Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File:                     87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier:          Oai6LKntxckiSua/PMYFHD1fN1XStARtfPF+BRzx5+o=
Subject key identifier:   7C:53:01:DE:35:DD:BE:DD:6F:E9:0E:C8:4A:DB:95:7C:DD:C7:E7:EF
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       0196071D05E2DE0AECDA701F4DA028924239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number:          066B
Signing time:             Sat 05 Apr 2025 18:01:04 +0000
Manifest this update:     Sat 05 Apr 2025 18:01:04 +0000
Manifest next update:     Sun 06 Apr 2025 18:01:04 +0000
Files and hashes:         1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
                          2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: WtTKrADVrJ9a0ElYwQdWi1dsa+PQd/BQ8wshSRCvQLQ=)
                          3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
                          4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
                          5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
                          6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
                          7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
                          8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:07:1d:05:e2:de:0a:ec:da:70:1f:4d:a0:28:92:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: Apr  5 18:01:04 2025 GMT
            Not After : Apr  6 18:01:04 2025 GMT
        Subject: CN=7c5301de35ddbedd6fe90ec84adb957cddc7e7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b5:74:b1:00:84:ac:bd:c6:79:6c:a9:42:ad:
                    44:9e:d5:af:fb:41:b1:9e:37:5a:b7:02:6a:a1:1f:
                    11:ce:63:c7:60:10:53:97:6f:63:56:90:e1:a3:42:
                    98:fd:22:0d:aa:64:77:30:d9:c6:50:5f:27:23:bc:
                    7a:1c:76:48:a2:27:0d:41:35:76:a8:44:e3:c2:03:
                    3c:3b:8e:dd:05:03:dc:07:6a:75:e4:89:50:4f:13:
                    35:55:f6:0c:ca:3c:35:48:16:d7:78:db:be:52:c4:
                    f8:7e:5c:20:5a:5e:b5:8d:5d:97:02:99:eb:42:ab:
                    bb:bd:94:fa:fb:b5:43:7a:02:06:60:76:6c:d5:49:
                    9f:e9:14:6d:d4:01:ef:85:0a:aa:fa:41:1d:72:72:
                    11:e5:a8:cc:65:43:72:78:82:12:84:1f:f6:a1:1d:
                    85:a8:22:f2:7b:b7:d1:44:ef:58:cb:69:62:a3:5e:
                    1e:cd:d3:a9:7e:33:2c:ec:ec:00:9e:24:bf:de:ad:
                    99:c3:60:79:44:97:18:fb:e2:2d:10:25:b3:f6:34:
                    34:eb:5a:aa:9c:ef:bc:14:27:4f:bb:93:78:87:c5:
                    53:b0:4f:58:c1:94:dc:20:4c:ed:83:ac:7b:00:51:
                    77:2e:7d:09:82:97:38:5e:89:ba:b4:4d:c8:a3:55:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:53:01:DE:35:DD:BE:DD:6F:E9:0E:C8:4A:DB:95:7C:DD:C7:E7:EF
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:28:93:eb:6e:90:31:b3:45:83:a2:0c:41:94:d8:6c:fa:d8:
         52:c6:d4:98:67:94:bd:63:4d:de:f2:7a:54:fc:ff:1e:9c:cd:
         5f:1a:c0:ea:a2:08:7a:58:42:6c:eb:69:e1:79:d4:2f:58:55:
         0a:81:9d:0d:54:c3:80:f4:b1:6c:da:99:ca:8a:71:ec:f9:a6:
         b8:30:23:d4:5f:26:a2:ca:71:15:f1:8a:ab:35:5e:51:52:30:
         0a:a4:cd:10:06:e2:f5:f3:b5:f7:28:71:d9:16:3a:60:05:c1:
         59:24:7f:76:c2:e4:44:af:12:4a:a9:11:0d:88:16:f8:fb:6f:
         29:83:48:2f:46:4d:7b:d7:f1:cf:99:30:f5:58:0a:14:1f:6c:
         64:24:76:e4:a3:a6:23:60:d5:9e:69:5c:27:55:1d:69:ae:db:
         e7:4d:a4:07:0b:50:6f:7e:06:a9:a8:af:31:f8:d9:c2:3b:0f:
         8e:db:14:fb:af:67:4d:db:d2:7b:52:42:55:31:99:56:08:8a:
         f1:a2:3a:93:3f:76:cc:0b:2e:45:ad:0d:60:c1:4e:dc:a9:d3:
         97:59:fa:78:04:bd:4e:7e:e3:61:33:36:05:66:89:ee:cc:cf:
         2c:43:85:cd:ce:03:3f:07:6c:7c:21:7c:71:1e:32:77:99:ad:
         7f:e3:9b:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYHHQXi3grs2nAfTaAokkI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjUwNDA1MTgwMTA0WhcNMjUwNDA2MTgwMTA0WjAzMTEwLwYDVQQD
Eyg3YzUzMDFkZTM1ZGRiZWRkNmZlOTBlYzg0YWRiOTU3Y2RkYzdlN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bV0sQCErL3GeWypQq1EntWv+0Gx
njdatwJqoR8RzmPHYBBTl29jVpDho0KY/SINqmR3MNnGUF8nI7x6HHZIoicNQTV2
qETjwgM8O47dBQPcB2p15IlQTxM1VfYMyjw1SBbXeNu+UsT4flwgWl61jV2XApnr
Qqu7vZT6+7VDegIGYHZs1Umf6RRt1AHvhQqq+kEdcnIR5ajMZUNyeIIShB/2oR2F
qCLye7fRRO9Yy2lio14ezdOpfjMs7OwAniS/3q2Zw2B5RJcY++ItECWz9jQ061qq
nO+8FCdPu5N4h8VTsE9YwZTcIEztg6x7AFF3Ln0Jgpc4Xom6tE3Io1U20QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxTAd413b7db+kOyErblXzdx+fvMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSiT626Q
MbNFg6IMQZTYbPrYUsbUmGeUvWNN3vJ6VPz/HpzNXxrA6qIIelhCbOtp4XnUL1hV
CoGdDVTDgPSxbNqZyopx7PmmuDAj1F8mospxFfGKqzVeUVIwCqTNEAbi9fO19yhx
2RY6YAXBWSR/dsLkRK8SSqkRDYgW+PtvKYNIL0ZNe9fxz5kw9VgKFB9sZCR25KOm
I2DVnmlcJ1Udaa7b502kBwtQb34GqaivMfjZwjsPjtsU+69nTdvSe1JCVTGZVgiK
8aI6kz92zAsuRa0NYMFO3KnTl1n6eAS9Tn7jYTM2BWaJ7szPLEOFzc4DPwdsfCF8
cR4yd5mtf+ObpQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:42 2025 by rpki-client