Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          Y9+j+4dn8ZDpLo3o+Imqj+s0QYJD9iC/sd/52qlz+iU=
Subject key identifier:   01:40:60:B5:BD:86:72:26:8B:77:20:64:49:CB:8D:6B:05:36:96:7B
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       01963C8A6D04F3D57BCC167BA269D86278AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          12F9
Signing time:             Wed 16 Apr 2025 03:00:26 +0000
Manifest this update:     Wed 16 Apr 2025 03:00:26 +0000
Manifest next update:     Thu 17 Apr 2025 03:00:26 +0000
Files and hashes:         1: 9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa (hash: XKwu2dm5EiilAMiU6vQWAsMs3u94DmEeOaG3OlX3RRc=)
                          2: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          3: mLzt7xGUveLWBI5KBd3nPnlkK34.roa (hash: gBHkMYqm2CFNHYl0R32/z6OsqeoYFanglt5qYzw7wHQ=)
                          4: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          5: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: EL5oNEYr2RkD6qljvRimQth6faX5LjKs7r0DBNdokvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:8a:6d:04:f3:d5:7b:cc:16:7b:a2:69:d8:62:78:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Apr 16 03:00:26 2025 GMT
            Not After : Apr 17 03:00:26 2025 GMT
        Subject: CN=014060b5bd8672268b77206449cb8d6b0536967b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:f5:eb:97:d1:d4:f9:fe:b4:36:b7:8e:29:
                    b9:a9:c8:80:89:f2:ad:33:ac:9d:76:1e:10:8a:5c:
                    47:2d:83:cf:7a:bc:53:25:ec:7c:b9:c7:cd:c7:47:
                    34:47:0c:d3:c5:52:17:50:ce:a6:bd:47:8b:89:56:
                    87:e4:d0:ee:93:81:00:c7:68:27:8b:d3:0c:4c:7d:
                    3a:53:5c:52:36:a3:15:95:92:04:a8:19:36:89:40:
                    06:5c:39:29:26:11:c3:b7:c3:0e:69:72:5c:d5:78:
                    29:b3:b4:e3:ff:96:ca:13:23:30:1a:b4:e5:dc:a8:
                    d6:da:53:9a:47:20:8e:04:91:4d:fd:6e:e5:81:92:
                    a7:ad:56:aa:96:60:ba:99:d9:f8:0b:8f:6c:a8:b1:
                    23:42:74:fe:e6:2a:71:bf:01:e6:4d:17:30:33:06:
                    5e:be:c9:d2:8d:a9:47:4a:38:ac:89:a2:ae:f9:29:
                    24:0f:66:74:87:97:7f:36:3f:68:76:4a:9e:dc:bd:
                    92:c1:d2:42:fa:07:e0:8e:b7:4a:b0:70:9e:5d:93:
                    e6:fa:62:07:10:5a:1d:6b:b3:b1:d9:92:ff:d5:03:
                    b4:e0:91:47:35:1e:5b:f4:c4:e2:1f:f5:1c:c7:06:
                    35:91:29:ab:4f:22:ac:2a:77:ea:0c:b2:3f:c8:5b:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:60:B5:BD:86:72:26:8B:77:20:64:49:CB:8D:6B:05:36:96:7B
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:57:87:2e:2d:a1:6a:d1:71:6a:76:93:6c:02:2c:f0:24:
         47:99:1c:a0:c1:c2:51:9c:0a:99:21:72:23:7d:f8:b8:a8:b1:
         dd:98:36:f3:11:cd:f5:fe:d3:a7:33:f9:75:b9:c8:a4:21:a6:
         c8:6d:a1:80:01:a7:1f:b0:4d:40:9a:78:e3:8d:46:4a:8d:7b:
         75:57:59:2c:f6:85:2c:59:80:2b:6f:e4:81:79:b6:c2:59:84:
         46:5b:12:64:57:9d:46:18:6f:db:0c:f2:88:c6:07:00:55:4e:
         cc:26:5b:67:b9:e8:8a:33:66:20:f3:80:d1:fe:85:5c:a4:c0:
         c0:1c:b9:56:87:33:45:3d:59:b6:13:bc:a3:58:05:58:65:4c:
         0a:c1:e4:08:ff:e1:16:f1:98:2e:e2:e4:1f:39:4b:c2:9f:8d:
         d8:d0:8c:de:68:0c:79:6e:59:03:3f:d9:f9:f3:78:bf:96:5c:
         c1:0d:33:9c:0d:29:bf:63:24:bf:5a:72:fb:91:30:5f:0c:e2:
         9b:cd:cc:4f:39:62:68:33:71:b0:7f:a1:64:e6:a7:12:de:fe:
         74:b1:fb:4e:3b:c9:fd:d4:f2:b6:e0:c6:28:e7:96:b8:f9:d1:
         52:7c:fb:fb:c6:db:61:7b:0f:30:de:0e:40:69:43:6a:ea:ee:
         28:64:90:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8im0E89V7zBZ7omnYYnivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzJjNzMxNDU5MzA0MmNmNzQyMTBmN2YwM2JlNzEwNmMy
MjRmODkwHhcNMjUwNDE2MDMwMDI2WhcNMjUwNDE3MDMwMDI2WjAzMTEwLwYDVQQD
EygwMTQwNjBiNWJkODY3MjI2OGI3NzIwNjQ0OWNiOGQ2YjA1MzY5NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz7165fR1Pn+tDa3jim5qciAifKt
M6yddh4QilxHLYPPerxTJex8ucfNx0c0RwzTxVIXUM6mvUeLiVaH5NDuk4EAx2gn
i9MMTH06U1xSNqMVlZIEqBk2iUAGXDkpJhHDt8MOaXJc1Xgps7Tj/5bKEyMwGrTl
3KjW2lOaRyCOBJFN/W7lgZKnrVaqlmC6mdn4C49sqLEjQnT+5ipxvwHmTRcwMwZe
vsnSjalHSjisiaKu+SkkD2Z0h5d/Nj9odkqe3L2SwdJC+gfgjrdKsHCeXZPm+mIH
EFoda7Ox2ZL/1QO04JFHNR5b9MTiH/UcxwY1kSmrTyKsKnfqDLI/yFuSBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFAYLW9hnImi3cgZEnLjWsFNpZ7MB8GA1UdIwQY
MBaAFMjCxzFFkwQs90IQ9/A75xBsIk+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjIt
M2E1M2QwZWY4YjVhLzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjItM2E1M2QwZWY4YjVh
LzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHtXhy4t
oWrRcWp2k2wCLPAkR5kcoMHCUZwKmSFyI334uKix3Zg28xHN9f7TpzP5dbnIpCGm
yG2hgAGnH7BNQJp4441GSo17dVdZLPaFLFmAK2/kgXm2wlmERlsSZFedRhhv2wzy
iMYHAFVOzCZbZ7noijNmIPOA0f6FXKTAwBy5VoczRT1ZthO8o1gFWGVMCsHkCP/h
FvGYLuLkHzlLwp+N2NCM3mgMeW5ZAz/Z+fN4v5ZcwQ0znA0pv2Mkv1py+5EwXwzi
m83MTzliaDNxsH+hZOanEt7+dLH7TjvJ/dTytuDGKOeWuPnRUnz7+8bbYXsPMN4O
QGlDauruKGSQxA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:24:17 2025 by rpki-client