Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File:                     ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier:          FRGOiYYRrs13OguAX2DZtXTCgseXqDIj3wym3t6Wlmc=
Subject key identifier:   A5:97:5E:4A:19:CD:6B:92:66:9F:C7:C7:E9:5B:AF:8C:42:7D:97:BC
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer:       /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial:       0196771EE693F579FAF5B26CBDDF7EEB1DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 12:00:35 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:35 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:35 +0000
Files and hashes:         1: 36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa (hash: SQ9ogBKHb+rGHe3BXgCbUKWuF1/SVTNnqc7Qrrn9o88=)
                          2: BLIbcZ8gVGAjnHegyR2lqH6xAJM.roa (hash: Bj27w9uQHRhZtkX+wPrDSZtYcxRX/Qm5XlGgHnKEj+g=)
                          3: c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa (hash: G3UZF7fxpF7R/IVnk9rPAZ+jjio/iwehlQmNNTZ8rAo=)
                          4: h_RE6WU4ZuYi01oBDIse0-pY6i0.roa (hash: WA+t8DetCDYbdx3o6UcknVGJ3PsCQ51UnZ6QRrSNIm0=)
                          5: oq_HXzOCCJ3V-kFxFIeDBDnbULg.roa (hash: n4S14t4ExmuKX91bG38pFLwh1gNdMqcOWis+wx+O8jw=)
                          6: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: ehNYVcU5WXEG/gpYfjQbZxmOSgUxobmXnFKVQdV+FPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1e:e6:93:f5:79:fa:f5:b2:6c:bd:df:7e:eb:1d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
        Validity
            Not Before: Apr 27 12:00:35 2025 GMT
            Not After : Apr 28 12:00:35 2025 GMT
        Subject: CN=a5975e4a19cd6b92669fc7c7e95baf8c427d97bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:06:38:4d:14:bb:45:31:e0:7e:34:7c:1b:
                    4c:db:fb:7b:10:2f:bf:96:70:8b:91:48:ec:d8:39:
                    c5:6b:3a:da:e0:83:b3:60:5e:98:58:69:bd:62:f8:
                    07:98:fe:09:f3:6c:6f:78:7d:de:29:f5:a1:98:ed:
                    6f:a8:9f:54:07:1e:8e:1b:6c:ab:b0:80:4b:e4:79:
                    96:27:3b:ee:80:a2:91:1e:6d:09:45:82:2d:94:8b:
                    f7:36:0e:65:16:63:b7:f2:0e:22:91:1a:20:21:5e:
                    a1:fb:d9:4b:23:a8:56:ba:a2:88:8d:c8:73:24:69:
                    69:3c:90:28:6c:69:92:64:87:46:16:9a:1a:9c:76:
                    5d:b6:59:a5:3a:f1:15:e3:72:1c:52:13:c1:c9:a2:
                    f3:b3:9e:59:df:7e:c5:f4:a8:07:5e:6c:63:e5:3c:
                    5b:1b:1d:b9:32:c9:7f:79:34:5f:ab:b1:3f:46:5b:
                    14:7f:cf:0c:d2:1f:c5:6a:0f:d7:2b:a2:06:52:03:
                    34:da:6a:ac:1f:41:2f:54:cf:75:74:66:13:97:45:
                    b3:92:b8:cd:dc:c0:fb:99:f0:ea:1b:13:a7:06:86:
