Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
File:                     8Mx6RHSC5XsGBLq7gqUkCc3js20.mft (raw, json)
Hash identifier:          3uuFxM9NTobh7w1yq8NZ4Pz3XEkYA0t1wKmvui/Uw8o=
Subject key identifier:   C6:F1:94:66:D0:F8:56:92:B6:65:3C:DF:4E:B2:EC:E3:94:8E:E1:A9
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Certificate issuer:       /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial:       0196BAB61E460AEBE20C1F8F7147A2E34AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
Manifest number:          0FF5
Signing time:             Sat 10 May 2025 15:00:19 +0000
Manifest this update:     Sat 10 May 2025 15:00:19 +0000
Manifest next update:     Sun 11 May 2025 15:00:19 +0000
Files and hashes:         1: 1nkbAUyMBTqm0zrFDH2BJFInn74.roa (hash: kSALWUCmn9r8Fvws/ekGIMLGIzxTE3Z8oBdBGKZ1vV8=)
                          2: 4Z1qIWMwOAMlHFP-sDeKn3ncv68.roa (hash: Cc/ITPpY5ZCl6cqqvemf3EU8EuTldz4M89wdeUZEEs4=)
                          3: 8Mx6RHSC5XsGBLq7gqUkCc3js20.crl (hash: asD2ClgjKhMpGTK5cJiofby622piJHjxCpj083Wh4aA=)
                          4: TQH-UqpdFcQPQJ_O-mPcMaxRh5Y.roa (hash: 5UUSbkoNXYWS7SIZNqMfY5y6jLKaLP3pTD8kSnX3ZQY=)
                          5: cmgXNMaAC5g-hi6_5ineFSX4mNo.roa (hash: tT0BFRcW7aTCxqYrpbIrMjQ3QMu6zsEXBG/3mWT8HAA=)
                          6: vYR5ABwtJ7q6oSyxxElARDk7dqw.roa (hash: obrOWN19xkWreFh1sEBEYAaVII0u+vgvq2GtQ4FWPEo=)
                          7: zOKrDn3tQAhPRsC8Lmb1V8TVx8Y.roa (hash: RxerbYPvQlg/5QiApArrLAGt6msA3uH/fhheHO7fcUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:1e:46:0a:eb:e2:0c:1f:8f:71:47:a2:e3:4a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
        Validity
            Not Before: May 10 15:00:19 2025 GMT
            Not After : May 11 15:00:19 2025 GMT
        Subject: CN=c6f19466d0f85692b6653cdf4eb2ece3948ee1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:73:0d:d4:ec:85:e6:a6:5a:6a:c0:6d:ed:
                    0c:18:a9:fc:cb:5b:67:49:3f:0b:14:59:88:b7:d3:
                    16:19:8a:c8:b9:73:7f:33:9d:d8:8c:ac:99:11:33:
                    2c:48:d9:bf:2a:a5:0c:7c:b3:25:6b:bc:7c:cd:59:
                    bf:95:c7:51:83:6a:10:81:00:fb:b8:c1:91:42:22:
                    5e:02:c1:a2:e5:ae:18:34:c3:ca:df:20:da:37:df:
                    d5:46:e7:fc:73:0f:74:60:a0:46:89:0c:a9:4e:c2:
                    cb:de:91:22:5b:fa:8f:77:45:df:77:0c:48:b8:72:
                    e4:de:07:19:2d:17:0c:b5:d9:5f:54:34:63:f9:f8:
                    d6:c2:cb:e9:9a:85:0c:11:5c:bf:85:44:74:10:8a:
                    91:f5:c5:33:84:ba:67:6f:d2:8e:a9:a3:27:8e:91:
                    e2:1d:30:7c:02:05:72:38:f1:98:a6:fa:65:88:92:
                    0e:c0:37:02:8f:fa:ef:02:83:86:09:4c:60:51:b1:
                    35:75:64:6d:76:ae:90:eb:92:11:b0:35:73:e5:29:
                    7b:4a:6d:1e:3b:87:20:4a:57:9c:7f:95:9d:7e:f3:
                    6c:61:71:1c:52:e9:b7:cc:64:5d:d1:9f:4d:6c:81:
                    3a:31:d2:3c:bf:f6:28:2f:42:20:20:d7:7d:1a:d5:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:94:66:D0:F8:56:92:B6:65:3C:DF:4E:B2:EC:E3:94:8E:E1:A9
            X509v3 Authority Key Identifier:
                keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:70:cc:57:4e:e7:8a:0e:6f:e5:d1:d2:61:71:27:45:1f:30:
         70:b0:48:de:a7:ff:da:30:e5:d6:29:5c:63:8c:17:0c:28:96:
         ae:f8:44:3f:55:3e:02:ab:5c:1d:b3:9b:f7:62:43:ac:39:b6:
         c6:1b:9d:e3:3c:f5:db:25:29:bb:1b:2e:2b:1f:54:b3:61:61:
         f0:d0:af:b2:41:b9:95:f9:b7:4b:ee:d0:11:b4:72:ce:ff:db:
         48:58:cd:b2:82:ce:3a:ed:79:01:c9:9e:03:3a:5d:25:72:64:
         02:34:60:bc:c3:7d:44:9f:ed:83:67:60:83:d3:1c:03:6c:b1:
         85:96:e1:71:68:19:e7:8c:b6:39:0f:77:27:8c:7d:a6:22:0b:
         6e:d4:0e:44:6b:b5:fb:c4:91:51:a8:01:2e:41:46:8f:91:d3:
         2d:cd:ef:70:fe:43:9e:d1:ab:32:2d:bc:aa:d5:80:24:41:99:
         aa:f7:5f:55:a9:4a:f9:80:b4:82:7a:dd:b3:70:55:eb:dc:dd:
         d0:9c:2c:38:37:78:86:b4:c9:90:d9:f9:19:cf:f2:9c:91:1f:
         41:05:fb:19:f9:e5:bf:74:07:24:08:0c:f7:7b:39:32:bd:56:
         64:12:94:81:8c:d5:b2:23:3a:9f:09:2a:a9:cf:a7:28:31:32:
         e1:b0:aa:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6th5GCuviDB+PcUei40rrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2M3YTQ0NzQ4MmU1N2IwNjA0YmFiYjgyYTUyNDA5Y2Rl
M2IzNmQwHhcNMjUwNTEwMTUwMDE5WhcNMjUwNTExMTUwMDE5WjAzMTEwLwYDVQQD
EyhjNmYxOTQ2NmQwZjg1NjkyYjY2NTNjZGY0ZWIyZWNlMzk0OGVlMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU1zDdTsheamWmrAbe0MGKn8y1tn
ST8LFFmIt9MWGYrIuXN/M53YjKyZETMsSNm/KqUMfLMla7x8zVm/lcdRg2oQgQD7
uMGRQiJeAsGi5a4YNMPK3yDaN9/VRuf8cw90YKBGiQypTsLL3pEiW/qPd0XfdwxI
uHLk3gcZLRcMtdlfVDRj+fjWwsvpmoUMEVy/hUR0EIqR9cUzhLpnb9KOqaMnjpHi
HTB8AgVyOPGYpvpliJIOwDcCj/rvAoOGCUxgUbE1dWRtdq6Q65IRsDVz5Sl7Sm0e
O4cgSlecf5WdfvNsYXEcUum3zGRd0Z9NbIE6MdI8v/YoL0IgINd9GtUy4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbxlGbQ+FaStmU8306y7OOUjuGpMB8GA1UdIwQY
MBaAFPDMekR0guV7BgS6u4KlJAnN47NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZTU4ZGMtN2M5MC00OWQ3LTg4NTUt
ZmEzMmQyZDUyOTY4LzEvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZTU4ZGMtN2M5MC00OWQ3LTg4NTUtZmEzMmQyZDUyOTY4
LzEvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXDMV07n
ig5v5dHSYXEnRR8wcLBI3qf/2jDl1ilcY4wXDCiWrvhEP1U+AqtcHbOb92JDrDm2
xhud4zz12yUpuxsuKx9Us2Fh8NCvskG5lfm3S+7QEbRyzv/bSFjNsoLOOu15Acme
AzpdJXJkAjRgvMN9RJ/tg2dgg9McA2yxhZbhcWgZ54y2OQ93J4x9piILbtQORGu1
+8SRUagBLkFGj5HTLc3vcP5DntGrMi28qtWAJEGZqvdfValK+YC0gnrds3BV69zd
0JwsODd4hrTJkNn5Gc/ynJEfQQX7Gfnlv3QHJAgM93s5Mr1WZBKUgYzVsiM6nwkq
qc+nKDEy4bCq8w==
-----END CERTIFICATE-----
Generated at Sat May 10 20:46:28 2025 by rpki-client