Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File:                     8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier:          MAqnlAPire7sS0tu6vqwmWQfgbXN1nwQJmBlQg/ecWE=
Subject key identifier:   8B:5F:45:E4:D3:FC:A0:C5:2B:C2:1A:C2:E4:E2:A9:6B:00:9D:DC:B0
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer:       /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial:       0196BF6F872E8D4D33BBF1292340007AE77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 13:01:19 +0000
Manifest this update:     Sun 11 May 2025 13:01:19 +0000
Manifest next update:     Mon 12 May 2025 13:01:19 +0000
Files and hashes:         1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: xNryD7AkPM9iHpWGad2D7Mc14VuhyJyMFzUS+lojrKU=)
                          2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:87:2e:8d:4d:33:bb:f1:29:23:40:00:7a:e7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
        Validity
            Not Before: May 11 13:01:19 2025 GMT
            Not After : May 12 13:01:19 2025 GMT
        Subject: CN=8b5f45e4d3fca0c52bc21ac2e4e2a96b009ddcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:74:ae:09:1e:31:9d:41:ec:af:f1:6e:42:
                    81:5f:fd:a2:d2:78:6f:23:16:94:18:fb:a1:4c:48:
                    f3:d6:18:03:ce:59:fa:ad:fa:cf:82:2d:b0:9e:f3:
                    7e:57:a7:e9:e2:82:da:4e:ee:a7:13:8c:4e:81:7b:
                    66:1a:a3:7a:c9:0a:74:24:2a:15:d3:e2:d3:95:ec:
                    23:c3:5e:9a:a5:6b:bd:b0:b2:d5:0f:c4:a0:9a:67:
                    61:0a:56:b0:b8:df:0e:0e:86:06:1d:d7:1a:8e:54:
                    57:99:fd:a1:57:15:4d:02:2f:f9:e5:3a:0c:ce:1b:
                    fd:9f:e3:c8:7e:5d:ba:fd:94:ee:79:2c:bf:d1:42:
                    6f:63:41:e2:88:54:cc:b4:1d:3f:fa:6e:70:af:35:
                    54:98:49:f8:17:88:7d:e7:bc:97:0b:ae:14:d1:ef:
                    1e:3a:cc:ec:67:b9:17:73:1c:af:03:5d:d5:38:db:
                    a1:6c:3d:33:89:d8:c1:f6:e0:8c:79:97:ca:a8:c7:
                    91:92:79:76:d2:c9:ee:0f:d2:7b:2b:84:50:37:69:
                    8b:9c:0a:f6:8d:a9:3c:6f:d2:96:c6:d1:cf:25:c6:
                    17:21:9e:07:ef:4c:17:6e:2d:3c:43:37:05:11:91:
                    46:d3:b1:7a:42:f5:df:ba:cf:c5:b9:90:64:4e:b8:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5F:45:E4:D3:FC:A0:C5:2B:C2:1A:C2:E4:E2:A9:6B:00:9D:DC:B0
            X509v3 Authority Key Identifier:
                keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:2f:eb:ea:b1:e7:bf:a2:a1:39:0c:29:89:92:f4:fb:cc:43:
         e1:a2:c9:26:66:7a:41:26:1c:84:e1:1e:5f:c5:68:e8:db:2a:
         4e:95:dd:51:bb:0b:c9:e5:1e:fd:3a:52:e5:80:48:1c:da:91:
         49:12:5d:7c:6d:80:25:c4:ae:ac:5e:34:dc:5f:d5:67:f0:40:
         95:50:a0:c3:88:96:1a:6b:6d:bd:ef:51:8d:5b:d1:f3:13:2d:
         8d:23:51:01:62:eb:1c:4d:b7:ee:e0:4e:a5:ed:bd:04:39:78:
         f3:ad:19:8c:52:60:71:a5:f8:30:92:2e:75:6d:1e:31:81:e0:
         2b:6c:7a:29:34:c0:ef:ef:96:74:55:a2:1b:7b:f5:64:3d:4d:
         a2:db:4c:e7:cc:22:b0:06:92:0e:6a:bd:a5:ab:96:20:74:de:
         ce:8e:92:a4:55:6a:90:e9:7c:fb:da:1e:39:d8:64:e8:18:9d:
         c8:e7:fa:e7:35:a6:ca:f4:03:d4:a8:e1:e8:1f:99:66:9a:c0:
         54:c6:8b:79:01:eb:6f:39:75:e4:4c:ab:e6:f6:b1:c9:25:c4:
         b0:8e:f0:79:1e:90:26:f6:25:a5:d9:7f:58:b0:09:0b:4e:7a:
         4e:a5:9c:ff:45:3f:60:fe:ae:90:46:be:2a:5b:50:a8:59:c9:
         e8:2f:43:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b4cujU0zu/EpI0AAeud6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi
ZDZmNzYwHhcNMjUwNTExMTMwMTE5WhcNMjUwNTEyMTMwMTE5WjAzMTEwLwYDVQQD
Eyg4YjVmNDVlNGQzZmNhMGM1MmJjMjFhYzJlNGUyYTk2YjAwOWRkY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ50rgkeMZ1B7K/xbkKBX/2i0nhv
IxaUGPuhTEjz1hgDzln6rfrPgi2wnvN+V6fp4oLaTu6nE4xOgXtmGqN6yQp0JCoV
0+LTlewjw16apWu9sLLVD8SgmmdhClawuN8ODoYGHdcajlRXmf2hVxVNAi/55ToM
zhv9n+PIfl26/ZTueSy/0UJvY0HiiFTMtB0/+m5wrzVUmEn4F4h957yXC64U0e8e
OszsZ7kXcxyvA13VONuhbD0zidjB9uCMeZfKqMeRknl20snuD9J7K4RQN2mLnAr2
jak8b9KWxtHPJcYXIZ4H70wXbi08QzcFEZFG07F6QvXfus/FuZBkTrhudQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItfReTT/KDFK8IawuTiqWsAndywMB8GA1UdIwQY
MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt
YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli
LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC/r6rHn
v6KhOQwpiZL0+8xD4aLJJmZ6QSYchOEeX8Vo6NsqTpXdUbsLyeUe/TpS5YBIHNqR
SRJdfG2AJcSurF403F/VZ/BAlVCgw4iWGmttve9RjVvR8xMtjSNRAWLrHE237uBO
pe29BDl4860ZjFJgcaX4MJIudW0eMYHgK2x6KTTA7++WdFWiG3v1ZD1NottM58wi
sAaSDmq9pauWIHTezo6SpFVqkOl8+9oeOdhk6BidyOf65zWmyvQD1Kjh6B+ZZprA
VMaLeQHrbzl15Eyr5vaxySXEsI7weR6QJvYlpdl/WLAJC056TqWc/0U/YP6ukEa+
KltQqFnJ6C9DkQ==
-----END CERTIFICATE-----
Generated at Sun May 11 23:25:05 2025 by rpki-client