Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File:                     dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier:          +/XV2211xNyQ7In6mEwfoiXMNz0+yQzucgPDL2uPCZc=
Subject key identifier:   F2:00:23:33:AA:34:49:E0:D8:FD:9F:E9:49:65:CA:68:25:C6:D0:0C
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer:       /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial:       0196B7B5818B40A28F59B1D52A1034705E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number:          082D
Signing time:             Sat 10 May 2025 01:00:47 +0000
Manifest this update:     Sat 10 May 2025 01:00:47 +0000
Manifest next update:     Sun 11 May 2025 01:00:47 +0000
Files and hashes:         1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: 4FYhh9vzI1DEOBS/79ElKu7BCS2dHpQ5Kg6+zlqqSB0=)
                          2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:81:8b:40:a2:8f:59:b1:d5:2a:10:34:70:5e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : May 11 01:00:47 2025 GMT
        Subject: CN=f2002333aa3449e0d8fd9fe94965ca6825c6d00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:8f:c7:7c:ef:23:61:7f:02:ea:09:7c:7a:
                    dc:fb:7d:68:17:da:8e:dd:e3:dd:11:5f:7d:a8:03:
                    5b:5a:c4:2c:cb:02:e3:8e:67:d9:72:23:85:70:88:
                    81:ed:cc:f5:83:61:5d:84:8f:72:1d:ec:a4:0c:96:
                    62:e7:65:79:2b:08:8a:f9:c7:8b:a3:5a:60:e7:0c:
                    b1:60:19:82:18:76:73:18:a9:c3:48:ce:54:dc:ff:
                    3e:3f:66:1e:95:b5:fd:99:fb:bb:60:b7:12:5d:c3:
                    fc:eb:ce:f6:c4:74:54:c1:22:cb:14:23:c5:24:31:
                    b1:54:e6:6b:7f:50:91:e1:89:35:35:18:ef:70:6f:
                    a6:de:13:08:5d:4b:02:b0:11:51:62:66:1b:96:fa:
                    7c:20:d3:9f:43:fa:2c:95:a7:ba:e6:c8:85:a9:94:
                    9b:19:a0:0a:89:c9:59:f2:5d:21:83:63:b7:f4:e2:
                    cb:d0:9c:b7:3f:7b:eb:c5:08:cd:cb:28:3b:c2:0b:
                    a7:b9:fe:c0:dc:e0:59:0b:f0:83:bc:71:7f:57:12:
                    23:f9:9b:35:be:ac:33:07:57:ce:96:71:5b:b0:42:
                    7a:41:2e:34:c1:53:fe:f5:e6:35:65:4a:b3:84:db:
                    d0:e9:8a:9e:7e:38:b4:ec:99:47:ce:23:91:42:5c:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:00:23:33:AA:34:49:E0:D8:FD:9F:E9:49:65:CA:68:25:C6:D0:0C
            X509v3 Authority Key Identifier:
                keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1a:84:31:f5:5a:5b:ff:c8:bd:95:9d:b9:e0:e9:9d:a6:b8:
         16:5c:f6:0a:5e:b3:98:84:a1:76:9d:d5:73:b3:44:8b:d5:5f:
         7b:c9:52:ce:9f:9f:b9:d7:ce:ae:20:a9:e1:c8:1b:27:2d:9d:
         e4:17:33:5c:f2:5c:a2:18:f9:8f:60:c2:93:9e:6b:28:be:0e:
         d9:25:9b:0d:0c:2a:10:af:16:7b:60:4d:f1:f7:f3:f4:ec:9f:
         c8:e5:51:32:ca:4e:e1:08:f2:bf:3a:3b:1c:94:39:4a:f0:4f:
         db:cf:06:34:46:ae:2a:85:b7:f6:8d:72:21:bf:e9:9b:53:3d:
         c9:31:60:af:cc:a4:44:64:94:9d:90:3b:fd:8b:06:fe:fc:60:
         ac:88:d1:b7:20:c1:ba:cb:1d:bd:57:d9:d5:ef:3e:cb:95:a3:
         4c:1d:e7:d0:42:7b:1d:21:b6:f6:80:60:34:95:ae:63:4b:7d:
         28:2c:1e:4c:1b:99:f2:2d:7d:52:d6:ca:1b:fb:66:37:f6:f3:
         8a:af:aa:f9:6d:5a:76:1a:aa:f6:c4:0e:73:c7:29:10:08:84:
         69:a7:f6:fb:d9:74:94:d6:ec:74:32:ce:da:9d:34:38:17:9f:
         1a:99:79:d4:43:52:29:1d:0d:a8:91:cd:8b:05:fa:b2:aa:90:
         6a:2f:6f:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tYGLQKKPWbHVKhA0cF6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MThjMzZkMDQxODIxZjg2YjM4ZDMyMjNkNDNmZTVjZGIy
MDExYTAwHhcNMjUwNTEwMDEwMDQ3WhcNMjUwNTExMDEwMDQ3WjAzMTEwLwYDVQQD
EyhmMjAwMjMzM2FhMzQ0OWUwZDhmZDlmZTk0OTY1Y2E2ODI1YzZkMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeKPx3zvI2F/AuoJfHrc+31oF9qO
3ePdEV99qANbWsQsywLjjmfZciOFcIiB7cz1g2FdhI9yHeykDJZi52V5KwiK+ceL
o1pg5wyxYBmCGHZzGKnDSM5U3P8+P2YelbX9mfu7YLcSXcP86872xHRUwSLLFCPF
JDGxVOZrf1CR4Yk1NRjvcG+m3hMIXUsCsBFRYmYblvp8INOfQ/oslae65siFqZSb
GaAKiclZ8l0hg2O39OLL0Jy3P3vrxQjNyyg7wgunuf7A3OBZC/CDvHF/VxIj+Zs1
vqwzB1fOlnFbsEJ6QS40wVP+9eY1ZUqzhNvQ6Yqefji07JlHziORQlz54QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIAIzOqNEng2P2f6UllymglxtAMMB8GA1UdIwQY
MBaAFHQYw20EGCH4azjTIj1D/lzbIBGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQt
NGI4MWQ2MmMzYjUzLzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQtNGI4MWQ2MmMzYjUz
LzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBqEMfVa
W//IvZWdueDpnaa4Flz2Cl6zmIShdp3Vc7NEi9Vfe8lSzp+fudfOriCp4cgbJy2d
5BczXPJcohj5j2DCk55rKL4O2SWbDQwqEK8We2BN8ffz9OyfyOVRMspO4Qjyvzo7
HJQ5SvBP288GNEauKoW39o1yIb/pm1M9yTFgr8ykRGSUnZA7/YsG/vxgrIjRtyDB
ussdvVfZ1e8+y5WjTB3n0EJ7HSG29oBgNJWuY0t9KCweTBuZ8i19UtbKG/tmN/bz
iq+q+W1adhqq9sQOc8cpEAiEaaf2+9l0lNbsdDLO2p00OBefGpl51ENSKR0NqJHN
iwX6sqqQai9vSg==
-----END CERTIFICATE-----
Generated at Sat May 10 08:36:09 2025 by rpki-client