Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File:                     qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier:          o3lPdko9yAKd+0SIFVr2ehOTNqa9PQI+zoBt3lnn6/Q=
Subject key identifier:   29:F1:E9:66:CF:A6:28:CE:4D:5C:D1:34:09:AB:52:83:FB:B2:F0:E9
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer:       /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial:       0196B7B52F7EB3BB4F0C9D167BBD2F1FFD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number:          0970
Signing time:             Sat 10 May 2025 01:00:26 +0000
Manifest this update:     Sat 10 May 2025 01:00:26 +0000
Manifest next update:     Sun 11 May 2025 01:00:26 +0000
Files and hashes:         1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=)
                          2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=)
                          3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: E35R76AnitojgPvrsVTuU9plLQoowtJljJyeYDoHH9U=)
                          4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=)
                          5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:2f:7e:b3:bb:4f:0c:9d:16:7b:bd:2f:1f:fd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
        Validity
            Not Before: May 10 01:00:26 2025 GMT
            Not After : May 11 01:00:26 2025 GMT
        Subject: CN=29f1e966cfa628ce4d5cd13409ab5283fbb2f0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:00:ac:b9:5c:25:0a:a7:c2:0d:18:7c:08:
                    2b:7a:ea:ed:23:95:ee:68:6e:85:2f:9b:d8:eb:b6:
                    09:86:31:e7:b4:6a:0d:e9:5b:ea:e6:74:76:14:e1:
                    fa:26:18:ac:e9:0c:aa:94:f8:73:24:e7:e4:97:9b:
                    61:77:19:05:f9:1f:0b:73:36:b8:13:bf:c4:a5:2e:
                    72:02:2a:54:d5:bc:b8:ee:c5:9f:9f:34:39:f5:66:
                    78:ce:c7:1d:e1:d1:76:c2:16:dc:fe:cd:bf:9b:2c:
                    de:5a:f2:cb:4f:c7:11:24:ac:e7:b5:03:bb:90:56:
                    86:1a:b2:a6:ef:9f:9d:46:5f:d7:34:67:70:0c:86:
                    fa:64:74:c6:2a:90:c9:b2:b0:ec:a3:a8:f0:d9:2d:
                    05:3e:09:b6:ed:c8:cc:40:c0:ca:2c:29:68:3f:74:
                    ec:f8:5d:9c:5f:05:af:9d:f5:be:34:6b:48:e2:27:
                    dc:8d:5f:ce:ec:95:12:e3:bb:a0:5b:9c:4c:d4:bf:
                    fb:e0:c3:d8:11:fe:7b:12:dc:05:87:e4:c1:4c:2b:
                    5c:ce:86:2f:97:0f:73:e4:24:a4:ae:56:74:b4:7e:
                    3b:18:10:4a:54:e1:47:d2:79:3c:95:ea:46:e4:d5:
                    65:7d:d9:43:8e:10:42:44:62:d5:e2:cc:26:cd:3f:
                    9a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F1:E9:66:CF:A6:28:CE:4D:5C:D1:34:09:AB:52:83:FB:B2:F0:E9
            X509v3 Authority Key Identifier:
                keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:af:02:ea:48:b3:c8:d1:4c:dd:3f:4e:0c:19:e4:96:0b:
         96:7f:6c:df:cb:51:f1:63:52:c5:b5:55:c2:3f:40:4f:96:c8:
         04:42:09:7b:8a:95:51:c6:ae:c3:62:1a:7d:70:ca:92:38:8a:
         61:63:e8:55:4e:3b:d9:5f:cb:9f:78:55:2b:9e:ae:dc:2e:95:
         9d:f5:48:91:8f:bb:12:51:00:25:a3:1b:57:18:2c:62:be:66:
         11:96:65:97:23:38:05:01:8c:df:95:86:c0:74:4b:6f:8e:be:
         a7:3d:c3:cd:ea:39:9f:b2:dc:98:00:57:46:26:c9:f6:1a:ae:
         be:fc:25:bb:4f:71:06:24:be:84:42:6c:91:2a:91:0e:20:cf:
         e1:7b:82:79:42:ba:89:e6:27:e1:ae:64:90:48:51:10:cb:b2:
         f5:5d:11:8b:2d:16:d5:95:fd:9e:78:d9:5d:8c:82:dd:96:91:
         a3:c4:b8:0d:bb:1c:12:eb:56:fe:d2:cf:74:7f:b3:dc:88:f4:
         8d:f2:a4:e8:04:ce:24:a0:ef:fe:e2:c9:f2:f6:23:60:f2:45:
         8f:af:67:b7:30:69:7a:9d:20:c1:cc:06:f4:a8:69:95:cc:23:
         f1:e7:4d:52:b0:38:af:eb:c1:70:90:85:e9:0c:6f:1a:02:b0:
         45:73:66:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tS9+s7tPDJ0We70vH/1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi
ZjZhYjAwHhcNMjUwNTEwMDEwMDI2WhcNMjUwNTExMDEwMDI2WjAzMTEwLwYDVQQD
EygyOWYxZTk2NmNmYTYyOGNlNGQ1Y2QxMzQwOWFiNTI4M2ZiYjJmMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3gArLlcJQqnwg0YfAgreurtI5Xu
aG6FL5vY67YJhjHntGoN6Vvq5nR2FOH6Jhis6QyqlPhzJOfkl5thdxkF+R8Lcza4
E7/EpS5yAipU1by47sWfnzQ59WZ4zscd4dF2whbc/s2/myzeWvLLT8cRJKzntQO7
kFaGGrKm75+dRl/XNGdwDIb6ZHTGKpDJsrDso6jw2S0FPgm27cjMQMDKLCloP3Ts
+F2cXwWvnfW+NGtI4ifcjV/O7JUS47ugW5xM1L/74MPYEf57EtwFh+TBTCtczoYv
lw9z5CSkrlZ0tH47GBBKVOFH0nk8lepG5NVlfdlDjhBCRGLV4swmzT+aGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnx6WbPpijOTVzRNAmrUoP7svDpMB8GA1UdIwQY
MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt
NzJhMDgyY2RiMTgyLzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy
LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJivAupI
s8jRTN0/TgwZ5JYLln9s38tR8WNSxbVVwj9AT5bIBEIJe4qVUcauw2IafXDKkjiK
YWPoVU472V/Ln3hVK56u3C6VnfVIkY+7ElEAJaMbVxgsYr5mEZZllyM4BQGM35WG
wHRLb46+pz3Dzeo5n7LcmABXRibJ9hquvvwlu09xBiS+hEJskSqRDiDP4XuCeUK6
ieYn4a5kkEhREMuy9V0Riy0W1ZX9nnjZXYyC3ZaRo8S4DbscEutW/tLPdH+z3Ij0
jfKk6ATOJKDv/uLJ8vYjYPJFj69ntzBpep0gwcwG9Khplcwj8edNUrA4r+vBcJCF
6QxvGgKwRXNm0g==
-----END CERTIFICATE-----
Generated at Sat May 10 05:08:54 2025 by rpki-client