Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          ZuFVQzudc0VK4agNqydbylGNuoVWBnlkKcs+Sf4+PuQ=
Subject key identifier:   35:63:80:5E:82:A0:64:3E:C8:9D:5E:56:CB:4E:78:2E:C2:FB:E6:6A
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       01974D451084B29B1219C5CBDF64B92F413D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          0EB5
Signing time:             Sun 08 Jun 2025 02:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:01 +0000
Files and hashes:         1: 20fHjC9bC6qDDeMiewApcaPTbCg.roa (hash: R/cESPp0hwn9gEfPxus2phTQiGzi40DoQQ+KimoeJ4I=)
                          2: 22lLDFU8nwc93-jfzNMpRH5sgrw.roa (hash: +NBjFjyK6WbMQY3zkQQYj9FPVF3OF9alYPIlrwi+mjY=)
                          3: 4-TMvOUidZ71CQ76gnKNOvLTQ9U.roa (hash: 0vbbhqiaDzTWpQRb4sXPCgzHyTU0SowfH7j/iajcMvI=)
                          4: 6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa (hash: n2UlT2v5ne1WHXzI3nHhngksH2y/h3ykBECiQHVHKNo=)
                          5: OihnMqADYCl3o_f-cEn9z-d6QNU.roa (hash: h4mfAryNKMLZ+cLBNN9ToEHye+NJw4a1Xa8qSeqh6GA=)
                          6: S2lHpdEWr4mirz1oSpkE0KC76y0.roa (hash: h+wh+SL+iqQ3ZKWEdMW2CTCbGb/KIvrGbFf1yDqP0jU=)
                          7: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: VmjpMsggYk9idrDNOWCCXDB/emJgvnQEC5GQqGYrfeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:10:84:b2:9b:12:19:c5:cb:df:64:b9:2f:41:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: Jun  8 02:01:01 2025 GMT
            Not After : Jun  9 02:01:01 2025 GMT
        Subject: CN=3563805e82a0643ec89d5e56cb4e782ec2fbe66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:66:b3:ff:78:e2:c6:2d:1c:8b:d9:7b:d1:
                    c2:4d:07:c6:80:a4:02:e7:16:70:ed:cf:3d:93:a6:
                    1d:67:24:2c:5b:31:e6:18:c7:93:1f:25:67:03:b2:
                    ff:a7:82:b9:76:83:42:2f:aa:26:97:cf:6c:c9:9e:
                    f0:27:2a:7e:4f:fd:05:15:4e:03:b9:a6:e2:33:1c:
                    db:a6:ba:c1:92:6b:10:55:ab:1a:2f:6f:4b:12:b1:
                    0b:3f:b4:3a:51:2e:25:88:2f:50:d5:fc:82:1b:a2:
                    dc:b1:9a:4b:4b:4a:8c:34:97:64:8c:f3:b8:c5:93:
                    5d:d8:7d:c7:5c:0d:e4:01:3c:46:75:c7:ba:84:30:
                    a2:2d:05:18:4e:9a:48:24:ea:38:00:d2:d4:7d:2a:
                    d4:ea:77:41:69:88:2f:9a:d7:b9:e1:12:72:ff:61:
                    91:19:3c:6b:21:77:a3:74:6e:af:e5:7f:2d:0b:58:
                    4c:cc:3f:8f:a2:aa:22:16:f3:a6:47:02:5c:86:09:
                    f5:76:d9:47:aa:c1:3f:40:c9:2a:d7:5d:1b:60:34:
                    59:60:d8:18:63:ef:be:26:f0:9b:ed:3c:88:ae:03:
