Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
File:                     8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json)
Hash identifier:          hQIIN+84rkY1p0lCDUoK2PJx4c6+d1wIT9Kg3QY8PF4=
Subject key identifier:   44:38:76:C6:09:67:BD:3E:99:66:87:53:CF:36:D0:AA:5C:F5:55:8A
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Certificate issuer:       /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial:       0196771F27FB6D134C971A222D2766014A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
Manifest number:          0E48
Signing time:             Sun 27 Apr 2025 12:00:52 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:52 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:52 +0000
Files and hashes:         1: 0ljyTvQ_d8HoyClfNuv9eO2Q5yA.roa (hash: jw6rtBAELKvNPa562NE5b8O7bUsTaNwLwsoxjTQsK7A=)
                          2: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: RUuR44szxsnBa2Mem9FweJpBa5BW82jCZC7JgHaBBi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1f:27:fb:6d:13:4c:97:1a:22:2d:27:66:01:4a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
        Validity
            Not Before: Apr 27 12:00:52 2025 GMT
            Not After : Apr 28 12:00:52 2025 GMT
        Subject: CN=443876c60967bd3e99668753cf36d0aa5cf5558a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:ff:21:44:bb:90:f8:f2:36:41:01:ee:b3:
                    2b:ad:3a:b9:31:10:fa:ed:d1:a1:53:ef:09:5d:06:
                    a4:26:3a:65:bc:03:36:ef:b0:7f:d1:f5:95:bf:26:
                    08:a0:96:e2:1b:2e:56:e6:07:99:f2:68:6b:c4:be:
                    0e:a3:b2:a6:7d:02:6f:0a:0f:f5:5d:fe:6b:b8:b3:
                    87:07:9f:85:eb:72:12:1c:54:73:c8:08:1a:b2:20:
                    1d:f0:85:d7:aa:89:79:23:1b:44:28:a6:0e:91:8c:
                    ce:ef:9a:f1:3a:bc:c3:71:9e:27:56:ee:ca:90:51:
                    5d:1e:0a:31:d7:1e:20:e0:dc:89:3c:75:2d:16:19:
                    c1:20:2f:96:66:44:1e:fe:eb:2e:37:8b:16:98:7c:
                    5f:91:05:70:95:0e:ce:d8:fb:7e:9a:79:fc:2a:23:
                    99:67:21:09:ce:1b:9b:39:34:f6:a5:44:e6:9c:5e:
                    ef:75:3b:ef:fb:83:f6:7d:77:8f:a1:b3:f0:70:13:
                    3d:53:3f:00:61:e5:ae:0a:83:5f:4f:c3:1f:db:d1:
                    9c:63:04:bc:f6:fa:7c:e8:ae:2c:cd:1f:bf:d4:57:
                    ae:df:68:ca:2e:c7:77:01:40:b4:aa:5f:54:b7:9c:
                    ee:0e:f0:d1:7c:63:c8:36:80:ec:90:b2:2b:ab:54:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:38:76:C6:09:67:BD:3E:99:66:87:53:CF:36:D0:AA:5C:F5:55:8A
            X509v3 Authority Key Identifier:
                keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:0f:fe:46:33:ca:2d:69:17:07:ad:78:28:90:b0:35:c3:
         db:3b:12:ea:f7:48:a3:bf:70:b9:9f:6f:4a:5f:59:57:6b:94:
         98:7b:e4:87:1a:90:b1:9e:fb:51:01:3b:5b:da:68:76:09:06:
         19:64:c9:74:a4:bc:36:5e:0e:11:37:f9:6e:f3:67:23:ec:85:
         21:45:b1:ed:7e:a7:91:04:ab:2b:fd:9b:78:6d:e2:39:08:59:
         a9:72:39:ba:e7:df:64:21:10:e1:ec:22:8e:39:c6:29:a4:b8:
         9f:c9:68:08:b2:69:78:29:70:c2:2e:80:36:98:83:28:6e:b0:
         57:5a:52:79:6d:f3:a6:7d:0d:85:0d:62:b0:1f:09:e8:a2:61:
         84:73:e0:55:e3:0e:d1:3e:b5:05:e3:6b:20:c7:14:f0:ae:85:
         ef:79:cf:d7:f3:ee:45:bd:29:0e:3c:ab:d1:e1:53:0d:2d:da:
         48:52:13:14:83:aa:8e:6c:82:4a:23:b1:ba:c5:1f:8e:11:d3:
         ab:f7:cc:c3:9e:bf:51:b0:05:30:33:92:c8:26:62:5b:c4:c2:
         14:e9:f5:e3:80:7e:82:95:be:0e:33:19:15:c3:67:59:fc:1c:
         f0:7a:3d:f9:cb:20:ee:40:23:78:6a:0a:c2:ab:7a:f7:39:73:
         81:4c:b3:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Hyf7bRNMlxoiLSdmAUoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDY2NmZiYjY0YzRkYThjYjg5OTJiZjBkYTk3YjhiMDEx
N2VhYzYwHhcNMjUwNDI3MTIwMDUyWhcNMjUwNDI4MTIwMDUyWjAzMTEwLwYDVQQD
Eyg0NDM4NzZjNjA5NjdiZDNlOTk2Njg3NTNjZjM2ZDBhYTVjZjU1NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK3/IUS7kPjyNkEB7rMrrTq5MRD6
7dGhU+8JXQakJjplvAM277B/0fWVvyYIoJbiGy5W5geZ8mhrxL4Oo7KmfQJvCg/1
Xf5ruLOHB5+F63ISHFRzyAgasiAd8IXXqol5IxtEKKYOkYzO75rxOrzDcZ4nVu7K
kFFdHgox1x4g4NyJPHUtFhnBIC+WZkQe/usuN4sWmHxfkQVwlQ7O2Pt+mnn8KiOZ
ZyEJzhubOTT2pUTmnF7vdTvv+4P2fXePobPwcBM9Uz8AYeWuCoNfT8Mf29GcYwS8
9vp86K4szR+/1Feu32jKLsd3AUC0ql9Ut5zuDvDRfGPINoDskLIrq1SXPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ4dsYJZ70+mWaHU8820Kpc9VWKMB8GA1UdIwQY
MBaAFPFGZvu2TE2oy4mSvw2pe4sBF+rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQt
ZDQ0NjQ1NWRjNWJhLzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQtZDQ0NjQ1NWRjNWJh
LzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMAP/kYz
yi1pFweteCiQsDXD2zsS6vdIo79wuZ9vSl9ZV2uUmHvkhxqQsZ77UQE7W9podgkG
GWTJdKS8Nl4OETf5bvNnI+yFIUWx7X6nkQSrK/2beG3iOQhZqXI5uuffZCEQ4ewi
jjnGKaS4n8loCLJpeClwwi6ANpiDKG6wV1pSeW3zpn0NhQ1isB8J6KJhhHPgVeMO
0T61BeNrIMcU8K6F73nP1/PuRb0pDjyr0eFTDS3aSFITFIOqjmyCSiOxusUfjhHT
q/fMw56/UbAFMDOSyCZiW8TCFOn144B+gpW+DjMZFcNnWfwc8Ho9+csg7kAjeGoK
wqt69zlzgUyzsQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:23 2025 by rpki-client