Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File:                     87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier:          KSSjmt13OUyVRJlI++mSWES2wCYqVopcF3LGIN22mZk=
Subject key identifier:   4D:F7:AF:77:BF:16:41:A0:0D:91:33:AD:F7:6F:70:0B:AD:15:C9:9C
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       0196A954DFD658B632136DF4A7BFC5004309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number:          06BF
Signing time:             Wed 07 May 2025 06:00:33 +0000
Manifest this update:     Wed 07 May 2025 06:00:33 +0000
Manifest next update:     Thu 08 May 2025 06:00:33 +0000
Files and hashes:         1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
                          2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: Q2l0XUTNJoKdL4qUjwT67DtsyGp/3L16li4hnIFGCX0=)
                          3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
                          4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
                          5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
                          6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
                          7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
                          8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:54:df:d6:58:b6:32:13:6d:f4:a7:bf:c5:00:43:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: May  7 06:00:33 2025 GMT
            Not After : May  8 06:00:33 2025 GMT
        Subject: CN=4df7af77bf1641a00d9133adf76f700bad15c99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:21:c5:5d:06:22:cb:f7:ee:d0:c8:49:5f:
                    90:70:75:4f:06:9d:de:de:b6:37:49:61:9f:ea:db:
                    3d:e9:8c:e8:77:e4:25:69:b9:9b:83:f8:03:6a:a6:
                    64:52:ff:cb:c1:c1:58:88:bb:51:9a:6c:6a:73:13:
                    d6:1b:1c:6f:78:9c:bd:d2:96:b4:cc:90:ae:be:23:
                    c3:62:c5:c8:cf:14:c1:7d:9e:2b:08:56:71:10:ad:
                    27:24:3a:fe:59:e3:bc:64:84:3b:46:c0:a5:1a:24:
                    60:ef:cc:5a:e7:13:97:6b:31:3f:e7:de:4e:fa:7a:
                    8f:ae:1c:d1:52:82:11:6c:77:85:33:f3:46:e3:91:
                    9b:2e:fb:a1:38:ba:a5:e7:6f:86:c1:5a:1a:47:94:
                    c7:cc:2e:22:d7:50:2e:86:9e:8c:59:3b:45:b4:83:
                    a1:f0:e5:a7:76:04:9b:bc:7b:35:ea:92:68:3c:92:
                    02:88:f0:f0:89:a2:d1:e8:67:bc:31:33:7d:67:8c:
                    ad:e9:ff:c8:ba:e7:17:1a:e4:c3:27:56:07:1c:28:
                    59:58:28:70:92:81:ea:2e:b4:34:5e:5f:05:66:b5:
                    3b:e0:42:67:cb:b3:23:cc:94:fe:3a:8e:76:1e:bc:
                    cf:a0:a4:64:e3:41:91:ac:b8:94:43:99:1b:65:a3:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F7:AF:77:BF:16:41:A0:0D:91:33:AD:F7:6F:70:0B:AD:15:C9:9C
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:14:9f:4e:da:3f:6d:47:f3:c7:26:c7:4c:b7:77:fc:ba:
         91:5a:2f:81:4d:83:22:60:2a:d8:2e:46:da:72:cb:f4:11:d7:
         1e:29:33:ea:18:a0:4c:b0:ff:e9:1f:9c:24:63:cb:5a:e5:cb:
         85:6c:38:e1:bf:95:5f:eb:05:46:29:3a:0e:d3:ad:f3:5f:5f:
         4d:8f:60:fc:40:da:a7:d9:06:1e:e6:72:e2:39:97:80:de:9f:
         05:50:cc:e3:1c:0a:55:d1:5e:80:75:aa:ac:9d:66:79:80:39:
         e2:c9:82:3a:b0:59:33:33:22:86:fd:25:ea:7a:dc:5f:b1:8f:
         4d:96:31:63:96:68:c0:5c:0f:5e:4c:c7:a5:5e:3c:78:5f:44:
         47:29:ec:c3:c7:f9:d3:53:a4:59:6c:e0:c9:b5:b6:8f:65:5e:
         f0:d5:b7:cf:bb:fd:01:0a:af:5e:5d:4d:d0:50:23:eb:49:84:
         80:36:35:0f:89:6d:8f:13:ce:14:13:d7:b1:19:6b:07:96:ff:
         c0:f0:83:4e:da:4b:da:1e:43:f0:f8:5f:2a:9e:0c:d6:e0:4d:
         56:58:d6:1a:dc:f8:13:8a:3c:22:33:cb:a8:57:12:f6:12:cf:
         42:38:5d:6e:a9:95:ff:ac:a6:4e:ce:a2:33:cd:bf:8f:83:46:
         7d:2a:1c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapVN/WWLYyE230p7/FAEMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjUwNTA3MDYwMDMzWhcNMjUwNTA4MDYwMDMzWjAzMTEwLwYDVQQD
Eyg0ZGY3YWY3N2JmMTY0MWEwMGQ5MTMzYWRmNzZmNzAwYmFkMTVjOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRUhxV0GIsv37tDISV+QcHVPBp3e
3rY3SWGf6ts96Yzod+Qlabmbg/gDaqZkUv/LwcFYiLtRmmxqcxPWGxxveJy90pa0
zJCuviPDYsXIzxTBfZ4rCFZxEK0nJDr+WeO8ZIQ7RsClGiRg78xa5xOXazE/595O
+nqPrhzRUoIRbHeFM/NG45GbLvuhOLql52+GwVoaR5THzC4i11Auhp6MWTtFtIOh
8OWndgSbvHs16pJoPJICiPDwiaLR6Ge8MTN9Z4yt6f/IuucXGuTDJ1YHHChZWChw
koHqLrQ0Xl8FZrU74EJny7MjzJT+Oo52HrzPoKRk40GRrLiUQ5kbZaOySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE33r3e/FkGgDZEzrfdvcAutFcmcMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNkUn07a
P21H88cmx0y3d/y6kVovgU2DImAq2C5G2nLL9BHXHikz6higTLD/6R+cJGPLWuXL
hWw44b+VX+sFRik6DtOt819fTY9g/EDap9kGHuZy4jmXgN6fBVDM4xwKVdFegHWq
rJ1meYA54smCOrBZMzMihv0l6nrcX7GPTZYxY5ZowFwPXkzHpV48eF9ERynsw8f5
01OkWWzgybW2j2Ve8NW3z7v9AQqvXl1N0FAj60mEgDY1D4ltjxPOFBPXsRlrB5b/
wPCDTtpL2h5D8PhfKp4M1uBNVljWGtz4E4o8IjPLqFcS9hLPQjhdbqmV/6ymTs6i
M82/j4NGfSocWw==
-----END CERTIFICATE-----
Generated at Wed May 7 11:56:18 2025 by rpki-client