Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          zDSp/yOKcelDAOI0XsAI/7o1CRPNg/1tLQmgDmnFq40=
Subject key identifier:   BB:89:C3:D7:24:39:BE:53:27:60:85:DD:49:65:69:18:0F:E1:50:0E
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       0196B9A47C5323704863C7EE91B7D4AC4EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          117F
Signing time:             Sat 10 May 2025 10:01:26 +0000
Manifest this update:     Sat 10 May 2025 10:01:26 +0000
Manifest next update:     Sun 11 May 2025 10:01:26 +0000
Files and hashes:         1: 2X1Aq3uwv_rdP11PERDf5xc38AI.roa (hash: B7sjMQo7xNloOK1hTmdNbqOOboiaTbdNnO+C5uW+j58=)
                          2: Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa (hash: lJyyoSk6lh9Ke1PZ6fr+wMQ+yXg1/zlIl+iWHK5ln+U=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: mWQDb1j20J6r5Viwa/7QHQlVJeXuuRCL8I4YBXqwUzc=)
                          4: H2cnGkpHBPqjHRGhcHPHqWhpLu8.roa (hash: oHqCaOHDy7adycxKsgn/iaFXF2yuhzvyHsMV1zyHAAw=)
                          5: ILIqRbOHVwxkFJKFfUD52n880mI.roa (hash: cti4+XaqWa64ZvOhVwfuqQKsUk/NB8Q0npKWhfOyakI=)
                          6: eKX38WRBWmtuTwpJydlyAOgABaU.roa (hash: wPEeV7+enD23Ox2TyJ2ri6ktyLrFVlAY5Y0TfZ75Xbs=)
                          7: n7VMq_z-rv4nBWsX2SX-C_orDwA.roa (hash: puDUtCW6BFuWoUT5Yl8pFYj9/gNu+EkYRw2ZisOVmfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a4:7c:53:23:70:48:63:c7:ee:91:b7:d4:ac:4e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: May 10 10:01:26 2025 GMT
            Not After : May 11 10:01:26 2025 GMT
        Subject: CN=bb89c3d72439be53276085dd496569180fe1500e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:4c:30:bc:07:cf:6e:5b:e7:6d:1e:2f:e9:
                    22:9e:e2:18:92:bf:56:f5:2d:e1:9e:c7:f4:84:f9:
                    fa:53:10:37:4c:a6:ca:af:cf:70:c9:ab:26:f3:d0:
                    8f:d7:e2:32:aa:fb:64:14:45:d6:d5:f3:13:6b:e8:
                    b9:c5:66:5c:fb:31:db:bd:9e:6f:9a:6d:5b:f9:28:
                    0d:59:d3:33:5d:a6:71:1f:35:e5:e4:7d:03:af:57:
                    16:c7:d4:7b:a0:46:44:b2:25:c8:a6:6c:60:e5:70:
                    05:3c:fb:7d:92:cd:f8:78:f7:51:31:f6:05:92:41:
                    77:e0:74:40:a7:7f:79:c8:20:e7:b9:5c:bd:a5:51:
                    56:60:58:e2:3d:44:1f:95:18:07:2e:90:eb:18:a9:
                    2c:b0:fc:45:ba:d3:c4:ac:4f:15:32:7f:40:eb:96:
                    ee:34:8b:ab:7c:c6:b5:c2:ec:27:ca:14:95:0b:8e:
                    19:5c:2a:4b:69:81:d2:59:aa:70:9b:8f:18:92:19:
                    3b:8d:bd:f0:ad:7d:bf:af:9e:10:ea:aa:c5:5c:88:
