Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File:                     gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier:          Lff9jqw6157ZFKuIX3IsH4xTQGFezy+OAAvYxImXGRE=
Subject key identifier:   F6:76:EE:F2:74:08:71:DE:5B:15:15:3F:DC:A8:25:59:07:D4:2B:83
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer:       /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial:       01969DF57DAAAFADB22D9049498C4C3E2C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number:          151F
Signing time:             Mon 05 May 2025 01:00:33 +0000
Manifest this update:     Mon 05 May 2025 01:00:33 +0000
Manifest next update:     Tue 06 May 2025 01:00:33 +0000
Files and hashes:         1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: CeFVnSM6rmZGlUM+y2z54ilVH5QUnRZ+ueGArYrnAa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:7d:aa:af:ad:b2:2d:90:49:49:8c:4c:3e:2c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
        Validity
            Not Before: May  5 01:00:33 2025 GMT
            Not After : May  6 01:00:33 2025 GMT
        Subject: CN=f676eef2740871de5b15153fdca8255907d42b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:fb:62:50:de:67:8d:90:36:81:c6:ae:09:
                    e5:93:2c:39:ed:08:4b:d1:09:a6:5f:dd:8a:f4:55:
                    d5:97:7a:ca:b9:67:d1:f2:79:77:0d:b8:5e:f7:e4:
                    f7:ac:ef:02:50:3c:6a:12:f0:a5:d5:2f:08:aa:7f:
                    9c:7b:1e:91:ff:5f:26:5a:f2:04:4a:1a:16:f2:a8:
                    cc:f9:8b:cd:d5:d8:11:b7:d2:16:d2:d3:63:09:fe:
                    f0:d2:2b:9e:32:3a:6a:4e:8c:58:40:61:e8:1f:36:
                    fd:b6:14:c9:f4:53:72:b0:3f:79:60:2b:23:cc:1c:
                    c4:b6:4d:19:09:89:8a:0b:8a:89:c1:b8:80:f5:44:
                    ac:94:d7:1f:0f:5b:d9:19:00:18:b5:0f:31:dc:0b:
                    ce:25:2e:0f:d8:8a:43:16:2d:7a:ad:fc:99:53:f6:
                    c2:a3:64:ee:bf:dc:2b:a9:1a:d8:20:8c:cd:c1:3c:
                    eb:3e:67:05:95:a6:3a:36:17:82:85:1b:8b:13:ed:
                    2d:f2:5d:e0:1f:0b:67:8f:ac:ac:c0:61:c2:db:f5:
                    79:aa:53:0a:63:ad:a1:24:6b:a1:92:ac:cc:25:49:
                    f1:11:af:4b:97:5e:96:0c:3d:cf:55:94:4a:5c:c1:
                    a8:0a:2b:f1:30:4c:f0:4f:78:e1:06:d9:5a:6f:f7:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:76:EE:F2:74:08:71:DE:5B:15:15:3F:DC:A8:25:59:07:D4:2B:83
            X509v3 Authority Key Identifier:
                keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:9e:24:d8:27:7f:f4:2c:ba:6b:ac:f0:b8:7d:2f:af:e4:
         23:81:fc:aa:84:ae:6f:39:9b:e3:e9:6c:28:b4:fa:92:7e:c9:
         ef:62:4e:1c:5d:72:aa:8b:60:84:09:f8:47:1c:09:75:5f:69:
         63:b7:f9:b4:dc:a7:a7:9d:5a:c6:3b:7f:66:66:1b:f9:ef:b8:
         cc:ae:22:31:33:83:80:22:b3:19:dc:6c:ee:cf:36:af:78:6a:
         13:c1:ae:3b:fc:1e:d5:18:bf:73:e9:cd:49:9a:32:87:8e:26:
         3e:5c:c7:5e:9d:5c:e6:be:4f:7c:68:94:cc:5c:fa:48:fb:72:
         3e:d3:ac:e1:52:f4:eb:ef:e2:47:60:d7:b5:9f:47:80:d4:28:
         6d:74:bf:2f:67:ea:a5:05:2d:00:76:f9:47:9d:2f:51:fa:10:
         36:66:17:b5:8f:fd:74:97:04:94:94:1e:2e:e9:55:63:8a:a7:
         3d:b2:29:fc:81:68:14:59:15:26:f4:3e:4d:8a:45:e0:32:69:
         33:0a:c6:3c:eb:2f:4e:26:41:51:74:54:eb:ab:6a:48:59:c9:
         f1:85:82:d4:d3:f1:81:bd:64:95:6f:f4:11:7e:37:24:e8:54:
         44:32:be:84:90:ec:70:8e:11:17:99:6b:b6:f5:4f:1a:10:79:
         77:11:de:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9X2qr62yLZBJSYxMPiw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmEyN2JmZDg2YTgxMGExNzk1N2QxZjcyNmZlMTYwZDRl
YjMyMjUwHhcNMjUwNTA1MDEwMDMzWhcNMjUwNTA2MDEwMDMzWjAzMTEwLwYDVQQD
EyhmNjc2ZWVmMjc0MDg3MWRlNWIxNTE1M2ZkY2E4MjU1OTA3ZDQyYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh37YlDeZ42QNoHGrgnlkyw57QhL
0QmmX92K9FXVl3rKuWfR8nl3Dbhe9+T3rO8CUDxqEvCl1S8Iqn+cex6R/18mWvIE
ShoW8qjM+YvN1dgRt9IW0tNjCf7w0iueMjpqToxYQGHoHzb9thTJ9FNysD95YCsj
zBzEtk0ZCYmKC4qJwbiA9USslNcfD1vZGQAYtQ8x3AvOJS4P2IpDFi16rfyZU/bC
o2Tuv9wrqRrYIIzNwTzrPmcFlaY6NheChRuLE+0t8l3gHwtnj6yswGHC2/V5qlMK
Y62hJGuhkqzMJUnxEa9Ll16WDD3PVZRKXMGoCivxMEzwT3jhBtlab/dwFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ27vJ0CHHeWxUVP9yoJVkH1CuDMB8GA1UdIwQY
MBaAFIC6J7/YaoEKF5V9H3Jv4WDU6zIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQt
MDM2ZTdlZmM5YWNhLzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQtMDM2ZTdlZmM5YWNh
LzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOKeJNgn
f/Qsumus8Lh9L6/kI4H8qoSubzmb4+lsKLT6kn7J72JOHF1yqotghAn4RxwJdV9p
Y7f5tNynp51axjt/ZmYb+e+4zK4iMTODgCKzGdxs7s82r3hqE8GuO/we1Ri/c+nN
SZoyh44mPlzHXp1c5r5PfGiUzFz6SPtyPtOs4VL06+/iR2DXtZ9HgNQobXS/L2fq
pQUtAHb5R50vUfoQNmYXtY/9dJcElJQeLulVY4qnPbIp/IFoFFkVJvQ+TYpF4DJp
MwrGPOsvTiZBUXRU66tqSFnJ8YWC1NPxgb1klW/0EX43JOhURDK+hJDscI4RF5lr
tvVPGhB5dxHezg==
-----END CERTIFICATE-----
Generated at Mon May 5 06:20:50 2025 by rpki-client