Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          nfVdwsBn790teMBzeTkGDEhcNG7g2723gXdAtXmyh7I=
Subject key identifier:   0B:52:3C:7B:66:48:B5:CA:E8:CC:5B:BE:02:4A:E4:09:32:03:C1:92
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       0196AEE9120EB1183FD03563D7186E12C9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          0224
Signing time:             Thu 08 May 2025 08:00:32 +0000
Manifest this update:     Thu 08 May 2025 08:00:32 +0000
Manifest next update:     Fri 09 May 2025 08:00:32 +0000
Files and hashes:         1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: 09N4bRqV8m45UvV5jU3Ia3olC8dMsBr2d8qR9/eY7Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:e9:12:0e:b1:18:3f:d0:35:63:d7:18:6e:12:c9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: May  8 08:00:32 2025 GMT
            Not After : May  9 08:00:32 2025 GMT
        Subject: CN=0b523c7b6648b5cae8cc5bbe024ae4093203c192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:f4:c5:1a:92:3d:bf:e0:80:f5:57:d0:2c:
                    b8:72:44:9c:18:ea:23:39:96:96:df:bb:64:ec:ea:
                    2c:5d:f1:af:3d:11:48:38:d8:5d:37:86:a5:5d:c7:
                    54:60:27:25:aa:26:2c:3d:03:88:7f:46:32:ef:3a:
                    6e:dc:b2:0f:16:4a:33:96:f5:74:f6:99:69:b9:81:
                    d6:5f:cf:35:7f:b8:60:5b:3a:80:ef:0d:82:6b:10:
                    89:f8:d1:50:e0:22:5a:c5:9b:6f:b5:a5:0f:03:1e:
                    27:33:7f:6c:db:f5:dc:46:51:9b:ac:42:f7:03:72:
                    95:86:07:4f:d4:39:11:83:5c:14:aa:42:39:18:0e:
                    ed:09:e7:bb:5a:06:26:b3:20:ec:86:08:7c:5a:46:
                    5a:fb:2e:dc:49:fc:6c:82:77:b1:52:5d:d2:7e:71:
                    3d:cb:4c:fe:94:aa:30:f1:26:63:89:f6:84:d8:cb:
                    fe:71:5c:8d:53:81:86:75:67:dc:81:a5:75:fc:64:
                    f5:20:f0:2c:b0:66:6a:e2:08:47:b2:13:79:39:99:
                    da:16:14:f8:ce:ff:1c:95:db:df:41:94:fd:39:34:
                    70:96:26:56:0e:db:54:37:df:5b:24:17:f4:5e:a7:
                    f5:69:08:57:b9:fa:b8:13:aa:be:b8:cd:b8:af:ba:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:52:3C:7B:66:48:B5:CA:E8:CC:5B:BE:02:4A:E4:09:32:03:C1:92
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:0f:7c:fb:74:f4:8a:3d:af:dd:fc:c2:c0:02:8f:bd:1c:fc:
         62:ee:b5:47:5d:dd:38:64:64:4b:60:86:21:87:97:b7:8b:23:
         b1:c5:9f:a4:fe:48:a4:30:9b:2b:78:35:58:dc:b4:9d:8d:08:
         cc:ed:7e:b9:4a:fc:50:76:a2:73:35:b3:2c:f7:69:d3:0c:1c:
         8c:93:3e:e6:af:c3:a5:48:1b:41:e6:66:da:ab:ed:f0:2b:dc:
         26:c2:9b:a5:f1:1a:ef:cc:e8:00:d0:93:55:20:f5:04:e6:6c:
         5e:e2:cc:67:de:43:42:5d:d1:fd:0a:f2:e7:f4:9a:f6:d2:b6:
         90:d6:73:2d:93:8a:c7:9c:0f:8c:07:37:6d:b5:9f:bb:65:e3:
         d4:71:da:11:cf:40:8f:9b:d8:79:91:86:7b:90:59:fb:ee:17:
         22:af:32:42:68:c9:35:1a:f1:f2:18:1c:3f:ae:83:c0:b5:5d:
         04:d7:18:b5:52:73:72:20:a4:55:40:b9:b9:f6:b6:22:0c:c2:
         82:51:b1:8d:6a:a7:ac:4a:8b:3c:68:5e:98:2d:cd:e3:7c:2d:
         1e:85:1e:3d:67:b7:45:14:16:fd:15:36:10:07:35:3c:b6:d0:
         67:65:0a:87:e4:7f:58:ea:63:ad:7b:ba:bb:ab:dd:4b:3a:c8:
         89:e6:7f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZau6RIOsRg/0DVj1xhuEsnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGMzMjlkODc2M2MyOWYyOTkzMWFiYmI4MTk1Zjk3NTAz
ODI5OGIwHhcNMjUwNTA4MDgwMDMyWhcNMjUwNTA5MDgwMDMyWjAzMTEwLwYDVQQD
EygwYjUyM2M3YjY2NDhiNWNhZThjYzViYmUwMjRhZTQwOTMyMDNjMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpL0xRqSPb/ggPVX0Cy4ckScGOoj
OZaW37tk7OosXfGvPRFIONhdN4alXcdUYCclqiYsPQOIf0Yy7zpu3LIPFkozlvV0
9plpuYHWX881f7hgWzqA7w2CaxCJ+NFQ4CJaxZtvtaUPAx4nM39s2/XcRlGbrEL3
A3KVhgdP1DkRg1wUqkI5GA7tCee7WgYmsyDshgh8WkZa+y7cSfxsgnexUl3SfnE9
y0z+lKow8SZjifaE2Mv+cVyNU4GGdWfcgaV1/GT1IPAssGZq4ghHshN5OZnaFhT4
zv8cldvfQZT9OTRwliZWDttUN99bJBf0Xqf1aQhXufq4E6q+uM24r7oAswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtSPHtmSLXK6MxbvgJK5AkyA8GSMB8GA1UdIwQY
MBaAFJqMMp2HY8KfKZMau7gZX5dQOCmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYt
ZmRhOGExM2NhMWQ3LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYtZmRhOGExM2NhMWQ3
LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6w98+3T0
ij2v3fzCwAKPvRz8Yu61R13dOGRkS2CGIYeXt4sjscWfpP5IpDCbK3g1WNy0nY0I
zO1+uUr8UHaiczWzLPdp0wwcjJM+5q/DpUgbQeZm2qvt8CvcJsKbpfEa78zoANCT
VSD1BOZsXuLMZ95DQl3R/Qry5/Sa9tK2kNZzLZOKx5wPjAc3bbWfu2Xj1HHaEc9A
j5vYeZGGe5BZ++4XIq8yQmjJNRrx8hgcP66DwLVdBNcYtVJzciCkVUC5ufa2IgzC
glGxjWqnrEqLPGhemC3N43wtHoUePWe3RRQW/RU2EAc1PLbQZ2UKh+R/WOpjrXu6
u6vdSzrIieZ/IQ==
-----END CERTIFICATE-----
Generated at Thu May 8 16:13:33 2025 by rpki-client