Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File:                     ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier:          t6LPBiSzZ1YijO06Ha/IOVNupe7b2wIGThcD9X6Lzbg=
Subject key identifier:   0E:DB:5C:4F:A9:EF:1B:A7:D5:E7:01:17:41:54:D5:21:DB:47:C0:B7
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer:       /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial:       01969F765246161441D9899F18A0EB2CEEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number:          1526
Signing time:             Mon 05 May 2025 08:00:53 +0000
Manifest this update:     Mon 05 May 2025 08:00:53 +0000
Manifest next update:     Tue 06 May 2025 08:00:53 +0000
Files and hashes:         1: 1-PzmF4tvuhKnjwj3wR1qNsz6zbo.roa (hash: rCQ1A+S4WfDslZlckjYnZ133GXKciaH3+lfRZ8R/JEo=)
                          2: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: ZWsvQQu8KJcI8TcCBYqOOonb0Epz+8aLFkqFGz23j7Q=)
                          3: PU0hNxhZ9gnygWHqNr07qXkxc94.roa (hash: wzZfk5io+9qbaGJN9m6CkPiNg3q3eNTUNIPd7O5ekZA=)
                          4: nqK8kpSYyrSKMaEvvDzkkm62DuY.roa (hash: GiB9efPeR8VDxJjx4X5Yp7E1DvjQkRODPO17/HFGvF0=)
                          5: rCEPMjGu5dMMBXkuJaxe2se2R0U.roa (hash: RyS4C53Wz4c+6Gzz512GBJ/uZaj5Sg3AxTdwiKVWifk=)
                          6: zw5WHYA5TDqrVNRIt5-8FVfd80s.roa (hash: K+1DSxDhqmdzbJYUSYY3LlUaPbN/Zqn08bbsPtcXeuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:76:52:46:16:14:41:d9:89:9f:18:a0:eb:2c:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
        Validity
            Not Before: May  5 08:00:53 2025 GMT
            Not After : May  6 08:00:53 2025 GMT
        Subject: CN=0edb5c4fa9ef1ba7d5e701174154d521db47c0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:01:ba:00:7d:43:7e:a5:c1:af:fc:6f:3d:
                    3f:93:e9:7f:fe:cf:14:5c:2c:55:e9:4e:f8:3f:ee:
                    90:53:41:85:54:a5:5f:21:a0:af:09:69:e3:4e:74:
                    d1:f5:71:54:a6:bc:d7:8c:82:12:78:a3:28:5a:82:
                    2d:59:ef:d9:10:3c:19:e4:be:fd:38:6c:49:98:fe:
                    44:8d:9a:7f:7a:c1:c0:62:fb:1e:ce:7a:5f:b2:98:
                    72:33:a1:c8:07:b1:53:e6:67:51:6b:12:4d:86:8a:
                    ed:5b:f7:a5:c8:cf:fb:f6:e0:a9:13:0c:36:9e:45:
                    45:d3:2c:08:0b:14:1b:cd:2e:7a:4e:50:33:47:a8:
                    e7:0f:bd:10:62:88:7b:48:6a:c1:4c:b0:ef:48:84:
                    39:ce:41:0d:83:0a:0a:a1:28:95:f7:88:f2:6e:d6:
                    62:dc:43:05:60:2b:d1:43:ce:3d:02:aa:15:26:f2:
                    54:81:c5:cd:0e:e7:5d:64:97:1b:d0:7a:5a:a4:fb:
                    ca:f4:6d:8e:a1:d0:4a:a7:04:df:36:33:6e:7b:47:
                    a8:38:d3:90:c3:fc:5f:b2:f0:d7:db:e2:ea:af:8e:
