Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
File:                     eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json)
Hash identifier:          1lBJ0MPvh4G7aB2zwd9GsFzOlD/Ktpdb4ByQgqYh8YU=
Subject key identifier:   8E:07:D7:AB:B0:3F:76:D1:79:EA:9C:70:8E:7A:36:C2:D7:EA:F1:FD
Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Certificate issuer:       /CN=7b243b732e564690482cc825199f8b591b01f6f2
Certificate serial:       0196AA3174D18BC216206EBF8B9A30EF1419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
Manifest number:          10CD
Signing time:             Wed 07 May 2025 10:01:29 +0000
Manifest this update:     Wed 07 May 2025 10:01:29 +0000
Manifest next update:     Thu 08 May 2025 10:01:29 +0000
Files and hashes:         1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: NyaPYf2OxpyYTzHw41Mz0LfICezeRrAxF0nIzF+WmSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:31:74:d1:8b:c2:16:20:6e:bf:8b:9a:30:ef:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2
        Validity
            Not Before: May  7 10:01:29 2025 GMT
            Not After : May  8 10:01:29 2025 GMT
        Subject: CN=8e07d7abb03f76d179ea9c708e7a36c2d7eaf1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:03:96:65:3d:1e:af:d5:07:52:a7:25:ed:
                    20:2b:5e:42:29:a7:e8:c7:ca:56:aa:76:f8:d9:e5:
                    fc:6a:d1:01:22:be:06:fd:ff:d1:e9:17:e3:9b:10:
                    9a:f5:ac:a2:c0:25:23:6d:14:90:00:24:0b:87:2d:
                    b2:6b:c6:64:c4:05:43:7b:4c:4e:5e:d9:43:a4:f7:
                    aa:e1:e9:2c:d4:86:97:b8:81:a4:ff:2f:44:f8:92:
                    10:9a:b9:76:a0:5b:b1:d2:d8:bc:18:b5:0a:35:aa:
                    85:7c:68:a3:57:0c:75:4f:53:6b:63:3c:67:73:59:
                    32:cc:c6:d8:da:20:53:95:f3:6a:a1:3a:da:b9:1f:
                    14:fe:6a:a7:29:a3:27:40:0a:b2:ae:4e:71:1e:3c:
                    7e:6b:a1:be:24:bc:11:92:82:f5:cd:0a:6f:31:30:
                    03:7b:8d:4b:fe:55:9b:7c:6e:b0:bf:4c:de:3b:39:
                    6b:3e:32:ec:c2:45:d4:9d:ac:12:0c:07:d4:86:46:
                    82:c8:42:73:7a:71:f2:f5:84:6d:fd:1c:b3:81:69:
                    3c:41:80:8a:b5:cc:9e:8c:95:29:7c:77:c3:26:10:
                    cf:27:20:9c:47:fc:ed:cb:0c:1d:b6:69:e6:5f:b8:
                    a6:f7:cc:96:63:98:9b:bb:2b:e1:90:90:6d:28:c7:
                    ca:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:D7:AB:B0:3F:76:D1:79:EA:9C:70:8E:7A:36:C2:D7:EA:F1:FD
            X509v3 Authority Key Identifier:
                keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:20:71:87:83:b9:bb:12:e6:d9:4f:0c:b3:5e:91:4c:4b:49:
         68:a5:45:57:de:ea:a1:30:71:27:5c:b9:f8:8f:26:d2:13:0a:
         68:ab:a4:f8:9f:21:37:81:21:df:14:50:4d:c9:24:9b:4d:8a:
         2f:e7:3e:b2:15:32:88:a1:5b:90:94:d2:0f:df:f6:9f:0d:ab:
         f2:39:a0:ee:0c:fa:b7:31:9e:69:8d:3d:90:bd:4e:3f:e5:42:
         af:59:2d:99:29:17:40:8f:64:e3:cd:44:49:58:78:f1:5c:08:
         db:10:be:24:24:0f:f7:a2:c8:dc:7b:5e:2a:86:12:e7:08:25:
         6c:4f:2d:8f:e0:e9:c8:9f:be:cc:45:d9:45:61:38:e9:5a:57:
         3a:f3:71:ea:53:8b:3a:49:9d:44:b8:82:10:b2:67:62:a7:a5:
         8b:d6:a4:c4:96:1c:f3:42:25:8c:db:c4:d5:9e:95:bd:fc:2b:
         08:90:7e:4b:a2:0d:ed:1d:63:26:05:77:ab:32:d7:5e:f2:60:
         8b:8a:2a:9c:68:47:43:08:57:b8:f4:57:d5:cb:61:69:0d:8f:
         2d:cd:79:c0:3b:9b:27:c3:0a:a6:f0:e5:e6:4d:97:18:1a:11:
         64:9c:00:4e:af:7d:fb:46:9b:d6:4d:d7:2e:07:10:8b:dc:4b:
         63:74:78:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMXTRi8IWIG6/i5ow7xQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjQzYjczMmU1NjQ2OTA0ODJjYzgyNTE5OWY4YjU5MWIw
MWY2ZjIwHhcNMjUwNTA3MTAwMTI5WhcNMjUwNTA4MTAwMTI5WjAzMTEwLwYDVQQD
Eyg4ZTA3ZDdhYmIwM2Y3NmQxNzllYTljNzA4ZTdhMzZjMmQ3ZWFmMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uUDlmU9Hq/VB1KnJe0gK15CKafo
x8pWqnb42eX8atEBIr4G/f/R6RfjmxCa9ayiwCUjbRSQACQLhy2ya8ZkxAVDe0xO
XtlDpPeq4eks1IaXuIGk/y9E+JIQmrl2oFux0ti8GLUKNaqFfGijVwx1T1NrYzxn
c1kyzMbY2iBTlfNqoTrauR8U/mqnKaMnQAqyrk5xHjx+a6G+JLwRkoL1zQpvMTAD
e41L/lWbfG6wv0zeOzlrPjLswkXUnawSDAfUhkaCyEJzenHy9YRt/RyzgWk8QYCK
tcyejJUpfHfDJhDPJyCcR/ztywwdtmnmX7im98yWY5ibuyvhkJBtKMfKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4H16uwP3bReeqccI56NsLX6vH9MB8GA1UdIwQY
MBaAFHskO3MuVkaQSCzIJRmfi1kbAfbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUt
M2I5YTI4MmU3NjNlLzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUtM2I5YTI4MmU3NjNl
LzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSBxh4O5
uxLm2U8Ms16RTEtJaKVFV97qoTBxJ1y5+I8m0hMKaKuk+J8hN4Eh3xRQTckkm02K
L+c+shUyiKFbkJTSD9/2nw2r8jmg7gz6tzGeaY09kL1OP+VCr1ktmSkXQI9k481E
SVh48VwI2xC+JCQP96LI3HteKoYS5wglbE8tj+DpyJ++zEXZRWE46VpXOvNx6lOL
OkmdRLiCELJnYqeli9akxJYc80IljNvE1Z6VvfwrCJB+S6IN7R1jJgV3qzLXXvJg
i4oqnGhHQwhXuPRX1cthaQ2PLc15wDubJ8MKpvDl5k2XGBoRZJwATq99+0ab1k3X
LgcQi9xLY3R4eQ==
-----END CERTIFICATE-----
Generated at Wed May 7 14:50:26 2025 by rpki-client