Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
File:                     0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft (raw, json)
Hash identifier:          VbDnGq3XnPpzJcXb4GTyvCF7qMrnnq6CxuA7wF2hDeY=
Subject key identifier:   40:C3:1B:C8:00:7E:B0:27:54:7A:C1:E8:BA:FE:96:7A:7A:D6:79:27
Authority key identifier: D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
Certificate issuer:       /CN=d1497b3247767d349991e996cab8af7d49942af4
Certificate serial:       0196C2A70610872DEA788116A7B8DF0E8C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
Manifest number:          14C7
Signing time:             Mon 12 May 2025 04:00:47 +0000
Manifest this update:     Mon 12 May 2025 04:00:47 +0000
Manifest next update:     Tue 13 May 2025 04:00:47 +0000
Files and hashes:         1: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl (hash: AB2/J0m7R+f9jFwLP0yC3TCcom4dWHFh/7FxOeoy1Rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a7:06:10:87:2d:ea:78:81:16:a7:b8:df:0e:8c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1497b3247767d349991e996cab8af7d49942af4
        Validity
            Not Before: May 12 04:00:47 2025 GMT
            Not After : May 13 04:00:47 2025 GMT
        Subject: CN=40c31bc8007eb027547ac1e8bafe967a7ad67927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:55:eb:af:20:7e:f4:06:ce:b5:b2:ab:1c:
                    8d:da:5b:f3:43:1b:42:c2:b6:3c:b4:2a:80:a9:fc:
                    05:ed:32:db:53:f2:bc:5b:dd:3c:2d:6f:b7:98:69:
                    e8:d7:5a:b8:cb:01:9c:c1:36:40:16:5c:a9:41:ea:
                    d5:68:2c:41:59:35:ad:d9:b6:02:d6:0b:54:4f:95:
                    6f:a3:32:e7:08:55:fb:cb:4f:bb:5e:c8:a2:46:77:
                    7f:72:e3:92:ab:ab:8f:29:a2:71:dd:1c:c2:c2:95:
                    52:2b:bd:59:48:4b:cb:87:88:1a:4f:fa:df:d1:4f:
                    fd:8f:05:52:87:78:bf:2d:6f:9d:b0:c5:13:d1:32:
                    ed:9d:04:1d:eb:02:46:79:eb:4d:b0:da:1d:60:93:
                    3e:49:58:9c:1c:3b:62:69:98:e9:44:c1:1c:dc:f0:
                    a1:4c:dd:ab:d5:93:9c:48:79:d9:88:14:7b:d1:5b:
                    f6:f7:c3:8c:4a:94:a3:46:d0:43:ac:a8:f0:4c:8e:
                    19:ae:a2:25:bb:22:a6:91:c2:b8:94:e2:48:d1:8b:
                    3c:d4:96:38:42:a4:82:22:15:80:03:4d:a4:e7:48:
                    cf:ad:ca:52:fd:52:4d:60:de:d7:6c:ff:01:99:f4:
                    0f:75:11:3c:48:d8:15:31:35:06:0c:4b:59:bf:17:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:1B:C8:00:7E:B0:27:54:7A:C1:E8:BA:FE:96:7A:7A:D6:79:27
            X509v3 Authority Key Identifier:
