:81:a1:4c:cd:82:
         ec:e1:c2:1f:34:22:01:10:20:38:a6:f8:e8:1a:98:bc:ab:e2:
         9c:ac:59:67:44:4f:67:9d:42:63:b1:bd:55:e6:c3:8e:68:93:
         61:fa:d7:cf:dc:16:7f:b0:a7:8e:85:e5:74:74:fe:ae:52:e5:
         04:af:b7:09:3f:b0:73:f8:67:e4:a2:80:2e:68:01:1b:08:6f:
         67:d2:44:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOOTwo9xCxPCzHHfHwAMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDQyMzIxMWY0OWIxMzM1ZTk0YjhiZGJiYjExNjg2NjRm
NjgwNGYwHhcNMjUwNTEyMDIwMDMwWhcNMjUwNTEzMDIwMDMwWjAzMTEwLwYDVQQD
Eyg3ZWRhMGI3ZDkxMzI4MDYwNDRkZDg5OGM2ZjhjOTI0MmNiNGNlNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuxz9E0EKFbmX0Ncm3TB/dRguTBZ
ju3Hc2kE9OY7HRoLPUZ+ScSMXyI9ObopUYHKntxewFDSUQul6Mf+srNgni1MVVOP
ek9LiZPA9yZo2BRsQubNVltyrh71j8c0mT2rpDvvrMYGIC1aqAllMiVlrO1MWjhL
G56NOaCPml4ZO18gf0acixiJp/n6T7tLX5ow04ytszh/20WPnE4QxmtnxZ3kWg75
YjZPIq6u03BrsaKtAxIVz+PoZXw5YJhmS0dTMbJVEKcTFpB4fBnv8QmvyoXzzxBo
lB1QhUdHV8CvmMdAo6ubE6gI/rA0kSj8fl+oE7ZcYxloAVw6ZuD56EX3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7aC32RMoBgRN2JjG+MkkLLTOVfMB8GA1UdIwQY
MBaAFH4EIyEfSbEzXpS4vbuxFoZk9oBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMt
YjBlN2Q0MWI1ZDM2LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMtYjBlN2Q0MWI1ZDM2
LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWJmwQer
fm42GtsqzxXd++zLrVV1vaRZg7aD4adCNDdxvzodbOZbtemQ9vsNzxSIP7+DnlTN
Co2S0iimD144Ka8qMyyJ9/lx9HALzr/OaUr6CsO0jaVwEuW7xTHqjGSdO1kqA6hm
qKCfkEVpAKHpeSXL1DeuZu/U2I4JSPjl7oxBuS0PgLLz5z5nAqkNrgPBoUiFT33u
nGFMcej2RgVn8MGTuliBciIYB/uKT812B4GhTM2C7OHCHzQiARAgOKb46BqYvKvi
nKxZZ0RPZ51CY7G9VebDjmiTYfrXz9wWf7CnjoXldHT+rlLlBK+3CT+wc/hn5KKA
LmgBGwhvZ9JELw==
-----END CERTIFICATE-----
Generated at Mon May 12 08:37:41 2025 by rpki-client