Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          ZPut+FHSHCO9/rPHOevIF1ZMx9WNG4IQ7mlkLi3igLc=
Subject key identifier:   3D:18:83:24:E3:5D:19:03:10:67:BB:05:67:4A:22:84:7B:5A:15:4F
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       0196B145A025DEA9E1F6BFA7A89ADE2AB0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0BB6
Signing time:             Thu 08 May 2025 19:00:52 +0000
Manifest this update:     Thu 08 May 2025 19:00:52 +0000
Manifest next update:     Fri 09 May 2025 19:00:52 +0000
Files and hashes:         1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=)
                          2: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=)
                          3: kIN_jMTtiRLUszBNqKlNoyJk3dk.roa (hash: lHRqbJ9tYmnELEYhJx16n/sdjvBPGJLZ5vlonZ4KvjA=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: 6p8N5fFyZYuJAXGUJnTQIVO3oSNuDqLNHWvYNTyz4nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:45:a0:25:de:a9:e1:f6:bf:a7:a8:9a:de:2a:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: May  8 19:00:52 2025 GMT
            Not After : May  9 19:00:52 2025 GMT
        Subject: CN=3d188324e35d19031067bb05674a22847b5a154f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:d5:e3:df:ad:ba:58:cc:b8:4c:de:1c:f0:
                    03:63:cc:b0:1a:b4:10:ad:44:0e:ea:e0:63:69:0d:
                    02:85:fd:17:d5:bb:b1:1a:80:8f:67:04:dd:cc:55:
                    62:dc:e9:3f:56:ae:00:e8:25:8e:96:72:52:9e:8a:
                    0a:1c:4c:8d:88:99:82:3b:56:a2:20:22:3d:b7:a9:
                    b0:7d:b0:6b:1c:9c:5d:1d:01:a7:46:e3:62:a3:ba:
                    36:c6:36:da:7b:a4:84:a2:bf:32:85:85:7d:1f:10:
                    30:1c:82:9a:64:61:ca:58:1d:a4:e6:d9:16:28:27:
                    47:25:ce:00:59:a8:b7:07:13:35:63:0a:13:af:41:
                    06:01:91:96:08:74:6f:0e:29:da:01:3a:f4:43:9b:
                    de:c6:b2:df:ef:74:36:5b:35:af:6e:7e:a5:29:2a:
                    57:13:68:75:ac:d5:88:57:6e:59:dd:85:8d:d2:6a:
                    b2:e3:af:aa:d1:74:b2:be:f5:3a:b7:1b:85:df:b8:
                    ee:01:77:71:22:45:83:55:d8:1e:d6:cf:3c:f7:d1:
                    11:93:ce:f5:03:c7:c1:50:01:35:6e:b6:17:7a:69:
                    53:fd:bc:c1:26:4f:00:d8:4e:4e:41:9e:da:cf:06:
                    7f:45:28:82:15:b2:66:28:a7:12:89:59:9b:4a:60:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:83:24:E3:5D:19:03:10:67:BB:05:67:4A:22:84:7B:5A:15:4F
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:05:29:ef:07:b2:9b:b3:8d:b5:41:2e:de:18:14:72:e5:
         bd:5d:6f:ad:4f:b6:d0:55:58:b8:5f:e4:f5:4d:c8:c6:3b:d2:
         72:93:10:5c:26:12:a6:24:04:24:a2:1c:34:bc:1d:e8:02:96:
         ce:cc:67:e4:07:2c:64:d0:7e:fb:7c:83:64:1a:57:e9:43:43:
         4e:e5:d6:51:16:3f:d1:6c:82:1d:15:c2:12:0b:29:dd:95:74:
         e6:42:25:20:26:65:77:de:0e:e3:89:61:97:2e:35:fc:00:7a:
         6c:7d:96:aa:46:9f:c7:37:77:ca:19:b8:1d:c2:93:6a:fa:37:
         1b:f4:62:53:e8:c1:fd:66:e8:66:e4:28:c1:8d:69:ab:3d:ae:
         99:1f:3d:da:88:69:73:10:f4:81:17:f9:d7:3c:11:c9:42:c1:
         1f:75:52:8b:9b:3d:c2:5b:78:41:6b:c0:fb:10:d3:91:5e:bf:
         13:12:85:57:39:16:83:96:a5:39:7d:b9:3c:ad:67:9d:83:b3:
         43:a6:17:c1:70:40:78:b7:67:5b:07:14:00:2c:3d:fa:c1:86:
         95:36:92:80:6b:b9:f1:1c:e1:c7:75:ee:11:28:3d:d9:7a:f1:
         60:ef:c8:8b:09:5b:0a:1f:df:dc:bb:c3:e1:1f:49:40:aa:89:
         e4:3d:a1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxRaAl3qnh9r+nqJreKrDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw
ZDc3ODcwHhcNMjUwNTA4MTkwMDUyWhcNMjUwNTA5MTkwMDUyWjAzMTEwLwYDVQQD
EygzZDE4ODMyNGUzNWQxOTAzMTA2N2JiMDU2NzRhMjI4NDdiNWExNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiHV49+tuljMuEzeHPADY8ywGrQQ
rUQO6uBjaQ0Chf0X1buxGoCPZwTdzFVi3Ok/Vq4A6CWOlnJSnooKHEyNiJmCO1ai
ICI9t6mwfbBrHJxdHQGnRuNio7o2xjbae6SEor8yhYV9HxAwHIKaZGHKWB2k5tkW
KCdHJc4AWai3BxM1YwoTr0EGAZGWCHRvDinaATr0Q5vexrLf73Q2WzWvbn6lKSpX
E2h1rNWIV25Z3YWN0mqy46+q0XSyvvU6txuF37juAXdxIkWDVdge1s8899ERk871
A8fBUAE1brYXemlT/bzBJk8A2E5OQZ7azwZ/RSiCFbJmKKcSiVmbSmB7NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0YgyTjXRkDEGe7BWdKIoR7WhVPMB8GA1UdIwQY
MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et
NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3
LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZoFKe8H
spuzjbVBLt4YFHLlvV1vrU+20FVYuF/k9U3IxjvScpMQXCYSpiQEJKIcNLwd6AKW
zsxn5AcsZNB++3yDZBpX6UNDTuXWURY/0WyCHRXCEgsp3ZV05kIlICZld94O44lh
ly41/AB6bH2Wqkafxzd3yhm4HcKTavo3G/RiU+jB/WboZuQowY1pqz2umR892ohp
cxD0gRf51zwRyULBH3VSi5s9wlt4QWvA+xDTkV6/ExKFVzkWg5alOX25PK1nnYOz
Q6YXwXBAeLdnWwcUACw9+sGGlTaSgGu58Rzhx3XuESg92XrxYO/IiwlbCh/f3LvD
4R9JQKqJ5D2hEw==
-----END CERTIFICATE-----
Generated at Thu May 8 22:27:07 2025 by rpki-client