Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File:                     FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier:          CIhru0khuh9iIwXnruoFQnwQYI97qQbEEE3pYYtH9gA=
Subject key identifier:   9B:3F:7F:3D:3E:85:DE:77:F3:D4:90:7E:BD:69:C7:FE:DF:7D:18:CF
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       0196BBC8D37097FB8DC26B26C2EE60C45717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number:          1535
Signing time:             Sat 10 May 2025 20:00:22 +0000
Manifest this update:     Sat 10 May 2025 20:00:22 +0000
Manifest next update:     Sun 11 May 2025 20:00:22 +0000
Files and hashes:         1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: EZPPzsL9X+7kPhPckjl57DLm0I3eMzynUW7U5V9Csng=)
                          2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:c8:d3:70:97:fb:8d:c2:6b:26:c2:ee:60:c4:57:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: May 10 20:00:22 2025 GMT
            Not After : May 11 20:00:22 2025 GMT
        Subject: CN=9b3f7f3d3e85de77f3d4907ebd69c7fedf7d18cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:39:3a:de:61:aa:70:1e:5b:d9:de:8a:ec:
                    95:23:e0:95:c5:e8:d0:d1:6c:1c:21:cf:aa:a6:41:
                    4f:3c:eb:ef:59:ed:89:43:ed:af:78:37:ff:52:44:
                    50:69:fa:c5:1c:8e:66:92:de:45:e7:5a:05:39:91:
                    9a:ea:4b:8f:2d:07:0d:9c:47:6d:89:8d:00:b7:93:
                    41:14:8d:c9:9a:01:58:45:9b:cf:a7:db:dc:e1:0f:
                    c5:48:35:95:e4:24:51:03:c4:cb:7f:ee:42:8c:01:
                    d3:5f:97:44:e7:72:87:55:f3:fb:23:05:95:0a:c2:
                    e5:c4:b1:91:90:31:96:b3:2b:40:fb:b6:8b:bf:e7:
                    a9:1c:dd:e6:d4:51:1b:21:0e:91:ca:83:ac:30:33:
                    50:8c:9c:6e:15:a2:5b:26:58:29:24:2e:14:e1:a8:
                    6b:32:84:28:70:c3:c6:b4:aa:d8:00:47:6f:5c:cf:
                    4b:89:5c:cd:11:eb:39:2b:42:41:44:cb:06:19:6f:
                    47:20:60:01:1d:a9:63:65:ea:d3:d9:28:f8:4e:54:
                    fb:54:d0:bf:cc:ce:35:46:e4:17:55:54:a7:22:d3:
                    ec:d9:e0:43:56:b0:f6:6e:19:f7:10:74:be:c3:5c:
                    f7:c9:32:8e:0e:19:7a:98:fc:f2:ed:73:28:0b:9b:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3F:7F:3D:3E:85:DE:77:F3:D4:90:7E:BD:69:C7:FE:DF:7D:18:CF
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:10:f6:ed:1c:d9:fe:dd:6f:3b:1c:60:58:82:a7:7f:7c:
         e0:d0:d4:2b:50:20:37:f7:5e:23:92:73:1a:1e:64:6d:0d:36:
         08:0f:35:0c:62:44:90:ba:1f:9b:3c:14:e9:95:4e:16:97:29:
         3d:d7:96:8d:fc:6f:16:02:0e:b3:db:e5:43:d1:0f:b8:c3:dd:
         e3:18:0e:2e:9c:3f:df:ae:e5:df:a5:46:a4:e0:97:37:de:e4:
         29:e8:4c:d0:62:ce:a3:71:b1:4e:b4:17:8e:39:43:3c:e4:bf:
         74:71:3e:04:80:c1:02:df:87:53:61:08:ac:b7:6e:35:5f:5a:
         c2:51:e2:2c:1f:89:42:72:97:85:62:9c:8f:37:c9:d8:95:3e:
         a1:1d:4d:15:fe:b7:2a:74:57:63:16:49:e9:8b:c5:ec:e3:27:
         6c:37:19:54:40:1e:f6:89:2c:35:6b:3c:ba:9d:a5:85:4d:f3:
         95:ae:c9:08:0f:1b:9e:f8:2e:36:8a:71:7b:d6:96:45:c2:bc:
         b1:46:b1:98:67:38:7e:e0:e3:45:2f:5f:80:0a:b6:e0:2f:4a:
         dc:cc:bf:b9:58:a2:71:1e:93:80:fa:06:b8:90:6f:7d:98:b5:
         d0:87:a1:5c:bf:10:25:0d:ec:75:5b:28:f1:78:37:17:a0:7a:
         82:cf:b7:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yNNwl/uNwmsmwu5gxFcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTlkMGJjMDQ0Y2RhYTIzNDE4MDlkMDAwZjBmYzRlMWRl
ZGIzNDUwHhcNMjUwNTEwMjAwMDIyWhcNMjUwNTExMjAwMDIyWjAzMTEwLwYDVQQD
Eyg5YjNmN2YzZDNlODVkZTc3ZjNkNDkwN2ViZDY5YzdmZWRmN2QxOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7I5Ot5hqnAeW9neiuyVI+CVxejQ
0WwcIc+qpkFPPOvvWe2JQ+2veDf/UkRQafrFHI5mkt5F51oFOZGa6kuPLQcNnEdt
iY0At5NBFI3JmgFYRZvPp9vc4Q/FSDWV5CRRA8TLf+5CjAHTX5dE53KHVfP7IwWV
CsLlxLGRkDGWsytA+7aLv+epHN3m1FEbIQ6RyoOsMDNQjJxuFaJbJlgpJC4U4ahr
MoQocMPGtKrYAEdvXM9LiVzNEes5K0JBRMsGGW9HIGABHaljZerT2Sj4TlT7VNC/
zM41RuQXVVSnItPs2eBDVrD2bhn3EHS+w1z3yTKODhl6mPzy7XMoC5s9FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs/fz0+hd5389SQfr1px/7ffRjPMB8GA1UdIwQY
MBaAFBcZ0LwETNqiNBgJ0ADw/E4d7bNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUt
MDRhYzBhNWU4MTQzLzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUtMDRhYzBhNWU4MTQz
LzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuMQ9u0c
2f7dbzscYFiCp3984NDUK1AgN/deI5JzGh5kbQ02CA81DGJEkLofmzwU6ZVOFpcp
PdeWjfxvFgIOs9vlQ9EPuMPd4xgOLpw/367l36VGpOCXN97kKehM0GLOo3GxTrQX
jjlDPOS/dHE+BIDBAt+HU2EIrLduNV9awlHiLB+JQnKXhWKcjzfJ2JU+oR1NFf63
KnRXYxZJ6YvF7OMnbDcZVEAe9oksNWs8up2lhU3zla7JCA8bnvguNopxe9aWRcK8
sUaxmGc4fuDjRS9fgAq24C9K3My/uViicR6TgPoGuJBvfZi10IehXL8QJQ3sdVso
8Xg3F6B6gs+3Uw==
-----END CERTIFICATE-----
Generated at Sun May 11 06:35:31 2025 by rpki-client