Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File:                     5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier:          HtL/NER7symmO0nY5u8iL+eamoPHs7lW4YXWFrtJZC8=
Subject key identifier:   41:D6:9F:02:45:D5:C2:13:D5:A4:85:CB:21:92:35:0E:80:D1:54:EA
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       0196A27750E248C1E5536D3FB7492002D95C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number:          0E7B
Signing time:             Mon 05 May 2025 22:00:50 +0000
Manifest this update:     Mon 05 May 2025 22:00:50 +0000
Manifest next update:     Tue 06 May 2025 22:00:50 +0000
Files and hashes:         1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=)
                          2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=)
                          3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: i7fBrbNaYFaLVVo+d56Asl3ZKMT6zly/5UmyW4hblIw=)
                          4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=)
                          5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=)
                          6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=)
                          7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=)
                          8: XdkKjnd6LaveT1GpI62K4k3GES4.roa (hash: l121R1rfPQMMuCi+4Uvt0XCheHbjajXd15YiLDehmuU=)
                          9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=)
                          10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:50:e2:48:c1:e5:53:6d:3f:b7:49:20:02:d9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: May  5 22:00:50 2025 GMT
            Not After : May  6 22:00:50 2025 GMT
        Subject: CN=41d69f0245d5c213d5a485cb2192350e80d154ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:c2:2a:3a:62:8a:11:1e:04:3e:11:56:32:
                    cd:e0:7a:31:b8:87:7f:01:71:65:72:ff:a0:27:c8:
                    7f:74:22:9a:2b:70:b7:b4:b2:6e:0e:f1:a8:08:e3:
                    ff:ad:ed:96:3e:44:13:83:da:8d:bc:12:a7:72:c3:
                    7d:8c:21:74:74:bf:52:2c:42:f4:f5:b1:d3:92:0e:
                    92:e0:0e:b6:93:1c:ee:fc:dd:71:60:07:53:47:03:
                    02:8d:6f:2a:12:12:a3:ee:f8:1e:5b:60:31:3a:65:
                    9a:58:c2:62:5a:3a:29:b5:89:8a:ed:f0:dc:02:4d:
                    78:c0:40:aa:79:bc:40:8e:29:19:ac:a3:ff:26:4b:
                    60:91:ce:03:ec:90:a2:23:e2:77:48:c0:99:7e:02:
                    e4:81:0b:45:65:45:07:bf:4e:86:86:c7:a9:dd:e9:
                    27:12:04:57:b4:96:17:2d:a8:fc:75:1a:7c:a5:b1:
                    f6:34:5f:87:91:68:ec:71:15:7b:fa:b0:a3:39:26:
                    96:6f:80:fa:26:6d:10:47:87:e8:f6:e2:61:d1:60:
                    8c:bd:38:9d:a1:82:59:16:c9:a2:5b:fe:6f:c0:56:
                    27:dd:0b:1a:13:88:e5:a5:d8:bf:a4:bc:36:c1:21:
                    6c:a9:2f:0e:38:29:da:c8:e0:a8:75:c1:76:21:2e:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D6:9F:02:45:D5:C2:13:D5:A4:85:CB:21:92:35:0E:80:D1:54:EA
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:70:75:f3:c7:19:82:8c:b5:3c:2f:50:66:89:62:97:d1:dd:
         c9:e9:da:da:c9:57:62:10:65:d8:27:3c:98:e6:1e:53:05:bb:
         99:64:6f:ca:e1:5a:3e:59:33:f8:9c:54:c2:e9:00:7c:1b:cf:
         94:b3:6e:87:6a:b6:4a:46:a5:69:be:cd:35:ee:b1:96:17:50:
         31:81:3c:c1:95:1d:41:7b:c4:5d:bf:85:62:e8:93:1e:84:03:
         24:50:55:94:14:97:7f:5a:76:2f:a6:39:d1:30:e1:7b:ee:bb:
         65:2e:0d:b2:51:d9:c1:ca:84:34:e9:25:10:71:9c:a8:12:99:
         fe:89:04:9e:d4:f1:27:5f:c3:4e:bb:39:09:02:10:ba:f0:4e:
         e1:45:84:06:3c:4f:27:dd:52:00:5d:01:4f:79:d9:35:39:6a:
         ff:93:82:ac:eb:b0:5e:60:1c:b8:50:8d:57:4f:2b:06:5c:ef:
         9e:0f:f7:1b:74:1d:f8:e6:d1:17:ca:df:bd:ef:80:94:54:2e:
         0b:2f:0a:d0:22:69:56:8a:2a:8d:4c:cb:9b:bd:43:41:1e:3c:
         f9:e2:85:87:b8:e2:cc:19:2e:7d:1e:02:1d:09:87:fc:40:38:
         3c:f2:b8:e1:59:4d:df:81:18:45:1d:40:a1:81:0b:1b:6a:b1:
         39:82:05:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid1DiSMHlU20/t0kgAtlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1
OGM4MjAwHhcNMjUwNTA1MjIwMDUwWhcNMjUwNTA2MjIwMDUwWjAzMTEwLwYDVQQD
Eyg0MWQ2OWYwMjQ1ZDVjMjEzZDVhNDg1Y2IyMTkyMzUwZTgwZDE1NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooLCKjpiihEeBD4RVjLN4HoxuId/
AXFlcv+gJ8h/dCKaK3C3tLJuDvGoCOP/re2WPkQTg9qNvBKncsN9jCF0dL9SLEL0
9bHTkg6S4A62kxzu/N1xYAdTRwMCjW8qEhKj7vgeW2AxOmWaWMJiWjoptYmK7fDc
Ak14wECqebxAjikZrKP/Jktgkc4D7JCiI+J3SMCZfgLkgQtFZUUHv06Ghsep3ekn
EgRXtJYXLaj8dRp8pbH2NF+HkWjscRV7+rCjOSaWb4D6Jm0QR4fo9uJh0WCMvTid
oYJZFsmiW/5vwFYn3QsaE4jlpdi/pLw2wSFsqS8OOCnayOCodcF2IS75BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHWnwJF1cIT1aSFyyGSNQ6A0VTqMB8GA1UdIwQY
MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt
NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh
LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3B188cZ
goy1PC9QZolil9Hdyena2slXYhBl2Cc8mOYeUwW7mWRvyuFaPlkz+JxUwukAfBvP
lLNuh2q2Skalab7NNe6xlhdQMYE8wZUdQXvEXb+FYuiTHoQDJFBVlBSXf1p2L6Y5
0TDhe+67ZS4NslHZwcqENOklEHGcqBKZ/okEntTxJ1/DTrs5CQIQuvBO4UWEBjxP
J91SAF0BT3nZNTlq/5OCrOuwXmAcuFCNV08rBlzvng/3G3Qd+ObRF8rfve+AlFQu
Cy8K0CJpVooqjUzLm71DQR48+eKFh7jizBkufR4CHQmH/EA4PPK44VlN34EYRR1A
oYELG2qxOYIFNQ==
-----END CERTIFICATE-----
Generated at Tue May 6 03:26:47 2025 by rpki-client