Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
File:                     ypzNgwt-AzCL9c8l5np_wr3glXw.mft (raw, json)
Hash identifier:          xaf9c5oR4pskmol4CjLYDcu0SmNmDVKQ+gOYnXqf3SU=
Subject key identifier:   8B:06:C3:89:42:A6:5F:2E:ED:CB:29:54:5E:A1:09:94:75:9A:95:A3
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Certificate issuer:       /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial:       0196B3D9678B40B62D6208C0B5F089292194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
Manifest number:          0AC7
Signing time:             Fri 09 May 2025 07:01:31 +0000
Manifest this update:     Fri 09 May 2025 07:01:31 +0000
Manifest next update:     Sat 10 May 2025 07:01:31 +0000
Files and hashes:         1: 1X-psqrhXoWJNm9AGHsWuX9CEYk.roa (hash: bW01QgSO3kxqUT/liNPe0TPUpwe3PqHFLx6Llohhsy8=)
                          2: 8nba-exF3ZHVESE2CvVjIKuU3UQ.roa (hash: jxvFl3q0Zgzzo4QwCA+FiBdsIMPCA+I2+5CHXaI0+OI=)
                          3: ENs0VS1_xeTvYzTZmqEmbB_PYVg.roa (hash: dl2TxChiXhquvWHjZi/+Os7yvSKlYDzVu159Q7je5+E=)
                          4: RbP9WzN9W7AgthBGxFtKwKC3VEg.roa (hash: Dy3SR6pxsdXGOnv/F45dOMNbVP/Be5it2JmMPs3hnKk=)
                          5: e5Sy1VAry68r-4ha4VS5j2qDIh4.roa (hash: iAgJw0j0bHx4il0UO6E61c4MJfLKF0a3JiNbi25PF/w=)
                          6: iSdpP7ZcrXle-CGEYFrwsY1kYrI.roa (hash: +6PdXaQuowtykR4waR/410l8flDm2QsBF8w2MV3GVtU=)
                          7: jWt_FdPMKhJ6LBUGm4GuQwlMer0.roa (hash: JSe4tFMgywTUkhZKCdS6lj1tYUGBxWS17wo5Kf6yHnk=)
                          8: ypzNgwt-AzCL9c8l5np_wr3glXw.crl (hash: zoS0Wr/h0nWA/62teJFrmsnHxtn13+xWBkjcNM4PJ3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d9:67:8b:40:b6:2d:62:08:c0:b5:f0:89:29:21:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
        Validity
            Not Before: May  9 07:01:31 2025 GMT
            Not After : May 10 07:01:31 2025 GMT
        Subject: CN=8b06c38942a65f2eedcb29545ea10994759a95a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:6d:3a:8d:18:05:12:2e:14:55:6a:d8:68:
                    9d:2f:ef:cb:5b:eb:0c:ae:df:3e:33:41:39:4f:73:
                    20:91:ea:e0:9d:61:f7:f1:f2:7b:ff:a5:b3:74:20:
                    0a:0d:c8:f8:03:91:8e:b6:8a:4e:66:68:61:74:0a:
                    fb:44:85:92:c1:bf:ed:30:eb:36:d8:04:3d:ec:6c:
                    b9:a3:47:7c:3a:a5:d1:05:d0:cb:32:22:68:01:f7:
                    9b:b3:e9:b8:ad:b6:11:fe:15:e1:cf:04:fa:9c:6b:
                    0b:d2:6d:59:52:6c:8d:fa:11:9e:b7:1b:4b:be:e7:
                    28:9d:45:7d:7f:4a:31:44:9b:5a:a5:5a:ec:47:b0:
                    ea:82:ca:f7:75:8f:8a:f1:57:0c:2d:82:bb:31:2c:
                    67:ea:95:82:6b:33:55:0f:df:a1:2a:ae:8c:3c:da:
                    5e:d4:23:e8:93:0b:e0:97:6d:4a:a2:c9:d7:20:c5:
                    98:7e:d1:4f:36:3f:30:79:80:12:df:40:33:a5:0a:
