Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File:                     b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier:          OF8K6Tyn6326Gsj4W/zj9wckdj/s5k2SrftjLjFLAaE=
Subject key identifier:   49:3C:00:51:77:49:E5:B3:CC:58:BC:18:3B:DC:93:6A:43:C6:32:F0
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer:       /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial:       019673420673624D07696904B0ED5F7B7616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number:          5B
Signing time:             Sat 26 Apr 2025 18:00:28 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:28 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:28 +0000
Files and hashes:         1: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (hash: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=)
                          2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: ty1iTzAO+x17wQDBOwp8C6vf1Elki6OJ0xr5Zy9VE6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:42:06:73:62:4d:07:69:69:04:b0:ed:5f:7b:76:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
        Validity
            Not Before: Apr 26 18:00:28 2025 GMT
            Not After : Apr 27 18:00:28 2025 GMT
        Subject: CN=493c00517749e5b3cc58bc183bdc936a43c632f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:e8:dd:a9:1c:02:8c:29:f2:56:ea:9b:7a:
                    91:71:18:30:74:cf:50:09:ca:93:ab:a0:7a:b3:34:
                    15:04:93:28:f6:82:07:9b:d8:66:70:41:e3:ba:14:
                    ba:37:a1:af:7c:ad:04:61:55:39:4e:c2:f9:81:f8:
                    fa:69:62:c7:11:98:ff:30:76:30:58:1a:a3:69:67:
                    51:7d:60:4e:2a:6c:40:18:bf:d1:49:31:3e:a7:3e:
                    19:76:49:ec:e3:ca:d5:07:8a:d0:ec:c1:8b:18:db:
                    9b:96:22:58:22:22:c0:9f:eb:34:30:b2:9c:92:f9:
                    b8:91:09:80:60:f8:e4:d7:f6:9c:6e:fb:f2:f6:8e:
                    fb:44:6d:b9:9a:41:93:9b:4f:b4:fb:18:45:fb:44:
                    15:6c:cc:81:61:c4:79:f8:61:62:1e:a4:41:61:5f:
                    b4:ea:78:8b:ab:b8:2c:b1:76:16:00:b1:93:01:8d:
                    e3:6f:ab:2f:81:ae:cb:e5:c6:20:93:10:24:af:4f:
                    77:7d:61:68:03:f9:0f:cd:08:70:80:5e:5d:31:f0:
                    0a:bc:9d:6d:b4:2f:b0:b8:d5:aa:99:29:b7:ca:b8:
                    eb:c9:e4:5f:49:1e:e4:67:2f:06:a0:c4:b9:29:fd:
                    87:9a:c7:07:d1:15:bb:41:aa:18:08:50:ae:fd:ab:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3C:00:51:77:49:E5:B3:CC:58:BC:18:3B:DC:93:6A:43:C6:32:F0
            X509v3 Authority Key Identifier:
                keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:35:50:ac:90:96:cf:f9:12:28:fc:de:6d:37:65:91:42:aa:
         0b:98:fc:2a:5a:b0:84:14:ef:f2:3e:8b:5e:1d:ed:a0:77:8c:
         ef:84:92:8f:6b:4e:c1:a7:36:f2:22:3b:ac:ce:4a:89:b2:bf:
         41:0e:d9:35:73:9b:bf:9e:e0:b4:29:b3:32:2e:61:71:b2:bb:
         4c:51:28:99:e0:e6:9e:6c:bf:ca:e0:e9:00:8e:60:39:e8:4e:
         bc:11:68:c4:9f:67:e2:b0:39:89:8c:18:fa:23:d7:2c:5c:7b:
         42:03:0e:72:35:be:eb:15:ae:d5:36:81:ca:70:34:89:60:f2:
         42:c9:ca:8e:aa:ac:67:df:87:8e:8c:4a:fa:f6:fc:9c:b0:5e:
         50:9f:5d:94:d5:f4:5a:ce:ed:d0:fc:67:3c:44:20:78:78:a4:
         4c:2c:ec:86:aa:18:27:d2:52:24:57:fb:1d:0d:a7:5b:58:31:
         3a:ed:c8:8e:81:e3:4f:16:21:ff:79:2a:27:90:be:da:87:7e:
         b5:88:cc:c8:aa:cb:13:c8:63:44:02:e1:d3:d0:3e:46:05:16:
         73:58:19:36:29:8a:de:0e:6c:5f:3b:8d:ac:7d:65:30:58:87:
         7c:29:fd:e0:be:51:6a:4e:4c:95:04:93:ba:53:b2:48:c7:9b:
         fe:08:c3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzQgZzYk0HaWkEsO1fe3YWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx
MDQ4YTUwHhcNMjUwNDI2MTgwMDI4WhcNMjUwNDI3MTgwMDI4WjAzMTEwLwYDVQQD
Eyg0OTNjMDA1MTc3NDllNWIzY2M1OGJjMTgzYmRjOTM2YTQzYzYzMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzHo3akcAowp8lbqm3qRcRgwdM9Q
CcqTq6B6szQVBJMo9oIHm9hmcEHjuhS6N6GvfK0EYVU5TsL5gfj6aWLHEZj/MHYw
WBqjaWdRfWBOKmxAGL/RSTE+pz4Zdkns48rVB4rQ7MGLGNubliJYIiLAn+s0MLKc
kvm4kQmAYPjk1/acbvvy9o77RG25mkGTm0+0+xhF+0QVbMyBYcR5+GFiHqRBYV+0
6niLq7gssXYWALGTAY3jb6svga7L5cYgkxAkr093fWFoA/kPzQhwgF5dMfAKvJ1t
tC+wuNWqmSm3yrjryeRfSR7kZy8GoMS5Kf2HmscH0RW7QaoYCFCu/avBeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk8AFF3SeWzzFi8GDvck2pDxjLwMB8GA1UdIwQY
MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt
OTlhMDhiOTEyNzRjLzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj
LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzVQrJCW
z/kSKPzebTdlkUKqC5j8KlqwhBTv8j6LXh3toHeM74SSj2tOwac28iI7rM5KibK/
QQ7ZNXObv57gtCmzMi5hcbK7TFEomeDmnmy/yuDpAI5gOehOvBFoxJ9n4rA5iYwY
+iPXLFx7QgMOcjW+6xWu1TaBynA0iWDyQsnKjqqsZ9+HjoxK+vb8nLBeUJ9dlNX0
Ws7t0PxnPEQgeHikTCzshqoYJ9JSJFf7HQ2nW1gxOu3IjoHjTxYh/3kqJ5C+2od+
tYjMyKrLE8hjRALh09A+RgUWc1gZNimK3g5sXzuNrH1lMFiHfCn94L5Rak5MlQST
ulOySMeb/gjDrA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:16:50 2025 by rpki-client