Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File:                     5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier:          Za8Acc09t3l17lOGfleBXe1Ag/ZLWGwRRJGYaUjtUeU=
Subject key identifier:   16:8A:BF:7A:B1:1D:2F:AE:43:29:24:EC:89:BE:C4:50:4B:4C:17:A5
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer:       /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial:       0197B6A1E14613D42E40E8080B7F1311EE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number:          0AF8
Signing time:             Sat 28 Jun 2025 13:02:31 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:31 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:31 +0000
Files and hashes:         1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: 9BlF3U8UqiYIlnITWvbwXh+VeHmcIVVIsaf3YTaWJNE=)
                          2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:e1:46:13:d4:2e:40:e8:08:0b:7f:13:11:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
        Validity
            Not Before: Jun 28 13:02:31 2025 GMT
            Not After : Jun 29 13:02:31 2025 GMT
        Subject: CN=168abf7ab11d2fae432924ec89bec4504b4c17a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:33:65:87:2a:14:c2:cc:40:d1:40:3a:15:
                    0e:69:3b:0e:13:fa:df:15:45:cf:2e:0e:89:9c:40:
                    ba:1c:c4:e4:ba:35:10:f9:f9:6f:40:ee:bd:ba:21:
                    fa:2b:3b:e2:91:95:1d:88:b1:37:28:d8:8f:8f:0d:
                    64:6f:37:ee:a2:59:e7:86:43:06:c5:50:7d:19:29:
                    5a:34:2e:d5:5a:10:7e:1a:9a:f9:88:77:20:c9:e7:
                    09:a5:9a:e2:4d:a5:d3:4c:3b:51:6b:81:cd:01:1c:
                    22:ba:37:df:68:4d:27:99:3d:81:48:92:cd:32:51:
                    c9:8f:c2:a3:04:69:01:e2:d5:95:52:92:ff:eb:8c:
                    bd:54:b0:ee:43:a1:00:84:bd:9f:5a:4d:5d:11:fa:
                    ce:82:27:d2:8f:ff:a2:40:95:76:fd:4f:56:86:d3:
                    98:11:e4:d6:c7:47:42:ef:26:a9:b4:b2:cc:0b:53:
                    48:c0:b7:c8:2c:f4:6f:1f:91:3b:b3:60:a4:b6:45:
                    58:fe:6f:90:74:15:03:dd:da:d8:eb:18:5c:a2:6a:
                    72:8f:2d:b9:33:af:51:e8:8d:f3:56:82:b1:ec:0a:
                    f6:c0:41:ab:d6:d6:d4:8a:71:f7:b5:a4:44:88:35:
                    7b:34:47:cc:0c:0c:20:d7:88:db:31:92:9b:1b:28:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8A:BF:7A:B1:1D:2F:AE:43:29:24:EC:89:BE:C4:50:4B:4C:17:A5
            X509v3 Authority Key Identifier:
                keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:99:69:97:10:17:1e:6f:9c:5a:bd:ff:0c:8e:18:13:27:10:
         cc:5a:f8:d0:c9:61:f3:b5:58:43:04:7b:b4:a3:0e:b5:da:ac:
         a4:6b:a4:61:01:d9:39:f7:6f:04:98:16:82:bb:ab:bd:ae:9c:
         2c:1d:33:cf:26:ac:6f:eb:88:50:b6:d5:fa:e7:0b:13:10:94:
         fc:ea:be:2d:fc:df:ec:06:62:50:61:32:e7:2a:c0:4c:93:1a:
         27:e3:35:cb:90:67:56:9e:5a:ce:a0:42:be:13:d6:b4:37:8d:
         6f:f9:fb:ac:a8:6a:85:64:a2:e4:7c:2e:ce:41:fe:16:1f:c8:
         a3:41:23:c3:5d:bb:01:de:a1:a9:33:87:b6:aa:c5:84:78:94:
         eb:77:1a:32:8a:30:25:6f:7a:54:8e:34:fd:51:b4:e5:d0:3f:
         d9:76:ef:5e:89:b6:01:0b:3f:aa:24:3b:29:ec:51:4a:d0:68:
         7f:e6:73:e0:24:b3:d5:97:3f:c5:4e:b9:2d:ec:9d:90:8b:07:
         b1:94:8f:60:77:ff:b3:c5:4b:d3:e1:4e:93:a7:c4:b8:c1:02:
         b3:1c:1e:97:2a:44:67:db:7f:8d:ce:68:9c:a4:15:04:ee:5e:
         28:05:4c:7d:b5:d5:cf:c0:5f:43:43:84:b1:a3:3f:04:7e:95:
         0f:e6:5b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeFGE9QuQOgIC38TEe4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz
ZjY3ODUwHhcNMjUwNjI4MTMwMjMxWhcNMjUwNjI5MTMwMjMxWjAzMTEwLwYDVQQD
EygxNjhhYmY3YWIxMWQyZmFlNDMyOTI0ZWM4OWJlYzQ1MDRiNGMxN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRYzZYcqFMLMQNFAOhUOaTsOE/rf
FUXPLg6JnEC6HMTkujUQ+flvQO69uiH6KzvikZUdiLE3KNiPjw1kbzfuolnnhkMG
xVB9GSlaNC7VWhB+Gpr5iHcgyecJpZriTaXTTDtRa4HNARwiujffaE0nmT2BSJLN
MlHJj8KjBGkB4tWVUpL/64y9VLDuQ6EAhL2fWk1dEfrOgifSj/+iQJV2/U9WhtOY
EeTWx0dC7yaptLLMC1NIwLfILPRvH5E7s2CktkVY/m+QdBUD3drY6xhcompyjy25
M69R6I3zVoKx7Ar2wEGr1tbUinH3taREiDV7NEfMDAwg14jbMZKbGyhRnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaKv3qxHS+uQykk7Im+xFBLTBelMB8GA1UdIwQY
MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt
OWI2Y2ZkOGEyYWEzLzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz
LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJlplxAX
Hm+cWr3/DI4YEycQzFr40Mlh87VYQwR7tKMOtdqspGukYQHZOfdvBJgWgrurva6c
LB0zzyasb+uIULbV+ucLExCU/Oq+Lfzf7AZiUGEy5yrATJMaJ+M1y5BnVp5azqBC
vhPWtDeNb/n7rKhqhWSi5HwuzkH+Fh/Io0Ejw127Ad6hqTOHtqrFhHiU63caMoow
JW96VI40/VG05dA/2XbvXom2AQs/qiQ7KexRStBof+Zz4CSz1Zc/xU65LeydkIsH
sZSPYHf/s8VL0+FOk6fEuMECsxwelypEZ9t/jc5onKQVBO5eKAVMfbXVz8BfQ0OE
saM/BH6VD+ZbZA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:50 2025 by rpki-client