Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          L3ewyFSODcuLxoYL+wL4UvHp4tJoWvF3GLd5+DNjWk8=
Subject key identifier:   30:8C:44:F4:F0:92:11:68:D8:B4:6C:57:06:A8:B7:B7:48:2A:3B:D3
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       0196C01390A30AA57F9F4D639F5229049FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          13BC
Signing time:             Sun 11 May 2025 16:00:29 +0000
Manifest this update:     Sun 11 May 2025 16:00:29 +0000
Manifest next update:     Mon 12 May 2025 16:00:29 +0000
Files and hashes:         1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=)
                          2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=)
                          3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=)
                          4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=)
                          5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=)
                          6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: rFXwaMKF2r3KX9unh4cg/Ks0YB2Koap7N0oPXIIHgQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:13:90:a3:0a:a5:7f:9f:4d:63:9f:52:29:04:9f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: May 11 16:00:29 2025 GMT
            Not After : May 12 16:00:29 2025 GMT
        Subject: CN=308c44f4f0921168d8b46c5706a8b7b7482a3bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e7:82:f1:8b:45:28:88:b1:ff:e6:d3:a9:55:
                    83:e6:0f:39:ee:76:83:cd:f7:3a:84:9c:76:a0:5e:
                    ed:6c:68:37:13:0d:64:e1:40:88:b7:0e:83:c9:e2:
                    26:88:f9:59:1f:90:0a:32:1d:c3:c9:d0:d5:17:c0:
                    02:48:d6:4e:e9:68:34:67:10:2e:ce:91:fd:c1:f8:
                    64:cc:81:b2:59:c6:09:4c:8e:26:ed:5d:68:b6:03:
                    d0:b5:b7:5d:51:74:c6:40:43:28:97:2b:e9:fb:53:
                    82:f0:77:54:a1:ca:21:11:7e:38:e4:f3:35:05:81:
                    2c:62:e8:4e:e5:25:6e:59:b5:1e:3f:32:0a:dc:d8:
                    80:42:ed:17:4b:c4:c0:b1:f1:fa:42:9f:ac:8d:22:
                    40:61:d9:8f:21:af:d6:5e:cf:06:b0:9e:c6:f0:fd:
                    66:d9:9f:29:1a:88:2a:44:36:30:a0:b3:70:0b:80:
                    c1:0e:ca:ec:0e:1a:b5:e7:41:6d:95:0d:f6:19:55:
                    47:29:5d:30:c5:4d:9b:9d:01:52:59:8d:7a:51:31:
                    38:37:f7:a4:4e:5c:7f:04:aa:e7:96:8d:50:10:78:
                    41:ad:3c:4b:35:f0:ba:82:18:0c:da:0e:3d:24:11:
                    9d:0a:b5:fd:bc:03:d6:6f:80:57:78:4b:5f:04:ce:
                    5d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:44:F4:F0:92:11:68:D8:B4:6C:57:06:A8:B7:B7:48:2A:3B:D3
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:52:4c:3e:98:70:f0:e5:d8:22:3e:38:93:cc:3b:09:77:
         07:74:91:95:1f:d1:ab:03:cf:5e:46:f3:40:95:91:57:b5:a9:
         29:ec:88:73:68:4e:b0:c2:83:ad:23:1e:a4:48:a8:26:9c:6a:
         69:39:3c:7a:ef:5d:ab:94:05:5f:70:bb:dc:73:b6:d6:28:81:
         a2:1e:fb:fb:91:38:4b:92:16:2c:d5:73:4d:5a:6e:0f:0d:76:
         51:4e:c9:80:1b:87:c6:ab:1b:de:1c:60:b3:8e:93:17:51:c9:
         a2:f0:d6:0c:12:09:c1:07:e8:e4:04:8a:ba:2a:fa:dc:39:cb:
         51:c6:56:28:54:0c:cd:c2:b4:4b:12:d3:26:2a:68:5a:f7:46:
         af:1f:6e:d2:6b:3b:43:9f:79:16:f1:38:aa:2a:91:a4:89:b3:
         7d:6d:95:31:8d:9f:e8:30:cf:a8:e2:53:27:43:e4:d6:64:ef:
         fc:7d:7d:23:e8:bc:3b:85:e9:34:56:03:e9:1f:45:98:1e:d1:
         4b:e7:1a:cf:97:3b:a0:79:cc:6f:39:9a:40:a6:a9:62:3e:81:
         55:14:d0:ce:09:fd:f5:40:e1:7b:73:38:76:88:f3:82:57:74:
         0f:c7:f5:30:24:0b:ad:77:1f:91:47:b3:ae:93:2c:a2:d9:38:
         c5:45:d1:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAE5CjCqV/n01jn1IpBJ/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm
ZjFlMDkwHhcNMjUwNTExMTYwMDI5WhcNMjUwNTEyMTYwMDI5WjAzMTEwLwYDVQQD
EygzMDhjNDRmNGYwOTIxMTY4ZDhiNDZjNTcwNmE4YjdiNzQ4MmEzYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+eC8YtFKIix/+bTqVWD5g857naD
zfc6hJx2oF7tbGg3Ew1k4UCItw6DyeImiPlZH5AKMh3DydDVF8ACSNZO6Wg0ZxAu
zpH9wfhkzIGyWcYJTI4m7V1otgPQtbddUXTGQEMolyvp+1OC8HdUocohEX445PM1
BYEsYuhO5SVuWbUePzIK3NiAQu0XS8TAsfH6Qp+sjSJAYdmPIa/WXs8GsJ7G8P1m
2Z8pGogqRDYwoLNwC4DBDsrsDhq150FtlQ32GVVHKV0wxU2bnQFSWY16UTE4N/ek
Tlx/BKrnlo1QEHhBrTxLNfC6ghgM2g49JBGdCrX9vAPWb4BXeEtfBM5dGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCMRPTwkhFo2LRsVwaot7dIKjvTMB8GA1UdIwQY
MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt
MDZjOTI5NmYwOGEyLzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy
LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI31STD6Y
cPDl2CI+OJPMOwl3B3SRlR/RqwPPXkbzQJWRV7WpKeyIc2hOsMKDrSMepEioJpxq
aTk8eu9dq5QFX3C73HO21iiBoh77+5E4S5IWLNVzTVpuDw12UU7JgBuHxqsb3hxg
s46TF1HJovDWDBIJwQfo5ASKuir63DnLUcZWKFQMzcK0SxLTJipoWvdGrx9u0ms7
Q595FvE4qiqRpImzfW2VMY2f6DDPqOJTJ0Pk1mTv/H19I+i8O4XpNFYD6R9FmB7R
S+caz5c7oHnMbzmaQKapYj6BVRTQzgn99UDhe3M4dojzgld0D8f1MCQLrXcfkUez
rpMsotk4xUXRlw==
-----END CERTIFICATE-----
Generated at Mon May 12 00:18:21 2025 by rpki-client