Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File:                     v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier:          TqxbkL34FuI5jIkswFagmOFf0lco6wgq9WJZn37CmYw=
Subject key identifier:   C0:0D:B3:52:FA:1F:D6:55:D5:E9:0A:B3:61:4D:5D:D7:BA:E5:59:60
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer:       /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial:       01967D21061518EE4713DB98AAE51C0B09CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number:          0205
Signing time:             Mon 28 Apr 2025 16:00:38 +0000
Manifest this update:     Mon 28 Apr 2025 16:00:38 +0000
Manifest next update:     Tue 29 Apr 2025 16:00:38 +0000
Files and hashes:         1: cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa (hash: dQNTgxKb8PiIdXk5ccOTcLzQhMEZp5vC8gyDHDhC7Ow=)
                          2: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: zme3bCjpXrdZ/nrB2O8kI0Qun78EVzotTY28fmZM76I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:21:06:15:18:ee:47:13:db:98:aa:e5:1c:0b:09:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
        Validity
            Not Before: Apr 28 16:00:38 2025 GMT
            Not After : Apr 29 16:00:38 2025 GMT
        Subject: CN=c00db352fa1fd655d5e90ab3614d5dd7bae55960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:62:4f:70:93:d2:fb:cd:77:25:40:53:4b:
                    4d:7a:9c:66:b9:f8:03:98:f1:a0:4d:84:2f:24:29:
                    7b:c3:5f:9d:ae:84:70:df:e1:8e:97:5e:df:4d:6b:
                    8c:6a:ad:5f:e8:26:09:bb:6b:d7:3f:ec:8d:9a:1e:
                    e1:1e:09:f9:3b:f6:7f:0c:bf:b1:f4:80:3a:73:f4:
                    a7:38:a1:6e:44:7d:0e:c7:c0:c3:99:27:91:ad:3a:
                    02:7f:fe:e5:37:90:d2:d4:ff:3a:b8:71:ac:76:e3:
                    47:eb:8d:86:f9:9f:4b:47:07:17:28:bb:83:47:c2:
                    59:a4:fc:50:fe:a3:22:28:cd:78:1f:4f:81:06:47:
                    89:ea:da:12:70:b1:eb:36:1c:d6:e6:cf:0b:a3:c5:
                    6b:34:71:dd:4f:33:e4:56:76:c0:89:34:05:75:d2:
                    7f:29:ee:8c:c2:6a:e4:7f:36:c8:74:db:87:af:6c:
                    8d:83:11:97:eb:7c:10:72:26:33:a6:dc:8e:9e:02:
                    99:c2:a6:f1:4f:15:68:9c:fe:8e:41:cc:49:e9:90:
                    8e:b7:df:48:dd:ca:0b:ba:1b:f9:05:2f:0c:fb:4e:
                    6f:4a:ee:7d:1d:cc:c8:c5:df:6f:d7:1a:29:0f:ed:
                    a3:e3:2b:b1:cc:a4:4d:4a:e4:c0:d2:3d:8a:43:96:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0D:B3:52:FA:1F:D6:55:D5:E9:0A:B3:61:4D:5D:D7:BA:E5:59:60
            X509v3 Authority Key Identifier:
                keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:fb:e1:07:2c:f9:84:74:9d:a6:24:53:2e:2c:47:a6:b4:
         aa:fc:bd:1f:eb:6b:d7:c6:56:4d:c2:c2:59:3f:23:44:af:20:
         6d:3c:3b:95:d6:75:f1:c5:ea:30:e5:ca:37:15:c5:5a:df:8e:
         f5:e2:fb:e8:d5:ff:e0:3e:23:97:24:9b:dd:28:b0:0b:f7:4f:
         c3:ac:d2:5b:da:16:bd:61:9a:c5:73:c0:69:45:6b:9e:03:1b:
         bc:15:7e:fe:14:9d:c6:6e:31:68:3e:64:d3:44:1c:63:57:9e:
         32:4a:8c:cb:83:5d:24:63:25:07:a0:1c:e2:fc:35:56:24:7b:
         ff:b7:ee:6e:01:69:b3:d7:30:58:14:f8:41:7d:62:f6:bf:74:
         03:22:2a:30:9f:3c:c3:92:95:0f:e7:b0:f0:a2:65:b7:4e:7e:
         d3:38:01:89:b3:4e:fc:e1:f7:71:48:72:ef:2e:3a:00:25:5f:
         4e:9b:1a:c2:ed:88:4a:41:17:1f:4d:d8:30:ff:05:2c:05:c8:
         bd:3a:7f:05:02:f7:7f:4c:27:e3:c9:80:6d:bc:bc:d2:82:1d:
         7b:0d:4f:28:57:04:17:e5:1e:2a:02:55:21:f0:60:b3:a3:ab:
         7b:50:e2:f9:4c:73:56:95:6d:3d:23:63:a5:97:73:08:55:aa:
         f3:c7:21:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IQYVGO5HE9uYquUcCwnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOGQwODFjOTZmYTdkMGZjMmE5ZDMyYWVkZDUwYzIzYTYx
YzZmMTEwHhcNMjUwNDI4MTYwMDM4WhcNMjUwNDI5MTYwMDM4WjAzMTEwLwYDVQQD
EyhjMDBkYjM1MmZhMWZkNjU1ZDVlOTBhYjM2MTRkNWRkN2JhZTU1OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSpiT3CT0vvNdyVAU0tNepxmufgD
mPGgTYQvJCl7w1+droRw3+GOl17fTWuMaq1f6CYJu2vXP+yNmh7hHgn5O/Z/DL+x
9IA6c/SnOKFuRH0Ox8DDmSeRrToCf/7lN5DS1P86uHGsduNH642G+Z9LRwcXKLuD
R8JZpPxQ/qMiKM14H0+BBkeJ6toScLHrNhzW5s8Lo8VrNHHdTzPkVnbAiTQFddJ/
Ke6MwmrkfzbIdNuHr2yNgxGX63wQciYzptyOngKZwqbxTxVonP6OQcxJ6ZCOt99I
3coLuhv5BS8M+05vSu59HczIxd9v1xopD+2j4yuxzKRNSuTA0j2KQ5ZR8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMANs1L6H9ZV1ekKs2FNXde65VlgMB8GA1UdIwQY
MBaAFL+NCByW+n0PwqnTKu3VDCOmHG8RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZjZmOTYtNjY0Yy00YzYxLWJkMjUt
MDk3NGYwOTg3OWE5LzEvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83ZjZmOTYtNjY0Yy00YzYxLWJkMjUtMDk3NGYwOTg3OWE5
LzEvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHP74Qcs
+YR0naYkUy4sR6a0qvy9H+tr18ZWTcLCWT8jRK8gbTw7ldZ18cXqMOXKNxXFWt+O
9eL76NX/4D4jlySb3SiwC/dPw6zSW9oWvWGaxXPAaUVrngMbvBV+/hSdxm4xaD5k
00QcY1eeMkqMy4NdJGMlB6Ac4vw1ViR7/7fubgFps9cwWBT4QX1i9r90AyIqMJ88
w5KVD+ew8KJlt05+0zgBibNO/OH3cUhy7y46ACVfTpsawu2ISkEXH03YMP8FLAXI
vTp/BQL3f0wn48mAbby80oIdew1PKFcEF+UeKgJVIfBgs6Ore1Di+UxzVpVtPSNj
pZdzCFWq88chEA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:33:20 2025 by rpki-client