Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          B9lPd21y3+peWD2Yam80a/xZiRK5rwAbSxZQcN40jLY=
Subject key identifier:   6A:B5:54:51:33:C4:B5:6F:60:88:E8:EB:B7:0B:ED:1C:01:D1:A2:89
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01968B4A7D64C961CB908FFD880898F554DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          ED
Signing time:             Thu 01 May 2025 10:00:36 +0000
Manifest this update:     Thu 01 May 2025 10:00:36 +0000
Manifest next update:     Fri 02 May 2025 10:00:36 +0000
Files and hashes:         1: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
                          2: J_xoJpVlUQZtO5xQ-ZJbdQWL7W0.roa (hash: 6G5GWl1Jw65Lth4hieAeSDHM9k5/dMHA09XCXnp56S4=)
                          3: _fQHDe_QsKzj39wSIbj-uT5L7fw.roa (hash: z8zH4/OhWjUk6gre54FhJk9W2UZF11eYo2fYY4nmoyM=)
                          4: hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa (hash: 5jXJ2NBBgkVftUv2ESVvBBtb97mqw/HikDlyo874QWk=)
                          5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: wqWf3izDF0FAUQm65J326v1ctXcPtR175T3OPTwOIy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:4a:7d:64:c9:61:cb:90:8f:fd:88:08:98:f5:54:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: May  1 10:00:36 2025 GMT
            Not After : May  2 10:00:36 2025 GMT
        Subject: CN=6ab5545133c4b56f6088e8ebb70bed1c01d1a289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5f:8e:d8:ed:6e:00:86:ba:db:16:54:26:55:
                    ea:87:e7:c0:da:e0:bb:53:1a:6c:ca:68:8f:c0:d2:
                    e7:63:75:ff:08:ca:dd:57:f3:e9:25:33:2b:7a:e0:
                    42:7c:3d:7e:d2:86:4a:57:96:34:06:0c:2b:a6:38:
                    78:9d:66:c1:c6:86:29:10:82:4b:3f:17:c3:db:05:
                    cd:7e:10:6b:3f:87:66:d3:d8:81:6b:44:c8:ad:79:
                    a2:a4:c5:5a:67:8c:b5:eb:7a:2e:95:0e:c9:c1:9a:
                    9c:92:fc:8a:29:73:47:3a:11:90:0b:de:b8:0d:49:
                    ab:ef:8c:ba:69:8b:05:05:ba:39:c6:5c:a8:10:54:
                    a3:41:a2:e9:51:15:08:c1:2f:b4:3e:9a:d3:ac:e6:
                    51:15:8b:c9:81:f0:da:3e:4d:d3:51:c0:72:0b:c7:
                    13:9e:8f:21:94:f4:7f:82:fc:c7:2b:92:a7:7d:8c:
                    ef:1a:34:b4:f5:26:87:88:88:83:06:a2:0e:cd:c6:
                    69:83:a9:6c:f1:18:de:1f:fc:e7:1b:a2:4f:85:5a:
                    11:56:4d:5f:98:cd:1c:49:5a:0a:5b:0a:cd:4a:3f:
                    e7:89:c5:bf:b1:46:9d:a6:de:3d:31:6b:71:84:d3:
                    ae:5e:4b:36:8f:e8:0b:ba:cd:c1:b0:4f:35:79:6d:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:54:51:33:C4:B5:6F:60:88:E8:EB:B7:0B:ED:1C:01:D1:A2:89
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:03:dd:88:cf:1f:5f:b8:7d:9f:25:5d:39:80:30:e3:d6:c3:
         8e:3b:36:19:f8:c1:d6:d2:54:c5:5c:4f:9d:87:e6:23:bc:d9:
         26:45:fb:24:06:06:db:16:7e:2e:8b:6c:21:c7:80:35:44:19:
         a5:dc:85:57:81:b5:50:ab:f0:11:3b:1c:ee:b7:0c:b0:48:f9:
         fb:71:12:41:c5:eb:15:7b:56:97:ca:ec:a9:3e:98:51:46:02:
         75:ea:c7:49:84:66:c3:d1:52:c5:64:2f:3c:79:40:36:50:05:
         89:2b:d9:16:e3:aa:28:24:31:8b:b8:aa:6f:20:95:60:8a:11:
         68:89:b6:f6:ea:28:b5:ff:7c:1a:9f:ff:ec:3b:e3:90:5e:d8:
         81:a7:b4:10:8c:41:49:2e:ee:36:92:54:73:37:4f:99:f9:5a:
         42:d4:00:98:e2:31:98:0b:47:1e:33:bd:4a:0b:c6:51:1e:ad:
         53:5d:8e:63:3f:7d:97:ee:60:70:3a:2c:ea:14:82:43:f9:dd:
         fd:8d:6f:38:29:f1:66:18:08:ca:00:35:c6:19:cc:16:61:4d:
         61:c3:21:3f:1b:ac:8f:c6:05:90:6c:c5:80:40:cb:d4:d4:e2:
         ef:fd:f9:66:e3:97:e7:0b:80:b0:5e:06:26:df:79:d0:a0:2e:
         58:cd:99:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLSn1kyWHLkI/9iAiY9VTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjUwNTAxMTAwMDM2WhcNMjUwNTAyMTAwMDM2WjAzMTEwLwYDVQQD
Eyg2YWI1NTQ1MTMzYzRiNTZmNjA4OGU4ZWJiNzBiZWQxYzAxZDFhMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91+O2O1uAIa62xZUJlXqh+fA2uC7
UxpsymiPwNLnY3X/CMrdV/PpJTMreuBCfD1+0oZKV5Y0Bgwrpjh4nWbBxoYpEIJL
PxfD2wXNfhBrP4dm09iBa0TIrXmipMVaZ4y163oulQ7JwZqckvyKKXNHOhGQC964
DUmr74y6aYsFBbo5xlyoEFSjQaLpURUIwS+0PprTrOZRFYvJgfDaPk3TUcByC8cT
no8hlPR/gvzHK5KnfYzvGjS09SaHiIiDBqIOzcZpg6ls8RjeH/znG6JPhVoRVk1f
mM0cSVoKWwrNSj/nicW/sUadpt49MWtxhNOuXks2j+gLus3BsE81eW0wBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq1VFEzxLVvYIjo67cL7RwB0aKJMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAPdiM8f
X7h9nyVdOYAw49bDjjs2GfjB1tJUxVxPnYfmI7zZJkX7JAYG2xZ+LotsIceANUQZ
pdyFV4G1UKvwETsc7rcMsEj5+3ESQcXrFXtWl8rsqT6YUUYCderHSYRmw9FSxWQv
PHlANlAFiSvZFuOqKCQxi7iqbyCVYIoRaIm29uootf98Gp//7DvjkF7Ygae0EIxB
SS7uNpJUczdPmflaQtQAmOIxmAtHHjO9SgvGUR6tU12OYz99l+5gcDos6hSCQ/nd
/Y1vOCnxZhgIygA1xhnMFmFNYcMhPxusj8YFkGzFgEDL1NTi7/35ZuOX5wuAsF4G
Jt950KAuWM2Z+A==
-----END CERTIFICATE-----
Generated at Thu May 1 19:56:33 2025 by rpki-client