Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
File:                     C-vO5NIzea7YGuz_x6dCs1rN3bM.mft (raw, json)
Hash identifier:          Ncv8uLrlLhnveafymChFTQVL6mAQq4HwMg/X8hOd8n4=
Subject key identifier:   86:7C:D6:94:6E:F3:05:E2:81:B0:DC:7E:CA:57:00:F1:D4:8F:88:6E
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Certificate issuer:       /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial:       0196748C080D8467466267CC0B8BD1D6232D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
Manifest number:          04D8
Signing time:             Sun 27 Apr 2025 00:00:56 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:56 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:56 +0000
Files and hashes:         1: AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa (hash: /0BCHflij9PTsqkAVxlV2lPjueYr2KbGYcBxxZ+N59s=)
                          2: C-vO5NIzea7YGuz_x6dCs1rN3bM.crl (hash: uAzpPFQ32htJ84x1bkXjXx1lpDDe2UrNlB3KmZM5Vow=)
                          3: mV1hZytX8BcNK6MuHKBDE6HH6LY.roa (hash: Izn1ppuqIeq4brUj4agoXptLWgkQ3/6X3t/Q9E4R05U=)
                          4: tsJwFZrDXIRwjLakU6dbnqENzD0.roa (hash: wlsUyedxgDvePxXhoMuofoRM97SDv+ta+Oc6E/8MG7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8c:08:0d:84:67:46:62:67:cc:0b:8b:d1:d6:23:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
        Validity
            Not Before: Apr 27 00:00:56 2025 GMT
            Not After : Apr 28 00:00:56 2025 GMT
        Subject: CN=867cd6946ef305e281b0dc7eca5700f1d48f886e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:be:7a:9d:f2:b6:2f:fa:4a:10:22:37:72:
                    6f:6a:23:df:c3:23:1b:08:8b:29:bf:d4:44:f1:44:
                    b5:14:51:e7:80:da:ca:f9:39:d1:d6:02:e8:5f:71:
                    97:8a:3c:05:9d:e4:26:35:34:60:b4:b3:f0:45:65:
                    5c:84:9f:e0:e6:c5:b1:26:23:89:b5:5d:8b:fa:05:
                    4f:94:8f:d8:cf:16:ce:c4:be:ee:ea:45:f0:ee:95:
                    1d:f5:1f:a9:75:03:91:bb:a9:eb:07:53:0a:e2:93:
                    dd:54:34:28:a2:aa:42:eb:99:59:d8:fa:d1:eb:4f:
                    8f:3f:4e:85:cd:39:cc:ba:b8:46:02:79:29:e8:18:
                    2e:8f:15:6d:24:5d:7a:23:40:62:ae:d5:77:c7:87:
                    bf:31:1c:c4:f0:6e:5f:a0:28:aa:f5:3b:59:2f:49:
                    2a:a3:da:22:d9:7f:c5:65:8d:5b:e0:a1:4d:ec:85:
                    71:fe:24:73:8f:12:74:4a:21:32:b0:6c:fb:1c:7d:
                    cf:09:91:27:ba:a8:c5:a2:90:82:88:a8:25:7d:21:
                    fa:11:ad:ae:55:53:59:4f:e7:fa:a1:63:10:1e:15:
                    5a:6c:99:35:60:ab:3c:48:38:fa:a6:7d:e3:71:3d:
