Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File:                     r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier:          4frMPAIWklGKRdTgv4/ZfkHM0HJhxZEW5y3kJaj00+I=
Subject key identifier:   1F:6A:31:FE:9E:A2:20:F6:6C:E3:7B:C7:AD:B3:C8:22:DF:A9:53:6A
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer:       /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial:       0196C1262EAF82CBB85603220F508E4B14AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number:          095A
Signing time:             Sun 11 May 2025 21:00:27 +0000
Manifest this update:     Sun 11 May 2025 21:00:27 +0000
Manifest next update:     Mon 12 May 2025 21:00:27 +0000
Files and hashes:         1: 1-QcSYLdpveuStLYqlBunMp4JJ5g.roa (hash: NQizYlwEjERl0X/bxZE2nkkRnRTSix4QkB1fVvIKAMg=)
                          2: N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa (hash: kLrijD9G/R0cMvtLz3nwtkgshfFFxhgBoeVfEmhz0ZI=)
                          3: ayI-UL4oibibFX4cW3YWUk6xSTs.roa (hash: N1Uh/40VgHWlkmnSe6ILZ6Uts2Fhgd/GOVLIcEzqLXQ=)
                          4: gnkHs-huFz_Mv1gh2f--oMoTlbI.roa (hash: cAkEhiie/5ypOg0o3pr7TFLqNT0IK1/cxJALcW2pMbg=)
                          5: njDEZbySu24l3-7pqiEP7cKTkYk.roa (hash: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=)
                          6: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: I4kUJLKnPLyyOJdzNfkYEMbJvtfq/i8icg9VNyVlGuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:2e:af:82:cb:b8:56:03:22:0f:50:8e:4b:14:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
        Validity
            Not Before: May 11 21:00:27 2025 GMT
            Not After : May 12 21:00:27 2025 GMT
        Subject: CN=1f6a31fe9ea220f66ce37bc7adb3c822dfa9536a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:9d:e9:f9:ce:30:b2:26:e6:69:e5:ff:da:
                    eb:2a:c0:0f:80:ac:3e:73:b6:9f:5f:53:2f:f7:47:
                    fa:08:de:41:b9:23:03:53:10:b1:4a:f1:24:dd:fd:
                    6b:e0:ef:c2:7a:32:7d:b8:78:84:cd:92:eb:26:d1:
                    84:93:3e:ed:4d:9d:ee:4b:b3:cd:85:6e:1a:5d:b7:
                    0a:15:88:58:41:a0:54:eb:58:f5:17:45:1f:93:7a:
                    27:4d:62:7a:70:93:29:27:48:72:83:90:e8:15:9c:
                    d5:3f:66:10:11:6c:46:3a:00:7e:4f:ad:09:e6:e0:
                    e1:1d:86:d4:d7:39:a4:84:65:e8:16:f5:7b:f3:ca:
                    12:50:c2:e8:fa:11:7e:58:bb:87:66:18:ad:0e:7f:
                    01:43:5a:b9:04:d0:a2:9f:7d:0a:9f:4e:d5:d9:26:
                    fe:22:52:5c:ca:7e:35:4e:b1:3a:85:ba:b2:de:5f:
                    4b:c9:90:f4:57:c9:3c:a6:0b:a8:85:92:05:12:3c:
                    37:3e:b9:40:e5:c4:ce:f1:1b:5f:3c:9d:f6:8d:61:
                    3a:b0:51:f2:03:12:a2:44:12:08:1f:b1:67:7f:86:
