Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File:                     8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier:          +vDylMi+CdK68tDLH6iVVvSr/qix7qrxNSsQE0wSUG8=
Subject key identifier:   6A:78:50:DC:CC:43:FF:0F:8B:05:23:ED:4C:76:23:60:4D:F1:FB:BE
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer:       /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial:       0196BCA497F0471486C6CF846E8C05BD51DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 00:00:25 +0000
Manifest this update:     Sun 11 May 2025 00:00:25 +0000
Manifest next update:     Mon 12 May 2025 00:00:25 +0000
Files and hashes:         1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: 8SD0KNwIuPuGZ+8D86pMa6Q5cs/dIOGRm3pD9bx2vCA=)
                          2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:a4:97:f0:47:14:86:c6:cf:84:6e:8c:05:bd:51:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
        Validity
            Not Before: May 11 00:00:25 2025 GMT
            Not After : May 12 00:00:25 2025 GMT
        Subject: CN=6a7850dccc43ff0f8b0523ed4c7623604df1fbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:31:f7:bd:f2:96:ed:ba:3d:fa:9f:aa:f7:
                    90:43:36:d4:4a:02:86:fc:28:80:80:68:fc:51:84:
                    c9:0f:de:af:32:81:d5:68:a1:39:b3:b6:4b:3a:b7:
                    fa:68:a3:c4:6f:1d:05:28:ec:5f:4a:e5:3f:60:5d:
                    4d:57:08:02:ba:54:7a:6c:6b:2f:4e:91:41:7c:d3:
                    4d:70:f8:6a:b0:5a:66:23:41:e9:0b:0a:47:ae:b9:
                    e9:71:5e:5d:58:30:06:1b:e9:23:b8:e9:95:48:16:
                    d6:ff:70:64:1d:ab:f3:e3:89:d9:e2:b1:70:8b:a6:
                    14:83:3f:c9:a0:3c:82:36:2f:ac:b6:f6:58:3d:0f:
                    c4:f5:8b:17:e8:1a:bf:9c:03:95:03:c1:c4:e7:d6:
                    e6:e3:79:a9:7c:ac:7b:59:ed:d7:01:e8:79:58:ab:
                    48:11:38:1c:d1:7a:4e:a3:a6:7c:f3:d7:67:c7:05:
                    9f:7c:9e:38:a0:a2:46:c7:67:47:aa:1c:fe:4a:d3:
                    3b:06:45:3c:78:61:ee:62:25:0f:d4:92:8d:66:bf:
                    62:75:7d:cd:e6:77:e4:7d:a5:d0:c4:d8:39:9c:49:
                    f4:ff:50:1c:74:ee:ce:14:f5:d9:c4:f4:3d:be:ca:
                    47:0c:89:6d:f5:35:55:5a:4f:f4:5c:05:13:06:d7:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:50:DC:CC:43:FF:0F:8B:05:23:ED:4C:76:23:60:4D:F1:FB:BE
            X509v3 Authority Key Identifier:
                keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:28:c0:af:b8:4f:42:ae:1e:dc:28:0a:68:f9:c4:50:ae:
         8a:50:18:a3:e0:4c:95:b0:33:d2:50:be:b0:cf:cf:35:87:7f:
         1a:05:a4:9c:ac:6e:11:1d:4f:3d:98:f4:b0:54:42:7f:7a:ba:
         e8:1e:07:c3:5d:ef:da:4a:ff:2a:4d:3a:21:24:09:45:a1:25:
         44:92:5b:7b:b7:1b:48:50:83:ee:f3:7f:78:6d:eb:c0:81:0e:
         ed:08:14:5b:b1:6c:19:81:e5:07:cf:2c:43:de:60:d4:fc:b7:
         38:e7:40:bc:f7:8f:9e:43:ef:4a:1c:25:ea:c3:dd:02:ea:3d:
         8e:98:7e:dd:26:32:94:43:23:ee:62:2f:94:a0:17:3c:33:f0:
         df:13:fe:18:40:08:95:2d:04:d6:42:23:87:29:37:29:03:4c:
         37:5f:78:0d:4b:98:75:df:dc:c9:24:c8:65:77:96:1f:15:67:
         ff:de:c1:1b:a2:ed:98:52:96:48:ab:3b:06:b7:77:ed:ee:3b:
         d8:09:fa:f5:bf:f5:d8:dd:dd:d2:8f:24:b9:af:2e:89:7b:b8:
         04:4f:84:09:4f:43:c0:fe:37:10:48:df:df:ef:a5:b5:a5:56:
         12:15:50:39:db:66:3b:df:48:20:2e:59:dc:c6:8d:9e:76:a7:
         5d:06:4e:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pJfwRxSGxs+EbowFvVHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5
NmRmYWYwHhcNMjUwNTExMDAwMDI1WhcNMjUwNTEyMDAwMDI1WjAzMTEwLwYDVQQD
Eyg2YTc4NTBkY2NjNDNmZjBmOGIwNTIzZWQ0Yzc2MjM2MDRkZjFmYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhMx973ylu26PfqfqveQQzbUSgKG
/CiAgGj8UYTJD96vMoHVaKE5s7ZLOrf6aKPEbx0FKOxfSuU/YF1NVwgCulR6bGsv
TpFBfNNNcPhqsFpmI0HpCwpHrrnpcV5dWDAGG+kjuOmVSBbW/3BkHavz44nZ4rFw
i6YUgz/JoDyCNi+stvZYPQ/E9YsX6Bq/nAOVA8HE59bm43mpfKx7We3XAeh5WKtI
ETgc0XpOo6Z889dnxwWffJ44oKJGx2dHqhz+StM7BkU8eGHuYiUP1JKNZr9idX3N
5nfkfaXQxNg5nEn0/1AcdO7OFPXZxPQ9vspHDIlt9TVVWk/0XAUTBtcexwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp4UNzMQ/8PiwUj7Ux2I2BN8fu+MB8GA1UdIwQY
MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt
NzBkNTljYzRmN2NjLzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj
LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaksowK+4
T0KuHtwoCmj5xFCuilAYo+BMlbAz0lC+sM/PNYd/GgWknKxuER1PPZj0sFRCf3q6
6B4Hw13v2kr/Kk06ISQJRaElRJJbe7cbSFCD7vN/eG3rwIEO7QgUW7FsGYHlB88s
Q95g1Py3OOdAvPePnkPvShwl6sPdAuo9jph+3SYylEMj7mIvlKAXPDPw3xP+GEAI
lS0E1kIjhyk3KQNMN194DUuYdd/cySTIZXeWHxVn/97BG6LtmFKWSKs7Brd37e47
2An69b/12N3d0o8kua8uiXu4BE+ECU9DwP43EEjf3++ltaVWEhVQOdtmO99IIC5Z
3MaNnnanXQZOxw==
-----END CERTIFICATE-----
Generated at Sun May 11 02:02:55 2025 by rpki-client