Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          LFfqoC3n34bpEdFCo6giVrcDs3L1AIUnjopO2I+7qus=
Subject key identifier:   85:51:0C:56:D1:A8:31:6C:DA:E1:16:EB:F5:56:F8:37:23:9C:26:34
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019696054F38C9060135BEBA8B5707754E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          07C9
Signing time:             Sat 03 May 2025 12:00:52 +0000
Manifest this update:     Sat 03 May 2025 12:00:52 +0000
Manifest next update:     Sun 04 May 2025 12:00:52 +0000
Files and hashes:         1: 31nqpZ5dKVVgBx5PYVLJiU1jvrY.roa (hash: tzZ/OMjchdfMYww0evRcPgmGoWdwymv8hmZoGYGhZRM=)
                          2: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: j2qwdZ2P/oKcksI+YDTPb5IQhOtgHr6u1TP2Sd9MqXQ=)
                          3: 8CQhFFzhVCUSs-Acf3oCW5Ht1O4.roa (hash: 4QjA0b3TlO69hSmmKrV3SWr74V598K76v+qHTSKJ/xE=)
                          4: L92S0PfcHSE9bgS-JCS8vvop6UQ.roa (hash: XSHb8sFm7h1G4YsZCXgF14jI1G7rEVjjM6p2QTILx6g=)
                          5: tLtgUfd0ui74NFHNYFQ3DTMpTpY.roa (hash: t0Rcfn+Zo7QZAW0FXDZgWJxfMhFkyCKBVpW7cC1Ejw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 10:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:96:05:4f:38:c9:06:01:35:be:ba:8b:57:07:75:4e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: May  3 12:00:52 2025 GMT
            Not After : May  4 12:00:52 2025 GMT
        Subject: CN=85510c56d1a8316cdae116ebf556f837239c2634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:5e:a8:02:5c:9e:6a:cb:74:35:19:ed:1a:
                    62:8e:5f:0d:2b:6f:16:9b:29:ac:1a:c0:84:bb:a3:
                    28:23:85:f6:af:cb:e3:3b:e0:d4:f7:01:3a:23:4f:
                    06:4f:d2:9c:bb:02:b6:8e:16:0b:a7:15:68:0e:2f:
                    48:8b:aa:b4:3f:d9:d3:85:1f:44:d7:9d:2b:66:66:
                    ef:0c:89:93:d6:da:ab:4b:a3:1b:7d:81:ea:10:bd:
                    23:b2:a9:ea:fe:6e:15:01:95:0f:3d:d0:51:dd:41:
                    93:f4:d2:8d:09:b1:82:0e:53:d8:e8:f9:4c:c8:b2:
                    47:1c:78:b6:eb:bc:b4:db:a1:38:ea:35:f1:bc:c7:
                    52:c6:f9:bc:90:1f:5b:ec:98:7f:fe:04:3a:8c:41:
                    98:00:4a:43:c6:cb:81:23:46:b1:8f:dd:28:9b:f0:
                    13:6d:79:0d:12:17:81:20:96:ba:4a:0c:d9:16:85:
                    7d:70:e1:7f:7e:25:c1:75:ad:d3:fc:d7:e5:85:f2:
                    f7:16:b9:7a:e1:2b:12:b9:aa:9a:fb:2d:2c:e2:c3:
                    4b:e4:85:b7:74:e9:8a:17:21:69:9c:72:31:05:bc:
                    02:35:9b:95:64:86:96:34:da:48:18:17:3f:a7:03:
