Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          2UcThFUjAsVTGJic61ug2AgrYsxhw32e/CJ3JnsZ1bA=
Subject key identifier:   5D:00:86:D6:37:6E:FD:CC:8F:C0:9C:FA:0A:7F:CF:DD:0B:81:A5:24
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       0196AB0CB21495C0611D8402DE6026181C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          0FB7
Signing time:             Wed 07 May 2025 14:00:57 +0000
Manifest this update:     Wed 07 May 2025 14:00:57 +0000
Manifest next update:     Thu 08 May 2025 14:00:57 +0000
Files and hashes:         1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
                          2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
                          3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
                          4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: ofKAECmqLyVLbeWSPqeDh0iXBZQINl4M4iEuCx/pndA=)
                          5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:0c:b2:14:95:c0:61:1d:84:02:de:60:26:18:1c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: May  7 14:00:57 2025 GMT
            Not After : May  8 14:00:57 2025 GMT
        Subject: CN=5d0086d6376efdcc8fc09cfa0a7fcfdd0b81a524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:de:3d:48:5a:95:fc:0a:3b:71:5f:f0:6d:
                    0d:e2:af:aa:d7:b7:5c:9d:21:2b:b8:85:e7:59:e4:
                    65:f3:1e:01:19:29:bc:86:73:b8:25:cd:d0:3f:6f:
                    8b:28:09:8e:98:7b:ae:e1:0e:2e:67:39:12:59:dc:
                    ef:9c:bf:21:76:a1:7f:66:1f:c2:33:ea:8c:10:13:
                    8d:fe:cf:00:d8:e7:07:08:df:8e:f1:21:38:dc:22:
                    36:c5:97:68:c5:d1:8f:14:de:36:4b:06:f8:0a:5b:
                    06:45:41:54:8a:e2:ce:ca:5e:49:e7:71:76:ec:4f:
                    f7:6e:cc:13:e0:a9:2c:ca:a7:ed:ab:ca:bc:93:d4:
                    d8:fb:c5:f8:30:65:73:6e:92:c1:7a:7a:15:1d:d5:
                    6d:c2:6a:b1:7e:d2:1c:12:c0:df:05:54:28:97:2d:
                    4a:83:2a:51:a0:58:22:c9:1d:04:06:25:31:78:67:
                    91:56:19:bf:2e:95:0d:92:ca:13:57:4a:1c:00:10:
                    4f:d7:61:98:8e:b3:6e:3c:73:d3:65:ff:81:a3:37:
                    ee:ec:88:e0:b9:aa:f8:06:d5:03:02:a4:1a:a7:90:
                    a7:1b:c0:5e:7e:7a:b8:67:a8:e6:3e:4d:08:9f:0b:
                    0a:19:93:ff:e1:8d:42:72:37:04:c7:ce:32:11:91:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:00:86:D6:37:6E:FD:CC:8F:C0:9C:FA:0A:7F:CF:DD:0B:81:A5:24
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:ac:f4:47:c5:26:87:19:26:21:a9:ee:6b:49:53:59:5b:
         ab:8c:bb:e5:08:91:05:bc:5a:bb:33:8c:fb:53:10:ce:43:a1:
         8b:f2:1b:51:b9:b0:12:16:10:ee:7d:78:8a:e8:93:40:df:61:
         91:e7:b9:d0:38:69:81:f1:8b:3a:4e:a7:99:88:7d:a1:21:e8:
         ff:ba:6a:91:2b:d0:f0:29:0d:dc:35:e6:28:8e:44:b8:17:3b:
         e2:81:dc:da:6b:d5:ca:bc:88:ad:9c:fd:9f:28:bb:8a:1e:9b:
         48:1c:40:08:6f:6b:5b:d9:f1:af:c6:56:94:5c:19:36:c5:fb:
         a3:ed:9e:ea:4d:66:e1:08:31:10:ff:03:69:b3:41:60:cd:92:
         ba:32:8b:ca:31:c5:e4:0d:96:2c:a2:00:bb:1e:4c:1b:45:db:
         c4:d8:a8:a4:23:3d:c0:bf:08:c6:1d:15:c9:4c:ae:2b:01:75:
         17:bd:36:fa:60:77:80:8f:28:23:be:01:2d:9a:3f:92:f0:b7:
         c7:f9:f1:b2:16:5d:4b:89:96:94:1d:c9:80:85:9a:64:b2:35:
         bd:e0:52:bb:68:b5:67:a6:31:1d:b5:2c:db:26:76:02:84:da:
         68:e9:fc:5b:fa:5f:f5:e2:06:a1:24:59:c9:2b:83:70:1d:82:
         2b:a0:c2:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarDLIUlcBhHYQC3mAmGBw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3
Zjc3NzQwHhcNMjUwNTA3MTQwMDU3WhcNMjUwNTA4MTQwMDU3WjAzMTEwLwYDVQQD
Eyg1ZDAwODZkNjM3NmVmZGNjOGZjMDljZmEwYTdmY2ZkZDBiODFhNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sbePUhalfwKO3Ff8G0N4q+q17dc
nSEruIXnWeRl8x4BGSm8hnO4Jc3QP2+LKAmOmHuu4Q4uZzkSWdzvnL8hdqF/Zh/C
M+qMEBON/s8A2OcHCN+O8SE43CI2xZdoxdGPFN42Swb4ClsGRUFUiuLOyl5J53F2
7E/3bswT4Kksyqftq8q8k9TY+8X4MGVzbpLBenoVHdVtwmqxftIcEsDfBVQoly1K
gypRoFgiyR0EBiUxeGeRVhm/LpUNksoTV0ocABBP12GYjrNuPHPTZf+Bozfu7Ijg
uar4BtUDAqQap5CnG8Befnq4Z6jmPk0InwsKGZP/4Y1CcjcEx84yEZEtEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0AhtY3bv3Mj8Cc+gp/z90LgaUkMB8GA1UdIwQY
MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt
NTQ2OGIyY2YwYTc3LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3
LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerms9EfF
JocZJiGp7mtJU1lbq4y75QiRBbxauzOM+1MQzkOhi/IbUbmwEhYQ7n14iuiTQN9h
kee50DhpgfGLOk6nmYh9oSHo/7pqkSvQ8CkN3DXmKI5EuBc74oHc2mvVyryIrZz9
nyi7ih6bSBxACG9rW9nxr8ZWlFwZNsX7o+2e6k1m4QgxEP8DabNBYM2SujKLyjHF
5A2WLKIAux5MG0XbxNiopCM9wL8Ixh0VyUyuKwF1F702+mB3gI8oI74BLZo/kvC3
x/nxshZdS4mWlB3JgIWaZLI1veBSu2i1Z6YxHbUs2yZ2AoTaaOn8W/pf9eIGoSRZ
ySuDcB2CK6DC+w==
-----END CERTIFICATE-----
Generated at Thu May 8 00:13:47 2025 by rpki-client