Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File:                     x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier:          dYX20lF5ygdR50t+SLmklMFvXLDJ1AFzLoFueGIeHfc=
Subject key identifier:   91:93:42:73:41:D0:EB:97:9A:2F:3C:C7:19:5D:DB:6A:D6:DE:C1:EB
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer:       /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial:       01967FB4CAC66A7B1DA001B1F88C7F340AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number:          115C
Signing time:             Tue 29 Apr 2025 04:01:16 +0000
Manifest this update:     Tue 29 Apr 2025 04:01:16 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:16 +0000
Files and hashes:         1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
                          2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
                          3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: VicX8xSHqyNlwRXPBcOYaLH0cvkjwbA04rj8ty4Ud84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:ca:c6:6a:7b:1d:a0:01:b1:f8:8c:7f:34:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
        Validity
            Not Before: Apr 29 04:01:16 2025 GMT
            Not After : Apr 30 04:01:16 2025 GMT
        Subject: CN=9193427341d0eb979a2f3cc7195ddb6ad6dec1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:df:fe:29:3e:01:75:7c:21:69:32:ff:e2:f4:
                    86:db:60:a9:d4:df:0e:33:0c:53:b4:50:72:41:65:
                    b3:a2:95:1d:96:d7:60:1e:11:73:52:a4:73:ac:b2:
                    67:8d:1d:1a:e4:e7:c4:1b:0b:61:f1:ea:9d:e6:8d:
                    0c:ce:19:e0:55:03:49:a1:63:ba:9e:ce:71:1e:de:
                    e4:a8:01:2e:3c:5d:64:c4:81:ed:3a:c7:76:66:38:
                    a1:5a:89:28:73:07:a8:ce:26:85:83:4e:1b:bf:b0:
                    cc:92:8e:bf:dc:a0:cb:bc:aa:dd:7a:0f:85:5e:d4:
                    86:93:ff:e4:04:3c:f9:60:7c:2b:14:80:66:cb:b1:
                    7c:fe:f2:7b:f1:07:27:8e:35:73:8c:14:07:5c:19:
                    38:c6:d4:9c:31:7c:2d:d8:e6:ae:bf:d2:9b:d5:48:
                    b0:11:eb:0f:fc:94:b0:e8:f7:6b:90:14:50:b7:74:
                    69:e2:f9:e3:85:fe:00:04:fa:6c:c8:ca:3d:bf:d3:
                    74:ca:7b:17:1f:d8:f3:2f:94:29:25:50:73:8f:16:
                    53:ac:30:e0:23:82:72:9c:54:88:c0:a0:21:23:1a:
                    87:7b:e0:42:a8:24:db:57:1e:2b:03:5c:ce:58:57:
                    a9:15:24:e0:a1:54:9a:35:dd:38:92:b3:64:33:2b:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:42:73:41:D0:EB:97:9A:2F:3C:C7:19:5D:DB:6A:D6:DE:C1:EB
            X509v3 Authority Key Identifier:
                keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:23:a4:05:7b:52:80:53:2f:54:9c:47:35:0e:b2:c3:71:98:
         12:e2:ec:e5:85:93:e7:10:20:be:6d:55:41:ff:a5:75:a7:b4:
         88:9e:18:26:4a:c4:42:d3:6c:c6:8a:e4:b1:8a:57:48:a9:a8:
         7e:14:97:f5:65:a9:e3:ed:14:99:e2:93:d5:ab:97:4b:6a:37:
         7c:8a:b8:b5:2c:39:dd:bf:67:b6:50:0e:22:3d:38:23:ee:3c:
         0b:59:c4:ee:10:f9:19:26:0d:b7:cb:a8:e2:7b:ee:81:69:3f:
         23:4a:97:62:ec:d6:00:18:86:89:c5:78:f9:d5:3c:49:ec:67:
         36:15:ff:c4:8b:74:d6:0d:86:a0:44:23:db:26:ee:7a:d5:ff:
         b1:f1:f6:10:e1:f8:a6:fc:08:6b:71:5d:06:ad:c3:0a:28:e7:
         6a:d3:c1:b0:11:57:1e:04:68:01:fb:d5:27:99:27:d6:f1:07:
         51:c1:9c:7d:68:78:49:5c:d7:92:2f:c6:ec:e4:94:06:c3:47:
         6e:d2:9d:4f:96:a1:3b:6d:90:82:26:c0:53:6e:c0:e6:0f:20:
         3a:15:34:17:1c:3a:15:bc:5c:a0:22:27:8b:e8:5b:db:ff:04:
         0c:e3:bb:2f:ef:14:03:f2:76:90:d6:43:24:83:38:c5:4d:00:
         40:e2:8e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tMrGansdoAGx+Ix/NAqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI1NmNkYTJlN2RkYjAyMzE2OGM1ZDc3ZWM5N2Q5YTAw
NmJhZWQwHhcNMjUwNDI5MDQwMTE2WhcNMjUwNDMwMDQwMTE2WjAzMTEwLwYDVQQD
Eyg5MTkzNDI3MzQxZDBlYjk3OWEyZjNjYzcxOTVkZGI2YWQ2ZGVjMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7N/+KT4BdXwhaTL/4vSG22Cp1N8O
MwxTtFByQWWzopUdltdgHhFzUqRzrLJnjR0a5OfEGwth8eqd5o0MzhngVQNJoWO6
ns5xHt7kqAEuPF1kxIHtOsd2ZjihWokocweoziaFg04bv7DMko6/3KDLvKrdeg+F
XtSGk//kBDz5YHwrFIBmy7F8/vJ78QcnjjVzjBQHXBk4xtScMXwt2Oauv9Kb1Uiw
EesP/JSw6PdrkBRQt3Rp4vnjhf4ABPpsyMo9v9N0ynsXH9jzL5QpJVBzjxZTrDDg
I4JynFSIwKAhIxqHe+BCqCTbVx4rA1zOWFepFSTgoVSaNd04krNkMyulGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGTQnNB0OuXmi88xxld22rW3sHrMB8GA1UdIwQY
MBaAFMfbVs2i592wIxaMXXfsl9mgBrrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTIt
ODJlYjZmZDExZGQ1LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTItODJlYjZmZDExZGQ1
LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiOkBXtS
gFMvVJxHNQ6yw3GYEuLs5YWT5xAgvm1VQf+ldae0iJ4YJkrEQtNsxorksYpXSKmo
fhSX9WWp4+0UmeKT1auXS2o3fIq4tSw53b9ntlAOIj04I+48C1nE7hD5GSYNt8uo
4nvugWk/I0qXYuzWABiGicV4+dU8SexnNhX/xIt01g2GoEQj2ybuetX/sfH2EOH4
pvwIa3FdBq3DCijnatPBsBFXHgRoAfvVJ5kn1vEHUcGcfWh4SVzXki/G7OSUBsNH
btKdT5ahO22QgibAU27A5g8gOhU0Fxw6FbxcoCIni+hb2/8EDOO7L+8UA/J2kNZD
JIM4xU0AQOKOOA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:24:58 2025 by rpki-client