Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File:                     H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier:          ENzaJ06RHWnvJJV5jXjYEfOUb/sguHT6Qrw1VcVx02Y=
Subject key identifier:   96:68:AE:39:BC:C8:2A:A7:C0:6A:5E:D5:5F:99:8B:80:3D:04:40:B6
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer:       /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial:       01974BFBA24AFFC6EFF3477B4ECCDB0E75C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number:          1511
Signing time:             Sat 07 Jun 2025 20:01:11 +0000
Manifest this update:     Sat 07 Jun 2025 20:01:11 +0000
Manifest next update:     Sun 08 Jun 2025 20:01:11 +0000
Files and hashes:         1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
                          2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: kPCbbuF49oifyqa1IJVAtadfqqQ4CvITSKO0tWVEOBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:a2:4a:ff:c6:ef:f3:47:7b:4e:cc:db:0e:75:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
        Validity
            Not Before: Jun  7 20:01:11 2025 GMT
            Not After : Jun  8 20:01:11 2025 GMT
        Subject: CN=9668ae39bcc82aa7c06a5ed55f998b803d0440b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:a0:e2:5c:f2:7f:80:b2:d5:1b:78:ca:ee:
                    fc:74:74:8f:bf:97:8b:af:87:56:82:c7:d7:18:84:
                    72:aa:da:41:3c:6a:bb:3a:c2:0b:bf:03:e7:4c:a0:
                    20:09:59:51:85:48:16:29:5d:59:78:f5:ab:9e:af:
                    01:56:0e:95:7c:88:06:d4:21:38:27:58:4a:36:4e:
                    06:e7:b0:ea:b4:ce:35:90:14:c3:e4:bd:40:9a:36:
                    0d:de:ce:ee:87:ea:72:f9:75:38:bf:4c:d7:91:c0:
                    d3:4a:e6:70:09:b6:09:eb:40:49:2c:df:fd:f2:0f:
                    06:80:ed:6e:cf:ee:c7:7a:ea:25:f3:7c:4d:f3:0c:
                    4f:c9:a1:ca:9c:05:31:52:13:4d:23:d3:f7:af:59:
                    35:bf:b3:f8:ac:e0:96:62:d3:0a:be:79:e2:16:c2:
                    25:8b:3a:4e:7e:49:f3:82:ed:c9:cd:dc:d3:74:d4:
                    07:9a:bf:fc:77:d1:5e:eb:47:8b:59:69:a5:b7:3f:
                    54:c5:ff:29:ca:05:08:8e:b8:01:81:8b:fa:3a:68:
                    74:ca:5b:78:3e:a4:da:b3:22:e9:3a:f9:b3:8c:e4:
                    83:a5:ea:4b:5b:99:f9:a7:36:4a:3b:53:52:40:b6:
                    3e:d7:1a:27:dc:26:37:e0:65:53:72:78:78:57:2f:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:68:AE:39:BC:C8:2A:A7:C0:6A:5E:D5:5F:99:8B:80:3D:04:40:B6
            X509v3 Authority Key Identifier:
                keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:87:2c:6a:20:4e:af:4f:3a:17:94:73:bc:0e:82:c3:81:
         a0:33:2a:bf:97:29:c1:7c:4c:67:4a:1d:f6:b1:c2:60:e0:b4:
         57:97:e4:87:29:2a:30:c7:37:46:87:f6:8a:89:9a:44:c3:f2:
         5b:3f:4b:19:4d:d2:1a:11:f9:16:3d:2f:a6:4d:e8:ca:fa:94:
         d4:cf:81:1b:c7:6c:2d:84:64:6a:88:14:89:3f:81:60:4d:f8:
         33:bd:f3:ed:2e:ab:58:a4:59:8f:ab:dc:ca:5e:79:70:f2:09:
         15:78:fa:de:1b:ad:c8:ac:96:84:1e:ea:8d:58:f6:66:1f:ff:
         17:ce:3c:9a:12:17:e9:5d:31:47:00:9f:5c:7f:bf:41:f4:ff:
         c8:e6:52:f9:ee:3d:86:10:eb:7b:6a:5c:56:b4:b8:3f:af:44:
         7e:dd:f9:85:10:81:e7:be:57:94:d7:2e:0d:28:b5:71:9f:21:
         e2:14:88:50:fe:6a:73:15:7c:bf:28:07:ba:7e:64:b6:6a:94:
         6f:a4:51:0e:5b:0a:8d:8e:f2:51:f9:a7:79:53:9e:ad:de:8b:
         d8:ba:65:7f:7b:24:51:3e:88:88:1c:64:50:e3:6b:c4:3d:1c:
         1e:30:a2:f6:f7:50:b1:18:b0:dd:f0:bb:c6:38:7d:61:07:aa:
         c2:fd:a4:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+6JK/8bv80d7TszbDnXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjUwNjA3MjAwMTExWhcNMjUwNjA4MjAwMTExWjAzMTEwLwYDVQQD
Eyg5NjY4YWUzOWJjYzgyYWE3YzA2YTVlZDU1Zjk5OGI4MDNkMDQ0MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeeg4lzyf4Cy1Rt4yu78dHSPv5eL
r4dWgsfXGIRyqtpBPGq7OsILvwPnTKAgCVlRhUgWKV1ZePWrnq8BVg6VfIgG1CE4
J1hKNk4G57DqtM41kBTD5L1AmjYN3s7uh+py+XU4v0zXkcDTSuZwCbYJ60BJLN/9
8g8GgO1uz+7Heuol83xN8wxPyaHKnAUxUhNNI9P3r1k1v7P4rOCWYtMKvnniFsIl
izpOfknzgu3JzdzTdNQHmr/8d9Fe60eLWWmltz9Uxf8pygUIjrgBgYv6Omh0ylt4
PqTasyLpOvmzjOSDpepLW5n5pzZKO1NSQLY+1xon3CY34GVTcnh4Vy/r8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZorjm8yCqnwGpe1V+Zi4A9BEC2MB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajKHLGog
Tq9POheUc7wOgsOBoDMqv5cpwXxMZ0od9rHCYOC0V5fkhykqMMc3Rof2iomaRMPy
Wz9LGU3SGhH5Fj0vpk3oyvqU1M+BG8dsLYRkaogUiT+BYE34M73z7S6rWKRZj6vc
yl55cPIJFXj63hutyKyWhB7qjVj2Zh//F848mhIX6V0xRwCfXH+/QfT/yOZS+e49
hhDre2pcVrS4P69Eft35hRCB575XlNcuDSi1cZ8h4hSIUP5qcxV8vygHun5ktmqU
b6RRDlsKjY7yUfmneVOerd6L2Lplf3skUT6IiBxkUONrxD0cHjCi9vdQsRiw3fC7
xjh9YQeqwv2kWw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:03:44 2025 by rpki-client