Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File:                     rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier:          33i2TVh5H5yxqw7dexAOHHIQMej6sz9F0AgTfOzueOw=
Subject key identifier:   8D:3D:BB:8C:E6:84:E7:1B:DE:AB:A7:67:67:D6:5C:C1:6B:BB:76:E4
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer:       /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial:       01968210CD42C22F20402FEDA45A0EF96C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number:          150F
Signing time:             Tue 29 Apr 2025 15:01:01 +0000
Manifest this update:     Tue 29 Apr 2025 15:01:01 +0000
Manifest next update:     Wed 30 Apr 2025 15:01:01 +0000
Files and hashes:         1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=)
                          2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: RkxITiehnyb4sd/x7pwOuIIjkyx+NfmNUI9c5zkB+rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:cd:42:c2:2f:20:40:2f:ed:a4:5a:0e:f9:6c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
        Validity
            Not Before: Apr 29 15:01:01 2025 GMT
            Not After : Apr 30 15:01:01 2025 GMT
        Subject: CN=8d3dbb8ce684e71bdeaba76767d65cc16bbb76e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:6c:a4:96:7a:8d:51:9f:e1:74:67:e8:ac:
                    2a:94:b1:26:43:44:3d:fa:21:1e:ca:a6:10:e3:8a:
                    23:eb:73:cb:7a:c4:93:07:b6:cb:23:f9:f2:16:26:
                    a8:74:6a:4c:1d:84:39:62:84:34:5c:21:2d:bd:51:
                    ab:51:3e:59:a0:d3:72:2e:f4:69:4d:38:cd:ca:fa:
                    da:1c:d4:3d:ae:e7:8c:79:37:89:f7:fc:05:a3:80:
                    73:5b:4d:4f:e2:2d:7c:65:46:d0:8c:23:07:24:1d:
                    1d:46:e2:2e:90:9d:ef:71:dd:b7:e8:83:1f:ab:1d:
                    74:19:99:be:4c:63:9c:56:18:da:3f:9d:5c:2d:09:
                    a9:1c:c0:6b:1c:be:ec:b1:11:6d:fa:9d:6c:4e:65:
                    f1:05:ac:2d:13:58:81:5a:88:23:e3:2b:af:e1:f3:
                    b7:2e:77:a3:2b:51:ef:65:12:c8:ad:7e:2b:7f:51:
                    82:c1:0d:3f:3e:9a:58:4f:ed:72:d4:50:cb:15:09:
                    51:4b:97:ff:ba:b3:ce:fc:50:10:64:e1:65:10:97:
                    ad:11:32:e6:55:b6:7c:37:54:ea:6e:d3:39:7b:71:
                    fe:33:24:4a:2a:08:65:49:45:a5:60:df:1d:0d:e4:
                    01:1e:7a:9b:02:31:d5:5e:f1:cc:fa:fc:0a:33:4d:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3D:BB:8C:E6:84:E7:1B:DE:AB:A7:67:67:D6:5C:C1:6B:BB:76:E4
            X509v3 Authority Key Identifier:
                keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d8:96:ec:05:56:42:ae:51:3f:be:94:c8:0d:89:23:05:d5:
         9b:6b:24:66:64:40:66:7d:ea:70:ec:d6:62:7e:4e:dd:a3:2e:
         6b:e4:42:67:60:b2:e1:3e:7c:7b:66:23:ef:f6:b6:d5:37:b4:
         a8:14:bc:7b:6d:16:37:ba:73:a6:20:bd:3a:ba:12:f0:43:3e:
         b2:03:77:63:a9:7b:42:f7:74:ba:7a:54:a6:13:e2:ae:d1:f2:
         72:fc:97:25:c4:11:53:29:c4:ff:26:35:c1:7c:dc:0a:a9:1b:
         d3:f5:c6:84:eb:59:61:c8:88:e9:8f:96:cd:71:81:95:42:34:
         e8:45:76:0c:60:80:3e:d4:81:be:0e:30:a9:42:c5:a7:80:66:
         0e:59:2a:5c:2a:5f:54:60:80:ed:7b:38:52:65:9a:4e:c4:38:
         2f:45:83:b8:59:d7:63:34:13:6d:a3:ba:74:db:48:e8:bb:be:
         02:bd:21:e3:9e:e0:66:7c:c4:ce:69:fb:57:5e:61:6c:0e:ca:
         d2:c2:40:5a:8f:b7:6f:61:7a:1b:52:d3:3e:2e:64:86:85:7d:
         47:cf:30:38:23:b3:47:d3:4d:87:b1:a2:cc:67:ee:19:ae:fb:
         4b:5f:86:a3:52:5f:0d:b2:90:ce:36:44:e6:83:73:c2:22:5b:
         a3:af:38:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEM1Cwi8gQC/tpFoO+WxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGU4NTdmYzAwYmUxNGVkOTJiOWU3OGNjM2NhNjliOGFk
YzI0ODUwHhcNMjUwNDI5MTUwMTAxWhcNMjUwNDMwMTUwMTAxWjAzMTEwLwYDVQQD
Eyg4ZDNkYmI4Y2U2ODRlNzFiZGVhYmE3Njc2N2Q2NWNjMTZiYmI3NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY9spJZ6jVGf4XRn6KwqlLEmQ0Q9
+iEeyqYQ44oj63PLesSTB7bLI/nyFiaodGpMHYQ5YoQ0XCEtvVGrUT5ZoNNyLvRp
TTjNyvraHNQ9rueMeTeJ9/wFo4BzW01P4i18ZUbQjCMHJB0dRuIukJ3vcd236IMf
qx10GZm+TGOcVhjaP51cLQmpHMBrHL7ssRFt+p1sTmXxBawtE1iBWogj4yuv4fO3
LnejK1HvZRLIrX4rf1GCwQ0/PppYT+1y1FDLFQlRS5f/urPO/FAQZOFlEJetETLm
VbZ8N1TqbtM5e3H+MyRKKghlSUWlYN8dDeQBHnqbAjHVXvHM+vwKM00oJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI09u4zmhOcb3qunZ2fWXMFru3bkMB8GA1UdIwQY
MBaAFK2OhX/AC+FO2SueeMw8ppuK3CSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAt
ZGIwOTllNTg1ZTRiLzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAtZGIwOTllNTg1ZTRi
LzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONiW7AVW
Qq5RP76UyA2JIwXVm2skZmRAZn3qcOzWYn5O3aMua+RCZ2Cy4T58e2Yj7/a21Te0
qBS8e20WN7pzpiC9OroS8EM+sgN3Y6l7Qvd0unpUphPirtHycvyXJcQRUynE/yY1
wXzcCqkb0/XGhOtZYciI6Y+WzXGBlUI06EV2DGCAPtSBvg4wqULFp4BmDlkqXCpf
VGCA7Xs4UmWaTsQ4L0WDuFnXYzQTbaO6dNtI6Lu+Ar0h457gZnzEzmn7V15hbA7K
0sJAWo+3b2F6G1LTPi5khoV9R88wOCOzR9NNh7GizGfuGa77S1+Go1JfDbKQzjZE
5oNzwiJbo684Ww==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:27 2025 by rpki-client