                keyid:D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:1b:bd:e7:73:08:49:e2:bf:42:65:a2:27:53:3c:c7:db:
         6d:a8:e4:bc:6d:2b:40:0d:91:38:0f:07:8c:15:49:3c:4c:7d:
         4b:5b:fa:c1:14:78:a7:10:bc:49:87:c5:4b:0f:4b:a4:69:33:
         38:c6:e0:6a:de:3b:69:ec:1f:bc:d8:17:c7:4b:23:db:91:9d:
         9c:ba:49:21:24:13:3a:9d:d1:a0:d7:96:88:4e:eb:36:cb:16:
         ab:00:bc:9a:f8:2b:05:d0:23:5b:15:11:09:bb:9f:1c:6a:5d:
         28:74:03:ba:27:11:71:e6:8c:16:ef:dd:19:72:cd:76:49:93:
         f9:bb:a5:bc:b6:27:01:a3:55:76:4f:ca:7a:bc:02:38:7b:1d:
         f8:88:24:bd:0a:45:73:1d:f8:d5:5b:20:61:b8:f5:33:fc:d6:
         53:39:16:8f:6c:34:ae:37:5c:e0:f1:5e:da:39:51:66:8f:eb:
         c4:b2:7d:93:29:ef:cd:a0:66:f3:36:ca:c6:7b:9d:d2:97:a2:
         29:1a:2b:71:be:63:f6:4e:35:e2:fe:fd:11:43:b5:5a:f4:0d:
         1b:cd:7e:b9:66:ce:f4:69:fc:5c:2d:ba:d7:68:fd:26:b8:dd:
         8b:78:6d:f5:99:8b:f8:17:8b:07:39:2c:67:10:7b:f5:3b:17:
         ba:8e:bf:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpwYQhy3qeIEWp7jfDoxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNDk3YjMyNDc3NjdkMzQ5OTkxZTk5NmNhYjhhZjdkNDk5
NDJhZjQwHhcNMjUwNTEyMDQwMDQ3WhcNMjUwNTEzMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg0MGMzMWJjODAwN2ViMDI3NTQ3YWMxZThiYWZlOTY3YTdhZDY3OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGhV668gfvQGzrWyqxyN2lvzQxtC
wrY8tCqAqfwF7TLbU/K8W908LW+3mGno11q4ywGcwTZAFlypQerVaCxBWTWt2bYC
1gtUT5VvozLnCFX7y0+7XsiiRnd/cuOSq6uPKaJx3RzCwpVSK71ZSEvLh4gaT/rf
0U/9jwVSh3i/LW+dsMUT0TLtnQQd6wJGeetNsNodYJM+SVicHDtiaZjpRMEc3PCh
TN2r1ZOcSHnZiBR70Vv298OMSpSjRtBDrKjwTI4ZrqIluyKmkcK4lOJI0Ys81JY4
QqSCIhWAA02k50jPrcpS/VJNYN7XbP8BmfQPdRE8SNgVMTUGDEtZvxfyowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDDG8gAfrAnVHrB6Lr+lnp61nknMB8GA1UdIwQY
MBaAFNFJezJHdn00mZHplsq4r31JlCr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFVsN01rZDJmVFNaa2VtV3lyaXZmVW1VS3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YTY3NDQtMzlhMi00NDU3LWI4NDUt
ZDAyZWIyNzM3M2U2LzEvMFVsN01rZDJmVFNaa2VtV3lyaXZmVW1VS3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YTY3NDQtMzlhMi00NDU3LWI4NDUtZDAyZWIyNzM3M2U2
LzEvMFVsN01rZDJmVFNaa2VtV3lyaXZmVW1VS3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnYbvedz
CEniv0JloidTPMfbbajkvG0rQA2ROA8HjBVJPEx9S1v6wRR4pxC8SYfFSw9LpGkz
OMbgat47aewfvNgXx0sj25GdnLpJISQTOp3RoNeWiE7rNssWqwC8mvgrBdAjWxUR
CbufHGpdKHQDuicRceaMFu/dGXLNdkmT+bulvLYnAaNVdk/KerwCOHsd+IgkvQpF
cx341VsgYbj1M/zWUzkWj2w0rjdc4PFe2jlRZo/rxLJ9kynvzaBm8zbKxnud0pei
KRorcb5j9k414v79EUO1WvQNG81+uWbO9Gn8XC2612j9Jrjdi3ht9ZmL+BeLBzks
ZxB79TsXuo6/9Q==
-----END CERTIFICATE-----
Generated at Mon May 12 11:27:34 2025 by rpki-client