Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File:                     5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier:          pM0YVwht/T4UOAN/RqNx20pD0tREp47jb8DFA/z5Bgs=
Subject key identifier:   FA:0D:D3:99:14:98:5F:2B:BE:F7:8F:AF:99:D1:2D:1B:6E:09:B9:8F
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer:       /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial:       019746D4A289525A9262C542FCE62938A9CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number:          13A7
Signing time:             Fri 06 Jun 2025 20:00:29 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:29 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:29 +0000
Files and hashes:         1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: ZXZboBll3EWWbguOMgcPkvE/Ff6/794UyfQ2+GvtYb8=)
                          2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:a2:89:52:5a:92:62:c5:42:fc:e6:29:38:a9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
        Validity
            Not Before: Jun  6 20:00:29 2025 GMT
            Not After : Jun  7 20:00:29 2025 GMT
        Subject: CN=fa0dd39914985f2bbef78faf99d12d1b6e09b98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:65:d8:63:18:ca:f3:62:29:62:f6:93:dd:
                    24:e4:cf:6d:25:da:0a:ec:ed:47:c3:f1:08:58:a4:
                    82:c4:be:80:85:f5:d6:6c:1c:50:79:32:49:a8:1b:
                    7e:fe:bf:56:57:89:a6:0e:51:04:53:2c:a2:c9:42:
                    8d:18:2a:be:4c:b9:95:6b:00:e2:09:64:07:d3:16:
                    e5:7b:5e:d2:25:07:2f:c5:c3:da:5c:b1:a7:0c:ee:
                    8a:d2:1a:69:14:43:fa:54:88:98:de:b7:8d:2e:1c:
                    e0:f5:44:16:ee:69:cd:f7:40:fb:41:56:0b:8d:48:
                    1b:ca:64:e7:90:04:5b:bc:15:9b:57:22:49:dc:8f:
                    be:68:2c:99:68:bc:0d:f1:10:b9:25:ac:c7:a5:3a:
                    4f:b4:0a:de:59:41:15:bd:bc:0b:56:50:4b:f9:46:
                    b8:2c:6f:e7:9a:70:b2:60:90:6f:47:32:fd:8c:58:
                    e3:75:10:d4:00:80:98:a4:78:84:2b:44:2f:48:0d:
                    a9:a9:8e:05:f6:e9:0c:e8:11:8b:a3:40:34:3d:3e:
                    80:34:d9:57:0e:47:83:95:37:a8:51:73:c9:ba:d1:
                    a1:38:ed:2c:a3:56:17:8c:67:ed:98:03:de:aa:a5:
                    19:3b:18:8f:64:ae:bf:aa:52:2b:7f:ad:c0:1e:ee:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:D3:99:14:98:5F:2B:BE:F7:8F:AF:99:D1:2D:1B:6E:09:B9:8F
            X509v3 Authority Key Identifier:
                keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:ab:60:db:46:95:1c:9e:cd:1f:08:95:c0:5d:77:c2:be:
         d6:e1:86:22:45:62:e9:22:ee:9f:c2:66:d7:02:96:9e:fb:23:
         42:ed:88:27:15:2e:c3:44:f4:fe:69:da:cf:f6:44:2c:9a:ca:
         8a:dd:a9:e7:ee:9d:36:8e:ce:92:ec:60:d2:75:7d:e6:f5:67:
         bd:9d:3e:ef:17:48:8b:1b:9d:34:e9:b7:e6:bc:26:c1:79:f5:
         1b:e0:42:40:b7:6d:0c:88:2c:a0:17:85:7c:7b:99:4c:ad:77:
         1b:d5:60:59:7f:dc:9e:65:79:a2:9c:25:91:6b:82:e2:04:50:
         5a:a4:80:56:c2:0c:d8:8a:9b:11:9e:4f:3e:89:21:f2:5a:65:
         ee:43:84:7c:be:db:4a:66:8e:bd:6c:a2:0e:50:dd:c3:90:ea:
         31:c6:5d:9a:6f:f5:7f:de:48:67:b3:af:0f:d4:3f:15:fe:79:
         a6:82:80:71:0c:be:8d:4b:c0:24:94:fa:3b:62:36:5c:ce:c9:
         d8:3a:94:23:3e:01:60:7d:76:78:c7:b3:af:c2:db:43:02:b8:
         1e:1d:c0:64:79:a6:1b:c3:fc:bd:51:d4:2f:3c:7d:d4:31:11:
         1b:c5:49:94:49:85:8a:df:2d:66:e0:b3:73:01:b8:7e:96:80:
         38:c4:29:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1KKJUlqSYsVC/OYpOKnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzVkYTA5Y2QzYWViNGM5MzdjNjNmNTM1ZjMzZmQ1N2Qw
YzIxOTEwHhcNMjUwNjA2MjAwMDI5WhcNMjUwNjA3MjAwMDI5WjAzMTEwLwYDVQQD
EyhmYTBkZDM5OTE0OTg1ZjJiYmVmNzhmYWY5OWQxMmQxYjZlMDliOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaRl2GMYyvNiKWL2k90k5M9tJdoK
7O1Hw/EIWKSCxL6AhfXWbBxQeTJJqBt+/r9WV4mmDlEEUyyiyUKNGCq+TLmVawDi
CWQH0xble17SJQcvxcPaXLGnDO6K0hppFEP6VIiY3reNLhzg9UQW7mnN90D7QVYL
jUgbymTnkARbvBWbVyJJ3I++aCyZaLwN8RC5JazHpTpPtAreWUEVvbwLVlBL+Ua4
LG/nmnCyYJBvRzL9jFjjdRDUAICYpHiEK0QvSA2pqY4F9ukM6BGLo0A0PT6ANNlX
DkeDlTeoUXPJutGhOO0so1YXjGftmAPeqqUZOxiPZK6/qlIrf63AHu4ckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoN05kUmF8rvvePr5nRLRtuCbmPMB8GA1UdIwQY
MBaAFOZ12gnNOutMk3xj9TXzP9V9DCGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jYTJhODAtMWQ5MC00ODIzLWIzZjEt
NGUyODRjZmYwNzk5LzEvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jYTJhODAtMWQ5MC00ODIzLWIzZjEtNGUyODRjZmYwNzk5
LzEvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWarYNtG
lRyezR8IlcBdd8K+1uGGIkVi6SLun8Jm1wKWnvsjQu2IJxUuw0T0/mnaz/ZELJrK
it2p5+6dNo7Okuxg0nV95vVnvZ0+7xdIixudNOm35rwmwXn1G+BCQLdtDIgsoBeF
fHuZTK13G9VgWX/cnmV5opwlkWuC4gRQWqSAVsIM2IqbEZ5PPokh8lpl7kOEfL7b
SmaOvWyiDlDdw5DqMcZdmm/1f95IZ7OvD9Q/Ff55poKAcQy+jUvAJJT6O2I2XM7J
2DqUIz4BYH12eMezr8LbQwK4Hh3AZHmmG8P8vVHULzx91DERG8VJlEmFit8tZuCz
cwG4fpaAOMQpeg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:57 2025 by rpki-client