                    33:cb:2c:05:bc:76:81:9d:24:a6:08:8f:7e:02:22:
                    ff:c5:fe:77:a7:da:fc:b3:94:40:f0:ce:48:41:82:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:63:80:5E:82:A0:64:3E:C8:9D:5E:56:CB:4E:78:2E:C2:FB:E6:6A
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:54:6a:7c:1f:3d:4d:4b:59:44:b8:13:b8:b5:e0:52:f7:6a:
         f3:9f:61:83:bb:5f:d6:26:19:4a:d2:0e:77:f7:01:ac:1f:56:
         12:fe:99:6f:ef:e1:26:7b:0f:c2:22:94:e0:5d:eb:5d:88:59:
         8f:64:36:91:c1:0f:17:f2:b1:da:4c:43:c8:95:7f:a3:04:0e:
         51:e6:a1:63:bb:54:fe:6b:ca:26:fb:bd:8d:68:7f:b1:46:fa:
         48:54:5e:fc:85:66:14:eb:7b:35:2b:34:e3:dc:c5:3f:6a:2b:
         a8:f0:12:53:b6:12:b2:77:e7:0c:09:f6:c4:f9:fa:c9:85:77:
         25:c2:2a:5e:96:fd:be:c0:82:8f:16:31:e5:10:aa:58:50:48:
         65:6b:a3:e9:88:d8:a0:41:26:4d:b5:25:c0:f2:58:59:9a:ed:
         a5:d7:e2:3e:81:60:1e:0b:5a:d8:bb:a2:1e:08:9b:c1:79:87:
         6a:f0:66:d8:bc:c4:96:b8:14:fa:f8:39:e2:c0:43:20:dc:38:
         4b:c1:53:f3:3e:ee:af:f8:c1:55:a5:81:83:c3:66:2f:86:6d:
         77:36:89:6a:32:82:68:4d:aa:99:d0:d5:73:18:76:61:55:10:
         30:62:98:1a:ed:ca:45:55:25:3a:0f:1d:7f:e8:6f:67:9e:b3:
         3e:b1:72:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRRCEspsSGcXL32S5L0E9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0
ZmJkOTQwHhcNMjUwNjA4MDIwMTAxWhcNMjUwNjA5MDIwMTAxWjAzMTEwLwYDVQQD
EygzNTYzODA1ZTgyYTA2NDNlYzg5ZDVlNTZjYjRlNzgyZWMyZmJlNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqElms/944sYtHIvZe9HCTQfGgKQC
5xZw7c89k6YdZyQsWzHmGMeTHyVnA7L/p4K5doNCL6oml89syZ7wJyp+T/0FFU4D
uabiMxzbprrBkmsQVasaL29LErELP7Q6US4liC9Q1fyCG6LcsZpLS0qMNJdkjPO4
xZNd2H3HXA3kATxGdce6hDCiLQUYTppIJOo4ANLUfSrU6ndBaYgvmte54RJy/2GR
GTxrIXejdG6v5X8tC1hMzD+PoqoiFvOmRwJchgn1dtlHqsE/QMkq110bYDRZYNgY
Y+++JvCb7TyIrgMzyywFvHaBnSSmCI9+AiL/xf53p9r8s5RA8M5IQYLdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVjgF6CoGQ+yJ1eVstOeC7C++ZqMB8GA1UdIwQY
MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt
NTY5NzI0OWY1MTI0LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0
LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVRqfB89
TUtZRLgTuLXgUvdq859hg7tf1iYZStIOd/cBrB9WEv6Zb+/hJnsPwiKU4F3rXYhZ
j2Q2kcEPF/Kx2kxDyJV/owQOUeahY7tU/mvKJvu9jWh/sUb6SFRe/IVmFOt7NSs0
49zFP2orqPASU7YSsnfnDAn2xPn6yYV3JcIqXpb9vsCCjxYx5RCqWFBIZWuj6YjY
oEEmTbUlwPJYWZrtpdfiPoFgHgta2LuiHgibwXmHavBm2LzElrgU+vg54sBDINw4
S8FT8z7ur/jBVaWBg8NmL4ZtdzaJajKCaE2qmdDVcxh2YVUQMGKYGu3KRVUlOg8d
f+hvZ56zPrFyZQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:24:40 2025 by rpki-client