                    c0:3a:80:73:4e:6f:0f:0b:71:1e:57:ad:ff:f6:e0:
                    ce:a9:39:c0:25:30:72:1f:d9:36:b8:e3:ef:8e:ae:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:97:5E:4A:19:CD:6B:92:66:9F:C7:C7:E9:5B:AF:8C:42:7D:97:BC
            X509v3 Authority Key Identifier:
                keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:48:a8:86:72:c5:63:cc:d0:74:66:66:32:d6:d9:b4:a8:79:
         81:c5:f3:62:ea:67:b0:63:7d:4d:98:0e:73:2f:62:7d:04:ac:
         04:0e:1a:f4:f0:16:2a:77:b8:59:4a:31:25:d0:f9:26:eb:78:
         ad:2b:b1:4e:e0:9e:d1:5a:86:18:2b:48:eb:64:0b:cd:46:bc:
         b9:73:00:d1:75:4e:f5:05:b8:50:d6:cf:82:08:22:73:90:3c:
         cd:a0:06:e4:20:73:b0:54:cd:c9:a7:7e:ba:8e:c1:23:27:de:
         cd:b0:22:9d:65:11:f1:8b:cf:6d:73:e0:72:e4:5e:72:1c:b3:
         12:f7:b4:69:c5:f6:09:aa:49:c7:7d:ca:88:cb:f1:50:16:c7:
         95:78:34:bb:02:20:8c:f8:84:17:74:52:ef:46:67:fa:d2:14:
         71:e5:31:cd:55:cb:1e:00:d4:26:aa:f9:9d:9a:70:d4:75:e4:
         2e:1e:0d:c4:22:ac:4e:bf:34:8b:5a:40:18:7e:91:71:e7:bd:
         23:cd:d3:30:09:18:00:c6:cf:da:64:51:d7:64:80:6d:77:9f:
         4b:90:df:51:42:eb:e1:59:86:9b:12:c0:00:0e:7b:0f:12:95:
         3d:c9:16:76:27:29:13:84:2c:e6:ee:1c:35:15:34:fb:64:db:
         a4:6e:7c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HuaT9Xn69bJsvd9+6x3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjIzMjk1ODA5N2I1ODYzZWFmZDA0N2JiMzE1MTcxZWFh
MDFmYjcwHhcNMjUwNDI3MTIwMDM1WhcNMjUwNDI4MTIwMDM1WjAzMTEwLwYDVQQD
EyhhNTk3NWU0YTE5Y2Q2YjkyNjY5ZmM3YzdlOTViYWY4YzQyN2Q5N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvIGOE0Uu0Ux4H40fBtM2/t7EC+/
lnCLkUjs2DnFazra4IOzYF6YWGm9YvgHmP4J82xveH3eKfWhmO1vqJ9UBx6OG2yr
sIBL5HmWJzvugKKRHm0JRYItlIv3Ng5lFmO38g4ikRogIV6h+9lLI6hWuqKIjchz
JGlpPJAobGmSZIdGFpoanHZdtlmlOvEV43IcUhPByaLzs55Z337F9KgHXmxj5Txb
Gx25Msl/eTRfq7E/RlsUf88M0h/Fag/XK6IGUgM02mqsH0EvVM91dGYTl0WzkrjN
3MD7mfDqGxOnBobAOoBzTm8PC3EeV63/9uDOqTnAJTByH9k2uOPvjq4cuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWXXkoZzWuSZp/Hx+lbr4xCfZe8MB8GA1UdIwQY
MBaAFMmyMpWAl7WGPq/QR7sxUXHqoB+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUt
MDdiN2ZlZjA4NThmLzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUtMDdiN2ZlZjA4NThm
LzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEiohnLF
Y8zQdGZmMtbZtKh5gcXzYupnsGN9TZgOcy9ifQSsBA4a9PAWKne4WUoxJdD5Jut4
rSuxTuCe0VqGGCtI62QLzUa8uXMA0XVO9QW4UNbPgggic5A8zaAG5CBzsFTNyad+
uo7BIyfezbAinWUR8YvPbXPgcuRechyzEve0acX2CapJx33KiMvxUBbHlXg0uwIg
jPiEF3RS70Zn+tIUceUxzVXLHgDUJqr5nZpw1HXkLh4NxCKsTr80i1pAGH6Rcee9
I83TMAkYAMbP2mRR12SAbXefS5DfUULr4VmGmxLAAA57DxKVPckWdicpE4Qs5u4c
NRU0+2TbpG58/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:59 2025 by rpki-client