Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
File:                     KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json)
Hash identifier:          O8op4Pfr1/pFV+FOrrqEniDKq+l9VitkNHnTqTkkwQs=
Subject key identifier:   50:9F:30:04:D8:FA:3C:E0:3F:04:E5:64:93:6C:B0:74:6B:FB:4B:82
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Certificate issuer:       /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial:       019676B11BA7071F332E52EC6368FCF32A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
Manifest number:          151B
Signing time:             Sun 27 Apr 2025 10:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:40 +0000
Files and hashes:         1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=)
                          2: F9Dj4BH3DTiBJqZUn9Gq6zuqgzw.roa (hash: PvC6qEA55o/ujVGgT7SwQI1kg6RiKLhNPwSFFwPuR5o=)
                          3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=)
                          4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: eM6LcEki1Nt67YOBVejzPbw5qSk3OntOPx77TTtKgDI=)
                          5: LzFoDYPr7_0gEjtlfJ6xXw6t_lo.roa (hash: rXfhzDDWrE3BbdIp2NtDgdm3XDSADxRFIs8wy+p88S0=)
                          6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=)
                          7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=)
                          8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=)
                          9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=)
                          10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:1b:a7:07:1f:33:2e:52:ec:63:68:fc:f3:2a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
        Validity
            Not Before: Apr 27 10:00:40 2025 GMT
            Not After : Apr 28 10:00:40 2025 GMT
        Subject: CN=509f3004d8fa3ce03f04e564936cb0746bfb4b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:8e:84:f7:77:80:8d:8d:c9:e7:93:72:9b:
                    6c:78:f3:ba:23:24:e3:93:75:18:bd:1f:a4:f9:6a:
                    29:ed:4c:07:dd:3b:30:20:a1:0f:89:9e:81:9a:6a:
                    09:e6:8b:e7:31:a8:b7:78:7b:87:93:55:e5:7b:52:
                    af:2e:78:2a:57:3f:b4:da:80:af:56:5f:71:2a:fb:
                    df:7d:a2:53:f0:0f:93:f6:a7:1b:c8:81:e0:41:46:
                    e4:2a:f1:f9:01:2b:47:18:99:fc:68:3b:ac:58:ad:
                    eb:88:27:88:e9:3a:68:03:3c:fe:25:48:c9:f8:1c:
                    e0:2a:e7:41:c0:0c:7c:81:82:b2:17:e5:1e:ce:1c:
                    11:23:8d:82:fb:e1:c3:8b:3a:46:e7:64:93:e3:36:
                    29:e9:bd:a4:06:02:cd:ba:ce:07:06:1a:26:cf:12:
                    e2:e8:50:75:f1:28:01:f2:2e:06:d1:6e:05:78:83:
                    c3:3e:36:49:44:2d:a4:77:f2:90:ca:22:42:c1:ff:
                    e4:77:6f:67:92:96:b3:f5:38:ea:4e:c0:57:56:a4:
                    3c:03:20:5b:5b:7c:82:a5:f9:05:cc:49:f9:86:29:
                    32:33:88:c5:dc:9f:fa:91:a5:9b:f7:d4:5b:a2:1b:
                    56:92:e7:c3:df:73:f6:fa:94:5a:1b:de:fc:3e:f7:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9F:30:04:D8:FA:3C:E0:3F:04:E5:64:93:6C:B0:74:6B:FB:4B:82
            X509v3 Authority Key Identifier:
                keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:04:5c:6e:f4:9f:ea:0b:66:68:46:a8:a7:36:86:ed:5f:
         ab:95:37:da:62:92:c2:5f:96:62:2a:d8:bb:65:00:83:bb:fa:
         83:43:10:3d:37:d5:04:b6:46:b0:92:02:7a:ea:a4:88:be:9e:
         b1:aa:cb:6e:58:79:14:2a:da:e8:1b:dd:ea:f8:c8:9f:80:c7:
         07:93:73:f6:83:ad:37:db:0f:ba:12:36:cf:e9:42:e2:0a:49:
         aa:5a:f0:9f:59:78:d0:68:9e:1c:7b:40:49:f0:d2:91:ed:1c:
         36:03:87:d3:af:f9:8b:d2:1b:bc:fb:35:d3:ac:39:41:68:04:
         bc:26:07:8e:93:cf:36:21:c0:13:32:6a:7c:89:9c:f9:6a:65:
         6b:8d:1e:b3:46:78:69:20:1b:14:56:26:95:d1:aa:94:63:50:
         01:64:ec:05:b2:57:6c:e1:fe:9b:1f:b1:ea:71:54:f7:aa:6e:
         a3:04:a8:74:ef:1b:d8:35:bc:80:d5:d7:ec:e2:be:20:8e:e3:
         21:9b:16:32:f4:16:4f:cd:60:16:9a:1a:8a:1d:63:5e:95:26:
         d4:ab:1e:5a:d7:4e:d1:e0:09:c9:e0:8d:02:79:54:a5:e1:58:
         15:a2:7d:c4:44:52:dd:bc:47:fe:cc:1e:80:4a:31:f8:37:d2:
         4e:b1:6b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sRunBx8zLlLsY2j88yoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx
MjdiOGMwHhcNMjUwNDI3MTAwMDQwWhcNMjUwNDI4MTAwMDQwWjAzMTEwLwYDVQQD
Eyg1MDlmMzAwNGQ4ZmEzY2UwM2YwNGU1NjQ5MzZjYjA3NDZiZmI0YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m+OhPd3gI2NyeeTcptsePO6IyTj
k3UYvR+k+Wop7UwH3TswIKEPiZ6BmmoJ5ovnMai3eHuHk1Xle1KvLngqVz+02oCv
Vl9xKvvffaJT8A+T9qcbyIHgQUbkKvH5AStHGJn8aDusWK3riCeI6TpoAzz+JUjJ
+BzgKudBwAx8gYKyF+UezhwRI42C++HDizpG52ST4zYp6b2kBgLNus4HBhomzxLi
6FB18SgB8i4G0W4FeIPDPjZJRC2kd/KQyiJCwf/kd29nkpaz9TjqTsBXVqQ8AyBb
W3yCpfkFzEn5hikyM4jF3J/6kaWb99RbohtWkufD33P2+pRaG978Pvf8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCfMATY+jzgPwTlZJNssHRr+0uCMB8GA1UdIwQY
MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt
MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw
LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZoEXG70
n+oLZmhGqKc2hu1fq5U32mKSwl+WYirYu2UAg7v6g0MQPTfVBLZGsJICeuqkiL6e
sarLblh5FCra6Bvd6vjIn4DHB5Nz9oOtN9sPuhI2z+lC4gpJqlrwn1l40GieHHtA
SfDSke0cNgOH06/5i9IbvPs106w5QWgEvCYHjpPPNiHAEzJqfImc+Wpla40es0Z4
aSAbFFYmldGqlGNQAWTsBbJXbOH+mx+x6nFU96puowSodO8b2DW8gNXX7OK+II7j
IZsWMvQWT81gFpoaih1jXpUm1KseWtdO0eAJyeCNAnlUpeFYFaJ9xERS3bxH/swe
gEox+DfSTrFrkg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:07 2025 by rpki-client