Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
File:                     5XFody33TCeZnVM4leGr7c6XJjw.mft (raw, json)
Hash identifier:          69+NlDh3rzikktz2ORGjr7NLTpOfJ/QSGsnU5HfZ+20=
Subject key identifier:   80:1E:9F:05:07:22:84:86:ED:10:ED:93:60:76:32:F9:A0:B9:A2:62
Authority key identifier: E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C
Certificate issuer:       /CN=e57168772df74c27999d533895e1abedce97263c
Certificate serial:       0196D13E126F22B2EB5BECA6E45829E68234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
Manifest number:          96
Signing time:             Thu 15 May 2025 00:00:28 +0000
Manifest this update:     Thu 15 May 2025 00:00:28 +0000
Manifest next update:     Fri 16 May 2025 00:00:28 +0000
Files and hashes:         1: 5XFody33TCeZnVM4leGr7c6XJjw.crl (hash: TMF+qdcw8M525FSWuYuA5PMGPcxL0x5NoV+n/4kMLlE=)
                          2: O3bnjDPRR3LrGEnM4sKqgBKSZIg.roa (hash: rlXDUrdTVRzlXfFa/VppQ/JwyMwu/FNANchTVmv+fxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 00:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:3e:12:6f:22:b2:eb:5b:ec:a6:e4:58:29:e6:82:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57168772df74c27999d533895e1abedce97263c
        Validity
            Not Before: May 15 00:00:28 2025 GMT
            Not After : May 16 00:00:28 2025 GMT
        Subject: CN=801e9f0507228486ed10ed93607632f9a0b9a262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:29:23:52:f7:88:dc:16:12:33:3b:ac:47:
                    21:a3:40:03:a9:2f:d6:d2:e7:d1:3e:2f:8d:88:af:
                    c5:c1:3d:3c:25:a6:47:1c:5e:30:7e:c8:0c:39:0f:
                    44:16:b9:3a:51:d4:15:d0:67:be:41:0b:92:d4:c2:
                    0d:f7:fa:75:fc:cd:d8:af:36:bb:7b:84:24:82:50:
                    15:0d:bd:d1:af:8b:3b:5c:57:86:e8:64:15:85:ba:
                    e6:86:49:0c:5a:1f:66:65:43:25:cf:8c:3d:6d:f2:
                    75:40:35:81:80:38:22:6a:16:a5:72:0e:ba:53:a8:
                    e7:1f:a3:00:a7:46:26:41:16:a7:a1:e3:2d:81:dd:
                    aa:14:07:6f:ee:0b:27:9a:3b:2b:b9:7f:6e:38:41:
                    d4:54:21:af:5c:3d:d1:6c:7e:dc:13:a6:42:77:72:
                    1c:f4:28:ba:d2:d8:27:c5:18:42:16:ab:c6:88:76:
                    a0:24:e6:8c:f9:4c:b5:92:21:56:64:3c:a6:17:c8:
                    d5:64:e9:25:14:24:f8:88:a2:00:24:5d:12:b1:29:
                    39:4e:59:99:e2:9e:be:fe:b9:34:f6:e3:e9:eb:75:
                    61:dc:72:0d:54:d6:3f:af:15:bb:97:27:fa:6c:e1:
                    0b:a6:c1:b8:86:70:4c:99:55:52:01:20:b1:01:c1:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:9F:05:07:22:84:86:ED:10:ED:93:60:76:32:F9:A0:B9:A2:62