                    54:0b:33:a8:9c:d3:c1:77:38:ee:f6:9e:9e:f3:e1:
                    9f:74:d4:a0:2e:68:65:0f:aa:16:e7:e7:a4:51:b6:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:31:FE:9E:A2:20:F6:6C:E3:7B:C7:AD:B3:C8:22:DF:A9:53:6A
            X509v3 Authority Key Identifier:
                keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:d4:dd:11:96:69:ab:98:ab:c8:3e:c4:98:3f:15:a8:10:
         03:1c:f1:e6:42:b1:0b:bd:fc:6b:a8:2e:e9:3f:b5:9c:f5:3f:
         48:38:dc:a0:6d:c9:2a:1e:ce:a6:88:d3:45:c9:11:9f:dc:b2:
         f8:df:cc:9b:f7:92:a7:14:2a:1c:45:94:35:08:e1:ad:92:49:
         46:53:ea:84:09:d1:da:47:25:66:6e:9d:69:48:9b:b2:d8:73:
         12:80:53:28:59:21:f7:de:c5:13:17:04:1a:1b:8f:da:87:0c:
         97:84:49:28:91:2d:b4:ab:93:42:09:8f:47:36:6a:61:7a:70:
         07:bc:58:51:55:ef:9a:f6:a6:53:a7:6d:06:bb:21:13:7d:5f:
         9e:db:9e:7e:f4:40:37:0d:2a:ef:b2:fd:f8:75:58:d1:e4:c8:
         ff:bc:26:80:1e:e3:22:c4:d4:6d:b3:12:06:ac:1e:1e:02:91:
         45:21:10:48:ac:4c:f1:37:a1:c9:ad:42:86:3f:40:48:9a:0b:
         72:01:be:e1:96:c8:3d:ae:fe:90:e5:3f:8d:60:5b:89:20:d9:
         7e:90:90:d7:08:3d:fe:32:8d:bf:43:8f:35:a7:aa:17:4f:78:
         8f:5f:c5:8a:30:74:a4:e6:96:db:a4:88:20:e8:6b:53:f4:56:
         d1:d8:af:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJi6vgsu4VgMiD1COSxSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjRlMDRhMGVkMzQ0MTEyYzE4NTNjYWIwOWY1MmUxY2Q5
YWJhZjIwHhcNMjUwNTExMjEwMDI3WhcNMjUwNTEyMjEwMDI3WjAzMTEwLwYDVQQD
EygxZjZhMzFmZTllYTIyMGY2NmNlMzdiYzdhZGIzYzgyMmRmYTk1MzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlWd6fnOMLIm5mnl/9rrKsAPgKw+
c7afX1Mv90f6CN5BuSMDUxCxSvEk3f1r4O/CejJ9uHiEzZLrJtGEkz7tTZ3uS7PN
hW4aXbcKFYhYQaBU61j1F0Ufk3onTWJ6cJMpJ0hyg5DoFZzVP2YQEWxGOgB+T60J
5uDhHYbU1zmkhGXoFvV788oSUMLo+hF+WLuHZhitDn8BQ1q5BNCin30Kn07V2Sb+
IlJcyn41TrE6hbqy3l9LyZD0V8k8pguohZIFEjw3PrlA5cTO8RtfPJ32jWE6sFHy
AxKiRBIIH7Fnf4ZUCzOonNPBdzju9p6e8+GfdNSgLmhlD6oW5+ekUbYQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9qMf6eoiD2bON7x62zyCLfqVNqMB8GA1UdIwQY
MBaAFK+04EoO00QRLBhTyrCfUuHNmrryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTct
ODA5NWYzMjk3MTc5LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTctODA5NWYzMjk3MTc5
LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiebU3RGW
aauYq8g+xJg/FagQAxzx5kKxC738a6gu6T+1nPU/SDjcoG3JKh7OpojTRckRn9yy
+N/Mm/eSpxQqHEWUNQjhrZJJRlPqhAnR2kclZm6daUibsthzEoBTKFkh997FExcE
GhuP2ocMl4RJKJEttKuTQgmPRzZqYXpwB7xYUVXvmvamU6dtBrshE31fntuefvRA
Nw0q77L9+HVY0eTI/7wmgB7jIsTUbbMSBqweHgKRRSEQSKxM8Tehya1Chj9ASJoL
cgG+4ZbIPa7+kOU/jWBbiSDZfpCQ1wg9/jKNv0OPNaeqF094j1/FijB0pOaW26SI
IOhrU/RW0divvQ==
-----END CERTIFICATE-----
Generated at Mon May 12 00:31:45 2025 by rpki-client