                    3c:39:ad:19:f7:d5:85:65:ec:ee:30:d7:cb:ba:c5:
                    6d:10:95:97:c0:18:5d:0b:d0:a5:e4:da:7f:eb:a1:
                    e1:71:6e:7d:fb:fe:d7:1d:13:ca:19:d3:d7:c8:ac:
                    08:ee:de:8f:c0:7a:20:5c:96:7d:fa:76:4d:a6:73:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:06:C3:89:42:A6:5F:2E:ED:CB:29:54:5E:A1:09:94:75:9A:95:A3
            X509v3 Authority Key Identifier:
                keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:21:0b:49:e2:6c:ba:7c:4e:b0:4c:33:68:de:41:a9:5d:60:
         34:46:05:bd:67:5e:46:aa:82:ec:3c:c0:2b:6e:5d:29:9e:e6:
         0a:63:a3:9f:38:57:bb:6b:93:db:26:ca:bf:90:0b:19:89:7e:
         64:ef:df:69:26:7d:dd:4b:cc:28:c1:10:58:6f:ce:93:b6:51:
         5d:77:57:69:e8:e9:5f:cb:0a:82:50:f4:a6:23:7b:35:62:d7:
         67:cf:22:b0:7c:cb:8f:64:29:75:f1:70:75:54:c6:1b:ad:1f:
         8f:17:fc:c6:10:08:7c:7c:83:a5:d8:21:f3:df:07:9f:e9:66:
         3b:b0:a7:bf:48:03:f8:39:f6:25:53:9e:23:2a:a5:ec:b9:04:
         9c:02:b0:90:67:62:98:3c:d6:c2:b7:8a:66:d0:07:5e:c4:28:
         c9:9b:c5:f0:52:33:39:c7:6c:21:46:34:bf:66:69:43:5e:ac:
         a3:21:ea:1a:1d:06:6a:88:1b:64:66:36:d8:d0:73:92:82:09:
         2f:7b:dc:c1:c5:e1:ba:f5:e0:68:56:ca:90:76:02:01:c8:1e:
         4d:92:e3:f2:1b:9e:84:5a:0c:45:c1:91:43:11:3f:50:40:d8:
         7a:49:d6:94:96:8b:cf:4a:ee:09:ea:12:00:ff:0e:2f:7b:6f:
         63:9b:c8:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2WeLQLYtYgjAtfCJKSGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWNjZDgzMGI3ZTAzMzA4YmY1Y2YyNWU2N2E3ZmMyYmRl
MDk1N2MwHhcNMjUwNTA5MDcwMTMxWhcNMjUwNTEwMDcwMTMxWjAzMTEwLwYDVQQD
Eyg4YjA2YzM4OTQyYTY1ZjJlZWRjYjI5NTQ1ZWExMDk5NDc1OWE5NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bhtOo0YBRIuFFVq2GidL+/LW+sM
rt8+M0E5T3MgkergnWH38fJ7/6WzdCAKDcj4A5GOtopOZmhhdAr7RIWSwb/tMOs2
2AQ97Gy5o0d8OqXRBdDLMiJoAfebs+m4rbYR/hXhzwT6nGsL0m1ZUmyN+hGetxtL
vuconUV9f0oxRJtapVrsR7Dqgsr3dY+K8VcMLYK7MSxn6pWCazNVD9+hKq6MPNpe
1CPokwvgl21KosnXIMWYftFPNj8weYAS30AzpQo8Oa0Z99WFZezuMNfLusVtEJWX
wBhdC9Cl5Np/66HhcW59+/7XHRPKGdPXyKwI7t6PwHogXJZ9+nZNpnOLTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsGw4lCpl8u7cspVF6hCZR1mpWjMB8GA1UdIwQY
MBaAFMqczYMLfgMwi/XPJeZ6f8K94JV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQt
ZDFjZGUyNDY1Zjg5LzEveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQtZDFjZGUyNDY1Zjg5
LzEveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyELSeJs
unxOsEwzaN5BqV1gNEYFvWdeRqqC7DzAK25dKZ7mCmOjnzhXu2uT2ybKv5ALGYl+
ZO/faSZ93UvMKMEQWG/Ok7ZRXXdXaejpX8sKglD0piN7NWLXZ88isHzLj2QpdfFw
dVTGG60fjxf8xhAIfHyDpdgh898Hn+lmO7Cnv0gD+Dn2JVOeIyql7LkEnAKwkGdi
mDzWwreKZtAHXsQoyZvF8FIzOcdsIUY0v2ZpQ16soyHqGh0GaogbZGY22NBzkoIJ
L3vcwcXhuvXgaFbKkHYCAcgeTZLj8huehFoMRcGRQxE/UEDYeknWlJaLz0ruCeoS
AP8OL3tvY5vIhw==
-----END CERTIFICATE-----
Generated at Fri May 9 11:10:53 2025 by rpki-client