Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          PvIDwqw+CzC6KYBokACRzJHXkUh6AzqVTYywcmQX4ZY=
Subject key identifier:   C1:C0:E4:88:58:1E:86:3D:9F:D0:BD:15:21:8C:7B:5D:75:FC:83:8D
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       0196B89184188AF273CACA819990B658BA58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          1539
Signing time:             Sat 10 May 2025 05:01:06 +0000
Manifest this update:     Sat 10 May 2025 05:01:06 +0000
Manifest next update:     Sun 11 May 2025 05:01:06 +0000
Files and hashes:         1: 1a8VrRBxuEM9gIitWA-MTYGiH6k.roa (hash: o75BqB590sV6r1bb5EcguY1B6QE3rDYfVkZNGdgh7Sw=)
                          2: 5xOfslnPq8-oHcDS47I_csGpD8Q.roa (hash: 4dFQELulj6P8yjTGdV2+DXhC0ieIeLQi8X9meQWips0=)
                          3: DCocrInE23WH5yhpx0FXxrNY7_Y.roa (hash: O6VU1JCrRAIS6a+yNeHmYk7E8wYytQ8Lu8b/Fc+fOqI=)
                          4: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: SIiBb4Pj7laOnQ//k9o9vPMqXiuBhaIKYow27SQpjHc=)
                          5: du6DBdKlb1Cr5Z5mqlctF2rW68k.roa (hash: XaoP28uRsMgk856VCX7c/74Lo2ezwg/z+6hQ43OafIc=)
                          6: gvR46ytTmKrRi4maCYGnQqf4WI8.roa (hash: ViNC6FNBy9cckM8WILnCXIRpeOOtSFGRhOo8i05WQf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:84:18:8a:f2:73:ca:ca:81:99:90:b6:58:ba:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: May 10 05:01:06 2025 GMT
            Not After : May 11 05:01:06 2025 GMT
        Subject: CN=c1c0e488581e863d9fd0bd15218c7b5d75fc838d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:9c:be:d9:60:ac:38:17:b1:67:27:21:f2:
                    42:22:1b:a1:2d:b8:0d:7e:96:44:02:47:6c:62:ad:
                    8f:8f:7a:42:90:f6:75:cc:5e:ca:df:59:b1:8d:ea:
                    d2:5a:1e:6b:08:ee:7b:d1:ac:8e:0d:bc:14:47:bb:
                    f7:52:87:52:f1:91:bc:d3:43:2a:c4:fc:36:9e:db:
                    91:62:f7:5c:d8:1d:00:a6:bc:e0:99:09:ae:f4:7d:
                    c5:e7:4f:c4:56:5f:47:15:4d:b5:b1:d5:f4:9c:cd:
                    57:5f:d5:fb:76:c0:2b:20:8d:c7:b5:9a:ab:0b:c9:
                    89:bc:f8:40:29:33:62:73:27:a6:5f:fd:30:49:a8:
                    ee:4a:27:70:6c:8c:b5:99:d8:ab:14:30:be:c5:83:
                    39:7c:35:12:42:1c:0b:67:ef:5d:c1:22:4e:25:8d:
                    7e:fa:73:89:6c:a7:47:6a:83:ca:2c:ad:31:69:6c:
                    cd:9a:6a:b8:0c:97:8c:9f:9f:12:20:2a:fa:8a:60:
                    57:4f:4b:5f:68:a6:df:af:59:79:69:13:82:8f:17:
                    35:77:fc:03:53:68:cb:b8:2e:7a:6e:c9:53:b8:ee:
