Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          a0zSc7+zNvUokEyGu0AbyP4Be0gBWWt5U1giaRdW/eQ=
Subject key identifier:   E1:FA:67:75:93:11:02:A8:24:AE:B2:20:99:7B:D6:60:E9:F7:A9:8B
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       01967266745B7BA92EC555DA51F124D51BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          0FC8
Signing time:             Sat 26 Apr 2025 14:00:39 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:39 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:39 +0000
Files and hashes:         1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=)
                          2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
                          3: S3XpEBxlerRtwSFaGLA6G44LRQI.roa (hash: Z/+jFc8Tb7annjDdHUmTXSmFMVDmPYF89/cdJ7u6K/A=)
                          4: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
                          5: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: SN5/hcW0+vp/KGdU7ov2LsAPVP9Qbwm5gpt9i9O6ScQ=)
                          6: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
                          7: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (hash: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:74:5b:7b:a9:2e:c5:55:da:51:f1:24:d5:1b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Apr 26 14:00:39 2025 GMT
            Not After : Apr 27 14:00:39 2025 GMT
        Subject: CN=e1fa6775931102a824aeb220997bd660e9f7a98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:fc:13:3d:0d:74:6a:53:5e:af:8f:e3:48:
                    b0:28:c4:c8:eb:37:30:9c:6a:55:47:b3:97:dc:12:
                    b0:5c:0d:ed:04:16:5b:e0:4d:01:4f:5c:0b:b2:06:
                    9c:97:41:24:5f:77:0b:7c:1d:e1:f1:28:17:98:d5:
                    3e:8c:03:cc:8d:b8:2a:b5:81:0c:ea:f4:6d:47:c2:
                    29:ad:98:a4:9f:4c:48:ba:77:f0:fc:be:8f:62:ec:
                    76:50:fd:71:f0:a4:72:47:dd:37:a9:ba:71:77:e6:
                    32:fa:76:5d:39:d6:59:4f:c4:5c:03:1c:db:d7:6f:
                    6e:31:49:38:fc:71:bc:76:00:c2:55:ec:5a:d0:74:
                    41:19:e0:70:1a:70:0c:40:1f:d5:0e:b5:4a:39:09:
                    db:56:b8:77:35:d9:1e:5d:91:7f:9d:14:02:b3:c5:
                    a2:48:05:67:d8:98:ab:7e:cd:c5:e5:03:3c:81:13:
                    bd:10:80:96:42:71:20:e2:48:91:6e:73:f1:d5:0c:
                    1a:f6:96:52:70:2b:63:5c:85:48:ba:c4:20:b6:74:
                    07:b9:23:d9:fa:1d:06:6a:9c:45:b5:05:85:cc:07:
                    af:36:e7:11:7c:5a:10:17:34:e7:b7:fb:8e:6b:29:
                    78:b6:c3:e9:63:ef:b6:5b:dc:de:8b:0a:cb:d2:87:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FA:67:75:93:11:02:A8:24:AE:B2:20:99:7B:D6:60:E9:F7:A9:8B
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:52:23:b7:8e:13:97:2e:6f:a1:95:09:0a:ec:40:86:2d:
         5d:4a:c0:c5:a9:ea:c8:25:33:a9:e3:f0:5f:b5:51:1c:60:81:
         27:3d:00:1a:90:bb:62:0c:82:d0:f6:55:a0:79:85:3d:6e:ad:
         c1:8c:c2:1f:0b:27:af:ea:97:9f:4b:f8:61:1d:e2:69:62:43:
         c5:89:89:a9:d7:79:a6:b4:39:ea:e9:12:b9:14:f3:7d:e7:8e:
         bb:36:d5:9d:92:d7:9a:ce:5e:97:bc:b6:72:09:22:2b:ec:97:
         cb:71:23:c2:38:f5:68:1b:a1:a8:49:cd:a8:f8:72:e2:cd:00:
         bd:a9:f6:d5:4d:0f:ac:23:4d:9b:36:b9:c6:75:62:40:80:0e:
         41:df:aa:df:93:c1:86:85:a0:dc:19:0e:7d:15:a4:68:8f:6a:
         a1:d9:b0:7d:8e:64:3e:eb:e3:51:36:f0:c7:6f:f6:1c:3d:19:
         1b:aa:8d:c6:06:4c:13:b5:6a:ec:13:60:ac:f0:2c:5e:83:98:
         5b:1c:96:17:d2:73:1f:f5:64:5c:e0:cc:6c:51:1c:a4:13:48:
         86:4e:04:3e:27:1f:86:09:a7:3e:66:0d:54:84:51:8e:36:e9:
         34:70:99:09:25:25:d8:13:7f:17:f5:fd:85:a8:ce:f2:4a:ad:
         ab:0c:df:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyZnRbe6kuxVXaUfEk1Rv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjUwNDI2MTQwMDM5WhcNMjUwNDI3MTQwMDM5WjAzMTEwLwYDVQQD
EyhlMWZhNjc3NTkzMTEwMmE4MjRhZWIyMjA5OTdiZDY2MGU5ZjdhOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8v8Ez0NdGpTXq+P40iwKMTI6zcw
nGpVR7OX3BKwXA3tBBZb4E0BT1wLsgacl0EkX3cLfB3h8SgXmNU+jAPMjbgqtYEM
6vRtR8IprZikn0xIunfw/L6PYux2UP1x8KRyR903qbpxd+Yy+nZdOdZZT8RcAxzb
129uMUk4/HG8dgDCVexa0HRBGeBwGnAMQB/VDrVKOQnbVrh3NdkeXZF/nRQCs8Wi
SAVn2Jirfs3F5QM8gRO9EICWQnEg4kiRbnPx1Qwa9pZScCtjXIVIusQgtnQHuSPZ
+h0GapxFtQWFzAevNucRfFoQFzTnt/uOayl4tsPpY++2W9zeiwrL0ocN4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH6Z3WTEQKoJK6yIJl71mDp96mLMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckxSI7eO
E5cub6GVCQrsQIYtXUrAxanqyCUzqePwX7VRHGCBJz0AGpC7YgyC0PZVoHmFPW6t
wYzCHwsnr+qXn0v4YR3iaWJDxYmJqdd5prQ56ukSuRTzfeeOuzbVnZLXms5el7y2
cgkiK+yXy3Ejwjj1aBuhqEnNqPhy4s0Avan21U0PrCNNmza5xnViQIAOQd+q35PB
hoWg3BkOfRWkaI9qodmwfY5kPuvjUTbwx2/2HD0ZG6qNxgZME7Vq7BNgrPAsXoOY
WxyWF9JzH/VkXODMbFEcpBNIhk4EPicfhgmnPmYNVIRRjjbpNHCZCSUl2BN/F/X9
hajO8kqtqwzf5g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:33:25 2025 by rpki-client