                    c4:d4:c5:d0:a0:75:b3:b7:eb:97:85:99:68:57:39:
                    14:f5:71:d8:97:63:ab:fc:8e:b2:df:64:62:e5:bf:
                    ce:71:1c:f4:8d:68:ea:48:4e:d9:77:d4:a6:9e:8d:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:89:C3:D7:24:39:BE:53:27:60:85:DD:49:65:69:18:0F:E1:50:0E
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:b4:4c:5b:c9:a0:60:c2:38:b2:f0:fa:aa:ed:3d:5d:71:
         b5:78:50:38:f9:57:a6:38:fd:98:75:ce:0c:19:13:c9:19:e7:
         cb:f3:8d:26:41:31:57:00:1e:59:b6:0c:68:63:f6:3b:9a:ed:
         36:74:3f:ed:c9:fa:2b:3d:af:e6:31:c7:ae:e1:61:38:34:cc:
         f5:ca:d5:44:82:02:1c:e6:7c:58:45:74:c4:5a:8d:07:f6:46:
         dc:9a:4a:ec:af:1b:6c:b8:77:07:45:bc:39:90:ca:30:b9:2e:
         8c:4a:55:2e:d7:eb:b3:8c:18:f8:f6:01:bf:05:fe:06:e4:42:
         6f:e7:9b:5f:23:47:47:16:54:de:ec:d0:8e:6e:4d:60:24:52:
         45:dd:4d:03:ed:70:23:78:64:ec:ae:92:a2:62:e8:e4:8c:46:
         5a:6c:57:a3:f5:66:82:c1:0d:ca:82:ed:c2:3a:58:e6:07:02:
         3c:d1:6c:89:bb:35:6a:ff:d4:f1:e0:f8:0f:cd:d1:79:06:0f:
         28:5b:35:bb:0d:e6:d0:6e:9a:08:26:48:28:43:cc:0e:48:ab:
         76:7d:ea:53:65:f7:b7:7d:d2:0c:d6:15:5f:a5:34:d8:8d:93:
         74:26:27:06:16:24:d6:64:c6:5f:2e:21:29:48:58:82:aa:d4:
         eb:2e:7b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5pHxTI3BIY8fukbfUrE7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4
NjEyM2YwHhcNMjUwNTEwMTAwMTI2WhcNMjUwNTExMTAwMTI2WjAzMTEwLwYDVQQD
EyhiYjg5YzNkNzI0MzliZTUzMjc2MDg1ZGQ0OTY1NjkxODBmZTE1MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFBMMLwHz25b520eL+kinuIYkr9W
9S3hnsf0hPn6UxA3TKbKr89wyasm89CP1+IyqvtkFEXW1fMTa+i5xWZc+zHbvZ5v
mm1b+SgNWdMzXaZxHzXl5H0Dr1cWx9R7oEZEsiXIpmxg5XAFPPt9ks34ePdRMfYF
kkF34HRAp395yCDnuVy9pVFWYFjiPUQflRgHLpDrGKkssPxFutPErE8VMn9A65bu
NIurfMa1wuwnyhSVC44ZXCpLaYHSWapwm48Ykhk7jb3wrX2/r54Q6qrFXIjE1MXQ
oHWzt+uXhZloVzkU9XHYl2Or/I6y32Ri5b/OcRz0jWjqSE7Zd9Smno3GfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuJw9ckOb5TJ2CF3UllaRgP4VAOMB8GA1UdIwQY
MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt
NGIxZjYxNjUzZjNkLzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk
LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ660TFvJ
oGDCOLLw+qrtPV1xtXhQOPlXpjj9mHXODBkTyRnny/ONJkExVwAeWbYMaGP2O5rt
NnQ/7cn6Kz2v5jHHruFhODTM9crVRIICHOZ8WEV0xFqNB/ZG3JpK7K8bbLh3B0W8
OZDKMLkujEpVLtfrs4wY+PYBvwX+BuRCb+ebXyNHRxZU3uzQjm5NYCRSRd1NA+1w
I3hk7K6SomLo5IxGWmxXo/VmgsENyoLtwjpY5gcCPNFsibs1av/U8eD4D83ReQYP
KFs1uw3m0G6aCCZIKEPMDkirdn3qU2X3t33SDNYVX6U02I2TdCYnBhYk1mTGXy4h
KUhYgqrU6y57lA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:10:54 2025 by rpki-client