Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          9Bon1inakslBNuFnQr3L0YoYOltLCQ3S/acqGBSO1g0=
Subject key identifier:   93:0F:9B:2F:98:5C:8B:AE:7D:2B:0E:37:59:1F:A2:DD:09:FA:D9:02
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       0196C5A791031358510FEE3A7F64BDE72576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          0EBD
Signing time:             Mon 12 May 2025 18:00:15 +0000
Manifest this update:     Mon 12 May 2025 18:00:15 +0000
Manifest next update:     Tue 13 May 2025 18:00:15 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: L42UpxeT4aW9ZBXrbC9K7udzPV/B8he5+ygiXDm2mCM=)
                          2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
                          3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
                          4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:91:03:13:58:51:0f:ee:3a:7f:64:bd:e7:25:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: May 12 18:00:15 2025 GMT
            Not After : May 13 18:00:15 2025 GMT
        Subject: CN=930f9b2f985c8bae7d2b0e37591fa2dd09fad902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:a2:7d:01:6a:c6:94:1f:88:bc:bf:82:c9:
                    97:2e:db:65:42:41:cc:23:70:a9:ad:8e:6e:5c:7f:
                    a4:71:53:94:67:a9:91:cf:e2:6e:5b:47:94:c0:a9:
                    7f:82:05:58:54:6f:f4:d7:c1:8a:f8:18:2e:ef:ef:
                    e2:bc:98:01:1e:81:0f:9f:5a:ff:87:75:fa:bd:be:
                    0d:a6:d2:bd:29:34:b0:66:df:c8:4a:5b:b3:8d:40:
                    99:c1:b4:59:d3:b9:58:8e:c8:11:df:0f:07:47:04:
                    be:2b:f3:95:12:26:5b:07:3c:fe:9f:1f:49:2d:6f:
                    9a:82:62:4f:6f:d9:b4:ec:57:84:62:e3:d5:6d:94:
                    e3:3d:23:e8:4c:eb:de:f2:1b:07:7e:7d:74:27:bf:
                    e3:c0:fa:e2:da:9f:6c:05:53:13:6e:8c:44:aa:e3:
                    01:d8:ea:7c:c3:83:b1:2f:5c:c9:cf:ba:23:51:c3:
                    72:d0:28:9a:30:59:bf:ee:3d:65:bf:87:9f:01:9e:
                    e4:3b:7f:e5:84:c8:68:d0:11:08:3e:6e:0e:45:69:
                    ae:dd:94:ba:ef:36:f6:b1:a1:e5:cb:97:1b:55:42:
                    5d:1f:0c:9f:9f:4f:a6:25:76:88:a8:4f:16:82:ed:
                    f0:73:34:03:da:3f:d9:99:5a:51:a1:3b:09:aa:dc:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0F:9B:2F:98:5C:8B:AE:7D:2B:0E:37:59:1F:A2:DD:09:FA:D9:02
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:15:42:33:5e:c1:f7:4d:54:a8:be:19:49:49:83:d5:e3:41:
         f9:a8:0c:30:59:a3:5e:48:fd:05:38:89:c2:40:14:b4:48:22:
         bb:b4:94:53:b1:63:e4:b9:da:11:e6:76:28:34:44:16:54:aa:
         03:c4:ca:b6:e3:7d:18:60:8b:1d:f4:84:50:60:9f:51:7c:1f:
         8a:5d:e4:4a:d4:4d:58:26:42:61:65:16:b0:d4:1a:57:5c:09:
         a0:81:9d:75:bc:39:8e:8d:ff:9e:9a:df:35:e8:7e:75:eb:8b:
         4f:c4:28:2c:ab:d8:14:1f:9c:07:3c:24:1d:c2:59:9a:e4:ee:
         df:bf:40:0a:4c:ca:8f:9c:21:be:99:6d:6a:90:3f:3c:a2:b8:
         b5:3e:c2:6a:5f:3c:a2:43:b7:87:a7:4e:02:33:0c:8d:06:35:
         48:69:5e:5a:fa:13:01:27:90:ca:2c:86:03:94:7a:7a:60:96:
         32:95:b2:73:43:b7:30:dd:36:a2:a6:b3:87:9e:51:1e:b8:05:
         b7:56:ca:20:de:cd:98:f6:d8:16:94:2a:e1:2c:01:59:bc:30:
         cd:66:f9:ed:f3:1c:b5:06:ae:a5:03:4d:a4:d7:a8:a4:d5:50:
         02:8a:c0:5a:2e:ca:46:af:ee:21:82:b4:b4:2d:d0:c6:be:96:
         83:59:e0:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFp5EDE1hRD+46f2S95yV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2
MWEwNDgwHhcNMjUwNTEyMTgwMDE1WhcNMjUwNTEzMTgwMDE1WjAzMTEwLwYDVQQD
Eyg5MzBmOWIyZjk4NWM4YmFlN2QyYjBlMzc1OTFmYTJkZDA5ZmFkOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPOifQFqxpQfiLy/gsmXLttlQkHM
I3CprY5uXH+kcVOUZ6mRz+JuW0eUwKl/ggVYVG/018GK+Bgu7+/ivJgBHoEPn1r/
h3X6vb4NptK9KTSwZt/ISluzjUCZwbRZ07lYjsgR3w8HRwS+K/OVEiZbBzz+nx9J
LW+agmJPb9m07FeEYuPVbZTjPSPoTOve8hsHfn10J7/jwPri2p9sBVMTboxEquMB
2Op8w4OxL1zJz7ojUcNy0CiaMFm/7j1lv4efAZ7kO3/lhMho0BEIPm4ORWmu3ZS6
7zb2saHly5cbVUJdHwyfn0+mJXaIqE8Wgu3wczQD2j/ZmVpRoTsJqtxjTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMPmy+YXIuufSsON1kfot0J+tkCMB8GA1UdIwQY
MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt
OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx
LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBVCM17B
901UqL4ZSUmD1eNB+agMMFmjXkj9BTiJwkAUtEgiu7SUU7Fj5LnaEeZ2KDREFlSq
A8TKtuN9GGCLHfSEUGCfUXwfil3kStRNWCZCYWUWsNQaV1wJoIGddbw5jo3/nprf
Neh+deuLT8QoLKvYFB+cBzwkHcJZmuTu379ACkzKj5whvpltapA/PKK4tT7Cal88
okO3h6dOAjMMjQY1SGleWvoTASeQyiyGA5R6emCWMpWyc0O3MN02oqazh55RHrgF
t1bKIN7NmPbYFpQq4SwBWbwwzWb57fMctQaupQNNpNeopNVQAorAWi7KRq/uIYK0
tC3Qxr6Wg1ng/A==
-----END CERTIFICATE-----
Generated at Tue May 13 01:21:09 2025 by rpki-client