Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File:                     hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier:          3vNvq9rUCvJmxGFYpmvC9YHR8NPmomCNxROlqLJ7P3A=
Subject key identifier:   A2:5B:6F:C4:C1:C5:2A:E5:F3:BF:72:CA:07:C2:1D:F4:A8:AD:AD:37
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       0196C871B2F41249D6BDF4E5BA1FD30B89BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number:          14D7
Signing time:             Tue 13 May 2025 07:00:16 +0000
Manifest this update:     Tue 13 May 2025 07:00:16 +0000
Manifest next update:     Wed 14 May 2025 07:00:16 +0000
Files and hashes:         1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
                          2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
                          3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
                          4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
                          5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: ciwcPVQGXxmmHfv8K80R1OOneW14IpV9ao3KicAI3pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:71:b2:f4:12:49:d6:bd:f4:e5:ba:1f:d3:0b:89:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: May 13 07:00:16 2025 GMT
            Not After : May 14 07:00:16 2025 GMT
        Subject: CN=a25b6fc4c1c52ae5f3bf72ca07c21df4a8adad37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:14:66:7f:e1:51:5d:e5:2f:f3:42:46:10:
                    4c:ab:71:2e:fe:a8:b0:bf:59:68:82:2a:86:5c:c4:
                    fc:83:a0:d7:4a:5b:af:59:18:54:b8:ba:c5:b4:45:
                    25:c7:e5:03:2c:b1:9c:b8:79:95:41:8a:58:28:84:
                    42:e0:33:11:26:48:33:e4:3c:5c:cd:de:22:df:30:
                    11:00:7c:c7:51:b3:2e:4d:02:45:2c:04:08:04:fd:
                    30:f4:21:22:90:ec:d2:8b:8d:49:92:3a:39:67:ba:
                    eb:71:67:27:fe:32:ca:65:88:47:d3:7d:a1:db:5a:
                    be:22:e8:66:32:50:21:ee:a5:ac:d2:8e:67:45:15:
                    fd:93:7d:c2:00:80:5d:64:e1:a9:e3:93:5b:06:36:
                    2e:b9:47:41:fb:fd:51:cd:69:3a:9a:86:74:3d:fd:
                    8b:67:2b:b9:b2:97:41:8e:53:ea:35:29:fd:02:e1:
                    ca:a3:ec:90:58:d0:d8:31:b9:1a:04:f4:a0:5e:19:
                    72:9b:36:db:b6:77:2b:19:6f:bb:3d:5e:26:a8:71:
                    38:d5:aa:a8:ab:9a:cb:9f:54:62:96:93:99:b1:52:
                    d2:6b:34:1d:db:11:e5:b7:62:8c:a3:4c:37:69:95:
                    6b:10:2a:0c:3c:1b:e2:10:3c:c7:c8:82:67:1f:0c:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5B:6F:C4:C1:C5:2A:E5:F3:BF:72:CA:07:C2:1D:F4:A8:AD:AD:37
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:32:05:17:c0:0c:9b:82:8d:c7:55:9b:0d:eb:44:49:58:7f:
         1f:62:27:1c:86:e3:09:3e:c4:a6:ff:54:8a:73:42:2c:8a:6b:
         9f:9e:32:ef:87:38:62:3c:04:21:f6:6f:2c:a7:76:9f:8a:91:
         f0:49:01:fe:f0:fc:c0:bf:06:6d:49:f0:95:50:69:91:4b:5b:
         f8:79:e5:c1:d2:20:59:c6:b0:63:7f:53:29:60:9a:87:5c:fe:
         27:2d:98:06:a8:35:b4:17:6a:b3:e8:90:25:56:6a:5c:39:d2:
         ce:68:78:f0:cc:6f:d2:59:4f:4f:f8:35:47:25:56:fc:69:d7:
         3e:80:09:c7:51:23:a4:62:56:d1:38:9f:c6:23:8d:05:b3:29:
         32:3c:3e:3d:e3:e8:f8:ca:f7:bd:02:4e:c0:c9:41:a8:d9:86:
         33:1f:ab:87:93:46:d8:8a:18:57:3b:e5:1e:10:4f:05:9b:e2:
         f1:d2:7a:b2:04:28:e3:eb:74:ce:5a:0f:2e:4d:3a:2b:3c:f2:
         7e:b8:5d:ee:ef:42:be:82:72:c8:b8:dc:47:6d:7a:e7:aa:3c:
         07:70:b4:d4:40:d1:69:58:28:f1:eb:4f:b2:0b:3d:e2:03:f7:
         77:88:e2:e3:41:26:03:dd:c2:26:f2:cb:0d:af:8c:02:2f:7f:
         48:c9:b5:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIcbL0EknWvfTluh/TC4m6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4
MzdiNDQwHhcNMjUwNTEzMDcwMDE2WhcNMjUwNTE0MDcwMDE2WjAzMTEwLwYDVQQD
EyhhMjViNmZjNGMxYzUyYWU1ZjNiZjcyY2EwN2MyMWRmNGE4YWRhZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4IUZn/hUV3lL/NCRhBMq3Eu/qiw
v1logiqGXMT8g6DXSluvWRhUuLrFtEUlx+UDLLGcuHmVQYpYKIRC4DMRJkgz5Dxc
zd4i3zARAHzHUbMuTQJFLAQIBP0w9CEikOzSi41Jkjo5Z7rrcWcn/jLKZYhH032h
21q+IuhmMlAh7qWs0o5nRRX9k33CAIBdZOGp45NbBjYuuUdB+/1RzWk6moZ0Pf2L
Zyu5spdBjlPqNSn9AuHKo+yQWNDYMbkaBPSgXhlymzbbtncrGW+7PV4mqHE41aqo
q5rLn1RilpOZsVLSazQd2xHlt2KMo0w3aZVrECoMPBviEDzHyIJnHwzqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJbb8TBxSrl879yygfCHfSora03MB8GA1UdIwQY
MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt
ZDhjMzUxZDkzZWM2LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2
LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojIFF8AM
m4KNx1WbDetESVh/H2InHIbjCT7Epv9UinNCLIprn54y74c4YjwEIfZvLKd2n4qR
8EkB/vD8wL8GbUnwlVBpkUtb+HnlwdIgWcawY39TKWCah1z+Jy2YBqg1tBdqs+iQ
JVZqXDnSzmh48Mxv0llPT/g1RyVW/GnXPoAJx1EjpGJW0TifxiONBbMpMjw+PePo
+Mr3vQJOwMlBqNmGMx+rh5NG2IoYVzvlHhBPBZvi8dJ6sgQo4+t0zloPLk06Kzzy
frhd7u9CvoJyyLjcR21656o8B3C01EDRaVgo8etPsgs94gP3d4ji40EmA93CJvLL
Da+MAi9/SMm1Gg==
-----END CERTIFICATE-----
Generated at Tue May 13 17:22:26 2025 by rpki-client