Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          FptXiH5Z9rZ+jsYe67Yu/aier4w7QUe0GhACXbJsux8=
Subject key identifier:   FE:C6:1F:98:3F:F8:A6:EF:0D:25:1E:8D:99:81:87:44:0C:79:A3:8F
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       0196A209205D18A2A4956BA1DA10FA1FF908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          0E59
Signing time:             Mon 05 May 2025 20:00:29 +0000
Manifest this update:     Mon 05 May 2025 20:00:29 +0000
Manifest next update:     Tue 06 May 2025 20:00:29 +0000
Files and hashes:         1: 6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa (hash: n2UlT2v5ne1WHXzI3nHhngksH2y/h3ykBECiQHVHKNo=)
                          2: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: D2s6VXjig7PM4gp97DByt/odvSjFBPda+0PfL8VJiNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:09:20:5d:18:a2:a4:95:6b:a1:da:10:fa:1f:f9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: May  5 20:00:29 2025 GMT
            Not After : May  6 20:00:29 2025 GMT
        Subject: CN=fec61f983ff8a6ef0d251e8d998187440c79a38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:86:fe:e3:69:d7:00:8a:a6:00:6a:bd:10:
                    42:1b:86:ba:98:49:b9:2b:db:f4:a4:9f:2d:a0:aa:
                    bb:ff:b4:92:2e:10:85:ac:a5:7d:75:be:58:8c:01:
                    a2:dc:60:79:41:01:a2:3c:82:73:7b:21:74:8d:fc:
                    f2:f1:ed:94:84:d4:46:5e:d0:5b:da:ba:d3:ab:72:
                    e6:48:19:97:10:91:ba:77:70:62:a4:e8:a4:93:45:
                    a0:9a:f2:01:18:41:93:70:33:b1:61:72:1c:a4:2a:
                    59:70:ca:91:13:1a:25:c1:c1:96:29:b9:22:85:8c:
                    4b:ca:29:b1:93:55:be:79:a8:97:da:c0:4a:92:e9:
                    1c:8a:a1:49:b3:cb:6c:1b:57:68:6a:bc:2e:e5:b0:
                    74:79:52:c2:c8:78:84:7a:14:ee:78:f2:74:9d:c2:
                    53:b5:70:31:47:8a:fe:37:e9:a7:27:f7:a5:32:79:
                    23:42:03:2c:ec:0a:29:6d:28:5c:71:2a:9e:57:4b:
                    3a:e2:a2:6f:07:c6:91:20:3e:e3:67:ee:47:cc:ff:
                    39:38:74:7d:e0:0f:67:8f:55:16:ad:97:72:2b:be:
                    4c:bd:7f:a9:a4:7b:fc:89:00:70:42:68:15:ad:50:
                    6f:3f:69:ff:97:f6:c6:48:44:38:56:05:a5:46:c4:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C6:1F:98:3F:F8:A6:EF:0D:25:1E:8D:99:81:87:44:0C:79:A3:8F
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:27:48:cb:29:42:a4:b5:3a:81:14:f6:95:ea:b9:71:b6:7a:
         4a:98:46:29:fc:ca:b6:32:7c:dc:e9:4e:44:9b:9d:31:cf:3e:
         c2:26:d8:8c:92:29:c5:8d:bc:59:d2:3d:c6:60:04:66:a0:14:
         30:5a:b0:c9:d9:ee:d5:5a:32:ff:da:9b:cc:6d:6b:06:e0:0c:
         9c:99:0f:eb:fa:82:b6:13:d3:36:b7:fc:16:62:a8:d7:38:10:
         22:cc:86:50:38:65:77:b2:92:6a:fd:f0:c2:06:c2:50:bb:fb:
         f4:08:14:24:f8:5d:3a:71:85:5f:67:af:ef:9b:7d:68:a7:f7:
         5c:f0:32:32:b1:eb:d8:a3:13:90:e9:2f:71:7c:5f:1d:42:8a:
         dd:00:7d:78:c2:51:92:14:dd:36:af:d1:79:bb:e9:d3:ca:2f:
         73:22:ea:13:21:ad:b3:eb:85:46:0e:5c:47:93:61:ad:27:68:
         1f:2d:b6:60:8e:79:ef:74:c3:40:7a:a3:f5:fb:e4:2d:07:38:
         bf:39:bd:f1:43:fe:1b:b3:ca:f2:4c:b8:37:59:45:41:96:79:
         53:0b:78:3e:c0:62:38:31:7f:6d:56:34:35:12:28:cf:54:c1:
         de:01:4c:8e:14:bd:bb:0e:82:74:3d:a9:bb:e8:ef:4c:5f:56:
         ce:f7:27:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiCSBdGKKklWuh2hD6H/kIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0
ZmJkOTQwHhcNMjUwNTA1MjAwMDI5WhcNMjUwNTA2MjAwMDI5WjAzMTEwLwYDVQQD
EyhmZWM2MWY5ODNmZjhhNmVmMGQyNTFlOGQ5OTgxODc0NDBjNzlhMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sSG/uNp1wCKpgBqvRBCG4a6mEm5
K9v0pJ8toKq7/7SSLhCFrKV9db5YjAGi3GB5QQGiPIJzeyF0jfzy8e2UhNRGXtBb
2rrTq3LmSBmXEJG6d3BipOikk0WgmvIBGEGTcDOxYXIcpCpZcMqRExolwcGWKbki
hYxLyimxk1W+eaiX2sBKkukciqFJs8tsG1doarwu5bB0eVLCyHiEehTuePJ0ncJT
tXAxR4r+N+mnJ/elMnkjQgMs7AopbShccSqeV0s64qJvB8aRID7jZ+5HzP85OHR9
4A9nj1UWrZdyK75MvX+ppHv8iQBwQmgVrVBvP2n/l/bGSEQ4VgWlRsQ4nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7GH5g/+KbvDSUejZmBh0QMeaOPMB8GA1UdIwQY
MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt
NTY5NzI0OWY1MTI0LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0
LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCdIyylC
pLU6gRT2leq5cbZ6SphGKfzKtjJ83OlORJudMc8+wibYjJIpxY28WdI9xmAEZqAU
MFqwydnu1Voy/9qbzG1rBuAMnJkP6/qCthPTNrf8FmKo1zgQIsyGUDhld7KSav3w
wgbCULv79AgUJPhdOnGFX2ev75t9aKf3XPAyMrHr2KMTkOkvcXxfHUKK3QB9eMJR
khTdNq/Rebvp08ovcyLqEyGts+uFRg5cR5NhrSdoHy22YI5573TDQHqj9fvkLQc4
vzm98UP+G7PK8ky4N1lFQZZ5Uwt4PsBiODF/bVY0NRIoz1TB3gFMjhS9uw6CdD2p
u+jvTF9WzvcnEw==
-----END CERTIFICATE-----
Generated at Tue May 6 00:39:07 2025 by rpki-client