Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File:                     mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier:          vqcpuZKOVJtBsC26KJmuCoSukjU7s+1cmI3iJwAcrJQ=
Subject key identifier:   DB:C2:CD:7C:21:FF:16:4B:8E:98:E0:EB:DA:D1:CC:72:47:43:82:9E
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer:       /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial:       0196C2A6AB720ED31214DCD210AE2F8BD2EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number:          0A91
Signing time:             Mon 12 May 2025 04:00:24 +0000
Manifest this update:     Mon 12 May 2025 04:00:24 +0000
Manifest next update:     Tue 13 May 2025 04:00:24 +0000
Files and hashes:         1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
                          2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
                          3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: VjCicuQrsJWPXOwC+tCDsJuvSjebtOMLWc9LLmAvsr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a6:ab:72:0e:d3:12:14:dc:d2:10:ae:2f:8b:d2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
        Validity
            Not Before: May 12 04:00:24 2025 GMT
            Not After : May 13 04:00:24 2025 GMT
        Subject: CN=dbc2cd7c21ff164b8e98e0ebdad1cc724743829e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:1f:2d:66:a6:c3:eb:31:87:48:ca:0b:f8:
                    d2:1b:cc:49:9d:ba:e5:eb:91:96:f1:5c:0d:4a:73:
                    85:46:43:ff:31:52:b1:28:82:3b:5d:2f:71:ee:b1:
                    8f:09:aa:15:63:44:6c:15:85:1e:45:e6:be:73:f5:
                    3d:8a:6c:bc:ae:c1:a8:d5:f2:2f:85:c9:fa:87:1b:
                    5b:9d:d7:fe:76:74:c3:a2:31:53:a5:7a:57:ec:bb:
                    f9:3f:e8:dc:55:55:81:4f:ca:da:08:30:75:bd:7a:
                    bc:ca:80:23:c2:67:0e:87:81:f2:27:7a:3c:15:c6:
                    02:f8:39:3c:fe:4b:b6:33:c0:98:0e:ae:b0:4e:be:
                    8b:dd:fb:a2:a3:75:13:7d:f2:42:18:af:0b:c6:7d:
                    7e:5d:80:d2:01:e9:82:93:e4:32:6e:32:41:f3:43:
                    83:42:a5:1d:b9:a8:a3:d3:fe:dc:85:a6:1d:df:60:
                    29:83:9c:06:1e:72:fa:00:67:70:74:c8:1c:ab:ae:
                    a0:a3:28:45:6b:74:54:a3:b6:cb:b0:f9:f4:03:77:
                    02:09:4f:d0:e3:24:35:73:87:3a:61:15:14:0d:b7:
                    c8:19:84:4a:54:38:3c:a8:b5:9c:40:e2:4c:17:f7:
                    14:2d:d0:99:ba:cd:7e:57:5d:42:5d:82:6d:4c:67:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:CD:7C:21:FF:16:4B:8E:98:E0:EB:DA:D1:CC:72:47:43:82:9E
            X509v3 Authority Key Identifier:
                keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:e8:89:7d:57:24:1e:e2:5d:4f:d3:74:b1:69:b6:60:31:
         6a:5a:85:db:3a:43:e9:2b:4f:ac:f7:fd:e0:20:22:6a:75:79:
         d9:b7:d4:30:b9:75:0e:32:9a:37:5b:5a:2e:a8:29:74:dc:27:
         13:a1:87:86:8f:5e:99:9c:c4:cb:00:f0:9e:ba:09:48:e6:04:
         f3:25:c2:5f:fa:19:94:9f:97:8d:59:bb:58:6d:f4:1e:db:6d:
         d8:60:c2:45:d6:16:81:6e:ea:80:15:52:c9:36:91:98:b7:7d:
         d0:57:e1:82:4c:93:95:10:8c:46:55:cc:ed:59:62:2a:40:a4:
         4d:d3:10:10:b4:ca:9e:d8:01:63:37:7a:c9:fd:a3:ad:6b:d1:
         66:f5:25:4e:06:fb:cd:7a:cf:c0:3d:45:cc:65:f8:f6:ab:af:
         2a:8b:84:34:36:30:83:41:6b:f3:4f:47:e6:17:c3:df:71:47:
         a8:00:59:77:47:56:50:6e:f2:5e:10:f4:c8:5d:cc:f2:7b:05:
         6a:fb:7c:93:9c:56:b6:c2:e0:e7:33:a4:a7:1a:6f:07:13:d8:
         46:3b:4b:82:41:bf:5b:c1:0d:99:20:7f:8f:d5:00:b7:5f:56:
         16:80:d5:20:43:a6:d9:f8:e3:91:94:97:7d:01:28:0a:86:45:
         c0:6a:a2:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpqtyDtMSFNzSEK4vi9LqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjUwNTEyMDQwMDI0WhcNMjUwNTEzMDQwMDI0WjAzMTEwLwYDVQQD
EyhkYmMyY2Q3YzIxZmYxNjRiOGU5OGUwZWJkYWQxY2M3MjQ3NDM4MjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWwfLWamw+sxh0jKC/jSG8xJnbrl
65GW8VwNSnOFRkP/MVKxKII7XS9x7rGPCaoVY0RsFYUeRea+c/U9imy8rsGo1fIv
hcn6hxtbndf+dnTDojFTpXpX7Lv5P+jcVVWBT8raCDB1vXq8yoAjwmcOh4HyJ3o8
FcYC+Dk8/ku2M8CYDq6wTr6L3fuio3UTffJCGK8Lxn1+XYDSAemCk+QybjJB80OD
QqUduaij0/7chaYd32Apg5wGHnL6AGdwdMgcq66goyhFa3RUo7bLsPn0A3cCCU/Q
4yQ1c4c6YRUUDbfIGYRKVDg8qLWcQOJMF/cULdCZus1+V11CXYJtTGdCswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvCzXwh/xZLjpjg69rRzHJHQ4KeMB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVXoiX1X
JB7iXU/TdLFptmAxalqF2zpD6StPrPf94CAianV52bfUMLl1DjKaN1taLqgpdNwn
E6GHho9emZzEywDwnroJSOYE8yXCX/oZlJ+XjVm7WG30Httt2GDCRdYWgW7qgBVS
yTaRmLd90FfhgkyTlRCMRlXM7VliKkCkTdMQELTKntgBYzd6yf2jrWvRZvUlTgb7
zXrPwD1FzGX49quvKouENDYwg0Fr809H5hfD33FHqABZd0dWUG7yXhD0yF3M8nsF
avt8k5xWtsLg5zOkpxpvBxPYRjtLgkG/W8ENmSB/j9UAt19WFoDVIEOm2fjjkZSX
fQEoCoZFwGqivw==
-----END CERTIFICATE-----
Generated at Mon May 12 08:17:19 2025 by rpki-client