Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          XQRU5x/+SGsYJu9uqRym9j96NAUu6g871GlipXitRCM=
Subject key identifier:   5E:C5:8B:79:14:FA:41:A8:EA:42:30:A0:4B:30:53:D4:C2:D4:56:43
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       0196BFA5ACD0514FAD2404A3F5651C5F90D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          08D1
Signing time:             Sun 11 May 2025 14:00:27 +0000
Manifest this update:     Sun 11 May 2025 14:00:27 +0000
Manifest next update:     Mon 12 May 2025 14:00:27 +0000
Files and hashes:         1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
                          2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
                          3: a-uHBOpyzdK3zVYDOg8UIHN03yU.roa (hash: H9wzL/UUxJZ81Fk0wfS9+Uygz3BeNpB4M/N5om2Y4dg=)
                          4: avjbPkAlTTUDqNOv2jIGjLOGScM.roa (hash: NoYFGDs45doeFAf2D++JjK94J0re2CVTVqEaqoaVcGU=)
                          5: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
                          6: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: UsjUUUTpj2u60pcIa0U507BNBLxTu+jf6/7UV5X5/vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:a5:ac:d0:51:4f:ad:24:04:a3:f5:65:1c:5f:90:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: May 11 14:00:27 2025 GMT
            Not After : May 12 14:00:27 2025 GMT
        Subject: CN=5ec58b7914fa41a8ea4230a04b3053d4c2d45643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:35:22:1e:c2:e8:70:54:b0:97:ff:28:84:
                    44:1f:7f:7d:ee:b7:7d:81:45:e4:1e:f0:ad:98:b4:
                    ec:6e:f9:55:93:db:a9:a2:cc:c8:71:ee:66:74:94:
                    07:57:16:95:5f:4f:e6:09:e4:b7:ad:36:63:60:46:
                    8a:7f:4c:4b:10:96:5e:88:3a:77:a6:85:3d:20:dd:
                    32:d3:c7:46:46:c9:24:21:ff:34:bd:04:ce:62:09:
                    22:03:24:74:de:8a:64:7d:9d:4e:9a:eb:58:72:cb:
                    cd:13:d9:12:ff:03:d6:2b:01:5a:8f:b3:9e:1c:5a:
                    b5:34:3c:b9:22:fa:30:37:60:4f:28:f7:cd:8f:87:
                    83:13:19:aa:29:1a:93:78:67:47:59:73:8a:b9:b5:
                    ec:0b:e5:60:97:1c:ed:89:04:34:c4:7a:5c:89:3f:
                    f2:8b:0c:99:c7:c6:75:fd:75:09:60:61:08:e3:5d:
                    90:cc:a6:43:0e:03:5f:4c:e3:02:35:e9:51:4e:4f:
                    9a:81:e6:f5:a8:8d:76:b3:b7:d5:17:7b:25:b2:9f:
                    2f:f6:f1:f2:75:e8:76:a1:8a:bd:39:64:1b:ae:45:
                    d1:ea:51:e2:1b:df:87:cf:69:93:0b:48:fc:27:d5:
                    41:9b:1b:2e:d1:ea:d0:59:ae:81:46:4c:5e:6c:d0:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C5:8B:79:14:FA:41:A8:EA:42:30:A0:4B:30:53:D4:C2:D4:56:43
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:ad:e3:fe:7c:4b:ce:ef:1e:46:85:e5:1e:e8:07:9c:d1:
         64:65:04:7b:c4:4a:3f:c9:fe:e4:79:5f:5c:6d:5a:3e:49:b5:
         ec:9c:b5:b7:e4:81:a8:b0:18:0c:92:73:02:0b:c6:7e:0c:b1:
         14:c9:c6:a7:f0:73:f6:ae:aa:f2:f5:4b:34:70:1d:78:d5:47:
         dc:f0:3b:ea:1c:1e:85:9c:b5:28:1e:a0:65:7b:8b:b0:91:e4:
         a4:21:bf:08:2a:ef:22:f5:0b:d2:bb:67:32:26:f7:f7:7d:7d:
         1d:08:59:15:2f:ad:75:5e:e5:39:96:f1:48:5d:2f:d9:0f:91:
         19:51:37:4c:2f:92:19:4a:d4:7c:39:12:66:ae:e8:c2:72:96:
         4a:27:09:f4:f9:da:92:e4:0c:90:45:af:32:7d:0c:b4:d2:65:
         dd:c8:7f:e8:47:6e:0c:31:aa:da:d2:34:ab:fa:d6:dd:cb:db:
         73:d5:73:9e:42:14:0f:d3:17:50:c3:71:e3:b7:b1:67:9d:fb:
         c4:3b:0e:9f:f9:da:6a:ad:08:48:2c:72:6c:7c:5c:b7:db:3a:
         ae:b6:45:60:e5:19:f1:45:c1:74:70:60:f1:34:4f:0b:43:48:
         1f:e6:5d:be:b2:3d:72:50:35:b0:ff:1a:69:47:5c:c1:13:8d:
         46:76:9e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pazQUU+tJASj9WUcX5DQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjUwNTExMTQwMDI3WhcNMjUwNTEyMTQwMDI3WjAzMTEwLwYDVQQD
Eyg1ZWM1OGI3OTE0ZmE0MWE4ZWE0MjMwYTA0YjMwNTNkNGMyZDQ1NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Q1Ih7C6HBUsJf/KIREH3997rd9
gUXkHvCtmLTsbvlVk9uposzIce5mdJQHVxaVX0/mCeS3rTZjYEaKf0xLEJZeiDp3
poU9IN0y08dGRskkIf80vQTOYgkiAyR03opkfZ1OmutYcsvNE9kS/wPWKwFaj7Oe
HFq1NDy5IvowN2BPKPfNj4eDExmqKRqTeGdHWXOKubXsC+VglxztiQQ0xHpciT/y
iwyZx8Z1/XUJYGEI412QzKZDDgNfTOMCNelRTk+ageb1qI12s7fVF3slsp8v9vHy
deh2oYq9OWQbrkXR6lHiG9+Hz2mTC0j8J9VBmxsu0erQWa6BRkxebNDLnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7Fi3kU+kGo6kIwoEswU9TC1FZDMB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqmt4/58
S87vHkaF5R7oB5zRZGUEe8RKP8n+5HlfXG1aPkm17Jy1t+SBqLAYDJJzAgvGfgyx
FMnGp/Bz9q6q8vVLNHAdeNVH3PA76hwehZy1KB6gZXuLsJHkpCG/CCrvIvUL0rtn
Mib39319HQhZFS+tdV7lOZbxSF0v2Q+RGVE3TC+SGUrUfDkSZq7ownKWSicJ9Pna
kuQMkEWvMn0MtNJl3ch/6EduDDGq2tI0q/rW3cvbc9VznkIUD9MXUMNx47exZ537
xDsOn/naaq0ISCxybHxct9s6rrZFYOUZ8UXBdHBg8TRPC0NIH+ZdvrI9clA1sP8a
aUdcwRONRnae9w==
-----END CERTIFICATE-----
Generated at Sun May 11 17:05:55 2025 by rpki-client