Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File:                     s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier:          Z+UYP1Mnxyjvg/m1LQ1HMOD/DLkYFCSnevECGoTCgBA=
Subject key identifier:   4D:28:50:7F:3D:0E:E3:FF:5B:4A:7E:C0:A9:F6:2B:83:3A:ED:8B:8D
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer:       /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial:       0196B7B565C0270B16A825BA26A19C80F867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number:          0823
Signing time:             Sat 10 May 2025 01:00:40 +0000
Manifest this update:     Sat 10 May 2025 01:00:40 +0000
Manifest next update:     Sun 11 May 2025 01:00:40 +0000
Files and hashes:         1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: pbETjZRa7k8DEKfAlo3TAp42i7mrucVoma+fchJg7tk=)
                          2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:65:c0:27:0b:16:a8:25:ba:26:a1:9c:80:f8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
        Validity
            Not Before: May 10 01:00:40 2025 GMT
            Not After : May 11 01:00:40 2025 GMT
        Subject: CN=4d28507f3d0ee3ff5b4a7ec0a9f62b833aed8b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:6e:ec:d1:ed:f2:63:cb:65:76:a9:07:0d:
                    88:b6:59:4b:4d:0f:d4:4c:60:91:04:59:e6:65:50:
                    53:2f:56:e5:48:8c:89:36:95:3b:69:3a:81:85:b5:
                    85:13:ff:c6:ab:31:6c:1b:12:64:06:b9:9b:2c:48:
                    96:ff:88:36:84:9c:9d:cf:5b:64:56:34:03:bc:4a:
                    91:98:70:00:56:25:85:9a:52:cd:bb:a9:d0:d6:ff:
                    bb:a5:f9:13:14:15:21:3c:ec:2a:38:ce:fe:a4:9d:
                    77:fa:a2:36:5e:04:48:ce:f1:b8:cf:8a:0f:63:43:
                    9d:22:ce:a9:8a:ef:33:20:8d:b8:7f:bc:8b:fe:e8:
                    65:d4:0f:db:4b:27:0c:b5:0d:34:81:23:16:8f:7e:
                    08:e8:c6:dd:0b:18:99:18:03:4f:45:36:3a:f6:3b:
                    18:c0:5a:45:c4:ec:27:23:ab:8c:0c:ab:b8:48:20:
                    f2:81:72:1d:8d:96:c3:27:fe:e5:c2:46:0a:d1:59:
                    93:44:39:75:c5:b5:e6:e1:06:01:e0:6c:2e:26:2b:
                    ce:66:6f:9c:a5:ae:2e:21:f2:f2:e6:25:3a:33:02:
                    06:32:ba:76:41:38:9c:a4:09:7b:9d:3d:c2:aa:58:
                    a8:b3:b9:c1:0c:62:d8:35:4c:3a:c5:0c:bd:16:65:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:28:50:7F:3D:0E:E3:FF:5B:4A:7E:C0:A9:F6:2B:83:3A:ED:8B:8D
            X509v3 Authority Key Identifier:
                keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:52:45:af:6e:ad:7c:58:8b:bc:c1:75:7c:be:58:a6:2d:
         c5:59:f6:b2:68:f3:d4:b3:2e:ac:6f:75:24:f5:b2:1f:80:bc:
         fd:04:96:95:fe:9f:68:61:68:dc:72:46:59:e2:73:44:22:08:
         a1:47:c4:d5:ff:0f:ee:89:e3:c6:55:01:ef:05:ab:9b:1c:46:
         c8:b2:56:66:0c:a2:1c:d9:e0:fe:dc:af:6b:c4:26:00:ad:bc:
         4b:6b:66:c5:2f:68:56:8e:81:0d:d9:7e:c5:5d:4c:12:82:45:
         16:33:0c:a8:ac:ab:99:fd:97:71:ef:f8:ef:0c:fd:f0:5d:98:
         d6:58:00:a6:bb:6e:fb:03:5e:57:ad:8d:89:20:d6:5b:82:1a:
         89:23:fc:4a:e0:ea:36:2f:17:b6:41:ec:ef:b6:f5:27:7b:85:
         18:af:2f:8b:25:5f:d6:47:e4:10:40:6b:5e:de:0e:1a:86:dc:
         93:a3:83:d6:4d:c0:0e:a3:96:50:0a:61:28:27:5a:da:7c:cb:
         5a:18:3d:74:ee:60:58:39:01:a8:8d:dd:8a:f8:53:2c:2d:ff:
         47:0c:98:4a:d0:92:8d:b0:5b:ae:44:41:72:89:0e:c0:10:7d:
         f7:ca:fc:c1:b8:07:b7:fc:e5:bc:77:27:ec:04:77:34:12:49:
         2c:81:75:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tWXAJwsWqCW6JqGcgPhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzkzNWQ4NDMxNmEyY2Y1NmE2NTk1N2I2ZDc5YjdhZjgx
MWE3MDcwHhcNMjUwNTEwMDEwMDQwWhcNMjUwNTExMDEwMDQwWjAzMTEwLwYDVQQD
Eyg0ZDI4NTA3ZjNkMGVlM2ZmNWI0YTdlYzBhOWY2MmI4MzNhZWQ4YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4lu7NHt8mPLZXapBw2ItllLTQ/U
TGCRBFnmZVBTL1blSIyJNpU7aTqBhbWFE//GqzFsGxJkBrmbLEiW/4g2hJydz1tk
VjQDvEqRmHAAViWFmlLNu6nQ1v+7pfkTFBUhPOwqOM7+pJ13+qI2XgRIzvG4z4oP
Y0OdIs6piu8zII24f7yL/uhl1A/bSycMtQ00gSMWj34I6MbdCxiZGANPRTY69jsY
wFpFxOwnI6uMDKu4SCDygXIdjZbDJ/7lwkYK0VmTRDl1xbXm4QYB4GwuJivOZm+c
pa4uIfLy5iU6MwIGMrp2QTicpAl7nT3Cqlios7nBDGLYNUw6xQy9FmWMswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0oUH89DuP/W0p+wKn2K4M67YuNMB8GA1UdIwQY
MBaAFLPJNdhDFqLPVqZZV7bXm3r4EacHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMt
MWNjMWE1MzhjM2NlLzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMtMWNjMWE1MzhjM2Nl
LzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApE5SRa9u
rXxYi7zBdXy+WKYtxVn2smjz1LMurG91JPWyH4C8/QSWlf6faGFo3HJGWeJzRCII
oUfE1f8P7onjxlUB7wWrmxxGyLJWZgyiHNng/tyva8QmAK28S2tmxS9oVo6BDdl+
xV1MEoJFFjMMqKyrmf2Xce/47wz98F2Y1lgAprtu+wNeV62NiSDWW4IaiSP8SuDq
Ni8XtkHs77b1J3uFGK8viyVf1kfkEEBrXt4OGobck6OD1k3ADqOWUAphKCda2nzL
Whg9dO5gWDkBqI3divhTLC3/RwyYStCSjbBbrkRBcokOwBB998r8wbgHt/zlvHcn
7AR3NBJJLIF10A==
-----END CERTIFICATE-----
Generated at Sat May 10 07:35:34 2025 by rpki-client