Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          5ARLVdfYOU2R1VQKWBQlD+HP/uHcaIb+3ej3brRADBk=
Subject key identifier:   53:1A:05:FD:2B:BC:AE:92:DA:F3:82:C8:A9:0E:71:D6:D8:E3:27:AC
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       0196C9F24550782A0CBE105993713BFF75F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0B54
Signing time:             Tue 13 May 2025 14:00:19 +0000
Manifest this update:     Tue 13 May 2025 14:00:19 +0000
Manifest next update:     Wed 14 May 2025 14:00:19 +0000
Files and hashes:         1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
                          2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
                          3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
                          4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: s6e/fWAfRfzRRtKnk+0rVjIfCPIpbvTHR3BI4FBZcho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:f2:45:50:78:2a:0c:be:10:59:93:71:3b:ff:75:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: May 13 14:00:19 2025 GMT
            Not After : May 14 14:00:19 2025 GMT
        Subject: CN=531a05fd2bbcae92daf382c8a90e71d6d8e327ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:40:15:44:c3:73:6f:e6:1f:5e:53:21:08:03:
                    79:66:a4:3e:33:b8:74:92:12:30:b8:e3:6d:dc:5e:
                    f8:56:33:52:16:90:aa:2d:41:5b:a1:2d:17:f4:c7:
                    93:e5:62:a0:ed:b4:39:72:9d:ab:9a:d8:13:4f:82:
                    b0:1a:f9:37:d6:eb:12:30:32:dd:29:1c:8f:c8:49:
                    28:67:1f:3e:4c:8a:ea:59:fd:6a:8e:5d:2a:36:e7:
                    db:9d:f3:76:d9:d4:20:ab:76:12:4c:2b:37:ed:e0:
                    7e:4e:53:57:2d:3e:d5:f1:cf:11:51:1c:75:33:a9:
                    69:70:d7:6b:1c:df:9b:7f:78:e1:8d:f1:26:89:da:
                    06:b1:f8:33:b1:19:7b:54:c1:52:de:25:97:ce:7c:
                    8e:88:71:a6:0b:a9:b5:b2:ea:51:32:fd:b8:97:79:
                    a8:ef:7d:39:4e:a8:02:81:aa:77:75:1d:a1:60:f9:
                    1c:44:19:4d:57:ee:60:bf:3b:1f:68:9e:48:a3:db:
                    8e:c8:4a:40:78:ae:29:66:45:ca:3a:83:e2:c8:3e:
                    90:6e:2c:1f:83:77:bd:c5:81:25:b0:8b:e2:b7:ab:
                    d7:cd:8e:44:f5:5f:bd:29:fc:15:6d:36:ae:91:b3:
                    f0:b0:a5:d1:71:c1:20:20:c2:aa:84:4b:a1:98:e8:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1A:05:FD:2B:BC:AE:92:DA:F3:82:C8:A9:0E:71:D6:D8:E3:27:AC
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f6:65:3b:05:38:2b:4d:ea:8c:af:aa:f2:e5:7b:a0:7c:55:
         f3:1c:c5:b3:a4:4b:9b:03:a8:af:e6:3e:72:46:5d:23:2c:dd:
         a9:26:11:a9:d8:f6:01:73:89:f8:9b:ba:ba:cd:68:f2:41:fa:
         49:fc:d1:23:68:fa:fc:87:dc:c4:d2:fa:59:d0:7c:06:1b:72:
         43:d4:11:28:d2:60:a9:fc:85:47:8d:d1:b2:5a:06:8d:ad:d9:
         2e:53:4c:5c:9a:b6:ce:f3:37:36:7e:6c:95:6e:42:88:81:8e:
         f8:9b:06:7a:d7:df:41:01:c1:80:b6:72:28:76:17:af:a5:bb:
         c5:4f:3a:a2:00:a9:7f:97:6f:9e:67:e5:37:32:72:09:81:54:
         47:c1:8d:6d:31:a2:93:ed:cd:b4:dc:22:63:62:cc:f7:57:43:
         94:d1:19:46:5f:10:04:6e:87:d3:83:6e:c8:3c:57:85:de:27:
         1c:1f:3f:08:51:1c:0d:e6:8a:76:0a:d1:e3:35:20:f5:0f:ec:
         f3:f9:09:55:1d:0c:88:32:b0:e4:4c:16:f6:7b:a1:d3:02:29:
         84:c1:60:b3:79:68:e0:e0:2d:cf:4c:c8:9c:ba:86:87:c9:08:
         1a:d9:61:58:f6:45:83:2c:14:85:5f:19:bf:b9:5f:bd:b8:43:
         a2:00:f4:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJ8kVQeCoMvhBZk3E7/3X2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1
NzcyMTMwHhcNMjUwNTEzMTQwMDE5WhcNMjUwNTE0MTQwMDE5WjAzMTEwLwYDVQQD
Eyg1MzFhMDVmZDJiYmNhZTkyZGFmMzgyYzhhOTBlNzFkNmQ4ZTMyN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0AVRMNzb+YfXlMhCAN5ZqQ+M7h0
khIwuONt3F74VjNSFpCqLUFboS0X9MeT5WKg7bQ5cp2rmtgTT4KwGvk31usSMDLd
KRyPyEkoZx8+TIrqWf1qjl0qNufbnfN22dQgq3YSTCs37eB+TlNXLT7V8c8RURx1
M6lpcNdrHN+bf3jhjfEmidoGsfgzsRl7VMFS3iWXznyOiHGmC6m1supRMv24l3mo
7305TqgCgap3dR2hYPkcRBlNV+5gvzsfaJ5Io9uOyEpAeK4pZkXKOoPiyD6Qbiwf
g3e9xYElsIvit6vXzY5E9V+9KfwVbTaukbPwsKXRccEgIMKqhEuhmOiGdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMaBf0rvK6S2vOCyKkOcdbY4yesMB8GA1UdIwQY
MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt
YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0
LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/ZlOwU4
K03qjK+q8uV7oHxV8xzFs6RLmwOor+Y+ckZdIyzdqSYRqdj2AXOJ+Ju6us1o8kH6
SfzRI2j6/IfcxNL6WdB8BhtyQ9QRKNJgqfyFR43RsloGja3ZLlNMXJq2zvM3Nn5s
lW5CiIGO+JsGetffQQHBgLZyKHYXr6W7xU86ogCpf5dvnmflNzJyCYFUR8GNbTGi
k+3NtNwiY2LM91dDlNEZRl8QBG6H04NuyDxXhd4nHB8/CFEcDeaKdgrR4zUg9Q/s
8/kJVR0MiDKw5EwW9nuh0wIphMFgs3lo4OAtz0zInLqGh8kIGtlhWPZFgywUhV8Z
v7lfvbhDogD0KA==
-----END CERTIFICATE-----
Generated at Tue May 13 19:51:20 2025 by rpki-client