Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          Yfqmd9cKK8Vu6LyN//tF1olvFt0pb08kZ5R52lPmnyE=
Subject key identifier:   AC:F8:4B:53:F4:08:0F:08:1F:72:67:DF:B5:91:21:0B:B3:08:CF:55
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       0196BD8141D1E6AAEE3EEDF1E5387A62A750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          1549
Signing time:             Sun 11 May 2025 04:01:26 +0000
Manifest this update:     Sun 11 May 2025 04:01:26 +0000
Manifest next update:     Mon 12 May 2025 04:01:26 +0000
Files and hashes:         1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 29Yjqln33GIA1lRw15N/5HRUAcaS4vorvs96i2ht7qQ=)
                          2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
                          3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
                          4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
                          5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
                          6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
                          7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
                          8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
                          9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:81:41:d1:e6:aa:ee:3e:ed:f1:e5:38:7a:62:a7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: May 11 04:01:26 2025 GMT
            Not After : May 12 04:01:26 2025 GMT
        Subject: CN=acf84b53f4080f081f7267dfb591210bb308cf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:c1:34:c8:d8:07:da:af:87:17:e2:62:a4:
                    0d:30:84:3f:f2:85:84:91:99:0a:cb:33:5b:c8:ca:
                    0f:6c:f9:33:43:8b:ad:73:8c:8d:69:fb:4f:e8:09:
                    9c:6d:9b:26:04:ee:8f:12:8a:8a:23:07:1d:23:73:
                    7c:a5:6c:c4:10:d2:b1:97:7e:d5:a9:d3:8b:d3:43:
                    01:f7:1e:59:e4:ef:b8:48:8f:a2:c6:ac:c9:93:de:
                    b6:ab:8c:a2:bf:8a:1e:03:8a:c4:60:8d:fc:e3:09:
                    97:02:2b:83:e6:d3:00:d5:d6:8a:28:5b:cc:24:87:
                    33:ea:f3:84:f4:bc:63:17:cb:41:32:2a:03:b4:41:
                    a8:af:1f:c3:41:37:4e:3a:ea:29:ba:72:d9:48:8f:
                    6e:f8:3a:fa:2d:8d:ee:44:c8:45:23:5b:a3:1c:92:
                    79:0b:7a:b1:2f:db:fa:12:af:f5:39:f0:52:92:00:
                    6e:f9:04:9e:43:76:b7:10:21:7c:0f:29:35:b0:1f:
                    7b:08:e6:c8:06:6a:3f:56:28:4a:51:d9:7b:80:f2:
                    99:71:f6:e6:7c:67:f9:92:2b:ce:7f:ff:23:f6:b3:
                    b7:d6:1b:2b:a5:66:22:f4:f2:48:fa:38:f6:1b:2a:
                    51:1f:3e:e8:fc:97:18:4e:8e:40:95:23:1d:a6:d0:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F8:4B:53:F4:08:0F:08:1F:72:67:DF:B5:91:21:0B:B3:08:CF:55
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:b4:da:ca:b0:b2:41:60:12:b6:a1:82:59:1e:eb:39:3c:
         dd:1e:bb:a7:16:9c:2d:11:11:ea:a2:f7:0f:db:d0:f5:89:d4:
         0b:21:63:d9:27:6d:11:05:cc:f1:01:7a:cf:c7:db:91:54:84:
         73:8b:7e:9c:bb:e2:1c:db:ab:f4:90:e3:1c:eb:28:8a:c8:e5:
         f2:90:36:be:96:5a:60:a0:5c:2e:7f:bb:de:88:5e:18:f6:a0:
         4e:32:e0:54:32:e4:2c:53:9a:0e:06:f4:da:da:31:f5:44:4e:
         55:04:29:03:47:d5:17:b4:66:9d:4f:83:0f:89:0f:9f:08:13:
         50:22:cb:21:e3:f6:aa:6b:df:08:2f:fa:75:ae:7f:56:ed:8c:
         b1:0d:3f:72:db:d0:69:56:cd:d5:7e:12:b3:68:7c:b0:23:a2:
         f9:75:cc:2b:94:cf:98:4c:f7:71:bc:c3:fb:9e:7a:0e:cd:21:
         7d:38:ab:cb:67:a8:17:c1:33:f3:1b:b8:fb:bb:5f:b4:a9:5a:
         8c:74:21:c1:67:ed:e6:d3:02:ac:86:9f:8b:36:65:38:68:89:
         6f:b7:a4:74:07:d5:3f:00:91:2a:b7:e3:d0:aa:21:39:76:68:
         5a:0b:7f:21:a0:45:0b:94:18:3a:53:99:95:c6:07:29:21:66:
         66:68:fd:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gUHR5qruPu3x5Th6YqdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjUwNTExMDQwMTI2WhcNMjUwNTEyMDQwMTI2WjAzMTEwLwYDVQQD
EyhhY2Y4NGI1M2Y0MDgwZjA4MWY3MjY3ZGZiNTkxMjEwYmIzMDhjZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPXBNMjYB9qvhxfiYqQNMIQ/8oWE
kZkKyzNbyMoPbPkzQ4utc4yNaftP6AmcbZsmBO6PEoqKIwcdI3N8pWzEENKxl37V
qdOL00MB9x5Z5O+4SI+ixqzJk962q4yiv4oeA4rEYI384wmXAiuD5tMA1daKKFvM
JIcz6vOE9LxjF8tBMioDtEGorx/DQTdOOuopunLZSI9u+Dr6LY3uRMhFI1ujHJJ5
C3qxL9v6Eq/1OfBSkgBu+QSeQ3a3ECF8Dyk1sB97CObIBmo/VihKUdl7gPKZcfbm
fGf5kivOf/8j9rO31hsrpWYi9PJI+jj2GypRHz7o/JcYTo5AlSMdptDNuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz4S1P0CA8IH3Jn37WRIQuzCM9VMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW202sqw
skFgErahglke6zk83R67pxacLRER6qL3D9vQ9YnUCyFj2SdtEQXM8QF6z8fbkVSE
c4t+nLviHNur9JDjHOsoisjl8pA2vpZaYKBcLn+73oheGPagTjLgVDLkLFOaDgb0
2tox9UROVQQpA0fVF7RmnU+DD4kPnwgTUCLLIeP2qmvfCC/6da5/Vu2MsQ0/ctvQ
aVbN1X4Ss2h8sCOi+XXMK5TPmEz3cbzD+556Ds0hfTiry2eoF8Ez8xu4+7tftKla
jHQhwWft5tMCrIafizZlOGiJb7ekdAfVPwCRKrfj0KohOXZoWgt/IaBFC5QYOlOZ
lcYHKSFmZmj9ag==
-----END CERTIFICATE-----
Generated at Sun May 11 12:43:23 2025 by rpki-client