Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File:                     sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier:          4ZwTVA8engKMY57Y1jzYp7R12IBtCMd2YwnRxx0LKpI=
Subject key identifier:   F7:83:2D:F9:D0:C8:15:2B:B5:C4:0A:52:3C:66:1A:A8:26:F7:AF:89
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       0196A7669A46939E97D11E238CCB8666977A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number:          04D8
Signing time:             Tue 06 May 2025 21:00:41 +0000
Manifest this update:     Tue 06 May 2025 21:00:41 +0000
Manifest next update:     Wed 07 May 2025 21:00:41 +0000
Files and hashes:         1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
                          2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: PpmTGFHcCw8HSZ/f0F5OsIiXNdczsyoKhdmcesAlNcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:66:9a:46:93:9e:97:d1:1e:23:8c:cb:86:66:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: May  6 21:00:41 2025 GMT
            Not After : May  7 21:00:41 2025 GMT
        Subject: CN=f7832df9d0c8152bb5c40a523c661aa826f7af89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:27:e1:65:38:65:f3:45:1e:78:bd:51:3c:
                    4f:03:80:a2:53:00:ea:7f:12:6b:7f:4e:50:44:d0:
                    a5:84:11:76:e6:8d:91:d9:f6:ef:77:b3:a7:7f:ca:
                    88:18:c8:8b:31:ac:da:fa:fa:ed:a7:e1:31:98:b7:
                    2e:e9:d0:14:9c:5f:07:47:a1:fb:d5:08:b5:41:60:
                    93:86:84:ae:bc:0b:18:1d:04:f0:c3:4f:a3:33:85:
                    4a:e7:82:45:c3:df:4b:22:f5:a3:ae:73:25:20:db:
                    97:9e:59:d2:7e:19:63:aa:fb:b0:25:21:56:31:d3:
                    91:4b:25:92:28:bd:44:fc:66:44:14:a0:9c:de:25:
                    15:0b:b5:93:d9:f7:50:a8:af:d1:b3:9e:7e:df:16:
                    9a:61:ec:a2:f1:64:b8:96:ae:0d:ce:6b:ca:05:4b:
                    53:63:25:a2:8e:02:0a:94:52:2f:07:ea:65:31:e7:
                    7c:60:40:d0:13:df:64:28:d8:ba:eb:ed:84:90:c2:
                    c1:e3:83:a9:6f:b7:61:16:e9:ec:89:ca:53:93:b6:
                    47:ed:87:de:64:d6:ad:3d:01:6e:5e:2c:89:29:96:
                    b2:e5:b3:ed:b4:1a:2f:e7:58:e5:70:1c:43:60:98:
                    b2:bd:c1:3b:8a:0a:e5:3e:92:83:bf:ae:f5:fd:45:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:83:2D:F9:D0:C8:15:2B:B5:C4:0A:52:3C:66:1A:A8:26:F7:AF:89
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a9:09:b4:ba:27:d4:46:0c:0d:60:f2:ea:e4:d1:72:ed:9e:
         34:45:41:b8:c7:d7:7e:de:5a:5d:b1:c2:76:1e:49:1d:33:81:
         c0:d1:31:68:61:21:52:af:52:91:a9:67:b0:8c:a3:d7:42:fc:
         5f:4d:10:18:34:b2:ca:33:5b:ad:fb:6e:9f:6f:58:d5:a8:b9:
         bc:7e:4a:20:13:b0:05:8e:33:7d:e3:b2:a7:a8:50:86:79:7d:
         4b:28:eb:b3:ce:8d:09:e1:09:e3:c7:4a:b3:a3:cf:ff:45:a2:
         26:9f:b4:1d:3e:f5:94:e5:6c:3f:7e:38:97:ef:a6:bf:38:aa:
         e5:10:bf:53:67:60:e8:dd:3b:0b:86:a5:d1:f0:0a:27:70:fe:
         b9:0a:d0:44:2d:93:06:ee:fc:78:de:e9:82:41:88:bb:12:56:
         31:da:c5:93:b7:cc:22:45:f6:3a:11:38:7b:c8:f9:0f:36:21:
         8f:5f:2b:eb:dd:1c:8a:f6:b0:80:ed:55:be:32:5a:c4:c4:a4:
         d1:2f:41:1b:18:25:0c:68:83:9d:af:55:4a:43:a7:9e:14:f5:
         63:de:23:35:02:19:ca:59:14:9c:2f:b2:07:17:df:b3:43:1f:
         fa:bc:e8:ab:26:fb:9f:44:f4:6f:bd:12:75:f9:0f:a4:4b:48:
         ff:8c:ab:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZanZppGk56X0R4jjMuGZpd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNjIxNTZmNTljZmM3OTM5NmU2NGYzMzQyZGU2NGRlM2Y4
OGVlMTgwHhcNMjUwNTA2MjEwMDQxWhcNMjUwNTA3MjEwMDQxWjAzMTEwLwYDVQQD
EyhmNzgzMmRmOWQwYzgxNTJiYjVjNDBhNTIzYzY2MWFhODI2ZjdhZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMkn4WU4ZfNFHni9UTxPA4CiUwDq
fxJrf05QRNClhBF25o2R2fbvd7Onf8qIGMiLMaza+vrtp+ExmLcu6dAUnF8HR6H7
1Qi1QWCThoSuvAsYHQTww0+jM4VK54JFw99LIvWjrnMlINuXnlnSfhljqvuwJSFW
MdORSyWSKL1E/GZEFKCc3iUVC7WT2fdQqK/Rs55+3xaaYeyi8WS4lq4NzmvKBUtT
YyWijgIKlFIvB+plMed8YEDQE99kKNi66+2EkMLB44Opb7dhFunsicpTk7ZH7Yfe
ZNatPQFuXiyJKZay5bPttBov51jlcBxDYJiyvcE7igrlPpKDv671/UV0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeDLfnQyBUrtcQKUjxmGqgm96+JMB8GA1UdIwQY
MBaAFLFiFW9Zz8eTluZPM0LeZN4/iO4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85NjU3YTUtOGNlMi00MDVlLWFjOGMt
ZGQyYWNjYWNmY2NjLzEvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85NjU3YTUtOGNlMi00MDVlLWFjOGMtZGQyYWNjYWNmY2Nj
LzEvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKkJtLon
1EYMDWDy6uTRcu2eNEVBuMfXft5aXbHCdh5JHTOBwNExaGEhUq9SkalnsIyj10L8
X00QGDSyyjNbrftun29Y1ai5vH5KIBOwBY4zfeOyp6hQhnl9Syjrs86NCeEJ48dK
s6PP/0WiJp+0HT71lOVsP344l++mvziq5RC/U2dg6N07C4al0fAKJ3D+uQrQRC2T
Bu78eN7pgkGIuxJWMdrFk7fMIkX2OhE4e8j5DzYhj18r690civawgO1VvjJaxMSk
0S9BGxglDGiDna9VSkOnnhT1Y94jNQIZylkUnC+yBxffs0Mf+rzoqyb7n0T0b70S
dfkPpEtI/4yrYA==
-----END CERTIFICATE-----
Generated at Tue May 6 23:56:50 2025 by rpki-client