Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File:                     eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier:          8Z2D5hvVwLNeNuE0BJ/Gq82WvKnbVa6ov3HcmEt+7j8=
Subject key identifier:   8E:FC:06:89:DF:F7:86:FC:D6:F6:D8:01:B6:36:43:24:75:CF:DC:AC
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer:       /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial:       019682106AF8DE5BC854073E35412CE9D8BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number:          125A
Signing time:             Tue 29 Apr 2025 15:00:36 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:36 +0000
Manifest next update:     Wed 30 Apr 2025 15:00:36 +0000
Files and hashes:         1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
                          2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: J9OWGmAfx2oroVl09a8kBcClCAdsJZ191X7f+8qUft4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:6a:f8:de:5b:c8:54:07:3e:35:41:2c:e9:d8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
        Validity
            Not Before: Apr 29 15:00:36 2025 GMT
            Not After : Apr 30 15:00:36 2025 GMT
        Subject: CN=8efc0689dff786fcd6f6d801b636432475cfdcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3e:35:0d:12:d8:9f:3b:31:bc:4a:7b:e7:db:
                    d5:12:70:9a:4b:4e:38:b9:07:b6:97:a5:ff:f0:6b:
                    d7:a0:d4:a8:67:8c:91:4f:03:f9:a0:0e:96:44:f3:
                    2b:5e:1b:e9:b9:86:14:3f:42:03:c9:3b:3a:ce:81:
                    e3:50:42:8e:37:47:52:4f:95:5d:83:57:d4:17:09:
                    03:52:65:a3:18:48:dd:85:07:3f:4e:08:0d:bb:a8:
                    42:45:cc:f8:af:9e:27:b0:ee:46:21:29:a6:3b:45:
                    9d:fd:bb:77:12:8e:f1:86:1b:bb:96:9e:cc:fa:57:
                    97:fc:31:66:96:4c:0f:d8:a7:47:a0:88:f1:72:26:
                    7f:27:e6:b9:bb:65:19:99:71:74:d7:2e:9f:9c:f3:
                    dc:a9:57:8d:4d:27:b7:bb:47:0d:78:ff:11:91:64:
                    e2:a4:6e:ec:93:45:c6:30:af:60:1e:e1:da:74:52:
                    d6:1b:d5:d8:6b:78:82:b6:99:d6:e8:5d:96:e0:22:
                    a2:1f:e9:8a:e4:9b:ef:f8:88:97:97:c0:d8:2b:1b:
                    a8:34:da:2e:f7:45:b6:01:88:28:a2:e9:19:ed:0a:
                    5e:6e:9e:12:e9:3f:ac:5d:aa:5b:9d:6f:03:92:6d:
                    b5:fc:7c:c9:5c:11:dc:50:b3:2e:40:15:03:26:5d:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FC:06:89:DF:F7:86:FC:D6:F6:D8:01:B6:36:43:24:75:CF:DC:AC
            X509v3 Authority Key Identifier:
                keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:14:81:51:e7:75:96:c2:ad:83:4a:1e:02:d3:2c:9d:ea:56:
         3c:2d:60:a0:2b:cd:63:f4:77:b0:c0:51:aa:19:52:97:49:58:
         c8:64:b7:8f:9e:0b:c7:68:9a:db:1b:d4:a9:41:0b:47:87:a8:
         b0:4b:03:05:a0:a4:8b:4b:82:3c:83:b4:4c:42:b1:55:6d:0f:
         03:98:54:76:af:4c:c0:9f:75:18:25:cb:92:71:b7:8b:0e:79:
         fe:9a:26:3d:9c:af:e8:35:77:03:83:f0:de:4a:4c:51:ac:87:
         e9:ce:84:b3:43:02:d4:7a:49:4c:82:04:89:a7:27:25:d7:aa:
         71:2d:cf:78:46:f8:fa:d1:28:0c:97:2d:62:9a:f3:1f:dc:b8:
         80:da:62:3a:6e:25:7f:43:55:6c:dd:40:2a:ae:c0:ee:5a:39:
         49:33:dc:3d:c5:3a:d8:ae:a0:02:e4:93:94:af:16:92:27:f2:
         6d:a5:02:60:3f:a3:ba:af:e0:3f:17:6b:ce:f4:1d:b5:7e:4f:
         b1:16:33:ae:fd:3f:a2:0e:91:0b:4d:bb:92:58:37:50:24:bc:
         55:ff:b1:40:05:14:23:87:ab:1c:fc:80:72:0e:60:bf:d6:70:
         d9:78:eb:c7:80:31:18:8f:c8:37:50:d1:32:83:32:32:64:dd:
         b7:5f:d3:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEGr43lvIVAc+NUEs6di9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjMwNGNlY2U3ZmI2NTUxZDYyMWUyNTc3NDM3NTNkN2Qz
ZTdlYmEwHhcNMjUwNDI5MTUwMDM2WhcNMjUwNDMwMTUwMDM2WjAzMTEwLwYDVQQD
Eyg4ZWZjMDY4OWRmZjc4NmZjZDZmNmQ4MDFiNjM2NDMyNDc1Y2ZkY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D41DRLYnzsxvEp759vVEnCaS044
uQe2l6X/8GvXoNSoZ4yRTwP5oA6WRPMrXhvpuYYUP0IDyTs6zoHjUEKON0dST5Vd
g1fUFwkDUmWjGEjdhQc/TggNu6hCRcz4r54nsO5GISmmO0Wd/bt3Eo7xhhu7lp7M
+leX/DFmlkwP2KdHoIjxciZ/J+a5u2UZmXF01y6fnPPcqVeNTSe3u0cNeP8RkWTi
pG7sk0XGMK9gHuHadFLWG9XYa3iCtpnW6F2W4CKiH+mK5Jvv+IiXl8DYKxuoNNou
90W2AYgooukZ7Qpebp4S6T+sXapbnW8Dkm21/HzJXBHcULMuQBUDJl0cGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI78Bonf94b81vbYAbY2QyR1z9ysMB8GA1UdIwQY
MBaAFHkjBM7Of7ZVHWIeJXdDdT19Pn66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEt
ZWQ4MmFlN2RiZDU5LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEtZWQ4MmFlN2RiZDU5
LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchSBUed1
lsKtg0oeAtMsnepWPC1goCvNY/R3sMBRqhlSl0lYyGS3j54Lx2ia2xvUqUELR4eo
sEsDBaCki0uCPIO0TEKxVW0PA5hUdq9MwJ91GCXLknG3iw55/pomPZyv6DV3A4Pw
3kpMUayH6c6Es0MC1HpJTIIEiacnJdeqcS3PeEb4+tEoDJctYprzH9y4gNpiOm4l
f0NVbN1AKq7A7lo5STPcPcU62K6gAuSTlK8WkifybaUCYD+juq/gPxdrzvQdtX5P
sRYzrv0/og6RC027klg3UCS8Vf+xQAUUI4erHPyAcg5gv9Zw2Xjrx4AxGI/IN1DR
MoMyMmTdt1/TCg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:10:20 2025 by rpki-client