Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier:          hQ2n0zUW0OjZz2QCXxBuWIc05QTwt3RRI11t8JMskRw=
Subject key identifier:   C3:71:DD:8D:8B:7E:D2:E9:90:F5:88:57:91:98:6D:E1:28:91:3E:9B
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer:       /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial:       0196B8FEB124413CDEB18F3491E0585C6C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number:          08FD
Signing time:             Sat 10 May 2025 07:00:21 +0000
Manifest this update:     Sat 10 May 2025 07:00:21 +0000
Manifest next update:     Sun 11 May 2025 07:00:21 +0000
Files and hashes:         1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
                          2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: HRYcR5S0q5c0jauiuca0J105/g5oC57ZCxxWDCIc07E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:fe:b1:24:41:3c:de:b1:8f:34:91:e0:58:5c:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Validity
            Not Before: May 10 07:00:21 2025 GMT
            Not After : May 11 07:00:21 2025 GMT
        Subject: CN=c371dd8d8b7ed2e990f5885791986de128913e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:58:da:2d:6b:24:71:b8:da:c9:9e:4f:c8:eb:
                    2d:8f:91:99:84:25:89:b8:66:de:57:7e:9a:29:37:
                    f6:18:75:4b:37:72:bc:7b:45:52:f6:15:47:ec:2e:
                    08:3e:26:04:b8:de:4b:c9:c8:28:b7:ed:43:e0:e5:
                    d4:57:a5:a7:fa:f1:08:06:e2:cf:ca:13:19:59:79:
                    30:98:99:c2:c6:38:d8:6b:dc:12:17:29:f8:fb:dd:
                    89:a9:0b:6e:82:7d:e2:09:30:84:4b:86:b7:b2:70:
                    b1:e8:df:40:45:3a:54:d5:f4:89:95:70:a8:70:ba:
                    35:1c:8f:d6:b7:9a:3f:5a:15:cd:7a:f1:cd:23:18:
                    69:fa:8d:77:55:d6:4f:e0:2f:0f:c3:4f:0d:ca:12:
                    1c:89:7a:b1:8c:56:1e:a0:0f:de:c5:03:8f:c0:83:
                    99:56:74:98:17:02:7d:98:47:f4:a8:b7:e0:1f:4e:
                    3e:88:ec:b8:3e:18:5f:08:a2:0d:1d:85:40:4f:57:
                    dd:82:37:84:19:90:42:dd:20:8c:20:f3:e8:ca:86:
                    5a:f0:7f:a9:ab:1d:fe:cf:cc:1d:59:05:34:c7:10:
                    c9:72:45:09:9a:a6:da:69:49:1f:73:5b:28:0f:78:
                    06:05:95:1f:a8:d2:e9:b7:e1:10:ea:60:f3:62:2d:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:DD:8D:8B:7E:D2:E9:90:F5:88:57:91:98:6D:E1:28:91:3E:9B
            X509v3 Authority Key Identifier:
                keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:d9:14:c9:b3:6c:67:de:53:be:b9:60:0d:5b:a1:60:93:
         d7:c8:70:f3:01:4a:73:22:3f:b7:24:48:60:10:e4:95:97:ea:
         3b:7a:e0:f4:10:fc:9c:05:9d:0b:17:06:24:9f:95:39:5c:c9:
         77:2a:d0:64:03:68:75:ee:e8:f4:ff:b2:ed:a5:48:2c:a2:f3:
         7b:bc:4c:db:3c:3e:bb:4d:bc:89:c6:00:8f:7e:6f:54:2c:cb:
         84:ef:17:62:63:ac:a2:d5:ad:3a:15:f0:2d:23:f3:2c:a6:02:
         0d:fc:8c:fb:ab:e5:5e:96:c6:05:6c:76:72:ad:a1:22:96:7b:
         88:53:c1:b3:99:a1:93:83:01:e7:1a:f0:60:6c:a9:a6:4d:ac:
         7b:2d:d7:2f:6b:d5:ab:38:82:f2:2c:b2:38:14:ce:2d:28:91:
         42:78:d5:dc:74:5a:35:48:35:f1:4b:a1:ab:80:70:4a:93:a2:
         7a:de:95:f8:ed:e2:f2:20:d1:b6:3a:ba:08:e7:18:b2:07:90:
         c1:01:8c:80:27:2b:40:c1:a2:b6:98:0f:e6:be:05:37:45:14:
         34:f9:d3:02:d4:7d:c8:16:e0:e3:fb:6d:f2:6d:d2:fa:e9:f2:
         a3:00:b2:01:3d:ff:bf:ec:02:4e:e5:2c:7d:25:95:7d:a1:fb:
         95:4c:91:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/rEkQTzesY80keBYXGxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTNkYTc1N2MxN2ZlMzhhMGU2Y2Q3MDI3NWM3M2M4YzY5
Yzg5NmUwHhcNMjUwNTEwMDcwMDIxWhcNMjUwNTExMDcwMDIxWjAzMTEwLwYDVQQD
EyhjMzcxZGQ4ZDhiN2VkMmU5OTBmNTg4NTc5MTk4NmRlMTI4OTEzZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgljaLWskcbjayZ5PyOstj5GZhCWJ
uGbeV36aKTf2GHVLN3K8e0VS9hVH7C4IPiYEuN5Lycgot+1D4OXUV6Wn+vEIBuLP
yhMZWXkwmJnCxjjYa9wSFyn4+92JqQtugn3iCTCES4a3snCx6N9ARTpU1fSJlXCo
cLo1HI/Wt5o/WhXNevHNIxhp+o13VdZP4C8Pw08NyhIciXqxjFYeoA/exQOPwIOZ
VnSYFwJ9mEf0qLfgH04+iOy4PhhfCKINHYVAT1fdgjeEGZBC3SCMIPPoyoZa8H+p
qx3+z8wdWQU0xxDJckUJmqbaaUkfc1soD3gGBZUfqNLpt+EQ6mDzYi1VTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNx3Y2LftLpkPWIV5GYbeEokT6bMB8GA1UdIwQY
MBaAFF+T2nV8F/44oObNcCdcc8jGnIluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83OWU0MzktZmMwYi00ZTZlLThiMDYt
MzlmYjY2YTI2ZWY4LzEvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83OWU0MzktZmMwYi00ZTZlLThiMDYtMzlmYjY2YTI2ZWY4
LzEvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqXZFMmz
bGfeU765YA1boWCT18hw8wFKcyI/tyRIYBDklZfqO3rg9BD8nAWdCxcGJJ+VOVzJ
dyrQZANode7o9P+y7aVILKLze7xM2zw+u028icYAj35vVCzLhO8XYmOsotWtOhXw
LSPzLKYCDfyM+6vlXpbGBWx2cq2hIpZ7iFPBs5mhk4MB5xrwYGyppk2sey3XL2vV
qziC8iyyOBTOLSiRQnjV3HRaNUg18Uuhq4BwSpOiet6V+O3i8iDRtjq6COcYsgeQ
wQGMgCcrQMGitpgP5r4FN0UUNPnTAtR9yBbg4/tt8m3S+unyowCyAT3/v+wCTuUs
fSWVfaH7lUyRNw==
-----END CERTIFICATE-----
Generated at Sat May 10 14:35:09 2025 by rpki-client