Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          RAJXNtuBhKhi+j+syvmRYg9G0GTrEDGuFO/YWzIiz48=
Subject key identifier:   3D:AC:03:48:87:8A:2D:1A:80:EC:C0:33:E3:E0:7B:34:56:78:36:E1
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       01978A34E6769A58566DDAFEEC107867D621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0849
Signing time:             Thu 19 Jun 2025 22:00:11 +0000
Manifest this update:     Thu 19 Jun 2025 22:00:11 +0000
Manifest next update:     Fri 20 Jun 2025 22:00:11 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: rVBhOk5t4vwQAm1uBBizQbF0yPtFfRmnGH9c+cEvs58=)
                          2: 8CQhFFzhVCUSs-Acf3oCW5Ht1O4.roa (hash: 4QjA0b3TlO69hSmmKrV3SWr74V598K76v+qHTSKJ/xE=)
                          3: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=)
                          4: L92S0PfcHSE9bgS-JCS8vvop6UQ.roa (hash: XSHb8sFm7h1G4YsZCXgF14jI1G7rEVjjM6p2QTILx6g=)
                          5: gTRae7ZL-HNGSMdQfcCH4w50U3I.roa (hash: lqNN9a02R1wKbKPgix1ICuGW1yv4WMeo7Mou83VAgGA=)
                          6: j_3Ftqm-lzj1TntRYs7GVQ4-no4.roa (hash: uD9N1p5kcD0F5MTrxTTnuG+MRtGjk9UHle8sxsfds2s=)
                          7: tLtgUfd0ui74NFHNYFQ3DTMpTpY.roa (hash: t0Rcfn+Zo7QZAW0FXDZgWJxfMhFkyCKBVpW7cC1Ejw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8a:34:e6:76:9a:58:56:6d:da:fe:ec:10:78:67:d6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Jun 19 22:00:11 2025 GMT
            Not After : Jun 20 22:00:11 2025 GMT
        Subject: CN=3dac0348878a2d1a80ecc033e3e07b34567836e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e0:6e:d7:c6:83:30:f6:1a:4e:85:e4:35:1c:
                    b4:8a:d1:e6:c0:eb:b9:5e:e4:c7:29:82:8a:4e:5e:
                    81:71:2a:50:d3:38:a0:43:b2:23:2f:70:38:39:e2:
                    a3:ce:c0:57:b5:51:32:3c:cb:55:31:53:5e:0d:2c:
                    1a:a5:6b:83:38:9f:3c:20:f6:ea:e5:e3:eb:d6:7c:
                    33:0e:1d:2b:4c:b5:55:57:d0:15:4f:99:4b:1f:14:
                    93:2a:54:4d:bb:c2:e7:cc:5a:38:fa:c6:e2:8f:ae:
                    7f:70:88:90:a0:c7:ab:ee:73:e7:f6:01:60:f0:0a:
                    fa:4d:19:a5:52:30:b0:c2:dc:4b:07:b0:c0:24:d5:
                    75:23:ea:ea:0d:8a:53:21:27:74:df:fa:dd:ca:86:
                    64:70:c9:9d:fe:77:93:bf:3c:3c:4b:8d:f0:c0:b1:
                    99:37:40:57:65:c8:5b:d0:d4:bb:06:7f:74:91:05:
                    04:09:0b:4c:1b:e1:a0:ef:52:8f:b3:6d:22:d0:69:
                    bd:ed:d1:91:9b:e2:f8:d0:26:05:ad:1d:38:21:2b:
                    d6:ed:84:b5:fb:ee:20:52:3c:1b:37:dd:51:e4:7c:
