Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          vyibxcVgWdNxyP394xbz0YfbUfx6z1Nq38mJzs6YZSg=
Subject key identifier:   21:15:A8:07:0A:46:DF:AD:9E:A5:0C:E6:2B:23:4C:68:1A:8D:03:AF
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       0196C34C4ECB44B4ECD2D71BB6BAFA2F8568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          0F6C
Signing time:             Mon 12 May 2025 07:01:20 +0000
Manifest this update:     Mon 12 May 2025 07:01:20 +0000
Manifest next update:     Tue 13 May 2025 07:01:20 +0000
Files and hashes:         1: 9KG_X1JcHTmSDP-JQ2rjaLf8dF0.roa (hash: IJsz7QtJODgr4XlSOlR3sVLiifHafwYANxLLuTbye5I=)
                          2: Hx6NSKxu5GUFdxTnTFkwnz72mIg.roa (hash: SaFnthBgRV8E0/cfedWCGZYSk3klgbcSFK1UnXkwx9k=)
                          3: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: SLVAJ9bR5kOr5rdnHAfsreyrsQkIvpYeFTLtv5d5KoU=)
                          4: gZB-912_d67R6AKpQ4Eg3AExCoI.roa (hash: 20uFVWh/2FSfkkn7jT72yUsHaqZSGC47MPNXDIzH1b0=)
                          5: oJh0B_eYdHNYoIj-eMSg92GtqiU.roa (hash: VT24FOtWQc/ytG8iILX4ZcZUTmQmuSWh5GjQpAKaEDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4c:4e:cb:44:b4:ec:d2:d7:1b:b6:ba:fa:2f:85:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: May 12 07:01:20 2025 GMT
            Not After : May 13 07:01:20 2025 GMT
        Subject: CN=2115a8070a46dfad9ea50ce62b234c681a8d03af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:01:41:ed:98:16:ee:3d:c3:20:09:49:d3:
                    35:95:f5:14:2f:84:9c:de:33:81:3b:10:e4:98:d0:
                    ca:02:82:e4:7f:3e:d8:42:31:02:8f:e4:75:3b:bf:
                    48:7d:b6:36:49:92:3c:02:03:5c:bf:cd:1e:94:52:
                    18:76:e5:0d:cc:37:3d:b8:d8:bd:34:72:46:21:fb:
                    06:00:96:4c:1f:c6:3c:2f:3f:f0:30:68:f6:5e:fa:
                    43:13:2e:89:7b:86:7d:46:20:d2:50:05:08:23:67:
                    b4:5a:d9:d5:d2:96:50:18:0c:45:49:e1:c5:5b:81:
                    17:8e:64:a1:b3:e1:b6:94:ba:b5:99:8c:b8:00:26:
                    13:a0:b8:cf:03:51:f3:82:fa:d4:0e:3c:20:9a:d3:
                    14:42:fd:3f:2c:35:45:d9:6b:12:be:40:d9:a9:a5:
                    4e:8a:5f:6d:8d:1f:d8:b1:4c:e7:80:07:12:1f:dd:
                    b4:9e:d0:8c:39:cd:26:d9:90:46:05:51:e9:53:16:
                    62:a1:b8:8d:7a:fe:90:36:41:bb:58:c3:fe:32:e8:
                    0a:be:72:88:25:99:64:1b:7b:a9:9e:cc:9e:7a:59:
                    59:e0:37:d9:21:62:98:d6:c0:b3:c0:c2:53:b0:84:
