Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
File:                     AOC06vnBB5HzU7qYfeI2ChOEF70.mft (raw, json)
Hash identifier:          xzNaU5cyRyNkBlF97GRniukUc+7V5sTmvfHkCYktFYA=
Subject key identifier:   41:F5:BC:0E:87:78:22:F2:E9:DC:13:2F:C6:1A:8C:36:91:E8:60:5F
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Certificate issuer:       /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial:       0196BE92D5551F8EDDE1EAC5E82A05EDEDD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
Manifest number:          075E
Signing time:             Sun 11 May 2025 09:00:15 +0000
Manifest this update:     Sun 11 May 2025 09:00:15 +0000
Manifest next update:     Mon 12 May 2025 09:00:15 +0000
Files and hashes:         1: 7Qz5q4z6Tluf-_C3llmKbm-Y_6k.roa (hash: Btz39reQ2rKKUs2JCEZIO4ZVKwDZCOjT3ZoGf4qNKOM=)
                          2: AOC06vnBB5HzU7qYfeI2ChOEF70.crl (hash: 2lb4UAcMLW+EeZ8k5BE3/bYse8AnVvHv5EBCXAZN7dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:92:d5:55:1f:8e:dd:e1:ea:c5:e8:2a:05:ed:ed:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
        Validity
            Not Before: May 11 09:00:15 2025 GMT
            Not After : May 12 09:00:15 2025 GMT
        Subject: CN=41f5bc0e877822f2e9dc132fc61a8c3691e8605f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:2e:d2:14:6e:d9:83:26:39:bd:6f:85:c2:
                    8c:cc:5f:31:26:ed:9f:2a:36:72:be:3a:c2:2f:70:
                    ce:41:07:b9:d5:60:61:eb:f9:64:9b:78:0b:e4:bc:
                    06:46:20:30:a8:9e:ab:23:02:a8:f5:e0:00:53:ca:
                    e9:57:89:b0:4c:d7:83:79:d7:81:bd:b8:4e:70:57:
                    aa:12:80:ba:12:1a:93:fc:90:62:0c:dd:99:15:d5:
                    88:ad:96:5c:d6:94:e3:7d:db:a1:2e:56:61:c9:00:
                    9d:f1:81:7e:22:9b:49:4a:40:ec:14:19:bf:c1:c2:
                    7b:b8:07:77:d4:c1:3a:cb:cd:71:49:67:c5:f9:01:
                    2a:53:dc:e3:e3:73:7c:e8:bb:8f:ce:1e:94:7a:54:
                    20:18:41:97:f1:f5:c7:b7:86:40:82:67:e2:3b:79:
                    24:b2:eb:be:ab:29:b5:cd:4a:19:3a:5f:2c:57:14:
                    24:ef:fe:97:56:28:26:90:0d:76:e1:0e:72:16:9f:
                    7b:0c:6a:85:03:de:5d:60:5b:64:0b:87:bd:15:6f:
                    62:4d:74:ac:68:2f:38:d3:61:f0:35:19:0c:89:e9:
                    f9:e5:25:bc:09:12:59:07:49:95:9b:6f:19:9a:bb:
                    e1:92:ce:7b:75:fd:73:d3:df:75:3b:0c:a2:ed:5c:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:BC:0E:87:78:22:F2:E9:DC:13:2F:C6:1A:8C:36:91:E8:60:5F
            X509v3 Authority Key Identifier:
                keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:c5:c8:b7:99:6d:f6:cf:42:58:68:12:ad:39:f2:9a:33:
         9c:35:9a:fc:df:da:3e:48:13:82:b7:d0:b2:36:87:b2:51:13:
         8f:82:cb:b0:88:63:f7:7a:78:ec:37:73:1f:61:12:db:dc:c3:
         0e:37:29:43:79:a6:aa:24:56:bb:8e:7a:32:d1:ce:f3:5f:3e:
         db:9d:9b:db:e4:fa:38:61:ff:6b:fc:6f:a3:ca:a1:00:cb:27:
         d9:ef:b7:02:e8:77:41:83:ab:7d:ab:fe:67:bf:30:8a:0f:ae:
         66:0d:5c:b0:72:dd:8c:a6:1f:f6:03:ae:a7:73:70:05:37:11:
         41:2c:aa:53:b5:df:75:c9:97:5e:fd:08:8a:71:c9:f5:00:f9:
         f0:2f:a8:e8:89:16:a3:00:b6:0d:9f:8b:4f:56:ed:14:5a:be:
         18:5c:d4:0a:15:6a:32:2a:57:c8:c8:27:8d:3e:0d:5f:84:2a:
         27:8d:a5:c2:fd:d0:91:79:6b:b0:34:4a:21:c7:ec:45:c6:04:
         6c:57:31:36:50:8d:e5:f0:9b:74:fa:30:e0:76:2c:27:2c:64:
         45:77:93:d6:85:1e:65:b6:93:9c:ac:a2:88:c1:e5:22:4f:27:
         05:84:a0:2d:43:ee:4e:80:e4:46:fd:52:f2:82:5e:db:4d:7c:
         46:74:6c:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+ktVVH47d4erF6CoF7e3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTBiNGVhZjljMTA3OTFmMzUzYmE5ODdkZTIzNjBhMTM4
NDE3YmQwHhcNMjUwNTExMDkwMDE1WhcNMjUwNTEyMDkwMDE1WjAzMTEwLwYDVQQD
Eyg0MWY1YmMwZTg3NzgyMmYyZTlkYzEzMmZjNjFhOGMzNjkxZTg2MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Uu0hRu2YMmOb1vhcKMzF8xJu2f
KjZyvjrCL3DOQQe51WBh6/lkm3gL5LwGRiAwqJ6rIwKo9eAAU8rpV4mwTNeDedeB
vbhOcFeqEoC6EhqT/JBiDN2ZFdWIrZZc1pTjfduhLlZhyQCd8YF+IptJSkDsFBm/
wcJ7uAd31ME6y81xSWfF+QEqU9zj43N86LuPzh6UelQgGEGX8fXHt4ZAgmfiO3kk
suu+qym1zUoZOl8sVxQk7/6XVigmkA124Q5yFp97DGqFA95dYFtkC4e9FW9iTXSs
aC8402HwNRkMien55SW8CRJZB0mVm28Zmrvhks57df1z0991Owyi7VwgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH1vA6HeCLy6dwTL8YajDaR6GBfMB8GA1UdIwQY
MBaAFADgtOr5wQeR81O6mH3iNgoThBe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTAwNDMtNWFmZS00NTZmLWIzZjgt
ZGMwMjc0MzJlNWE1LzEvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMTAwNDMtNWFmZS00NTZmLWIzZjgtZGMwMjc0MzJlNWE1
LzEvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp7FyLeZ
bfbPQlhoEq058poznDWa/N/aPkgTgrfQsjaHslETj4LLsIhj93p47DdzH2ES29zD
DjcpQ3mmqiRWu456MtHO818+252b2+T6OGH/a/xvo8qhAMsn2e+3Auh3QYOrfav+
Z78wig+uZg1csHLdjKYf9gOup3NwBTcRQSyqU7XfdcmXXv0IinHJ9QD58C+o6IkW
owC2DZ+LT1btFFq+GFzUChVqMipXyMgnjT4NX4QqJ42lwv3QkXlrsDRKIcfsRcYE
bFcxNlCN5fCbdPow4HYsJyxkRXeT1oUeZbaTnKyiiMHlIk8nBYSgLUPuToDkRv1S
8oJe2018RnRsIw==
-----END CERTIFICATE-----
Generated at Sun May 11 12:48:44 2025 by rpki-client