Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          gl6u8bkHD63UfF8MYSr/RFVUWpRQYB9itK4RC2iSWJ0=
Subject key identifier:   0A:50:5F:A1:6C:0F:2B:AF:31:EA:C5:C5:DB:14:D1:2A:0F:3B:94:37
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       01967FEB41491B9FA3F082033469A331F97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          12F8
Signing time:             Tue 29 Apr 2025 05:00:46 +0000
Manifest this update:     Tue 29 Apr 2025 05:00:46 +0000
Manifest next update:     Wed 30 Apr 2025 05:00:46 +0000
Files and hashes:         1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
                          2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: YJP2lmunQi6ZQ/exaJweHhmgHmgXyCMADbVpcxSgalE=)
                          3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
                          4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
                          5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
                          6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
                          7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
                          8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:eb:41:49:1b:9f:a3:f0:82:03:34:69:a3:31:f9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Apr 29 05:00:46 2025 GMT
            Not After : Apr 30 05:00:46 2025 GMT
        Subject: CN=0a505fa16c0f2baf31eac5c5db14d12a0f3b9437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e5:00:75:1e:83:b5:3f:47:ff:2a:6d:db:b6:
                    f9:ac:cd:8d:da:16:ea:53:ff:36:90:20:4d:a4:c9:
                    75:11:7a:69:fe:db:0b:be:04:34:c6:d0:fa:ab:46:
                    f4:a3:f2:d4:fe:45:db:14:7b:e1:f2:9d:b6:62:b7:
                    67:a8:fd:bb:46:bb:ba:6b:de:e1:13:a6:94:8b:74:
                    6c:d3:f5:fb:72:7b:3d:5f:c7:69:97:dc:2e:65:21:
                    89:3d:55:4f:3a:77:6d:62:a2:48:19:db:b8:a4:69:
                    2f:37:ff:e9:1a:3d:24:b3:7f:a6:cc:f9:d5:b0:f6:
                    31:82:99:b2:20:88:db:f8:57:92:e8:8d:cb:3f:de:
                    06:8e:74:2f:14:02:68:9c:9b:58:ed:ba:4f:11:bc:
                    9d:44:76:c8:e6:6d:04:89:af:c9:ec:3d:03:ae:a2:
                    e2:26:28:8b:1d:ab:03:1e:58:be:e8:27:f6:39:50:
                    a2:4f:8d:59:1d:c0:1d:f7:10:9c:0c:a4:76:40:c1:
                    f0:b7:fa:1b:21:b9:06:16:c1:1f:04:77:33:87:23:
                    ec:e2:47:97:08:42:b8:f2:4c:cc:19:d1:41:1d:56:
                    b3:de:72:62:b3:11:8d:b7:51:5e:e1:bd:e4:07:ed:
                    50:21:ab:9a:3b:92:ed:46:2f:6d:21:45:79:d5:12:
                    34:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:50:5F:A1:6C:0F:2B:AF:31:EA:C5:C5:DB:14:D1:2A:0F:3B:94:37
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:de:9a:c3:ac:d1:1c:04:27:30:c1:58:d5:ce:fc:71:d5:8b:
         fd:b6:e6:00:b0:2c:d3:13:de:7e:1f:3f:d0:ef:0e:eb:64:0f:
         b2:de:9b:d2:e7:d2:1e:33:eb:40:ae:0a:09:91:83:97:1c:a6:
         12:fc:8a:db:9d:ba:04:7f:41:ed:54:f5:f5:15:35:a6:c3:e2:
         ea:3d:1e:b4:ee:ff:ec:cd:5a:cb:2a:1f:9d:08:f3:7f:89:34:
         f5:15:ff:a7:e8:ee:d8:c9:3e:6f:69:59:84:ef:2a:2b:f5:f6:
         f7:6a:2e:a6:c7:91:15:5f:5a:df:e7:71:09:e3:1f:58:7a:01:
         88:b8:46:58:fa:c8:d2:8b:79:8a:ea:a2:42:ab:b9:42:45:5f:
         b5:fd:5c:93:aa:fe:59:29:a9:1d:57:6a:f8:55:90:fb:0c:96:
         6d:29:9d:9b:27:03:d7:0f:cd:35:95:b2:94:d6:01:3b:cd:97:
         62:2b:68:be:6a:11:71:6d:11:f4:8b:62:90:24:ad:62:80:9b:
         1a:98:5b:d5:f8:d2:11:30:2f:ab:d1:b6:be:fe:f2:65:05:20:
         d8:f1:e8:0c:1b:ec:7a:26:de:c7:09:ae:7b:61:c8:82:37:78:
         93:06:68:99:61:65:8a:30:23:3d:28:5f:12:b3:2e:72:38:c1:
         ab:e2:6c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/60FJG5+j8IIDNGmjMfl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzU0NjRlODk4MTZlZjAwYjAzNjk1MDIwMThhN2U1OWNl
MmQzNmMwHhcNMjUwNDI5MDUwMDQ2WhcNMjUwNDMwMDUwMDQ2WjAzMTEwLwYDVQQD
EygwYTUwNWZhMTZjMGYyYmFmMzFlYWM1YzVkYjE0ZDEyYTBmM2I5NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OUAdR6DtT9H/ypt27b5rM2N2hbq
U/82kCBNpMl1EXpp/tsLvgQ0xtD6q0b0o/LU/kXbFHvh8p22YrdnqP27Rru6a97h
E6aUi3Rs0/X7cns9X8dpl9wuZSGJPVVPOndtYqJIGdu4pGkvN//pGj0ks3+mzPnV
sPYxgpmyIIjb+FeS6I3LP94GjnQvFAJonJtY7bpPEbydRHbI5m0Eia/J7D0DrqLi
JiiLHasDHli+6Cf2OVCiT41ZHcAd9xCcDKR2QMHwt/obIbkGFsEfBHczhyPs4keX
CEK48kzMGdFBHVaz3nJisxGNt1Fe4b3kB+1QIauaO5LtRi9tIUV51RI0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApQX6FsDyuvMerFxdsU0SoPO5Q3MB8GA1UdIwQY
MBaAFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMt
MzFkMTk3ZjEzOWQ4LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMtMzFkMTk3ZjEzOWQ4
LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl96aw6zR
HAQnMMFY1c78cdWL/bbmALAs0xPefh8/0O8O62QPst6b0ufSHjPrQK4KCZGDlxym
EvyK2526BH9B7VT19RU1psPi6j0etO7/7M1ayyofnQjzf4k09RX/p+ju2Mk+b2lZ
hO8qK/X292oupseRFV9a3+dxCeMfWHoBiLhGWPrI0ot5iuqiQqu5QkVftf1ck6r+
WSmpHVdq+FWQ+wyWbSmdmycD1w/NNZWylNYBO82XYitovmoRcW0R9ItikCStYoCb
Gphb1fjSETAvq9G2vv7yZQUg2PHoDBvseibexwmue2HIgjd4kwZomWFlijAjPShf
ErMucjjBq+JsMg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:20:46 2025 by rpki-client