Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File:                     u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier:          g4b7BpX0666Ck3sClyf+73Lo5gjijFfuiweZglQtMkM=
Subject key identifier:   81:4C:54:41:0F:AF:7E:0B:D5:F3:D2:01:94:91:67:E9:78:C5:EC:10
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer:       /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial:       0196A84331DC28583BAF1FB927133F2BFAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number:          0483
Signing time:             Wed 07 May 2025 01:01:37 +0000
Manifest this update:     Wed 07 May 2025 01:01:37 +0000
Manifest next update:     Thu 08 May 2025 01:01:37 +0000
Files and hashes:         1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: abE1SyOFCG9JgbqpMPXrQZ1tpHPaBi7tjeXGWV9GdcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:43:31:dc:28:58:3b:af:1f:b9:27:13:3f:2b:fa:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
        Validity
            Not Before: May  7 01:01:37 2025 GMT
            Not After : May  8 01:01:37 2025 GMT
        Subject: CN=814c54410faf7e0bd5f3d201949167e978c5ec10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:87:e7:cf:62:61:d7:06:24:9c:08:67:13:
                    07:6f:bd:7e:0d:6b:ba:09:b6:21:62:b0:31:a7:58:
                    b0:db:91:e7:90:17:d7:46:8b:30:70:60:46:7f:91:
                    d0:4d:10:69:4a:b0:b5:17:68:c0:bc:b0:ea:73:81:
                    28:ee:3f:e5:34:09:33:80:11:e6:e8:7d:15:ed:52:
                    38:c2:1f:ad:15:45:b3:6f:fa:31:05:b7:86:5f:89:
                    95:8c:ba:6a:5e:25:51:17:19:45:64:ec:31:b7:5b:
                    55:91:6d:fb:20:6e:b8:b5:47:dd:d6:a3:de:89:43:
                    b1:d5:42:c0:1b:da:5a:95:76:e7:f2:ea:20:ff:82:
                    4e:e7:b7:ce:22:b1:77:4a:2b:f4:25:48:0e:23:49:
                    f8:ce:3b:b2:ac:3f:f5:01:8d:33:84:b3:be:58:8f:
                    76:c0:3f:b9:80:34:e1:07:91:d7:55:11:0d:ff:cb:
                    7d:8c:73:f3:f8:9e:88:11:9d:17:53:0b:fc:c3:e4:
                    36:11:20:48:36:ba:a4:14:e1:46:19:17:89:d4:19:
                    8c:53:fe:38:ff:95:11:99:46:29:6b:18:d5:f8:e5:
                    12:1b:6d:41:86:39:7f:e9:b0:e4:4a:5a:85:89:aa:
                    9d:94:76:0b:a9:7d:3f:f8:c2:04:02:1e:c6:d1:28:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4C:54:41:0F:AF:7E:0B:D5:F3:D2:01:94:91:67:E9:78:C5:EC:10
            X509v3 Authority Key Identifier:
                keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:19:24:25:1f:54:ca:d9:58:b6:0f:ad:16:64:8d:b0:77:d2:
         1a:cb:a4:91:a4:62:f1:ec:9c:6f:5d:9e:7a:cc:a2:91:19:94:
         af:f1:68:05:89:62:82:b6:67:11:db:58:bd:ca:41:28:01:ae:
         44:90:5a:26:7a:7d:fc:2c:68:9a:81:21:e8:3e:58:06:8c:b1:
         73:8d:98:bc:65:13:96:5e:2b:80:be:71:ca:08:b4:ed:dc:bd:
         c5:16:67:e9:cd:bd:e5:7f:2b:0c:45:38:4a:c9:6e:a9:cb:e0:
         85:fe:d0:9e:03:e0:d8:5a:fc:3e:9b:75:b3:b5:b2:1e:42:1a:
         f7:23:ab:62:27:38:0a:87:0d:49:53:8e:ac:d6:79:7e:92:17:
         dd:3e:ad:80:03:9f:46:c4:be:c5:45:1d:4f:be:2c:b6:6b:58:
         3e:ab:32:39:1e:be:8e:cb:3f:04:d4:72:77:5b:69:6a:ef:14:
         be:c8:ac:31:80:3d:65:02:c5:16:bd:95:b4:d5:c1:ff:85:84:
         71:f8:d9:14:9e:8d:1d:7c:1e:90:db:0f:d7:ef:37:74:a2:06:
         f0:79:a7:4b:cd:ec:5a:23:bb:07:7a:21:e9:84:20:12:0f:1a:
         78:25:e4:6f:42:bd:4c:62:3d:2d:d0:b1:76:31:51:cc:79:34:
         ad:75:27:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoQzHcKFg7rx+5JxM/K/rjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTRhYWM3N2Q2Mzg4MmY3NDM2MjA3MDRjMjRkYmVkYjE4
ODBkN2EwHhcNMjUwNTA3MDEwMTM3WhcNMjUwNTA4MDEwMTM3WjAzMTEwLwYDVQQD
Eyg4MTRjNTQ0MTBmYWY3ZTBiZDVmM2QyMDE5NDkxNjdlOTc4YzVlYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgGH589iYdcGJJwIZxMHb71+DWu6
CbYhYrAxp1iw25HnkBfXRoswcGBGf5HQTRBpSrC1F2jAvLDqc4Eo7j/lNAkzgBHm
6H0V7VI4wh+tFUWzb/oxBbeGX4mVjLpqXiVRFxlFZOwxt1tVkW37IG64tUfd1qPe
iUOx1ULAG9palXbn8uog/4JO57fOIrF3Siv0JUgOI0n4zjuyrD/1AY0zhLO+WI92
wD+5gDThB5HXVREN/8t9jHPz+J6IEZ0XUwv8w+Q2ESBINrqkFOFGGReJ1BmMU/44
/5URmUYpaxjV+OUSG21Bhjl/6bDkSlqFiaqdlHYLqX0/+MIEAh7G0Sj8fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFMVEEPr34L1fPSAZSRZ+l4xewQMB8GA1UdIwQY
MBaAFLvkqsd9Y4gvdDYgcEwk2+2xiA16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUt
MWJhMjFiMGUyOTEzLzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUtMWJhMjFiMGUyOTEz
LzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxkkJR9U
ytlYtg+tFmSNsHfSGsukkaRi8eycb12eesyikRmUr/FoBYligrZnEdtYvcpBKAGu
RJBaJnp9/CxomoEh6D5YBoyxc42YvGUTll4rgL5xygi07dy9xRZn6c295X8rDEU4
Ssluqcvghf7QngPg2Fr8Ppt1s7WyHkIa9yOrYic4CocNSVOOrNZ5fpIX3T6tgAOf
RsS+xUUdT74stmtYPqsyOR6+jss/BNRyd1tpau8UvsisMYA9ZQLFFr2VtNXB/4WE
cfjZFJ6NHXwekNsP1+83dKIG8HmnS83sWiO7B3oh6YQgEg8aeCXkb0K9TGI9LdCx
djFRzHk0rXUnTg==
-----END CERTIFICATE-----
Generated at Wed May 7 11:24:19 2025 by rpki-client