Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File:                     XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier:          YZrCfSymJ2TqpdcJX8hco3EVBoLaR8Mczo5sVJZpFZs=
Subject key identifier:   21:F3:24:9B:C0:A5:5E:CC:55:C8:00:3F:86:CB:C2:99:7F:C9:1E:5A
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer:       /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial:       0196BBC91E5C39C07FDEEF2CBE28FE000981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number:          0492
Signing time:             Sat 10 May 2025 20:00:41 +0000
Manifest this update:     Sat 10 May 2025 20:00:41 +0000
Manifest next update:     Sun 11 May 2025 20:00:41 +0000
Files and hashes:         1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: JkVz/Ci6kZqqvrKzTzjy4TGZwIdfe11jBGOolTwTH8A=)
                          2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:c9:1e:5c:39:c0:7f:de:ef:2c:be:28:fe:00:09:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
        Validity
            Not Before: May 10 20:00:41 2025 GMT
            Not After : May 11 20:00:41 2025 GMT
        Subject: CN=21f3249bc0a55ecc55c8003f86cbc2997fc91e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:57:bf:5c:ff:c9:07:0a:7c:7a:06:e7:c7:
                    c4:b4:09:e3:89:bd:11:e3:c2:56:92:b5:b5:02:1f:
                    8c:3d:6c:49:93:cc:d6:60:3b:9a:b5:a6:13:ff:3f:
                    64:fe:7b:9c:d1:43:df:3c:da:9a:14:3b:d6:12:ea:
                    22:d3:1b:ee:91:a8:06:58:6c:14:d0:9a:d9:fd:c8:
                    08:ea:82:7b:d6:1f:05:2f:2b:75:f9:89:9e:3c:81:
                    c2:a1:23:c3:be:a9:2d:08:bd:5a:7d:d3:b6:8b:1f:
                    9e:3b:81:49:53:d2:7b:ae:a5:5d:84:5d:e9:bd:c0:
                    ec:d0:09:f1:03:99:27:af:10:07:8f:bc:66:30:35:
                    2c:34:16:3b:63:07:64:16:bb:0d:95:55:06:69:1c:
                    6d:e9:84:00:c4:21:32:49:48:d3:cd:87:8d:2e:49:
                    b2:e3:21:c2:27:96:0f:b6:e6:3a:e9:29:8c:25:f2:
                    50:17:f9:98:91:c7:72:8f:70:24:0d:08:ae:c6:fa:
                    ea:00:cc:6c:9c:dc:0a:54:0f:a4:7d:f8:c1:f8:7a:
                    0c:4e:86:9e:49:de:1d:c6:19:96:19:f0:90:a1:93:
                    ab:31:af:e9:78:5f:0c:82:8d:ea:75:64:f8:bc:6c:
                    3d:4e:29:1a:53:d9:d2:ef:5b:56:d2:7e:ab:9b:84:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:24:9B:C0:A5:5E:CC:55:C8:00:3F:86:CB:C2:99:7F:C9:1E:5A
            X509v3 Authority Key Identifier:
                keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:84:01:be:81:ca:b9:26:45:d1:ee:87:32:f7:4c:0d:11:
         c7:8a:9d:88:9b:2d:2b:f2:04:49:15:ed:84:9f:8a:8b:1a:98:
         ee:03:c7:16:17:32:0a:c6:b0:a9:51:fb:99:07:95:e9:41:b6:
         6e:3d:1a:87:b5:ea:d7:34:cc:94:95:87:82:ca:13:fd:01:6d:
         2d:83:6c:a1:eb:08:77:34:b4:d8:87:f7:f9:95:9f:c7:81:58:
         e5:f1:04:a1:2f:85:76:69:cd:8f:f4:a5:11:0d:c8:a4:2d:ba:
         0a:c0:82:d2:d8:1c:de:c4:4c:f8:86:5e:6a:89:c4:23:52:ed:
         aa:d0:63:b4:6f:0e:72:63:f4:a3:e3:c5:20:71:54:3c:e5:c8:
         17:22:45:25:b8:e6:71:38:35:a4:98:f5:da:1b:8c:68:79:7e:
         30:50:51:b3:1c:ae:65:88:2f:30:33:16:71:66:51:c9:a9:82:
         ac:64:3a:e1:f4:00:88:87:f3:b8:f1:6f:b6:33:50:17:6f:07:
         96:09:1f:bc:5a:a9:7e:45:e3:c0:28:29:89:8d:08:b2:6d:2c:
         fd:85:98:58:f2:8b:42:09:04:ba:9f:17:0b:7d:05:4c:d6:ba:
         63:cd:5c:51:6b:8f:9d:b5:bf:6f:3d:bf:03:36:5f:a4:5b:cd:
         4d:eb:4b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yR5cOcB/3u8svij+AAmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMWM2M2EyMzY5ZGY3ZGZlY2YzYzg1MDg1OTMzNDFjZDM2
OWIyMzcwHhcNMjUwNTEwMjAwMDQxWhcNMjUwNTExMjAwMDQxWjAzMTEwLwYDVQQD
EygyMWYzMjQ5YmMwYTU1ZWNjNTVjODAwM2Y4NmNiYzI5OTdmYzkxZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZBXv1z/yQcKfHoG58fEtAnjib0R
48JWkrW1Ah+MPWxJk8zWYDuataYT/z9k/nuc0UPfPNqaFDvWEuoi0xvukagGWGwU
0JrZ/cgI6oJ71h8FLyt1+YmePIHCoSPDvqktCL1afdO2ix+eO4FJU9J7rqVdhF3p
vcDs0AnxA5knrxAHj7xmMDUsNBY7YwdkFrsNlVUGaRxt6YQAxCEySUjTzYeNLkmy
4yHCJ5YPtuY66SmMJfJQF/mYkcdyj3AkDQiuxvrqAMxsnNwKVA+kffjB+HoMToae
Sd4dxhmWGfCQoZOrMa/peF8Mgo3qdWT4vGw9TikaU9nS71tW0n6rm4STbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHzJJvApV7MVcgAP4bLwpl/yR5aMB8GA1UdIwQY
MBaAFFwcY6I2nfff7PPIUIWTNBzTabI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUt
NjdhMThkNjJlYzJkLzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUtNjdhMThkNjJlYzJk
LzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBGEAb6B
yrkmRdHuhzL3TA0Rx4qdiJstK/IESRXthJ+KixqY7gPHFhcyCsawqVH7mQeV6UG2
bj0ah7Xq1zTMlJWHgsoT/QFtLYNsoesIdzS02If3+ZWfx4FY5fEEoS+FdmnNj/Sl
EQ3IpC26CsCC0tgc3sRM+IZeaonEI1LtqtBjtG8OcmP0o+PFIHFUPOXIFyJFJbjm
cTg1pJj12huMaHl+MFBRsxyuZYgvMDMWcWZRyamCrGQ64fQAiIfzuPFvtjNQF28H
lgkfvFqpfkXjwCgpiY0Ism0s/YWYWPKLQgkEup8XC30FTNa6Y81cUWuPnbW/bz2/
AzZfpFvNTetL8w==
-----END CERTIFICATE-----
Generated at Sun May 11 00:48:15 2025 by rpki-client