                    c2:6e:65:bc:a2:04:1b:07:7b:25:99:de:58:ad:78:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7C:D6:94:6E:F3:05:E2:81:B0:DC:7E:CA:57:00:F1:D4:8F:88:6E
            X509v3 Authority Key Identifier:
                keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:05:ba:51:18:bf:c6:03:5e:79:31:dc:26:25:a4:70:6e:c1:
         cc:a8:a4:65:36:13:af:67:b7:5e:2a:e7:d5:8e:ca:fd:1f:54:
         43:7a:43:e7:2c:6f:01:49:d7:52:8f:67:62:fc:d8:78:87:79:
         1a:d6:9a:d9:81:68:9c:00:d9:1d:9f:ac:39:1f:c8:09:78:0b:
         f7:0c:12:27:a7:ff:74:82:94:70:7b:e9:11:37:bb:79:34:a6:
         ed:43:fd:a7:c5:06:64:3a:9c:6c:3d:1c:01:cc:55:bd:82:bd:
         ce:4d:d5:71:3a:ec:55:52:4b:f7:30:e0:0f:e9:78:37:4d:dd:
         9c:aa:e0:a8:ed:23:ab:b2:3e:5a:ea:b0:24:59:38:00:f6:2a:
         87:b8:ec:2e:58:ae:6f:a9:b3:06:04:82:bf:d3:12:2c:48:22:
         dd:d1:4e:3b:2d:78:24:ff:bf:f2:9d:fd:ad:f5:e5:5a:ec:68:
         73:51:39:79:17:2a:aa:30:39:c1:1d:6d:f6:a0:62:6f:f2:d0:
         53:94:ea:5c:09:bd:f3:3a:1e:45:64:24:a4:13:4b:55:83:7e:
         65:72:46:e8:13:c0:cd:8b:cc:2c:4c:4c:d6:74:4a:06:a4:fb:
         1a:9a:92:e2:7a:b5:06:63:66:46:c5:6f:46:80:08:41:42:cd:
         88:f4:1a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0jAgNhGdGYmfMC4vR1iMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWJjZWU0ZDIzMzc5YWVkODFhZWNmZmM3YTc0MmIzNWFj
ZGRkYjMwHhcNMjUwNDI3MDAwMDU2WhcNMjUwNDI4MDAwMDU2WjAzMTEwLwYDVQQD
Eyg4NjdjZDY5NDZlZjMwNWUyODFiMGRjN2VjYTU3MDBmMWQ0OGY4ODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApty+ep3yti/6ShAiN3JvaiPfwyMb
CIspv9RE8US1FFHngNrK+TnR1gLoX3GXijwFneQmNTRgtLPwRWVchJ/g5sWxJiOJ
tV2L+gVPlI/YzxbOxL7u6kXw7pUd9R+pdQORu6nrB1MK4pPdVDQooqpC65lZ2PrR
60+PP06FzTnMurhGAnkp6BgujxVtJF16I0BirtV3x4e/MRzE8G5foCiq9TtZL0kq
o9oi2X/FZY1b4KFN7IVx/iRzjxJ0SiEysGz7HH3PCZEnuqjFopCCiKglfSH6Ea2u
VVNZT+f6oWMQHhVabJk1YKs8SDj6pn3jcT3CbmW8ogQbB3slmd5YrXiK5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ81pRu8wXigbDcfspXAPHUj4huMB8GA1UdIwQY
MBaAFAvrzuTSM3mu2Brs/8enQrNazd2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUt
OTlhMTFmNjM4NWFiLzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUtOTlhMTFmNjM4NWFi
LzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAW6URi/
xgNeeTHcJiWkcG7BzKikZTYTr2e3Xirn1Y7K/R9UQ3pD5yxvAUnXUo9nYvzYeId5
Gtaa2YFonADZHZ+sOR/ICXgL9wwSJ6f/dIKUcHvpETe7eTSm7UP9p8UGZDqcbD0c
AcxVvYK9zk3VcTrsVVJL9zDgD+l4N03dnKrgqO0jq7I+WuqwJFk4APYqh7jsLliu
b6mzBgSCv9MSLEgi3dFOOy14JP+/8p39rfXlWuxoc1E5eRcqqjA5wR1t9qBib/LQ
U5TqXAm98zoeRWQkpBNLVYN+ZXJG6BPAzYvMLExM1nRKBqT7GpqS4nq1BmNmRsVv
RoAIQULNiPQaJQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:06:42 2025 by rpki-client