Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          xA6NtURWAjbxL02hz63h7WbBPmuac7UbpqAWCSjPy7o=
Subject key identifier:   C9:6D:51:0F:CD:AC:18:8D:A8:50:6D:E5:EF:12:82:D6:9B:E2:8B:C9
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       0196CCF3B6CC2C16EEB22E358634C30B591B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          0F9F
Signing time:             Wed 14 May 2025 04:00:46 +0000
Manifest this update:     Wed 14 May 2025 04:00:46 +0000
Manifest next update:     Thu 15 May 2025 04:00:46 +0000
Files and hashes:         1: Dg_nZXNMxQynE5ehC7tXyWYcMIY.roa (hash: GdXBqs86r5DAb+MyyV4wEtv+zLO6JrCMc/QjbYWwSSo=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: jgSVO3Yw5ZUtk/2GTsO8SrQpVhvroUQqTGwoh9KfbCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:b6:cc:2c:16:ee:b2:2e:35:86:34:c3:0b:59:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: May 14 04:00:46 2025 GMT
            Not After : May 15 04:00:46 2025 GMT
        Subject: CN=c96d510fcdac188da8506de5ef1282d69be28bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6c:67:e6:c2:d7:16:4a:8b:82:c3:34:1e:ba:
                    46:7c:21:b4:3a:12:6a:05:69:1c:ba:f8:d1:d4:21:
                    3d:20:b6:54:c8:5a:44:81:ee:55:80:64:cb:cc:5d:
                    2d:c7:e8:94:6d:38:01:0b:72:2d:ad:5b:91:66:72:
                    46:d7:bd:27:53:ae:18:c8:5d:61:2d:82:e9:e7:4c:
                    4a:16:3a:8f:71:54:9c:72:49:06:a1:cb:8d:3c:98:
                    8a:47:cf:79:a3:9f:e7:bd:3f:c7:30:73:73:c9:74:
                    62:c4:5d:17:73:28:ef:e2:5d:ea:5f:e1:b0:b4:88:
                    06:62:cb:a0:5b:92:de:5a:0f:22:a9:2e:48:be:0e:
                    ef:ae:da:ed:d7:59:f1:20:43:18:08:de:d3:fe:6d:
                    db:1b:c5:da:80:31:b4:be:fd:85:01:73:68:3c:c9:
                    fd:98:cb:93:fe:16:9f:6e:fe:d6:62:88:6b:2f:26:
                    b2:44:25:76:57:f1:7a:f5:e7:84:d8:2e:7d:5b:6a:
                    49:2e:6b:40:7c:e1:83:de:58:50:35:2b:ab:85:40:
                    35:cb:f6:ef:78:52:21:af:95:eb:5e:0b:c7:61:65:
                    df:fd:61:ab:94:38:c1:4f:cc:4f:df:d9:f0:b3:5c:
                    eb:d3:36:65:b2:dc:d1:f4:15:6d:08:eb:1d:59:64:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6D:51:0F:CD:AC:18:8D:A8:50:6D:E5:EF:12:82:D6:9B:E2:8B:C9
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:b7:88:fd:41:54:b4:46:6d:8f:0e:c9:70:ea:ca:b3:2c:
         2e:16:d7:46:ab:b5:15:ce:de:4f:3e:c3:ee:66:62:db:fd:55:
         17:f9:e8:a7:89:5e:2b:ae:ec:30:89:33:bd:09:fe:71:e2:10:
         2a:98:59:89:74:fe:5e:fd:9f:24:c3:65:2b:4c:16:13:02:9d:
         82:30:bf:c3:cd:19:17:1e:72:86:c6:d3:fb:36:5e:69:ea:5e:
         4c:88:56:0c:e1:c6:84:52:6e:5f:17:96:fe:e2:4f:ff:b4:1d:
         0d:40:42:f3:af:99:4b:ea:b9:f9:0c:24:fb:d6:ab:96:2f:37:
         f7:23:41:3c:fa:39:40:96:c4:d9:22:22:9d:40:e1:e0:d7:6d:
         3a:a4:1d:86:85:79:32:23:e7:5f:df:41:91:94:ce:d7:69:88:
         3a:f3:d4:72:dd:60:a5:80:93:09:d2:db:93:b1:98:53:95:9b:
         d1:cf:3b:bb:35:b2:a5:44:89:3d:b8:f1:f3:f5:94:b6:c8:3c:
         61:79:c1:91:d5:a7:16:9b:3a:96:0c:31:a5:cf:6c:15:53:0f:
         f3:f5:f4:2a:a2:13:e2:31:7c:02:4d:1e:2d:90:96:e6:61:66:
         04:fa:0b:83:1d:00:e6:04:43:43:a0:69:a6:bb:6c:b3:71:05:
         c2:65:46:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM87bMLBbusi41hjTDC1kbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTIzMDMxNmIzZTI1OGU5MjU1ZjQ2YjIwODAyYWUyZjNj
YjQ2YTAwHhcNMjUwNTE0MDQwMDQ2WhcNMjUwNTE1MDQwMDQ2WjAzMTEwLwYDVQQD
EyhjOTZkNTEwZmNkYWMxODhkYTg1MDZkZTVlZjEyODJkNjliZTI4YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mxn5sLXFkqLgsM0HrpGfCG0OhJq
BWkcuvjR1CE9ILZUyFpEge5VgGTLzF0tx+iUbTgBC3ItrVuRZnJG170nU64YyF1h
LYLp50xKFjqPcVScckkGocuNPJiKR895o5/nvT/HMHNzyXRixF0Xcyjv4l3qX+Gw
tIgGYsugW5LeWg8iqS5Ivg7vrtrt11nxIEMYCN7T/m3bG8XagDG0vv2FAXNoPMn9
mMuT/hafbv7WYohrLyayRCV2V/F69eeE2C59W2pJLmtAfOGD3lhQNSurhUA1y/bv
eFIhr5XrXgvHYWXf/WGrlDjBT8xP39nws1zr0zZlstzR9BVtCOsdWWRWJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMltUQ/NrBiNqFBt5e8Sgtab4ovJMB8GA1UdIwQY
MBaAFLeiMDFrPiWOklX0ayCAKuLzy0agMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZmU1NTktMmYxZC00N2U4LTg0NjYt
ZWY5MTM1YTJjODJmLzEvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83ZmU1NTktMmYxZC00N2U4LTg0NjYtZWY5MTM1YTJjODJm
LzEvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/+3iP1B
VLRGbY8OyXDqyrMsLhbXRqu1Fc7eTz7D7mZi2/1VF/nop4leK67sMIkzvQn+ceIQ
KphZiXT+Xv2fJMNlK0wWEwKdgjC/w80ZFx5yhsbT+zZeaepeTIhWDOHGhFJuXxeW
/uJP/7QdDUBC86+ZS+q5+Qwk+9arli839yNBPPo5QJbE2SIinUDh4NdtOqQdhoV5
MiPnX99BkZTO12mIOvPUct1gpYCTCdLbk7GYU5Wb0c87uzWypUSJPbjx8/WUtsg8
YXnBkdWnFps6lgwxpc9sFVMP8/X0KqIT4jF8Ak0eLZCW5mFmBPoLgx0A5gRDQ6Bp
prtss3EFwmVG1A==
-----END CERTIFICATE-----
Generated at Wed May 14 10:29:29 2025 by rpki-client