Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          4tNx/Y6r08oFrhzWqFImvnO444oXXJN1oKADdezOlKY=
Subject key identifier:   B7:F9:42:08:FF:43:93:EA:6A:72:15:EB:6B:BD:CA:BA:47:E1:B2:F7
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       0196CCBC804F89125174D29B5CB94F1C4946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0B20
Signing time:             Wed 14 May 2025 03:00:27 +0000
Manifest this update:     Wed 14 May 2025 03:00:27 +0000
Manifest next update:     Thu 15 May 2025 03:00:27 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: hBdk1pgVA8KuWKXDNwgQNFCQ/A0QzTXgJAfQvZH6lVA=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:80:4f:89:12:51:74:d2:9b:5c:b9:4f:1c:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: May 14 03:00:27 2025 GMT
            Not After : May 15 03:00:27 2025 GMT
        Subject: CN=b7f94208ff4393ea6a7215eb6bbdcaba47e1b2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:17:2b:47:1e:0a:d0:65:49:82:7c:0b:db:92:
                    9d:e7:74:1f:a1:53:80:01:d7:6d:a8:90:f8:fa:70:
                    2b:e3:43:57:7b:ea:ab:1c:96:50:9c:52:76:97:20:
                    b4:6d:59:55:57:ab:eb:6a:9a:e9:c6:10:51:2f:1f:
                    7d:31:cf:ba:49:f8:83:52:30:e5:8c:0b:83:d4:f6:
                    90:f3:fa:d9:eb:4c:c4:c6:db:0a:c6:e1:6c:86:2d:
                    df:25:b0:de:8b:1a:cb:ff:59:b5:50:41:53:a3:a0:
                    b0:56:d6:ef:e1:56:f9:53:9c:d8:ed:b9:b9:06:41:
                    9f:f4:a0:65:b2:8b:7d:36:09:b0:21:a4:dc:70:21:
                    74:29:ea:82:51:a2:28:49:63:b2:bb:b9:d3:97:30:
                    69:c4:78:5f:05:2b:dd:94:68:e5:45:21:07:49:8f:
                    3e:60:47:e3:62:ad:1d:77:1b:0e:fb:17:73:23:f4:
                    64:35:1e:5c:a8:3c:7f:8c:8f:43:36:65:b3:94:81:
                    df:72:7e:f2:0b:e0:11:f5:08:86:b2:a8:52:b0:49:
                    2d:1a:12:a1:72:3d:19:a2:6e:35:00:25:87:b4:e1:
                    41:d0:3c:bc:87:6b:c7:c4:e3:71:de:58:4d:ab:01:
                    43:d2:ce:25:1a:f8:13:b7:4a:a4:44:61:81:ae:5a:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F9:42:08:FF:43:93:EA:6A:72:15:EB:6B:BD:CA:BA:47:E1:B2:F7
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:40:b7:f0:48:4d:5f:1d:5e:5e:0c:51:14:d9:5f:db:c6:c0:
         d6:bf:0d:5c:6a:2e:f1:18:2f:88:79:b8:2e:5c:7d:8b:c5:63:
         02:52:ec:d3:f7:f0:c8:e0:c1:87:57:2d:ff:a5:57:1d:14:8f:
         1c:78:32:46:29:90:0a:e1:d6:ca:1f:e6:84:c5:6c:3b:96:d4:
         78:28:c0:52:30:8d:07:f8:d9:17:0d:27:53:70:81:06:69:53:
         98:79:a0:39:a7:f5:f9:66:cd:cc:bc:4c:86:6c:7c:f1:5b:37:
         7e:93:9f:70:43:eb:de:87:88:f6:4b:f5:e2:17:52:51:4f:24:
         2f:d1:54:10:d8:98:25:2e:9c:ef:7f:46:e2:56:4b:36:ca:33:
         05:51:45:fa:ab:c2:ab:23:d3:9d:dd:95:ec:bf:08:35:f4:33:
         e8:3d:88:c6:c3:b8:94:a2:e0:38:eb:e3:e0:17:f2:58:08:f2:
         4c:5d:8c:df:1d:e4:dd:20:f7:87:6c:19:4c:75:9b:de:d9:f6:
         5b:61:6e:06:1c:10:30:4d:9d:06:80:c8:f0:7c:02:12:5d:d8:
         7f:59:dc:2f:4a:0d:e4:ce:c6:b5:31:46:52:31:c9:bc:9f:1c:
         a6:04:be:6f:e1:ac:bc:7e:c4:40:27:32:de:68:a2:3d:6e:9e:
         ee:fd:d2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMvIBPiRJRdNKbXLlPHElGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz
YmMwNzgwHhcNMjUwNTE0MDMwMDI3WhcNMjUwNTE1MDMwMDI3WjAzMTEwLwYDVQQD
EyhiN2Y5NDIwOGZmNDM5M2VhNmE3MjE1ZWI2YmJkY2FiYTQ3ZTFiMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xcrRx4K0GVJgnwL25Kd53QfoVOA
AddtqJD4+nAr40NXe+qrHJZQnFJ2lyC0bVlVV6vraprpxhBRLx99Mc+6SfiDUjDl
jAuD1PaQ8/rZ60zExtsKxuFshi3fJbDeixrL/1m1UEFTo6CwVtbv4Vb5U5zY7bm5
BkGf9KBlsot9NgmwIaTccCF0KeqCUaIoSWOyu7nTlzBpxHhfBSvdlGjlRSEHSY8+
YEfjYq0ddxsO+xdzI/RkNR5cqDx/jI9DNmWzlIHfcn7yC+AR9QiGsqhSsEktGhKh
cj0Zom41ACWHtOFB0Dy8h2vHxONx3lhNqwFD0s4lGvgTt0qkRGGBrlrsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf5Qgj/Q5PqanIV62u9yrpH4bL3MB8GA1UdIwQY
MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt
ZTc0ZDhkMWQ0ZTAyLzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy
LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3UC38EhN
Xx1eXgxRFNlf28bA1r8NXGou8RgviHm4Llx9i8VjAlLs0/fwyODBh1ct/6VXHRSP
HHgyRimQCuHWyh/mhMVsO5bUeCjAUjCNB/jZFw0nU3CBBmlTmHmgOaf1+WbNzLxM
hmx88Vs3fpOfcEPr3oeI9kv14hdSUU8kL9FUENiYJS6c739G4lZLNsozBVFF+qvC
qyPTnd2V7L8INfQz6D2IxsO4lKLgOOvj4BfyWAjyTF2M3x3k3SD3h2wZTHWb3tn2
W2FuBhwQME2dBoDI8HwCEl3Yf1ncL0oN5M7GtTFGUjHJvJ8cpgS+b+GsvH7EQCcy
3miiPW6e7v3SvQ==
-----END CERTIFICATE-----
Generated at Wed May 14 11:50:42 2025 by rpki-client