Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File:                     j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier:          nakNLmCZwP71VeYJpw70hfXwKYO5EwGeTfn+YXJumkw=
Subject key identifier:   7B:24:C4:DD:97:A8:ED:8D:27:AF:FC:7A:09:F7:7F:BC:B3:3A:5A:53
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer:       /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial:       0196BB92A3039497EDF3B2F9CFD6983C65B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number:          0E99
Signing time:             Sat 10 May 2025 19:01:11 +0000
Manifest this update:     Sat 10 May 2025 19:01:11 +0000
Manifest next update:     Sun 11 May 2025 19:01:11 +0000
Files and hashes:         1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: v6ZF+7YgPgaIB/GvDsaJ1Nr8pTAmVSylPpHr6Q1IbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:a3:03:94:97:ed:f3:b2:f9:cf:d6:98:3c:65:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
        Validity
            Not Before: May 10 19:01:11 2025 GMT
            Not After : May 11 19:01:11 2025 GMT
        Subject: CN=7b24c4dd97a8ed8d27affc7a09f77fbcb33a5a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:25:12:a1:42:da:ea:1e:eb:ee:7f:c0:21:
                    7e:22:3d:f3:72:a6:ef:6f:05:06:74:15:2d:fb:96:
                    6f:0a:f2:e9:3e:f0:46:99:58:b8:94:e2:43:c7:68:
                    8b:8c:64:4a:30:0f:5c:b5:80:ca:aa:6e:cb:65:04:
                    28:07:73:3a:ff:fb:a8:31:51:fd:4b:7f:de:4e:80:
                    cf:97:aa:5d:2e:6e:f0:81:f7:e7:fe:25:ec:bf:18:
                    d2:49:89:9f:de:94:b4:e8:3d:a0:69:b6:19:55:6c:
                    82:4c:16:d9:3f:64:9e:ad:d9:35:22:a7:87:3f:13:
                    8d:11:c6:76:29:09:3c:ae:9f:c3:5e:ff:da:1b:1b:
                    f2:3f:03:86:3e:a8:3e:78:30:27:ef:84:6c:79:03:
                    d3:a4:ae:5f:47:14:d5:cc:9b:cb:98:4c:16:af:32:
                    5f:4e:4d:a6:4f:5b:42:f5:90:c4:b5:7a:67:e4:0b:
                    7c:35:c3:94:e3:23:68:fa:c8:da:5c:24:a8:ae:32:
                    a9:12:ed:a0:de:84:2e:1b:6e:d9:77:bd:39:75:a5:
                    b7:a4:95:07:01:87:f1:fd:0b:1f:6c:bb:fd:79:63:
                    1d:4f:ab:69:ea:3f:5a:c6:53:40:a6:72:d0:a3:e9:
                    a8:93:a8:ca:10:1b:70:57:ba:8d:95:7d:63:23:d7:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:C4:DD:97:A8:ED:8D:27:AF:FC:7A:09:F7:7F:BC:B3:3A:5A:53
            X509v3 Authority Key Identifier:
                keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:20:f2:36:72:30:54:05:68:e9:16:b4:c9:f7:7a:b7:4c:
         98:50:f8:15:bb:35:7d:e4:8c:24:98:36:99:ff:21:db:70:5d:
         ba:4e:8e:7f:05:bf:10:5b:71:2b:7c:11:b8:40:95:d2:96:39:
         be:c7:8a:65:4b:7d:a7:cf:62:e2:95:ab:cd:8c:82:04:3b:fc:
         d8:35:47:ff:98:dc:94:74:47:07:8c:ce:54:36:7b:a0:a8:3a:
         eb:13:67:99:8a:45:dc:51:c8:ac:37:45:be:db:2a:02:d8:fb:
         c9:18:d2:ed:7c:f0:8c:86:78:ff:79:59:4b:a3:da:08:25:14:
         70:9a:2b:34:24:67:97:d1:95:dc:2e:2c:24:bf:51:c1:c8:07:
         4f:35:0a:39:70:43:87:51:f0:3e:18:81:62:21:e9:8c:af:08:
         01:63:72:85:b6:13:f2:5e:ee:62:89:f6:72:31:e6:22:63:dc:
         40:8a:12:3e:09:61:91:08:f1:60:83:a6:e5:39:b8:2d:04:d4:
         25:92:e0:49:ce:f9:c0:c9:12:f6:e0:59:6b:3e:64:71:58:0a:
         73:e5:5a:ca:06:4a:ad:c6:bb:7a:74:0e:43:9f:0d:25:75:db:
         5f:f5:21:4c:8c:ed:95:5b:7b:c0:90:2d:67:d6:2a:e7:9d:26:
         e5:93:de:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kqMDlJft87L5z9aYPGWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Q0MjBiMjM0M2NkOTFlYzIzZjUwODlhODM0MmU4OWQ2
ZDkxNjUwHhcNMjUwNTEwMTkwMTExWhcNMjUwNTExMTkwMTExWjAzMTEwLwYDVQQD
Eyg3YjI0YzRkZDk3YThlZDhkMjdhZmZjN2EwOWY3N2ZiY2IzM2E1YTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dglEqFC2uoe6+5/wCF+Ij3zcqbv
bwUGdBUt+5ZvCvLpPvBGmVi4lOJDx2iLjGRKMA9ctYDKqm7LZQQoB3M6//uoMVH9
S3/eToDPl6pdLm7wgffn/iXsvxjSSYmf3pS06D2gabYZVWyCTBbZP2Serdk1IqeH
PxONEcZ2KQk8rp/DXv/aGxvyPwOGPqg+eDAn74RseQPTpK5fRxTVzJvLmEwWrzJf
Tk2mT1tC9ZDEtXpn5At8NcOU4yNo+sjaXCSorjKpEu2g3oQuG27Zd705daW3pJUH
AYfx/QsfbLv9eWMdT6tp6j9axlNApnLQo+mok6jKEBtwV7qNlX1jI9euvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHskxN2XqO2NJ6/8egn3f7yzOlpTMB8GA1UdIwQY
MBaAFI99QgsjQ82R7CP1CJqDQuidbZFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEt
YzVlMTcyMmEwYzY4LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEtYzVlMTcyMmEwYzY4
LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6Mg8jZy
MFQFaOkWtMn3erdMmFD4Fbs1feSMJJg2mf8h23Bduk6OfwW/EFtxK3wRuECV0pY5
vseKZUt9p89i4pWrzYyCBDv82DVH/5jclHRHB4zOVDZ7oKg66xNnmYpF3FHIrDdF
vtsqAtj7yRjS7XzwjIZ4/3lZS6PaCCUUcJorNCRnl9GV3C4sJL9RwcgHTzUKOXBD
h1HwPhiBYiHpjK8IAWNyhbYT8l7uYon2cjHmImPcQIoSPglhkQjxYIOm5Tm4LQTU
JZLgSc75wMkS9uBZaz5kcVgKc+VaygZKrca7enQOQ58NJXXbX/UhTIztlVt7wJAt
Z9Yq550m5ZPejA==
-----END CERTIFICATE-----
Generated at Sun May 11 02:27:39 2025 by rpki-client