Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          q34Ra1hQKGXK6kVaymipGIOC+2ucE8ehvjEdnhZuvCM=
Subject key identifier:   7E:87:31:9A:E0:3C:C9:8A:F2:57:1D:72:2C:6E:61:81:6A:80:4F:B4
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       01969C073B6366D2B56B094BD750D225E447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          0C72
Signing time:             Sun 04 May 2025 16:00:41 +0000
Manifest this update:     Sun 04 May 2025 16:00:41 +0000
Manifest next update:     Mon 05 May 2025 16:00:41 +0000
Files and hashes:         1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
                          2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
                          3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
                          4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: n3YCpHcFvTPbp37tc2RuYV2Tcg4mf8C1ogSv20HcPhE=)
                          6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 13:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:07:3b:63:66:d2:b5:6b:09:4b:d7:50:d2:25:e4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: May  4 16:00:41 2025 GMT
            Not After : May  5 16:00:41 2025 GMT
        Subject: CN=7e87319ae03cc98af2571d722c6e61816a804fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:31:e9:37:bc:8d:26:12:57:e0:91:99:c3:
                    1a:d7:6d:8e:2d:6d:36:b1:15:93:13:74:97:94:c4:
                    74:45:f9:cc:51:e6:7a:c9:b5:30:40:5d:f9:b8:71:
                    21:cf:d2:ca:0c:04:e7:c2:0e:09:65:d6:1d:45:01:
                    15:83:a1:cb:55:6a:9d:1f:80:2b:db:ef:bd:1f:24:
                    4d:d3:df:fd:b9:9d:dd:84:80:ff:f1:77:8f:ed:19:
                    8a:4e:4d:20:11:f0:b8:32:af:70:91:a7:6b:3c:48:
                    e1:2b:b3:c5:1c:00:e4:8b:53:e9:e2:a5:53:6e:cf:
                    3f:e9:7d:3b:02:79:6a:24:95:ce:1b:de:45:ff:6f:
                    3d:f4:2a:85:fa:02:14:09:4e:09:5a:9a:41:2e:1e:
                    8e:72:53:91:94:ae:4f:43:92:72:4b:d0:b0:22:da:
                    d4:ad:ee:7f:91:a4:86:df:ef:14:66:fe:b5:8c:72:
                    d3:00:83:63:68:fa:1e:ed:74:1e:fc:47:9a:1c:f2:
                    66:2c:0e:44:6e:4d:5b:ed:77:9c:48:9e:b3:d2:74:
                    3d:90:0d:d9:8f:71:76:8a:e3:0a:a1:d9:9b:c4:77:
                    96:77:ed:52:e4:17:7f:ee:22:f4:56:16:0d:0c:93:
                    83:85:9a:7a:3b:19:61:de:e6:22:6b:94:69:1a:2d:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:87:31:9A:E0:3C:C9:8A:F2:57:1D:72:2C:6E:61:81:6A:80:4F:B4
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:55:9a:67:e1:dc:7e:1c:0e:28:20:61:8b:ed:90:ed:ff:
         a3:cc:ef:ef:3f:d8:e4:9e:e7:2f:f2:cc:d1:df:ef:b0:1a:53:
         4c:59:e6:06:70:5b:d5:f8:1b:ef:01:22:df:70:30:70:0a:d6:
         7c:21:1c:84:31:97:b6:d4:79:91:34:17:8c:94:c8:ac:aa:b0:
         88:eb:f2:c3:c2:34:86:ba:20:0a:07:46:43:55:76:c0:a4:4e:
         28:83:35:5e:4b:a6:e1:10:a1:c7:72:75:50:9b:7b:63:42:5c:
         cc:15:59:31:9c:af:ca:9a:ff:3e:bc:f8:99:04:95:52:b8:f1:
         c7:ac:77:8d:48:cf:82:be:44:4b:26:86:4b:d8:53:4c:ad:55:
         aa:5e:db:6b:70:b5:19:dd:1b:cd:b5:a9:45:cd:14:83:97:0b:
         32:67:91:a3:17:90:9d:5f:37:fd:6f:54:14:3f:53:5b:6c:dd:
         03:33:2e:28:4d:ea:41:e5:87:76:84:28:88:c4:8e:4d:31:6d:
         fb:d6:b5:ff:c6:7e:4d:c8:07:8b:32:f1:a7:6b:23:47:b4:20:
         0d:b5:17:d4:0c:7d:10:f9:04:13:58:7f:05:f8:e1:7b:93:3c:
         03:9e:b9:3b:62:f2:69:b3:f0:38:bf:2a:63:fa:f7:fb:d2:c6:
         08:78:11:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacBztjZtK1awlL11DSJeRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh
ZjJiYjEwHhcNMjUwNTA0MTYwMDQxWhcNMjUwNTA1MTYwMDQxWjAzMTEwLwYDVQQD
Eyg3ZTg3MzE5YWUwM2NjOThhZjI1NzFkNzIyYzZlNjE4MTZhODA0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlYx6Te8jSYSV+CRmcMa122OLW02
sRWTE3SXlMR0RfnMUeZ6ybUwQF35uHEhz9LKDATnwg4JZdYdRQEVg6HLVWqdH4Ar
2++9HyRN09/9uZ3dhID/8XeP7RmKTk0gEfC4Mq9wkadrPEjhK7PFHADki1Pp4qVT
bs8/6X07AnlqJJXOG95F/2899CqF+gIUCU4JWppBLh6OclORlK5PQ5JyS9CwItrU
re5/kaSG3+8UZv61jHLTAINjaPoe7XQe/EeaHPJmLA5Ebk1b7XecSJ6z0nQ9kA3Z
j3F2iuMKodmbxHeWd+1S5Bd/7iL0VhYNDJODhZp6Oxlh3uYia5RpGi2Z3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6HMZrgPMmK8lcdcixuYYFqgE+0MB8GA1UdIwQY
MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt
YjUwY2Y1ZjJhYTIyLzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy
LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF5Vmmfh
3H4cDiggYYvtkO3/o8zv7z/Y5J7nL/LM0d/vsBpTTFnmBnBb1fgb7wEi33AwcArW
fCEchDGXttR5kTQXjJTIrKqwiOvyw8I0hrogCgdGQ1V2wKROKIM1Xkum4RChx3J1
UJt7Y0JczBVZMZyvypr/Prz4mQSVUrjxx6x3jUjPgr5ESyaGS9hTTK1Vql7ba3C1
Gd0bzbWpRc0Ug5cLMmeRoxeQnV83/W9UFD9TW2zdAzMuKE3qQeWHdoQoiMSOTTFt
+9a1/8Z+TcgHizLxp2sjR7QgDbUX1Ax9EPkEE1h/Bfjhe5M8A565O2LyabPwOL8q
Y/r3+9LGCHgRiw==
-----END CERTIFICATE-----
Generated at Sun May 4 17:55:59 2025 by rpki-client