                    fa:83:48:a4:67:a7:1e:40:09:c3:61:0e:5f:c4:cc:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:15:A8:07:0A:46:DF:AD:9E:A5:0C:E6:2B:23:4C:68:1A:8D:03:AF
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:c9:ce:89:dc:f7:e6:23:03:7f:8d:55:3a:18:51:a4:1c:
         b6:f4:0e:ff:3b:12:f3:af:e4:5f:c4:78:63:07:7f:75:bc:ea:
         11:4d:8d:28:27:08:cf:fa:b5:b0:04:7a:ef:27:07:f3:aa:47:
         c2:50:17:a6:61:c8:60:69:73:8b:58:36:5c:81:04:98:9f:25:
         75:b7:3a:10:50:db:3f:8f:69:55:4b:45:bb:b1:5b:a8:fa:f0:
         fd:b9:39:3b:95:62:2e:87:97:90:f6:ea:91:c5:ca:bf:ce:4b:
         32:19:63:3e:09:68:ab:3f:ff:cc:e5:39:5b:00:7f:dd:b7:91:
         78:d9:f7:c6:c8:c4:52:95:41:69:a4:79:6c:91:6e:04:ca:99:
         4d:5e:f8:64:11:85:df:f5:80:f7:29:ce:e1:39:15:8d:71:6c:
         58:0a:5c:31:b8:91:97:70:fb:60:02:3e:cb:d8:28:dd:fa:ec:
         04:ae:c4:a6:ab:1b:f1:10:c4:e4:33:59:7f:ff:92:a6:92:f8:
         3a:31:12:63:6f:e8:96:3b:73:64:c8:26:c8:34:c9:89:97:5b:
         49:80:a9:ab:c6:b4:55:19:6a:9d:07:ca:13:f2:7f:eb:b1:9c:
         64:43:74:53:65:e8:35:94:af:f1:a3:c1:3c:a7:03:13:20:46:
         d7:95:d2:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTE7LRLTs0tcbtrr6L4VoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzAzZTdhNjIzMDliZjAyN2MxZjEwNTM2OTI2YTE5Yjdm
MTRiMWUwHhcNMjUwNTEyMDcwMTIwWhcNMjUwNTEzMDcwMTIwWjAzMTEwLwYDVQQD
EygyMTE1YTgwNzBhNDZkZmFkOWVhNTBjZTYyYjIzNGM2ODFhOGQwM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWoBQe2YFu49wyAJSdM1lfUUL4Sc
3jOBOxDkmNDKAoLkfz7YQjECj+R1O79IfbY2SZI8AgNcv80elFIYduUNzDc9uNi9
NHJGIfsGAJZMH8Y8Lz/wMGj2XvpDEy6Je4Z9RiDSUAUII2e0WtnV0pZQGAxFSeHF
W4EXjmShs+G2lLq1mYy4ACYToLjPA1HzgvrUDjwgmtMUQv0/LDVF2WsSvkDZqaVO
il9tjR/YsUzngAcSH920ntCMOc0m2ZBGBVHpUxZiobiNev6QNkG7WMP+MugKvnKI
JZlkG3upnsyeellZ4DfZIWKY1sCzwMJTsIT6g0ikZ6ceQAnDYQ5fxMyFIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEVqAcKRt+tnqUM5isjTGgajQOvMB8GA1UdIwQY
MBaAFHhwPnpiMJvwJ8HxBTaSahm38UseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct
MDg0Y2NhMWM4NjIzLzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz
LzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8fJzonc
9+YjA3+NVToYUaQctvQO/zsS86/kX8R4Ywd/dbzqEU2NKCcIz/q1sAR67ycH86pH
wlAXpmHIYGlzi1g2XIEEmJ8ldbc6EFDbP49pVUtFu7FbqPrw/bk5O5ViLoeXkPbq
kcXKv85LMhljPgloqz//zOU5WwB/3beReNn3xsjEUpVBaaR5bJFuBMqZTV74ZBGF
3/WA9ynO4TkVjXFsWApcMbiRl3D7YAI+y9go3frsBK7Epqsb8RDE5DNZf/+SppL4
OjESY2/oljtzZMgmyDTJiZdbSYCpq8a0VRlqnQfKE/J/67GcZEN0U2XoNZSv8aPB
PKcDEyBG15XSjA==
-----END CERTIFICATE-----
Generated at Mon May 12 16:38:08 2025 by rpki-client