                    e9:d3:99:0f:48:81:65:6c:75:93:fd:2e:e2:8b:4e:
                    09:34:5c:d2:f9:5f:da:54:14:95:74:0b:31:7c:47:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:5C:4F:A9:EF:1B:A7:D5:E7:01:17:41:54:D5:21:DB:47:C0:B7
            X509v3 Authority Key Identifier:
                keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3f:21:d2:bd:b3:72:93:eb:a4:68:04:81:00:6b:01:a6:cb:
         43:78:fc:0e:4a:c8:96:35:c2:99:86:62:f9:ac:e1:27:60:77:
         33:ec:0e:7a:d2:d2:20:4a:69:78:31:6f:41:e4:4a:c7:8c:63:
         cc:1f:ca:7f:03:78:79:d6:c0:8b:a0:9a:86:83:39:a6:eb:6c:
         2b:a3:c6:62:94:3f:7e:74:2c:0b:d0:73:d7:2b:d1:9d:a4:30:
         e9:a6:47:9f:39:ca:b7:8d:11:c2:a0:c6:9e:73:d0:bd:78:ac:
         1f:18:a0:25:56:bc:ba:0d:b4:a9:ee:18:99:15:03:cc:6c:9b:
         eb:ef:04:d7:5b:3b:e7:7b:78:7c:78:f5:6a:d3:0c:8f:b4:87:
         10:c0:07:8b:9d:b8:3e:44:22:76:0d:52:56:0c:37:bb:d3:77:
         00:34:80:6b:67:86:47:b1:f3:09:88:82:0c:e2:7b:c6:3f:84:
         33:1e:a7:2d:9c:fd:f9:fc:d7:16:3c:0b:04:93:bd:d5:98:c0:
         d4:87:5b:94:d7:94:3b:2a:13:68:f8:68:17:92:9c:67:1c:b4:
         de:1e:b6:78:55:0a:a5:54:bb:63:d6:21:40:5c:fd:df:d9:b9:
         ec:d4:e4:bc:06:37:27:be:17:aa:24:f1:8b:e7:9e:8a:c5:1b:
         c8:2a:7e:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafdlJGFhRB2YmfGKDrLO7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOTMwZjhjNjg4YzA0ZDE3NDMzYTJiOWM3MjQ5YmM2MjVi
Y2UzMTYwHhcNMjUwNTA1MDgwMDUzWhcNMjUwNTA2MDgwMDUzWjAzMTEwLwYDVQQD
EygwZWRiNWM0ZmE5ZWYxYmE3ZDVlNzAxMTc0MTU0ZDUyMWRiNDdjMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu4BugB9Q36lwa/8bz0/k+l//s8U
XCxV6U74P+6QU0GFVKVfIaCvCWnjTnTR9XFUprzXjIISeKMoWoItWe/ZEDwZ5L79
OGxJmP5EjZp/esHAYvseznpfsphyM6HIB7FT5mdRaxJNhortW/elyM/79uCpEww2
nkVF0ywICxQbzS56TlAzR6jnD70QYoh7SGrBTLDvSIQ5zkENgwoKoSiV94jybtZi
3EMFYCvRQ849AqoVJvJUgcXNDuddZJcb0HpapPvK9G2OodBKpwTfNjNue0eoONOQ
w/xfsvDX2+Lqr47p05kPSIFlbHWT/S7ii04JNFzS+V/aVBSVdAsxfEcZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7bXE+p7xun1ecBF0FU1SHbR8C3MB8GA1UdIwQY
MBaAFAKTD4xojATRdDOiucckm8YlvOMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODct
YTRlOTkxYjBmMTQ0LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODctYTRlOTkxYjBmMTQ0
LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArz8h0r2z
cpPrpGgEgQBrAabLQ3j8DkrIljXCmYZi+azhJ2B3M+wOetLSIEppeDFvQeRKx4xj
zB/KfwN4edbAi6CahoM5putsK6PGYpQ/fnQsC9Bz1yvRnaQw6aZHnznKt40RwqDG
nnPQvXisHxigJVa8ug20qe4YmRUDzGyb6+8E11s753t4fHj1atMMj7SHEMAHi524
PkQidg1SVgw3u9N3ADSAa2eGR7HzCYiCDOJ7xj+EMx6nLZz9+fzXFjwLBJO91ZjA
1IdblNeUOyoTaPhoF5KcZxy03h62eFUKpVS7Y9YhQFz939m57NTkvAY3J74XqiTx
i+eeisUbyCp+QA==
-----END CERTIFICATE-----
Generated at Mon May 5 15:16:35 2025 by rpki-client