Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          d0zN20nIIVVpwJrZNdqSx1qDll4i75FRKqQ+3xvJVXU=
Subject key identifier:   DA:86:8F:F1:C9:FB:4D:96:3D:BF:43:EB:37:13:2A:C6:C0:EE:EB:B9
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       0196C6836BE547DB1746044F5172E6722C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          0947
Signing time:             Mon 12 May 2025 22:00:23 +0000
Manifest this update:     Mon 12 May 2025 22:00:23 +0000
Manifest next update:     Tue 13 May 2025 22:00:23 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: +CrG56DAb+Rbium5CBiNMyTVLTwf3tMmODKjplWLUW8=)
                          2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:6b:e5:47:db:17:46:04:4f:51:72:e6:72:2c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: May 12 22:00:23 2025 GMT
            Not After : May 13 22:00:23 2025 GMT
        Subject: CN=da868ff1c9fb4d963dbf43eb37132ac6c0eeebb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:89:5d:9d:24:31:b4:1a:b7:5f:84:e2:23:
                    19:8d:88:5b:63:07:dd:26:18:6c:34:7b:33:ba:c0:
                    fd:74:64:a2:a3:14:c9:72:6f:aa:44:55:de:76:33:
                    3d:aa:0b:7c:43:4a:f4:fb:76:94:5e:ca:d9:dd:67:
                    a6:94:27:38:e8:66:78:10:0a:8e:d7:64:d7:46:0c:
                    e7:63:b7:66:45:ce:db:9e:a7:25:6f:b3:2d:55:fd:
                    d5:08:26:e6:a2:d3:25:47:a2:39:87:f9:78:f8:9a:
                    31:ab:6d:e0:48:29:27:a8:8c:e3:a4:86:0b:36:cb:
                    4f:ba:02:ee:3a:7a:d0:74:b9:7c:52:d1:00:56:27:
                    ac:ff:84:3f:38:17:6a:82:5a:ce:63:64:e2:8a:c5:
                    6b:e9:dd:a0:ce:a2:7b:e9:ad:02:e8:92:61:bd:d3:
                    ff:77:20:55:6f:af:a1:10:d2:09:12:4d:c9:90:9d:
                    d3:ad:91:9d:2d:3f:5a:66:fd:98:00:14:91:8f:21:
                    ae:6f:f0:bb:1e:95:d2:51:69:fd:bb:e2:1d:61:b3:
                    e0:41:f1:48:d3:12:a4:a7:ee:ec:5f:92:7b:87:cb:
                    64:9a:2e:63:b3:db:ac:50:fd:62:98:10:63:3d:cb:
                    da:f1:32:5f:01:3f:ac:54:7f:ca:1a:28:af:b6:5d:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:8F:F1:C9:FB:4D:96:3D:BF:43:EB:37:13:2A:C6:C0:EE:EB:B9
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:58:5b:6e:eb:1b:d7:15:1b:7e:b2:2d:dc:03:97:78:00:
         be:b3:93:a8:9b:7a:a7:14:c2:1b:79:3e:7b:98:85:8b:0b:41:
         d5:28:54:26:49:08:54:37:95:0e:0f:7a:e9:b1:1f:11:cd:48:
         ae:e9:c6:ee:ec:9d:b0:9f:6b:dd:30:32:d4:af:4e:75:e7:3e:
         35:14:5b:5e:84:83:27:8e:1e:ba:bc:3a:20:52:d1:53:9e:51:
         e5:af:53:16:cd:ad:59:39:9d:aa:11:bf:ec:06:7f:29:c2:84:
         a5:b3:eb:9c:2f:ea:d4:ba:b2:ca:17:0f:30:a4:16:c7:b1:af:
         bd:25:fc:b7:6d:fd:61:89:b0:d3:67:e4:ed:d1:31:3d:dc:13:
         31:bb:b4:6f:e1:c0:43:8a:90:96:7e:8b:99:f6:63:18:3d:dd:
         c5:b8:04:fb:3b:73:a5:90:0c:ce:f8:5c:ab:6d:79:d2:37:e3:
         f4:e0:c8:73:bc:34:5a:6e:2b:4c:3b:f8:ce:8c:6c:98:af:f6:
         54:92:b8:15:8a:d2:2e:d8:cf:78:29:af:6e:4e:53:81:ea:75:
         6e:67:76:d6:99:23:d9:e2:7f:31:66:ce:bc:0c:fb:bb:12:d8:
         cd:39:df:b9:7c:09:df:1a:9c:12:53:c7:21:b8:94:5a:3d:1d:
         f8:64:32:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGg2vlR9sXRgRPUXLmciwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjUwNTEyMjIwMDIzWhcNMjUwNTEzMjIwMDIzWjAzMTEwLwYDVQQD
EyhkYTg2OGZmMWM5ZmI0ZDk2M2RiZjQzZWIzNzEzMmFjNmMwZWVlYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUuJXZ0kMbQat1+E4iMZjYhbYwfd
JhhsNHszusD9dGSioxTJcm+qRFXedjM9qgt8Q0r0+3aUXsrZ3WemlCc46GZ4EAqO
12TXRgznY7dmRc7bnqclb7MtVf3VCCbmotMlR6I5h/l4+Joxq23gSCknqIzjpIYL
NstPugLuOnrQdLl8UtEAVies/4Q/OBdqglrOY2TiisVr6d2gzqJ76a0C6JJhvdP/
dyBVb6+hENIJEk3JkJ3TrZGdLT9aZv2YABSRjyGub/C7HpXSUWn9u+IdYbPgQfFI
0xKkp+7sX5J7h8tkmi5js9usUP1imBBjPcva8TJfAT+sVH/KGiivtl0OFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqGj/HJ+02WPb9D6zcTKsbA7uu5MB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWBYW27r
G9cVG36yLdwDl3gAvrOTqJt6pxTCG3k+e5iFiwtB1ShUJkkIVDeVDg966bEfEc1I
runG7uydsJ9r3TAy1K9Odec+NRRbXoSDJ44eurw6IFLRU55R5a9TFs2tWTmdqhG/
7AZ/KcKEpbPrnC/q1LqyyhcPMKQWx7GvvSX8t239YYmw02fk7dExPdwTMbu0b+HA
Q4qQln6LmfZjGD3dxbgE+ztzpZAMzvhcq2150jfj9ODIc7w0Wm4rTDv4zoxsmK/2
VJK4FYrSLtjPeCmvbk5Tgep1bmd21pkj2eJ/MWbOvAz7uxLYzTnfuXwJ3xqcElPH
IbiUWj0d+GQyCQ==
-----END CERTIFICATE-----
Generated at Tue May 13 00:00:25 2025 by rpki-client