Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File:                     m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier:          2FQjxgoqOlVAs3VkrcTLRZpepj3Ij2Rd5qs/vfQbZLo=
Subject key identifier:   39:B4:A6:55:BA:7A:71:E8:4A:76:70:4A:EF:7B:0F:02:17:99:6E:CC
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer:       /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial:       0196B2586D2726A64203EA2D8C92D135B334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number:          13AF
Signing time:             Fri 09 May 2025 00:01:01 +0000
Manifest this update:     Fri 09 May 2025 00:01:01 +0000
Manifest next update:     Sat 10 May 2025 00:01:01 +0000
Files and hashes:         1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: cyo71xibHBVlQs7ssJYEVIDUqwrwiPdy8BK/eJxeRiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:58:6d:27:26:a6:42:03:ea:2d:8c:92:d1:35:b3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
        Validity
            Not Before: May  9 00:01:01 2025 GMT
            Not After : May 10 00:01:01 2025 GMT
        Subject: CN=39b4a655ba7a71e84a76704aef7b0f0217996ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:0e:72:e7:f6:ae:df:f1:bb:ec:e2:5c:3d:
                    c0:f9:e2:7e:4b:c2:e6:0a:9e:d9:50:3a:d2:e6:a4:
                    fe:1a:46:68:48:4d:2c:11:db:fd:1a:2b:8c:8c:ee:
                    79:30:5d:96:4b:c4:08:98:80:65:fc:af:0d:2d:e6:
                    ce:03:1d:2e:54:b5:88:44:fd:fd:58:2e:07:4e:10:
                    0a:46:73:b6:d2:40:52:74:13:c4:0b:fe:2f:9f:f3:
                    8d:6c:49:ee:7c:7e:11:0f:cc:76:02:6f:ff:a8:b3:
                    f2:8d:c2:92:f4:8c:23:31:60:f8:a6:1a:e2:aa:66:
                    90:06:61:0a:c2:4b:31:76:32:4c:00:9b:6e:ce:08:
                    7a:cf:1e:39:66:f1:43:92:0b:50:57:18:2c:b8:60:
                    74:02:53:7b:fe:f3:f8:2c:96:97:9b:a3:68:f2:ad:
                    96:2d:4a:8f:35:f2:a3:f5:42:2d:45:54:45:f4:58:
                    c6:b8:02:39:fc:34:0f:9f:2a:af:d1:0f:17:44:77:
                    5a:7b:b3:02:1a:ab:ce:67:86:36:d7:06:47:db:79:
                    bc:78:f8:de:d1:99:e3:39:fd:39:c3:27:69:d9:6e:
                    65:54:70:8d:8f:86:e6:30:26:7d:e7:88:04:49:00:
                    88:42:20:1f:93:97:cc:9a:b1:ac:cc:c4:37:c6:25:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:A6:55:BA:7A:71:E8:4A:76:70:4A:EF:7B:0F:02:17:99:6E:CC
            X509v3 Authority Key Identifier:
                keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a9:f5:43:a4:83:c9:39:98:88:d2:7d:42:03:bc:c6:32:be:
         b6:59:29:8c:b0:42:7a:37:7b:87:13:77:74:32:b4:04:a4:41:
         a3:07:ed:28:b7:9a:96:29:9c:27:ac:66:e1:89:a5:5b:8b:ab:
         68:4f:26:bf:95:1e:94:f5:92:56:cd:13:70:8d:8a:5b:b5:ee:
         6b:8e:64:13:89:80:c0:0c:9a:76:b4:e2:7f:f2:32:df:08:cd:
         bc:29:56:41:9d:85:0a:88:9f:80:59:4c:4f:de:44:3e:40:ef:
         7f:dc:8c:1f:11:46:4d:e5:e0:65:84:31:1c:3c:54:d0:f2:5a:
         f6:c8:99:77:19:2c:70:41:bc:5b:16:d2:d3:7e:5b:00:76:90:
         74:ac:58:f5:7b:5d:ac:03:91:26:a9:4f:17:5a:ba:88:25:73:
         30:35:a8:68:ee:c0:2f:26:4e:63:48:c4:45:5c:35:7e:63:67:
         46:ac:0f:22:ce:b6:e0:aa:d2:ba:2e:f1:fa:df:c3:2b:57:91:
         f4:ea:02:52:a7:e1:cb:87:22:0e:fb:a0:05:87:9d:25:1f:ca:
         18:23:3e:4a:d8:bf:24:c1:42:e7:c8:66:63:f4:c5:09:19:21:
         fc:1f:3d:d4:8b:cc:ff:6e:13:79:27:66:2e:db:a6:6c:a0:e5:
         5a:0b:2f:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayWG0nJqZCA+otjJLRNbM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTE2Zjk5YzRlMzVmM2FlZGQ4MWIzNzkzOWRlOGMzYzRl
OTFjMWMwHhcNMjUwNTA5MDAwMTAxWhcNMjUwNTEwMDAwMTAxWjAzMTEwLwYDVQQD
EygzOWI0YTY1NWJhN2E3MWU4NGE3NjcwNGFlZjdiMGYwMjE3OTk2ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCoOcuf2rt/xu+ziXD3A+eJ+S8Lm
Cp7ZUDrS5qT+GkZoSE0sEdv9GiuMjO55MF2WS8QImIBl/K8NLebOAx0uVLWIRP39
WC4HThAKRnO20kBSdBPEC/4vn/ONbEnufH4RD8x2Am//qLPyjcKS9IwjMWD4phri
qmaQBmEKwksxdjJMAJtuzgh6zx45ZvFDkgtQVxgsuGB0AlN7/vP4LJaXm6No8q2W
LUqPNfKj9UItRVRF9FjGuAI5/DQPnyqv0Q8XRHdae7MCGqvOZ4Y21wZH23m8ePje
0ZnjOf05wydp2W5lVHCNj4bmMCZ954gESQCIQiAfk5fMmrGszMQ3xiX92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm0plW6enHoSnZwSu97DwIXmW7MMB8GA1UdIwQY
MBaAFJvhb5nE41867dgbN5Od6MPE6RwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5Nzct
MWJhODMwYTdjYzVjLzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5NzctMWJhODMwYTdjYzVj
LzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqn1Q6SD
yTmYiNJ9QgO8xjK+tlkpjLBCejd7hxN3dDK0BKRBowftKLealimcJ6xm4YmlW4ur
aE8mv5UelPWSVs0TcI2KW7Xua45kE4mAwAyadrTif/Iy3wjNvClWQZ2FCoifgFlM
T95EPkDvf9yMHxFGTeXgZYQxHDxU0PJa9siZdxkscEG8WxbS035bAHaQdKxY9Xtd
rAORJqlPF1q6iCVzMDWoaO7ALyZOY0jERVw1fmNnRqwPIs624KrSui7x+t/DK1eR
9OoCUqfhy4ciDvugBYedJR/KGCM+Sti/JMFC58hmY/TFCRkh/B891IvM/24TeSdm
LtumbKDlWgsvHQ==
-----END CERTIFICATE-----
Generated at Fri May 9 07:49:19 2025 by rpki-client