                    e6:aa:09:86:ce:20:f0:e2:39:eb:73:61:63:ad:46:
                    9d:36:40:31:b3:b7:d2:1f:3d:af:5a:3c:91:46:f0:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AC:03:48:87:8A:2D:1A:80:EC:C0:33:E3:E0:7B:34:56:78:36:E1
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:81:77:c2:8a:e2:28:93:28:39:c1:38:58:c0:59:79:50:
         62:e7:ba:60:85:c1:9f:32:ec:d1:05:5a:fb:c3:18:c7:61:ce:
         7a:0c:27:58:3a:72:0d:7a:f5:a5:39:d1:07:0c:cb:b5:39:97:
         a3:76:01:8f:4d:29:f0:20:28:86:80:c1:da:83:7f:3b:97:30:
         d5:71:e8:d0:ba:d9:03:83:58:d2:2f:a2:f2:d6:00:68:86:5d:
         72:f4:a6:e3:25:4b:6c:c9:70:a0:53:ff:19:e4:fd:90:50:76:
         bc:a1:7a:eb:c6:3a:fb:e3:ee:11:3f:b2:47:26:62:81:9c:0a:
         69:64:a4:96:c7:ee:fc:cd:5b:0f:49:f5:8c:2f:f2:d5:13:9a:
         c7:1d:ab:4d:82:14:55:91:b6:0f:85:52:b4:80:70:fa:f9:34:
         c0:63:4a:f6:96:c0:ce:47:c3:e9:6f:4d:10:a1:32:64:6e:f3:
         fc:1d:e4:2a:7a:2a:58:f3:20:1b:5e:6d:2a:07:d7:7e:b0:17:
         5e:2c:b3:54:0d:06:6d:64:52:62:c2:8f:b3:b5:60:22:48:83:
         72:6f:a9:77:5a:43:71:4f:4c:76:2f:16:bc:d1:55:9f:34:ad:
         1f:ee:ab:9e:42:06:2f:11:cf:c5:84:af:58:41:f4:43:f2:ba:
         57:1b:cb:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeKNOZ2mlhWbdr+7BB4Z9YhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj
NTU4ZWYwHhcNMjUwNjE5MjIwMDExWhcNMjUwNjIwMjIwMDExWjAzMTEwLwYDVQQD
EygzZGFjMDM0ODg3OGEyZDFhODBlY2MwMzNlM2UwN2IzNDU2NzgzNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OBu18aDMPYaToXkNRy0itHmwOu5
XuTHKYKKTl6BcSpQ0zigQ7IjL3A4OeKjzsBXtVEyPMtVMVNeDSwapWuDOJ88IPbq
5ePr1nwzDh0rTLVVV9AVT5lLHxSTKlRNu8LnzFo4+sbij65/cIiQoMer7nPn9gFg
8Ar6TRmlUjCwwtxLB7DAJNV1I+rqDYpTISd03/rdyoZkcMmd/neTvzw8S43wwLGZ
N0BXZchb0NS7Bn90kQUECQtMG+Gg71KPs20i0Gm97dGRm+L40CYFrR04ISvW7YS1
++4gUjwbN91R5HzmqgmGziDw4jnrc2FjrUadNkAxs7fSHz2vWjyRRvC3/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2sA0iHii0agOzAM+PgezRWeDbhMB8GA1UdIwQY
MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt
ZjNlMDUyYmFiMTQ0LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0
LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeluBd8KK
4iiTKDnBOFjAWXlQYue6YIXBnzLs0QVa+8MYx2HOegwnWDpyDXr1pTnRBwzLtTmX
o3YBj00p8CAohoDB2oN/O5cw1XHo0LrZA4NY0i+i8tYAaIZdcvSm4yVLbMlwoFP/
GeT9kFB2vKF668Y6++PuET+yRyZigZwKaWSklsfu/M1bD0n1jC/y1ROaxx2rTYIU
VZG2D4VStIBw+vk0wGNK9pbAzkfD6W9NEKEyZG7z/B3kKnoqWPMgG15tKgfXfrAX
XiyzVA0GbWRSYsKPs7VgIkiDcm+pd1pDcU9Mdi8WvNFVnzStH+6rnkIGLxHPxYSv
WEH0Q/K6VxvLHA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:02:30 2025 by rpki-client