Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          HwZ55QKYxOZdFqsi6qm8ontCb6bdO4DxaliVu10luys=
Subject key identifier:   BB:F6:8D:19:DB:62:D0:AE:A1:4C:E2:50:BE:F1:F5:3D:8F:93:CD:AF
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       01975121976C7695DAF69FE64F85F75562C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          04F8
Signing time:             Sun 08 Jun 2025 20:00:45 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:45 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:45 +0000
Files and hashes:         1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=)
                          2: JMRiqmtTwU851Z4KNRCnaHqyNnI.roa (hash: BGsTqMatG4nYY4lxrSbOOHfLU0fqm0JVVfL2eISXhbY=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: QV8p6amVjgvjZukeFf6UPnKXMFD2A9bQITJF1X712nM=)
                          4: e9G7IJcvo_7a5dSGCNbeN4tFSxs.roa (hash: Mu/lJwVbh/1+u4MzgbLDi3M1S5lCY4Q0nFxdiOF7I28=)
                          5: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:97:6c:76:95:da:f6:9f:e6:4f:85:f7:55:62:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Jun  8 20:00:45 2025 GMT
            Not After : Jun  9 20:00:45 2025 GMT
        Subject: CN=bbf68d19db62d0aea14ce250bef1f53d8f93cdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:3e:b3:7a:68:1b:37:23:19:ab:4f:fc:a0:
                    0c:22:7d:9c:53:d8:2a:78:35:9c:e6:f9:8d:ba:a7:
                    39:3a:2b:e0:77:25:b9:b3:d6:ec:72:24:fb:f4:b3:
                    b1:39:bf:58:c2:a2:ad:5e:8e:dc:52:dc:65:f5:d8:
                    d6:15:3b:39:a0:38:85:91:e5:20:73:02:ae:a9:7e:
                    fc:ef:72:62:9e:cd:25:81:58:90:be:2b:59:2a:63:
                    0d:79:12:f8:d4:e9:26:c3:7d:7d:97:f1:c5:6c:d9:
                    3e:fc:66:14:cb:15:0c:bc:8a:a5:66:d3:5a:85:e4:
                    c2:06:86:47:4d:d3:05:88:7a:e8:5a:fb:23:8d:ad:
                    bb:81:46:c3:9c:92:86:22:0e:af:7d:3f:43:34:74:
                    2e:1f:b8:ec:94:1b:c4:3e:87:ba:db:83:a2:a2:e3:
                    e3:1c:95:4f:89:8f:c1:e2:26:b7:d8:e5:cc:31:85:
                    7e:a8:99:fc:02:f0:27:76:71:fa:2d:35:c7:e7:6e:
                    6b:93:38:4e:03:8d:4f:74:f9:8b:7a:e0:c6:10:9c:
                    12:d9:a2:87:63:d8:d3:a1:b8:e5:e3:22:a6:5f:0c:
                    00:83:e3:a6:f5:d8:91:00:15:69:d5:99:5c:47:ef:
                    90:20:e3:d4:d6:12:f2:aa:9d:7f:83:dd:d2:9a:db:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F6:8D:19:DB:62:D0:AE:A1:4C:E2:50:BE:F1:F5:3D:8F:93:CD:AF
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:58:a1:92:6c:0e:9d:15:7b:b6:69:f1:c0:72:3c:f2:be:
         ca:a5:48:25:21:dc:e8:02:84:ae:29:04:eb:6b:5a:6f:f3:4f:
         22:4f:e4:ea:5d:fe:24:f8:67:59:fa:42:77:5c:3e:1a:fe:3b:
         de:40:98:76:82:2e:9c:a5:e1:c2:80:98:1c:a3:6b:a6:dd:fa:
         04:67:6e:7a:09:33:56:d6:fa:9e:ea:c3:d2:09:65:49:d0:f4:
         cb:64:3a:a2:9c:68:af:7d:9f:62:07:e4:da:3d:3d:9d:56:9b:
         1f:d5:42:a3:0c:68:11:33:52:51:c0:59:47:7d:42:15:8a:2d:
         c1:60:e6:c4:93:14:f4:83:41:b1:29:da:91:ea:2f:9e:27:b5:
         57:d9:9e:ef:f3:65:25:e1:82:a6:23:e3:38:32:ac:7d:22:5e:
         d7:a8:30:56:92:69:2c:68:56:0d:94:90:c5:fe:45:bb:71:27:
         ab:77:06:db:cc:f2:54:f3:46:25:2b:c7:57:61:f2:3f:9a:f0:
         93:0f:62:37:15:8f:0b:7c:fb:f6:62:91:ed:b0:da:6f:de:22:
         59:9e:79:b2:55:c8:b3:95:b4:a9:6e:22:0c:df:b4:2e:87:4d:
         27:a3:eb:3b:c5:c6:94:14:57:9b:fc:c0:22:14:70:58:e5:45:
         6d:1e:20:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIZdsdpXa9p/mT4X3VWLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl
YmFjYmYwHhcNMjUwNjA4MjAwMDQ1WhcNMjUwNjA5MjAwMDQ1WjAzMTEwLwYDVQQD
EyhiYmY2OGQxOWRiNjJkMGFlYTE0Y2UyNTBiZWYxZjUzZDhmOTNjZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6w+s3poGzcjGatP/KAMIn2cU9gq
eDWc5vmNuqc5OivgdyW5s9bsciT79LOxOb9YwqKtXo7cUtxl9djWFTs5oDiFkeUg
cwKuqX7873Jins0lgViQvitZKmMNeRL41Okmw319l/HFbNk+/GYUyxUMvIqlZtNa
heTCBoZHTdMFiHroWvsjja27gUbDnJKGIg6vfT9DNHQuH7jslBvEPoe624OiouPj
HJVPiY/B4ia32OXMMYV+qJn8AvAndnH6LTXH525rkzhOA41PdPmLeuDGEJwS2aKH
Y9jTobjl4yKmXwwAg+Om9diRABVp1ZlcR++QIOPU1hLyqp1/g93SmttU5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv2jRnbYtCuoUziUL7x9T2Pk82vMB8GA1UdIwQY
MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt
NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk
LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdVYoZJs
Dp0Ve7Zp8cByPPK+yqVIJSHc6AKErikE62tab/NPIk/k6l3+JPhnWfpCd1w+Gv47
3kCYdoIunKXhwoCYHKNrpt36BGduegkzVtb6nurD0gllSdD0y2Q6opxor32fYgfk
2j09nVabH9VCowxoETNSUcBZR31CFYotwWDmxJMU9INBsSnakeovnie1V9me7/Nl
JeGCpiPjODKsfSJe16gwVpJpLGhWDZSQxf5Fu3Enq3cG28zyVPNGJSvHV2HyP5rw
kw9iNxWPC3z79mKR7bDab94iWZ55slXIs5W0qW4iDN+0LodNJ6PrO8XGlBRXm/zA
IhRwWOVFbR4grg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:54:47 2025 by rpki-client