            X509v3 Authority Key Identifier:
                keyid:E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:99:e5:26:a7:f1:10:4d:93:76:42:10:66:c0:76:bb:65:
         20:47:bb:09:0a:58:94:99:71:37:15:93:62:8f:bd:96:6e:83:
         f7:47:68:7d:9c:b7:99:43:89:43:30:81:5a:e7:a5:af:76:77:
         e8:55:fa:a9:b4:61:a7:49:1a:bf:cc:10:9b:3c:11:19:03:6e:
         b3:86:43:61:90:6e:62:c9:4b:d8:85:26:5c:cd:dd:2e:79:c9:
         73:34:ab:f8:0e:40:a1:3f:98:1f:4b:5e:67:90:03:c9:aa:fa:
         8f:72:9b:14:86:15:7f:65:b7:41:2a:f3:c5:ef:1c:cd:9e:00:
         e9:ce:c4:e7:8b:d9:1a:c0:6b:3d:71:e8:73:09:f7:07:54:1c:
         05:cc:77:e7:ed:6e:b2:30:67:5d:dd:ec:73:ec:85:bd:e8:12:
         b3:f3:20:d4:5b:70:10:ca:5b:33:e7:5d:85:c4:97:db:01:65:
         b7:80:42:22:7c:e8:0e:c5:17:79:3b:74:3d:5d:ed:21:79:f3:
         5e:61:78:d6:08:e0:7f:b7:ed:c7:65:59:35:f6:34:09:5b:b0:
         22:45:3a:52:2c:70:45:68:ea:28:bb:f4:cb:06:a4:69:1f:97:
         9f:f4:67:d1:2c:df:7f:67:b9:38:94:ec:0f:79:8a:12:c0:b6:
         c2:0d:25:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbRPhJvIrLrW+ym5Fgp5oI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzE2ODc3MmRmNzRjMjc5OTlkNTMzODk1ZTFhYmVkY2U5
NzI2M2MwHhcNMjUwNTE1MDAwMDI4WhcNMjUwNTE2MDAwMDI4WjAzMTEwLwYDVQQD
Eyg4MDFlOWYwNTA3MjI4NDg2ZWQxMGVkOTM2MDc2MzJmOWEwYjlhMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeQpI1L3iNwWEjM7rEcho0ADqS/W
0ufRPi+NiK/FwT08JaZHHF4wfsgMOQ9EFrk6UdQV0Ge+QQuS1MIN9/p1/M3Yrza7
e4QkglAVDb3Rr4s7XFeG6GQVhbrmhkkMWh9mZUMlz4w9bfJ1QDWBgDgiahalcg66
U6jnH6MAp0YmQRanoeMtgd2qFAdv7gsnmjsruX9uOEHUVCGvXD3RbH7cE6ZCd3Ic
9Ci60tgnxRhCFqvGiHagJOaM+Uy1kiFWZDymF8jVZOklFCT4iKIAJF0SsSk5TlmZ
4p6+/rk09uPp63Vh3HINVNY/rxW7lyf6bOELpsG4hnBMmVVSASCxAcFgDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAenwUHIoSG7RDtk2B2MvmguaJiMB8GA1UdIwQY
MBaAFOVxaHct90wnmZ1TOJXhq+3OlyY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82N2MwODctOGI3My00YmM4LWJmZWIt
YjNkZmYzYTkxMTAyLzEvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82N2MwODctOGI3My00YmM4LWJmZWItYjNkZmYzYTkxMTAy
LzEvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7mZ5San
8RBNk3ZCEGbAdrtlIEe7CQpYlJlxNxWTYo+9lm6D90dofZy3mUOJQzCBWuelr3Z3
6FX6qbRhp0kav8wQmzwRGQNus4ZDYZBuYslL2IUmXM3dLnnJczSr+A5AoT+YH0te
Z5ADyar6j3KbFIYVf2W3QSrzxe8czZ4A6c7E54vZGsBrPXHocwn3B1QcBcx35+1u
sjBnXd3sc+yFvegSs/Mg1FtwEMpbM+ddhcSX2wFlt4BCInzoDsUXeTt0PV3tIXnz
XmF41gjgf7ftx2VZNfY0CVuwIkU6UixwRWjqKLv0ywakaR+Xn/Rn0Szff2e5OJTs
D3mKEsC2wg0liQ==
-----END CERTIFICATE-----
Generated at Thu May 15 10:26:04 2025 by rpki-client