                    ee:5a:3d:38:8c:e8:75:82:af:a3:45:d7:ef:c5:ff:
                    8e:89:9d:ae:e8:e5:70:e6:ac:b8:51:0b:27:ec:f1:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:E4:88:58:1E:86:3D:9F:D0:BD:15:21:8C:7B:5D:75:FC:83:8D
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:5e:ba:5e:6c:ac:1b:67:fe:4c:e4:54:88:ed:0d:09:5d:
         4b:d1:33:8a:a3:70:e9:b1:69:46:7f:55:3c:2e:c8:18:95:a7:
         a6:d2:da:46:31:27:f3:93:9f:57:47:7c:60:66:78:b7:6b:ef:
         57:9f:13:d4:7e:0e:65:ea:46:23:3c:de:4d:64:8f:41:ff:9a:
         c5:71:ba:2d:b3:9d:08:39:ba:a4:5f:94:4e:d1:38:d4:a8:fc:
         71:a3:02:bf:ed:0e:f8:71:3f:48:90:5e:dc:b0:1d:ab:45:ac:
         c7:be:9c:4e:98:f0:85:cd:25:3f:6a:7b:60:b2:aa:71:86:5e:
         ff:ed:a7:a5:28:ce:69:01:a3:b1:30:75:83:a3:44:71:ec:96:
         c3:da:c7:24:6e:71:ab:6a:44:90:2d:69:2a:c0:77:8e:42:dd:
         8c:45:3e:6c:f7:3d:96:a1:e5:dc:09:c7:8b:fe:e5:43:a5:47:
         f4:69:7e:4b:4a:41:7a:b2:c0:63:55:5a:6a:f9:03:e6:b5:e1:
         92:87:95:6a:09:0e:78:42:0b:10:ad:1b:c6:bf:78:d1:db:bc:
         16:5e:b2:00:29:9b:ae:c7:38:28:48:95:e5:5e:89:4a:4f:b0:
         b0:22:24:62:ce:56:30:fb:20:fd:f4:0c:d8:b1:3b:69:14:55:
         7b:57:d4:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kYQYivJzysqBmZC2WLpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw
ZTVjMTQwHhcNMjUwNTEwMDUwMTA2WhcNMjUwNTExMDUwMTA2WjAzMTEwLwYDVQQD
EyhjMWMwZTQ4ODU4MWU4NjNkOWZkMGJkMTUyMThjN2I1ZDc1ZmM4MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriacvtlgrDgXsWcnIfJCIhuhLbgN
fpZEAkdsYq2Pj3pCkPZ1zF7K31mxjerSWh5rCO570ayODbwUR7v3UodS8ZG800Mq
xPw2ntuRYvdc2B0AprzgmQmu9H3F50/EVl9HFU21sdX0nM1XX9X7dsArII3HtZqr
C8mJvPhAKTNicyemX/0wSajuSidwbIy1mdirFDC+xYM5fDUSQhwLZ+9dwSJOJY1+
+nOJbKdHaoPKLK0xaWzNmmq4DJeMn58SICr6imBXT0tfaKbfr1l5aROCjxc1d/wD
U2jLuC56bslTuO7uWj04jOh1gq+jRdfvxf+OiZ2u6OVw5qy4UQsn7PF6HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHA5IhYHoY9n9C9FSGMe111/IONMB8GA1UdIwQY
MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt
MGJmYmFkNDg0OWNkLzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk
LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd55eul5s
rBtn/kzkVIjtDQldS9EziqNw6bFpRn9VPC7IGJWnptLaRjEn85OfV0d8YGZ4t2vv
V58T1H4OZepGIzzeTWSPQf+axXG6LbOdCDm6pF+UTtE41Kj8caMCv+0O+HE/SJBe
3LAdq0Wsx76cTpjwhc0lP2p7YLKqcYZe/+2npSjOaQGjsTB1g6NEceyWw9rHJG5x
q2pEkC1pKsB3jkLdjEU+bPc9lqHl3AnHi/7lQ6VH9Gl+S0pBerLAY1VaavkD5rXh
koeVagkOeEILEK0bxr940du8Fl6yACmbrsc4KEiV5V6JSk+wsCIkYs5WMPsg/fQM
2LE7aRRVe1fUFw==
-----END CERTIFICATE-----
Generated at Sat May 10 10:10:04 2025 by rpki-client