Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File:                     2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier:          4EzIJm13dJ1NBHS722e6nARwZALbnY8m7UQlLNa6h1g=
Subject key identifier:   D5:FF:39:53:32:CC:D8:F4:8E:82:03:89:E0:D0:83:EC:31:16:8C:BE
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer:       /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial:       0196089DB69AD1C04A52DCB9FACA3588C242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number:          07B1
Signing time:             Sun 06 Apr 2025 01:01:15 +0000
Manifest this update:     Sun 06 Apr 2025 01:01:15 +0000
Manifest next update:     Mon 07 Apr 2025 01:01:15 +0000
Files and hashes:         1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
                          2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: SaGkRfxSNIXWuxAAo1O6DTy++m0oCkljPCYkKga8+nQ=)
                          3: KRSjlLP_LGaVl43CnNfHf_qcv0Y.roa (hash: T6wpRaMQShfnxACSwpJMZJO4nNVJDFOyvCxB/2y9lh0=)
                          4: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
                          5: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
                          6: Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa (hash: llK9gBnY2tMLV3DDPcLyEXjo4pojFi3+MnQmjAC9rBg=)
                          7: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:08:9d:b6:9a:d1:c0:4a:52:dc:b9:fa:ca:35:88:c2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
        Validity
            Not Before: Apr  6 01:01:15 2025 GMT
            Not After : Apr  7 01:01:15 2025 GMT
        Subject: CN=d5ff395332ccd8f48e820389e0d083ec31168cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:5e:9b:77:28:90:4f:54:cb:b4:d1:d6:59:
                    e4:da:bd:91:fe:9a:34:a5:5b:47:9e:78:e3:b6:07:
                    a2:61:80:e0:d3:d2:c2:d5:11:60:df:75:97:ca:49:
                    86:ab:79:9e:ed:52:a8:ed:88:06:a6:e8:68:d2:9f:
                    78:7a:13:6c:01:68:77:0b:a3:c5:e2:ec:99:f6:78:
                    f3:07:d2:2d:cc:5f:de:82:0a:a2:db:f7:5d:9a:01:
                    cd:e3:a5:1f:e6:84:79:1d:85:3f:cf:77:0e:6e:5b:
                    9b:8b:fa:34:c7:84:dc:21:1c:dc:d2:e4:6b:d4:83:
                    9e:30:27:78:c8:e3:26:9d:c2:89:21:df:96:59:44:
                    6b:6b:70:7a:37:11:e2:89:91:31:07:62:ce:b2:05:
                    39:4d:8e:6e:80:da:90:2c:27:71:a9:8d:c6:ac:e1:
                    01:b4:c4:f5:10:49:68:2f:8e:6f:0a:b0:d0:f7:12:
                    e6:d9:06:b9:2c:d2:75:90:60:c0:cd:cf:63:0d:ab:
                    58:37:f5:e2:e2:72:28:49:9a:8c:d6:f1:96:3a:8c:
                    46:7d:7a:b4:64:04:a1:94:18:52:4b:cc:9a:57:4a:
                    e3:e2:4e:d6:65:57:8e:04:a6:53:c2:7d:88:9f:6a:
                    a1:69:2f:42:b4:80:f5:9b:48:84:d7:12:35:f1:e8:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FF:39:53:32:CC:D8:F4:8E:82:03:89:E0:D0:83:EC:31:16:8C:BE
            X509v3 Authority Key Identifier:
                keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:03:04:48:cb:81:50:f6:17:8d:2a:e0:ee:24:c1:4b:6f:2c:
         99:95:aa:83:c8:42:35:d9:08:73:b8:41:dd:fc:17:5c:9a:c5:
         46:fe:bb:e0:bb:70:4a:38:56:1f:28:cb:22:38:64:23:4b:b4:
         fb:43:7c:66:a8:32:05:d1:a4:9d:9b:93:36:87:6f:94:9b:9b:
         3b:64:fc:eb:53:f2:f7:a4:45:43:7c:9a:49:20:7f:c8:6f:93:
         72:9c:61:31:34:c8:40:89:d4:c0:68:5f:df:a2:3e:fd:fe:80:
         48:1f:e0:a6:f6:ef:20:03:d2:45:46:49:61:2d:63:24:e6:e0:
         72:7b:59:4b:cc:f9:76:16:f3:84:67:12:87:ba:9c:e0:49:69:
         88:35:db:50:b3:fa:7f:a5:81:54:c0:16:e9:b9:87:21:d3:fe:
         97:61:ac:d6:0d:3e:74:d4:cf:1e:09:db:1f:a0:10:78:55:53:
         9b:2a:f6:ba:c2:fd:92:ab:95:e4:3a:71:a9:1a:f4:39:ee:08:
         83:b9:51:62:ed:d4:e6:dd:4d:0c:1e:7d:81:da:2e:bd:be:53:
         64:f1:35:2a:ab:61:11:f8:2b:93:eb:6e:6f:31:7d:19:8f:eb:
         15:57:a5:7d:66:40:ce:02:e2:18:84:c8:f9:57:f0:82:01:ae:
         92:e0:aa:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYInbaa0cBKUty5+so1iMJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjUwNDA2MDEwMTE1WhcNMjUwNDA3MDEwMTE1WjAzMTEwLwYDVQQD
EyhkNWZmMzk1MzMyY2NkOGY0OGU4MjAzODllMGQwODNlYzMxMTY4Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lVem3cokE9Uy7TR1lnk2r2R/po0
pVtHnnjjtgeiYYDg09LC1RFg33WXykmGq3me7VKo7YgGpuho0p94ehNsAWh3C6PF
4uyZ9njzB9ItzF/eggqi2/ddmgHN46Uf5oR5HYU/z3cOblubi/o0x4TcIRzc0uRr
1IOeMCd4yOMmncKJId+WWURra3B6NxHiiZExB2LOsgU5TY5ugNqQLCdxqY3GrOEB
tMT1EEloL45vCrDQ9xLm2Qa5LNJ1kGDAzc9jDatYN/Xi4nIoSZqM1vGWOoxGfXq0
ZAShlBhSS8yaV0rj4k7WZVeOBKZTwn2In2qhaS9CtID1m0iE1xI18ehSfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX/OVMyzNj0joIDieDQg+wxFoy+MB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgMESMuB
UPYXjSrg7iTBS28smZWqg8hCNdkIc7hB3fwXXJrFRv674LtwSjhWHyjLIjhkI0u0
+0N8ZqgyBdGknZuTNodvlJubO2T861Py96RFQ3yaSSB/yG+TcpxhMTTIQInUwGhf
36I+/f6ASB/gpvbvIAPSRUZJYS1jJObgcntZS8z5dhbzhGcSh7qc4ElpiDXbULP6
f6WBVMAW6bmHIdP+l2Gs1g0+dNTPHgnbH6AQeFVTmyr2usL9kquV5DpxqRr0Oe4I
g7lRYu3U5t1NDB59gdouvb5TZPE1KqthEfgrk+tubzF9GY/rFVelfWZAzgLiGITI
+VfwggGukuCqLg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:00 2025 by rpki-client