Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File:                     v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier:          eQEAVnEhsZa/sjkZsqk/mB12FgK7C9qZOczkyl1Wz+Q=
Subject key identifier:   59:CB:A8:62:4D:F4:28:5C:0E:09:D6:D9:EA:79:1A:8C:0D:A4:82:63
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer:       /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial:       0196B77E1CEC7B76F6CCE36153665C2D7851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number:          1443
Signing time:             Sat 10 May 2025 00:00:17 +0000
Manifest this update:     Sat 10 May 2025 00:00:17 +0000
Manifest next update:     Sun 11 May 2025 00:00:17 +0000
Files and hashes:         1: RyCW3YF5iKkzrNHX6rZe54l5IMM.roa (hash: nnvkgafHFhfZcY1hKxlsPbFkmUe449pia8RGh1NFs+Q=)
                          2: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (hash: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=)
                          3: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: 96Anb7vi9cwehNoaMkYwKmBpgW6mqShFFV9hnLYPNFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:7e:1c:ec:7b:76:f6:cc:e3:61:53:66:5c:2d:78:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
        Validity
            Not Before: May 10 00:00:17 2025 GMT
            Not After : May 11 00:00:17 2025 GMT
        Subject: CN=59cba8624df4285c0e09d6d9ea791a8c0da48263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:3c:19:ef:be:bd:26:d3:93:80:98:88:d6:
                    c5:43:64:a6:58:2a:76:fe:62:38:43:bd:66:4c:45:
                    e7:45:3c:53:06:d7:fe:51:c9:a9:ab:d5:33:44:50:
                    0b:7c:cc:3f:0d:1c:e8:15:27:77:ba:72:e6:b6:3a:
                    86:d1:ff:8f:dd:bd:ed:32:01:56:56:fe:74:53:b2:
                    60:48:5c:11:ce:b9:04:ea:e8:64:ea:5a:29:80:c4:
                    a8:f5:84:38:83:42:2e:1a:45:93:5c:69:90:d3:e9:
                    08:69:d2:92:f7:7b:fd:61:42:59:e8:22:8c:1f:1b:
                    af:2f:c7:d3:86:d9:c6:5c:d7:b3:38:87:0e:84:ba:
                    c2:1a:06:08:31:bb:60:b7:78:53:f0:ca:7a:6c:ab:
                    19:48:45:ad:16:bc:87:35:53:9d:df:e0:cc:a8:e9:
                    01:6e:5e:b1:c8:6a:63:c1:5c:c3:8d:44:68:a6:d3:
                    85:72:c0:0b:84:0a:0b:06:cb:8f:a6:0b:d2:92:1a:
                    f5:81:47:0b:df:42:8c:a0:b2:d1:df:8b:42:71:94:
                    1f:3f:9b:ed:74:c9:d9:27:72:00:e6:83:8f:b2:4f:
                    79:41:9b:68:8d:38:99:aa:4b:f1:74:e4:cf:ce:6e:
                    86:2d:6d:ae:cf:74:bc:7f:38:fb:a4:19:ca:5a:f9:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:A8:62:4D:F4:28:5C:0E:09:D6:D9:EA:79:1A:8C:0D:A4:82:63
            X509v3 Authority Key Identifier:
                keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:73:5e:3a:0c:0a:59:88:c6:d6:30:d4:e9:ad:9d:fe:21:
         dd:d0:f1:b6:0d:81:25:fa:5e:b3:96:14:bf:ca:3c:8b:03:b9:
         26:45:de:3d:61:d2:9c:d1:33:f1:65:aa:e5:bf:fd:b2:c9:f9:
         65:20:df:4a:63:2d:64:2a:32:cb:c7:84:e5:ab:69:49:4b:52:
         b5:9c:52:16:f9:63:12:1d:47:3f:0d:79:08:f4:54:09:51:b1:
         ec:5a:d1:c0:a0:b0:0c:1f:ab:d1:1f:5e:fa:05:ba:cc:d4:a0:
         36:ef:ca:77:0c:5a:f7:19:12:5d:dd:aa:f5:31:75:85:1b:07:
         05:0e:65:8b:f1:d9:a4:98:b9:7b:a5:bc:6a:05:11:94:5d:3a:
         9d:7e:73:81:f2:ff:b4:3d:29:7f:2c:85:17:bb:02:96:e7:61:
         39:4a:91:70:de:b6:15:f5:44:bf:b6:5a:1e:0c:4c:3d:e4:b9:
         91:05:64:05:19:82:cb:44:b9:9a:40:24:ba:31:2b:c9:67:2b:
         e4:e9:c6:ff:fe:29:00:12:6e:1c:cd:8f:fc:28:a0:21:8c:79:
         39:8b:37:64:f8:a5:d4:f7:53:e6:2f:12:9b:02:d1:0b:57:f8:
         d2:9d:e6:20:bf:8e:8f:7a:c8:ec:3b:f6:63:ff:49:e4:15:13:
         d5:51:97:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3fhzse3b2zONhU2ZcLXhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYTVmMGU3NjU0NzU3NTk1N2JjOTJjNmRkZGQwODRkM2Vh
N2Y4NjMwHhcNMjUwNTEwMDAwMDE3WhcNMjUwNTExMDAwMDE3WjAzMTEwLwYDVQQD
Eyg1OWNiYTg2MjRkZjQyODVjMGUwOWQ2ZDllYTc5MWE4YzBkYTQ4MjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00U8Ge++vSbTk4CYiNbFQ2SmWCp2
/mI4Q71mTEXnRTxTBtf+Ucmpq9UzRFALfMw/DRzoFSd3unLmtjqG0f+P3b3tMgFW
Vv50U7JgSFwRzrkE6uhk6lopgMSo9YQ4g0IuGkWTXGmQ0+kIadKS93v9YUJZ6CKM
HxuvL8fThtnGXNezOIcOhLrCGgYIMbtgt3hT8Mp6bKsZSEWtFryHNVOd3+DMqOkB
bl6xyGpjwVzDjURoptOFcsALhAoLBsuPpgvSkhr1gUcL30KMoLLR34tCcZQfP5vt
dMnZJ3IA5oOPsk95QZtojTiZqkvxdOTPzm6GLW2uz3S8fzj7pBnKWvlDdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnLqGJN9ChcDgnW2ep5GowNpIJjMB8GA1UdIwQY
MBaAFL+l8OdlR1dZV7ySxt3dCE0+p/hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYt
MDFkMTlhNzRiZTIzLzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYtMDFkMTlhNzRiZTIz
LzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3tzXjoM
ClmIxtYw1Omtnf4h3dDxtg2BJfpes5YUv8o8iwO5JkXePWHSnNEz8WWq5b/9ssn5
ZSDfSmMtZCoyy8eE5atpSUtStZxSFvljEh1HPw15CPRUCVGx7FrRwKCwDB+r0R9e
+gW6zNSgNu/Kdwxa9xkSXd2q9TF1hRsHBQ5li/HZpJi5e6W8agURlF06nX5zgfL/
tD0pfyyFF7sCludhOUqRcN62FfVEv7ZaHgxMPeS5kQVkBRmCy0S5mkAkujEryWcr
5OnG//4pABJuHM2P/CigIYx5OYs3ZPil1PdT5i8SmwLRC1f40p3mIL+Oj3rI7Dv2
Y/9J5BUT1VGX8g==
-----END CERTIFICATE-----
Generated at Sat May 10 08:14:23 2025 by rpki-client