Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File:                     u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier:          J/CDEJtJElo3b21NQxDjT24yHoyVdqJX5Yf7dZTeI6Q=
Subject key identifier:   BD:CC:5F:46:0F:5A:13:E0:82:66:0B:E9:15:9A:2C:51:1D:96:91:F8
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer:       /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial:       019659B9BE1F2B524CA0590FF92180888D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number:          0832
Signing time:             Mon 21 Apr 2025 19:01:06 +0000
Manifest this update:     Mon 21 Apr 2025 19:01:06 +0000
Manifest next update:     Tue 22 Apr 2025 19:01:06 +0000
Files and hashes:         1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
                          2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: 2SyECCcUEqrFWlA7w4i+FtQKXc4kNlZAjUn0Jbw/yPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:b9:be:1f:2b:52:4c:a0:59:0f:f9:21:80:88:8d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
        Validity
            Not Before: Apr 21 19:01:06 2025 GMT
            Not After : Apr 22 19:01:06 2025 GMT
        Subject: CN=bdcc5f460f5a13e082660be9159a2c511d9691f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:00:94:4d:1b:ff:7e:3e:b9:3f:35:3a:1d:
                    fc:32:c4:65:4f:e3:e7:15:3b:c2:c6:cd:58:ed:b1:
                    62:b7:e1:8d:73:ee:57:ee:f0:42:55:9d:3f:93:3d:
                    e3:a8:b4:4a:ee:9a:60:53:e5:bc:dd:de:5d:74:7f:
                    51:8d:a4:0a:aa:4d:31:84:fe:3e:05:0a:e8:66:e6:
                    31:a5:f4:09:00:f3:5c:b7:7b:88:c4:d9:9f:ef:6d:
                    eb:aa:2a:d3:1d:7b:63:a6:91:0b:d3:bf:02:f2:2e:
                    67:46:18:9c:1a:cb:34:b1:99:a4:a3:a5:bd:18:4c:
                    9f:4e:e9:f5:79:01:4a:79:fd:34:83:40:82:cc:7c:
                    76:5f:84:2c:86:3b:02:46:ed:6f:48:b3:23:27:b4:
                    ba:86:2b:69:cf:44:94:93:7e:89:eb:a6:3e:2d:10:
                    ce:b4:7b:da:47:53:85:f2:10:4b:9f:e0:1b:2b:57:
                    01:26:e5:33:04:24:d2:ed:75:4e:6f:ee:fc:8d:1b:
                    ea:e2:8b:ec:7a:f9:58:dd:b0:13:50:84:ed:10:66:
                    ce:2a:3b:0e:af:68:11:89:17:49:bd:ed:75:26:29:
                    0b:87:3f:ff:a1:60:fc:9a:5f:b1:94:26:d2:e0:ac:
                    19:c1:d7:af:8f:4d:4e:78:24:21:18:13:a7:a8:13:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CC:5F:46:0F:5A:13:E0:82:66:0B:E9:15:9A:2C:51:1D:96:91:F8
            X509v3 Authority Key Identifier:
                keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:02:50:38:6a:b4:c0:f3:7b:9c:aa:50:2c:d7:f3:ba:ad:ee:
         f9:07:3a:27:e0:9f:ae:86:be:d3:59:34:50:f2:0e:aa:e0:fa:
         72:f2:cf:0f:91:dd:c6:98:88:10:b1:c8:af:16:b9:c3:01:f6:
         65:07:90:0b:b1:a9:70:38:d3:27:bf:58:bd:34:72:4f:8c:62:
         5d:d4:60:f9:50:a2:ac:15:e5:9b:47:31:f7:7a:fe:85:31:12:
         cc:cb:40:c1:7f:9f:8f:05:93:af:a9:cc:78:bc:b3:a8:76:a1:
         95:4c:2d:49:36:fc:bb:f3:a3:56:f5:c7:72:74:fa:14:dc:48:
         f9:83:ea:d0:fc:5b:b5:ed:2d:5d:45:b5:a7:99:19:ef:b6:d8:
         72:37:41:81:20:5c:38:4f:0e:6b:4e:bf:58:02:54:67:9b:10:
         2e:25:f1:8b:aa:a0:11:ee:e6:d0:86:b4:47:af:3a:72:6a:88:
         81:6c:80:8b:98:be:b4:73:7a:45:78:9f:db:f5:cf:00:cb:2a:
         cb:42:00:83:db:0a:4a:5d:ec:41:f8:a7:7d:a8:39:e7:32:96:
         01:ef:6e:b3:af:14:2c:fe:1e:32:a8:c8:68:21:57:13:f1:98:
         6b:d9:bf:d6:94:65:83:46:85:f7:61:b0:31:ce:70:a1:53:b2:
         e4:fa:cf:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZub4fK1JMoFkP+SGAiI0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjdiYzZjN2M5M2EzY2ZiMWUyNWJiYmVmYzRmMjA3YWUy
NWJkYTUwHhcNMjUwNDIxMTkwMTA2WhcNMjUwNDIyMTkwMTA2WjAzMTEwLwYDVQQD
EyhiZGNjNWY0NjBmNWExM2UwODI2NjBiZTkxNTlhMmM1MTFkOTY5MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn4AlE0b/34+uT81Oh38MsRlT+Pn
FTvCxs1Y7bFit+GNc+5X7vBCVZ0/kz3jqLRK7ppgU+W83d5ddH9RjaQKqk0xhP4+
BQroZuYxpfQJAPNct3uIxNmf723rqirTHXtjppEL078C8i5nRhicGss0sZmko6W9
GEyfTun1eQFKef00g0CCzHx2X4QshjsCRu1vSLMjJ7S6hitpz0SUk36J66Y+LRDO
tHvaR1OF8hBLn+AbK1cBJuUzBCTS7XVOb+78jRvq4ovsevlY3bATUITtEGbOKjsO
r2gRiRdJve11JikLhz//oWD8ml+xlCbS4KwZwdevj01OeCQhGBOnqBPbawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3MX0YPWhPggmYL6RWaLFEdlpH4MB8GA1UdIwQY
MBaAFLv3vGx8k6PPseJbu+/E8geuJb2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjct
NTkwZjU0MGM0NTZkLzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjctNTkwZjU0MGM0NTZk
LzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgJQOGq0
wPN7nKpQLNfzuq3u+Qc6J+Cfroa+01k0UPIOquD6cvLPD5HdxpiIELHIrxa5wwH2
ZQeQC7GpcDjTJ79YvTRyT4xiXdRg+VCirBXlm0cx93r+hTESzMtAwX+fjwWTr6nM
eLyzqHahlUwtSTb8u/OjVvXHcnT6FNxI+YPq0Pxbte0tXUW1p5kZ77bYcjdBgSBc
OE8Oa06/WAJUZ5sQLiXxi6qgEe7m0Ia0R686cmqIgWyAi5i+tHN6RXif2/XPAMsq
y0IAg9sKSl3sQfinfag55zKWAe9us68ULP4eMqjIaCFXE/GYa9m/1pRlg0aF92Gw
Mc5woVOy5PrP+w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:16:09 2025 by rpki-client