Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File:                     8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier:          s/dhPkfYrVOxtCAMbXEOiPhAQspZkXcpxHZgbwdzCdw=
Subject key identifier:   18:4E:BE:D5:AD:D8:D0:FC:87:13:AC:64:C4:72:F5:56:9C:60:53:A5
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer:       /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial:       0196B66C1AB6973BD1F7947FFE33442C653B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number:          153E
Signing time:             Fri 09 May 2025 19:01:00 +0000
Manifest this update:     Fri 09 May 2025 19:01:00 +0000
Manifest next update:     Sat 10 May 2025 19:01:00 +0000
Files and hashes:         1: 5oRCpfT1T6yQCJqx4kRnu1PISqE.roa (hash: EyMBU9wS84YvIBo5Y3Ut08o1N5LKBsYGCi0/aBrkiC4=)
                          2: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: g8ZL1SatBOWMN7Vn+KjzM9X3oZHLRUgzWyk7x8SoKwc=)
                          3: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
                          4: ae03YOkS1ofM34wdhj2KqmDyBno.roa (hash: urHsIcZ4xBvpG+piPTKwb+t4LjinRiEgOkguvBfEZMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:6c:1a:b6:97:3b:d1:f7:94:7f:fe:33:44:2c:65:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
        Validity
            Not Before: May  9 19:01:00 2025 GMT
            Not After : May 10 19:01:00 2025 GMT
        Subject: CN=184ebed5add8d0fc8713ac64c472f5569c6053a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ac:e7:09:31:a6:4d:cf:8a:27:4d:41:48:54:
                    a0:ec:f2:8f:32:76:14:f9:f4:c2:6c:0a:eb:51:d5:
                    c9:6e:3e:c4:ed:36:30:ab:8e:20:48:1e:57:06:41:
                    af:88:21:29:97:19:8a:90:50:e9:ff:28:ae:d2:71:
                    1b:6a:f4:48:fb:f9:b6:ae:85:c8:59:2f:40:99:89:
                    d2:f6:60:0c:ec:b3:57:23:65:5d:12:0d:8b:ca:6c:
                    df:4e:2b:ee:89:08:a8:32:e6:4d:ed:09:ad:8d:0a:
                    6f:af:99:2a:1f:88:52:dd:12:cf:69:a4:81:0c:9d:
                    1f:55:ba:3e:9c:12:10:7b:0f:93:b7:dc:f4:0d:77:
                    cc:50:80:40:15:1d:af:60:36:88:61:39:cb:ec:e5:
                    11:a0:fc:b7:7b:7d:fd:91:d5:33:e3:f3:c3:d6:93:
                    5d:51:74:03:e2:07:33:92:bb:e7:04:b0:d7:1e:35:
                    da:1c:34:ea:3a:fd:25:a9:8f:57:c6:fe:a6:00:79:
                    1d:53:d5:80:03:ea:b5:81:01:20:8c:50:8e:af:10:
                    9a:6a:2f:dc:79:f6:d9:a8:44:f0:ae:61:fa:04:0f:
                    53:61:fe:4f:ca:c2:d1:9e:6b:a7:b2:92:e9:7d:ca:
                    2e:23:5e:3a:47:cd:a0:dc:33:88:b5:78:0b:30:e7:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4E:BE:D5:AD:D8:D0:FC:87:13:AC:64:C4:72:F5:56:9C:60:53:A5
            X509v3 Authority Key Identifier:
                keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:47:a2:9e:c7:50:d8:3c:aa:f8:e3:7b:4d:f8:78:32:b8:bc:
         3a:4d:92:78:73:81:89:7a:98:43:95:4e:40:b9:a7:cb:11:6d:
         cc:60:df:56:e1:b9:2f:d4:1c:f6:73:bb:08:da:10:ec:21:23:
         b3:03:ad:bc:f6:ba:59:c1:41:f0:bd:b9:f1:5e:3c:39:da:12:
         fe:53:71:1e:98:21:29:f8:5e:fa:4f:15:43:5f:b6:8d:2f:f4:
         af:2c:6b:1f:0a:2f:f1:f6:07:e1:f0:4a:65:70:69:47:2d:b2:
         01:ec:7e:e5:ac:54:be:35:03:b1:0d:15:55:7b:e2:3c:eb:e5:
         0b:d9:3d:89:3a:64:62:78:69:70:dc:53:61:c4:dd:10:8e:7e:
         27:3f:07:03:be:d4:f1:6e:88:fc:e7:00:e4:a7:c2:d1:45:84:
         ae:58:bb:45:04:c0:5e:d9:cb:e8:96:e2:ed:9b:b5:67:37:c3:
         f8:d9:f2:ca:f4:89:8b:b6:1f:e0:77:e5:27:88:3a:94:8a:3c:
         9f:17:9f:2c:f1:86:4b:76:a1:ea:68:53:ef:bf:7f:ba:f7:22:
         bb:7f:b4:61:e2:ab:c8:a4:89:2e:e3:f7:75:0d:5c:d6:29:26:
         d3:c0:cd:3d:7a:c3:61:00:98:d5:3a:50:ea:69:6e:f8:56:6b:
         15:bc:e4:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2bBq2lzvR95R//jNELGU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw
YTNhZWMwHhcNMjUwNTA5MTkwMTAwWhcNMjUwNTEwMTkwMTAwWjAzMTEwLwYDVQQD
EygxODRlYmVkNWFkZDhkMGZjODcxM2FjNjRjNDcyZjU1NjljNjA1M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqznCTGmTc+KJ01BSFSg7PKPMnYU
+fTCbArrUdXJbj7E7TYwq44gSB5XBkGviCEplxmKkFDp/yiu0nEbavRI+/m2roXI
WS9AmYnS9mAM7LNXI2VdEg2LymzfTivuiQioMuZN7QmtjQpvr5kqH4hS3RLPaaSB
DJ0fVbo+nBIQew+Tt9z0DXfMUIBAFR2vYDaIYTnL7OURoPy3e339kdUz4/PD1pNd
UXQD4gczkrvnBLDXHjXaHDTqOv0lqY9Xxv6mAHkdU9WAA+q1gQEgjFCOrxCaai/c
efbZqETwrmH6BA9TYf5PysLRnmunspLpfcouI146R82g3DOItXgLMOfFfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhOvtWt2ND8hxOsZMRy9VacYFOlMB8GA1UdIwQY
MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt
NDM2MTJlN2Q5Y2MxLzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx
LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkeinsdQ
2Dyq+ON7Tfh4Mri8Ok2SeHOBiXqYQ5VOQLmnyxFtzGDfVuG5L9Qc9nO7CNoQ7CEj
swOtvPa6WcFB8L258V48OdoS/lNxHpghKfhe+k8VQ1+2jS/0ryxrHwov8fYH4fBK
ZXBpRy2yAex+5axUvjUDsQ0VVXviPOvlC9k9iTpkYnhpcNxTYcTdEI5+Jz8HA77U
8W6I/OcA5KfC0UWErli7RQTAXtnL6Jbi7Zu1ZzfD+NnyyvSJi7Yf4HflJ4g6lIo8
nxefLPGGS3ah6mhT779/uvciu3+0YeKryKSJLuP3dQ1c1ikm08DNPXrDYQCY1TpQ
6mlu+FZrFbzkkA==
-----END CERTIFICATE-----
Generated at Sat May 10 05:32:46 2025 by rpki-client