Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File:                     g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier:          +KaGPwCIWwhx+A6U2GKgJMAmmJVjr1Xkt5EzVxMfNnY=
Subject key identifier:   BD:5E:96:2F:BE:82:D1:86:85:0C:56:1C:B3:65:61:89:62:E6:52:E6
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer:       /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial:       0196E11F711082A9412A01720E7AA32056AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number:          0A33
Signing time:             Sun 18 May 2025 02:00:56 +0000
Manifest this update:     Sun 18 May 2025 02:00:56 +0000
Manifest next update:     Mon 19 May 2025 02:00:56 +0000
Files and hashes:         1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
                          2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: wL5zv/7bLrIp48GcQyUY3tRKAW/eTIoclBl+0rRbDFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:e1:1f:71:10:82:a9:41:2a:01:72:0e:7a:a3:20:56:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
        Validity
            Not Before: May 18 02:00:56 2025 GMT
            Not After : May 19 02:00:56 2025 GMT
        Subject: CN=bd5e962fbe82d186850c561cb365618962e652e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:1e:0c:fd:de:09:62:b9:d4:aa:2d:a2:b8:
                    31:df:a7:82:91:2e:02:c7:78:1d:52:21:b5:5d:12:
                    ea:af:65:9a:c4:25:fb:ee:db:57:69:7e:f4:84:43:
                    8e:83:d7:2f:84:63:5f:b5:f3:df:eb:dc:1b:70:14:
                    a3:4a:01:e7:36:37:79:e6:06:c3:eb:a0:f5:b9:fe:
                    a2:8c:40:be:84:bb:cf:2a:00:90:7e:ba:dd:fd:0e:
                    70:e0:f6:8d:55:c9:3c:60:92:31:85:8a:e7:13:55:
                    b9:98:17:c8:1a:c0:b2:d6:98:44:68:0e:63:4d:6a:
                    d5:94:6c:07:59:e3:04:61:ae:d8:13:a8:51:65:1b:
                    1e:f2:57:b3:72:70:a3:c9:c2:12:e4:21:52:fb:62:
                    3e:b4:70:67:bb:57:79:0e:99:f1:f9:0c:69:81:85:
                    46:a5:00:1c:c4:d8:67:72:30:02:d3:dc:fd:e5:8f:
                    fb:05:a3:13:83:78:8d:4f:b8:d3:a4:2d:b5:df:12:
                    c6:71:de:98:48:2b:11:10:af:f1:d7:9b:c7:58:5c:
                    2f:79:52:b3:5f:1b:e8:ba:2f:1c:dc:e9:00:c2:18:
                    01:fe:c9:e0:b6:15:02:00:be:4b:87:62:27:86:3b:
                    ce:3c:ff:e9:6e:2d:64:17:89:90:4a:13:48:34:cf:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5E:96:2F:BE:82:D1:86:85:0C:56:1C:B3:65:61:89:62:E6:52:E6
            X509v3 Authority Key Identifier:
                keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:d1:86:28:4d:65:89:db:96:56:58:20:db:b4:43:3c:e3:
         b9:c6:2a:a5:7b:53:7f:a1:a5:13:7f:3d:7c:b6:45:a7:5b:7c:
         97:59:e4:0a:9c:b5:77:a8:f4:f7:bd:c9:ec:03:dc:a6:0b:72:
         72:b6:1e:47:32:34:33:77:a8:48:3e:88:a9:8f:db:ad:87:b5:
         bd:ac:1b:6a:7c:76:3d:89:4b:5e:7f:c5:6c:2f:66:ca:95:a6:
         ea:94:9b:41:51:67:50:50:73:82:5a:f6:6e:fd:49:a7:b6:ba:
         0e:6b:3e:84:98:97:4a:2c:88:72:62:64:23:fd:97:05:31:e4:
         d5:60:b9:94:a9:cf:2a:6b:3b:20:7c:e8:67:3e:37:3d:85:f5:
         1d:f4:32:42:52:04:65:af:7c:c3:14:61:3b:cc:b8:c4:a6:13:
         61:a2:65:0f:dc:e9:b7:39:7b:fa:f8:7b:e8:87:a9:ee:f0:4a:
         c9:b6:df:7c:d8:cd:42:3a:89:cc:81:b4:78:50:c6:9f:81:30:
         90:25:3e:19:2c:94:17:23:09:ba:13:5a:b3:aa:67:d5:0d:04:
         e3:0a:6d:af:cc:a9:85:58:39:b9:c5:0f:11:e5:6d:d7:cb:0c:
         be:21:30:6e:67:8e:f5:64:b3:95:6e:97:62:72:ae:63:09:a2:
         c9:fe:b5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbhH3EQgqlBKgFyDnqjIFauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy
ZGNmODgwHhcNMjUwNTE4MDIwMDU2WhcNMjUwNTE5MDIwMDU2WjAzMTEwLwYDVQQD
EyhiZDVlOTYyZmJlODJkMTg2ODUwYzU2MWNiMzY1NjE4OTYyZTY1MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+UeDP3eCWK51Kotorgx36eCkS4C
x3gdUiG1XRLqr2WaxCX77ttXaX70hEOOg9cvhGNftfPf69wbcBSjSgHnNjd55gbD
66D1uf6ijEC+hLvPKgCQfrrd/Q5w4PaNVck8YJIxhYrnE1W5mBfIGsCy1phEaA5j
TWrVlGwHWeMEYa7YE6hRZRse8lezcnCjycIS5CFS+2I+tHBnu1d5Dpnx+QxpgYVG
pQAcxNhncjAC09z95Y/7BaMTg3iNT7jTpC213xLGcd6YSCsREK/x15vHWFwveVKz
Xxvoui8c3OkAwhgB/sngthUCAL5Lh2InhjvOPP/pbi1kF4mQShNINM+LuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1eli++gtGGhQxWHLNlYYli5lLmMB8GA1UdIwQY
MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt
OTY1MzFkMTYzMzFiLzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi
LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+HRhihN
ZYnbllZYINu0QzzjucYqpXtTf6GlE389fLZFp1t8l1nkCpy1d6j0973J7APcpgty
crYeRzI0M3eoSD6IqY/brYe1vawbanx2PYlLXn/FbC9mypWm6pSbQVFnUFBzglr2
bv1Jp7a6Dms+hJiXSiyIcmJkI/2XBTHk1WC5lKnPKms7IHzoZz43PYX1HfQyQlIE
Za98wxRhO8y4xKYTYaJlD9zptzl7+vh76Iep7vBKybbffNjNQjqJzIG0eFDGn4Ew
kCU+GSyUFyMJuhNas6pn1Q0E4wptr8yphVg5ucUPEeVt18sMviEwbmeO9WSzlW6X
YnKuYwmiyf61dw==
-----END CERTIFICATE-----
Generated at Sun May 18 04:46:33 2025 by rpki-client