                    f5:57:e8:9a:75:0e:99:18:5b:e4:6e:fc:07:c5:1f:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:0C:56:D1:A8:31:6C:DA:E1:16:EB:F5:56:F8:37:23:9C:26:34
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:df:0d:14:d2:09:24:02:c5:5b:fd:6c:ca:1d:7f:72:3a:2b:
         56:97:23:08:45:a0:08:aa:1e:42:99:73:3d:80:04:0e:1e:25:
         34:c5:ca:ba:e0:63:bb:30:40:f2:4e:b8:fd:bc:40:36:ec:06:
         98:70:14:e5:6e:bb:42:c0:7b:5d:5c:82:24:db:23:2c:ee:1e:
         2d:47:cc:b0:2c:6e:6b:00:be:a3:02:0f:3a:ae:ff:1f:1f:cd:
         ca:9d:1f:4d:0c:7c:0e:70:f9:50:e9:9f:9c:41:cd:1d:fe:48:
         27:ba:e7:0c:6b:b3:67:f4:43:60:f0:77:7d:bd:5e:89:16:b8:
         bd:b7:2e:3d:e8:2d:22:e3:fa:69:ba:98:51:96:d0:e1:03:8d:
         7b:4b:29:27:87:cb:9b:65:1e:6e:34:8a:58:ca:6e:bb:4e:50:
         29:d4:57:58:84:7d:80:d3:92:33:8e:a2:d5:65:ea:f0:c8:fc:
         41:b4:5b:d6:10:4b:9e:fe:69:22:10:0b:d4:41:d0:db:aa:52:
         f9:fd:5f:ad:13:01:f5:f3:2c:ab:78:d0:69:2d:0d:c7:23:92:
         c7:93:5e:b5:a1:b2:7c:7b:f8:6f:68:cc:0a:8c:9f:ee:61:a1:
         68:44:24:05:95:57:71:48:25:e4:ba:39:5f:d8:75:6b:d9:6f:
         af:5f:61:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaWBU84yQYBNb66i1cHdU4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj
NTU4ZWYwHhcNMjUwNTAzMTIwMDUyWhcNMjUwNTA0MTIwMDUyWjAzMTEwLwYDVQQD
Eyg4NTUxMGM1NmQxYTgzMTZjZGFlMTE2ZWJmNTU2ZjgzNzIzOWMyNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p9eqAJcnmrLdDUZ7Rpijl8NK28W
mymsGsCEu6MoI4X2r8vjO+DU9wE6I08GT9KcuwK2jhYLpxVoDi9Ii6q0P9nThR9E
150rZmbvDImT1tqrS6MbfYHqEL0jsqnq/m4VAZUPPdBR3UGT9NKNCbGCDlPY6PlM
yLJHHHi267y026E46jXxvMdSxvm8kB9b7Jh//gQ6jEGYAEpDxsuBI0axj90om/AT
bXkNEheBIJa6SgzZFoV9cOF/fiXBda3T/NflhfL3Frl64SsSuaqa+y0s4sNL5IW3
dOmKFyFpnHIxBbwCNZuVZIaWNNpIGBc/pwP1V+iadQ6ZGFvkbvwHxR/BaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVRDFbRqDFs2uEW6/VW+DcjnCY0MB8GA1UdIwQY
MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt
ZjNlMDUyYmFiMTQ0LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0
LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxt8NFNIJ
JALFW/1syh1/cjorVpcjCEWgCKoeQplzPYAEDh4lNMXKuuBjuzBA8k64/bxANuwG
mHAU5W67QsB7XVyCJNsjLO4eLUfMsCxuawC+owIPOq7/Hx/Nyp0fTQx8DnD5UOmf
nEHNHf5IJ7rnDGuzZ/RDYPB3fb1eiRa4vbcuPegtIuP6abqYUZbQ4QONe0spJ4fL
m2UebjSKWMpuu05QKdRXWIR9gNOSM46i1WXq8Mj8QbRb1hBLnv5pIhAL1EHQ26pS
+f1frRMB9fMsq3jQaS0NxyOSx5NetaGyfHv4b2jMCoyf7mGhaEQkBZVXcUgl5Lo5
X9h1a9lvr19hhA==
-----END CERTIFICATE-----
Generated at Sat May 3 17:26:33 2025 by rpki-client