Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          E7hmRHOUEmTmuuQ4UVjVh1Gl9wuYKtyWoPhia94Zu2A=
Subject key identifier:   69:0D:83:90:59:9C:82:CD:35:6E:B0:9B:3C:ED:03:10:52:11:58:5B
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       0196AF56ABE2989BDF234345D3043C64A083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1563
Signing time:             Thu 08 May 2025 10:00:14 +0000
Manifest this update:     Thu 08 May 2025 10:00:14 +0000
Manifest next update:     Fri 09 May 2025 10:00:14 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: yt1xqf6AszHCQpVn8YrOom/LX8KyAQJzW7zCT+C6W7A=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 10:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:56:ab:e2:98:9b:df:23:43:45:d3:04:3c:64:a0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: May  8 10:00:14 2025 GMT
            Not After : May  9 10:00:14 2025 GMT
        Subject: CN=690d8390599c82cd356eb09b3ced03105211585b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:cd:68:80:96:bf:e2:2b:f1:7c:d2:da:f3:
                    9c:f4:16:b5:0c:27:b0:60:a6:c7:a0:2b:08:0b:1c:
                    71:e9:41:ec:f3:bc:f8:c2:15:d4:15:76:04:65:14:
                    fd:e3:58:b3:62:13:05:8d:a2:62:6f:cd:b9:8c:9b:
                    67:7e:7a:73:9f:db:c5:31:9e:d3:61:88:2a:89:32:
                    86:57:85:45:2a:60:0f:7c:9c:86:30:55:a6:5e:d9:
                    81:2a:e7:16:c0:95:21:0c:c2:b4:a0:1b:01:36:f6:
                    b4:34:2c:34:10:f4:c7:07:47:f8:6e:85:0f:8e:76:
                    b9:cc:2b:b9:f0:72:43:d1:07:57:26:34:c8:a3:59:
                    cb:12:a6:d6:12:01:dc:41:b7:f1:f3:cb:99:ee:78:
                    5a:9b:9d:fc:ba:0b:ea:34:9a:4c:80:80:ef:09:26:
                    e8:17:64:c4:5e:f6:34:1a:b0:2f:51:50:5c:fb:28:
                    f8:9e:8d:ea:22:4c:fe:2d:51:fc:50:ac:f0:00:58:
                    f0:24:0a:c3:61:6e:2a:98:e9:40:e3:3b:5c:50:4f:
                    73:8e:a0:4f:0b:0f:43:3a:fe:00:ad:29:05:ac:98:
                    1e:20:73:10:d1:b0:8b:33:65:c8:12:0f:f3:c8:79:
                    0e:0a:6d:7b:55:60:cd:d5:2e:26:30:23:f7:09:77:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0D:83:90:59:9C:82:CD:35:6E:B0:9B:3C:ED:03:10:52:11:58:5B
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ef:36:a8:d5:19:9b:a0:b9:5d:75:97:8a:61:70:8a:b4:0c:
         f2:73:cf:c9:e0:db:30:8b:8b:e2:ac:fb:45:86:74:59:a3:c8:
         06:65:ce:41:a7:0c:dc:ae:82:b5:a5:d8:71:be:64:bf:2a:80:
         98:00:7b:3d:e9:25:ee:3b:20:7c:8a:0a:ca:3f:0c:1c:3d:d2:
         15:fe:49:b9:b7:bd:ca:b6:eb:f1:55:30:5b:55:d0:42:3f:05:
         bf:9e:8f:ea:ae:d1:b4:e8:a2:cc:fc:6f:0c:93:66:c3:61:23:
         90:e4:76:54:9b:bb:ed:0f:6b:9b:d4:20:89:b0:bc:12:d6:5e:
         e8:51:ab:ce:3d:36:be:c8:c4:37:91:cf:3d:97:e0:ad:f4:7c:
         5f:57:a9:34:3c:29:05:82:6e:dd:41:0e:ee:40:ac:be:47:9c:
         6e:17:1b:9f:ec:0b:95:0f:7a:f8:24:91:66:33:53:35:2e:ec:
         b6:7b:91:86:04:d7:da:49:c9:00:e8:75:ac:24:c9:42:7e:87:
         26:56:11:ad:04:92:88:a3:1d:c4:f9:46:55:02:41:56:ea:ab:
         06:c7:ad:9c:2d:fb:44:23:3b:79:8a:a7:ad:6f:d1:9a:60:11:
         f7:09:57:37:10:ec:c1:72:ed:51:62:a0:cb:80:01:13:ea:25:
         13:69:e1:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavVqvimJvfI0NF0wQ8ZKCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjUwNTA4MTAwMDE0WhcNMjUwNTA5MTAwMDE0WjAzMTEwLwYDVQQD
Eyg2OTBkODM5MDU5OWM4MmNkMzU2ZWIwOWIzY2VkMDMxMDUyMTE1ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHXNaICWv+Ir8XzS2vOc9Ba1DCew
YKbHoCsICxxx6UHs87z4whXUFXYEZRT941izYhMFjaJib825jJtnfnpzn9vFMZ7T
YYgqiTKGV4VFKmAPfJyGMFWmXtmBKucWwJUhDMK0oBsBNva0NCw0EPTHB0f4boUP
jna5zCu58HJD0QdXJjTIo1nLEqbWEgHcQbfx88uZ7nham538ugvqNJpMgIDvCSbo
F2TEXvY0GrAvUVBc+yj4no3qIkz+LVH8UKzwAFjwJArDYW4qmOlA4ztcUE9zjqBP
Cw9DOv4ArSkFrJgeIHMQ0bCLM2XIEg/zyHkOCm17VWDN1S4mMCP3CXeRgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkNg5BZnILNNW6wmzztAxBSEVhbMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuu82qNUZ
m6C5XXWXimFwirQM8nPPyeDbMIuL4qz7RYZ0WaPIBmXOQacM3K6CtaXYcb5kvyqA
mAB7Pekl7jsgfIoKyj8MHD3SFf5Jube9yrbr8VUwW1XQQj8Fv56P6q7RtOiizPxv
DJNmw2EjkOR2VJu77Q9rm9QgibC8EtZe6FGrzj02vsjEN5HPPZfgrfR8X1epNDwp
BYJu3UEO7kCsvkecbhcbn+wLlQ96+CSRZjNTNS7stnuRhgTX2knJAOh1rCTJQn6H
JlYRrQSSiKMdxPlGVQJBVuqrBsetnC37RCM7eYqnrW/RmmAR9wlXNxDswXLtUWKg
y4ABE+olE2nhmQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:45:42 2025 by rpki-client