Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File:                     sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier:          EsIPDTk5jkSCsZtLrhVPO7MaYhQYh6RCcj5nS77jl6o=
Subject key identifier:   96:71:96:FF:F6:54:93:0E:A9:BC:3D:3A:A9:6D:3F:B8:3E:87:0B:A2
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer:       /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial:       0196B85A58D2A262256499CB0E0F80DD0E1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number:          0330
Signing time:             Sat 10 May 2025 04:00:50 +0000
Manifest this update:     Sat 10 May 2025 04:00:50 +0000
Manifest next update:     Sun 11 May 2025 04:00:50 +0000
Files and hashes:         1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: uBkhr03xLfQ/Y/BgDxYefgWL64DhcwYWxa/nFpdKoPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:58:d2:a2:62:25:64:99:cb:0e:0f:80:dd:0e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
        Validity
            Not Before: May 10 04:00:50 2025 GMT
            Not After : May 11 04:00:50 2025 GMT
        Subject: CN=967196fff654930ea9bc3d3aa96d3fb83e870ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:3d:87:ef:c0:11:dc:aa:d0:ef:a2:a5:cf:
                    63:c5:6e:41:39:ea:1c:87:57:0d:4b:12:89:3e:a5:
                    64:a5:de:c5:e5:40:a5:e4:c9:02:19:40:17:54:85:
                    8b:79:07:e1:ee:cb:d8:7a:8c:c1:2e:42:f9:e2:63:
                    55:c7:f0:67:15:e3:02:7c:61:78:c0:eb:da:76:e4:
                    0c:23:8c:37:c7:04:a2:87:a2:75:a8:48:d9:c2:04:
                    e0:c8:2b:07:26:e1:5a:7f:37:54:ce:50:32:de:4b:
                    4b:34:63:99:2d:1c:11:f6:e3:59:d8:fb:8f:80:b2:
                    a5:81:a6:df:ea:e4:d2:73:43:8b:eb:f5:0e:9e:12:
                    cf:eb:dc:cd:d8:4e:e2:2c:2e:be:7d:db:c8:1f:5a:
                    67:00:83:f3:db:c6:99:1c:d1:01:48:b2:ff:fd:89:
                    ef:ea:fc:7b:b0:1f:f6:e2:fe:04:69:2b:b8:b2:8a:
                    2a:3a:ae:0b:60:13:14:c3:b8:6f:fd:de:8c:cf:09:
                    f9:3d:1c:f1:da:6a:23:2e:73:73:44:8e:cc:35:3e:
                    63:b0:23:71:b8:8a:3a:0a:d6:f8:11:27:18:cf:5c:
                    2f:36:1d:fe:42:ca:7b:ab:f0:97:4d:a1:80:29:af:
                    7e:cd:e0:70:5a:28:ef:ae:cf:85:18:f7:de:5f:31:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:71:96:FF:F6:54:93:0E:A9:BC:3D:3A:A9:6D:3F:B8:3E:87:0B:A2
            X509v3 Authority Key Identifier:
                keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:06:82:cd:63:f3:0e:f9:ad:55:ac:1b:ae:cb:67:ba:d3:32:
         a1:63:2f:36:74:b1:9c:20:bf:e4:8e:86:93:f1:83:4a:ac:4b:
         4d:a2:57:28:2a:2d:5e:d5:cd:1c:3b:b5:ca:b0:d3:49:26:c1:
         a7:f0:65:c3:5c:c8:be:1b:1b:6b:4b:9b:b2:2f:16:48:c8:36:
         2c:15:40:43:09:99:2a:cf:47:fb:43:a1:bf:64:38:b4:6c:40:
         33:aa:b1:b4:3b:90:9e:c1:90:55:66:c1:02:48:dd:c1:7b:6a:
         ae:a1:fa:ea:98:b2:87:3c:35:c8:04:cf:b2:69:2f:a4:4b:6d:
         3e:79:66:6c:34:20:0c:67:5c:b4:93:bf:59:7b:ae:62:c1:2b:
         d7:ca:66:cf:7a:5e:2c:99:59:8a:2d:65:15:ff:84:23:6c:13:
         7b:2d:5d:82:be:7f:42:b2:91:b3:21:11:79:27:da:c0:36:35:
         57:f4:47:0b:40:4c:79:f6:92:29:95:8e:18:41:48:dd:5f:a6:
         e1:dd:ce:e4:4f:3a:bb:af:ef:42:70:19:cc:8c:aa:38:55:5d:
         c7:95:74:b0:c3:59:8f:60:e4:f6:db:4b:c6:2f:83:29:50:98:
         b6:c2:6a:02:fb:83:a0:27:95:4e:f4:61:20:47:16:b6:bd:a1:
         3d:66:11:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WljSomIlZJnLDg+A3Q4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhZTBjZjI3NTI2MjQzYjIzNzZmZWQ5MGMxNjBkZDcz
ODIxNjAwHhcNMjUwNTEwMDQwMDUwWhcNMjUwNTExMDQwMDUwWjAzMTEwLwYDVQQD
Eyg5NjcxOTZmZmY2NTQ5MzBlYTliYzNkM2FhOTZkM2ZiODNlODcwYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyI9h+/AEdyq0O+ipc9jxW5BOeoc
h1cNSxKJPqVkpd7F5UCl5MkCGUAXVIWLeQfh7svYeozBLkL54mNVx/BnFeMCfGF4
wOvaduQMI4w3xwSih6J1qEjZwgTgyCsHJuFafzdUzlAy3ktLNGOZLRwR9uNZ2PuP
gLKlgabf6uTSc0OL6/UOnhLP69zN2E7iLC6+fdvIH1pnAIPz28aZHNEBSLL//Ynv
6vx7sB/24v4EaSu4sooqOq4LYBMUw7hv/d6Mzwn5PRzx2mojLnNzRI7MNT5jsCNx
uIo6Ctb4EScYz1wvNh3+Qsp7q/CXTaGAKa9+zeBwWijvrs+FGPfeXzGXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZxlv/2VJMOqbw9OqltP7g+hwuiMB8GA1UdIwQY
MBaAFLC1rgzydSYkOyN2/tkMFg3XOCFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXdURQSjFKaVE3STNiLTJRd1dEZGM0SVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi81MTAwMGQtNzgwMS00YWViLThkNTQt
NzdmYjc5ZWJlNWI0LzEvc0xXdURQSjFKaVE3STNiLTJRd1dEZGM0SVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi81MTAwMGQtNzgwMS00YWViLThkNTQtNzdmYjc5ZWJlNWI0
LzEvc0xXdURQSjFKaVE3STNiLTJRd1dEZGM0SVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAaCzWPz
DvmtVawbrstnutMyoWMvNnSxnCC/5I6Gk/GDSqxLTaJXKCotXtXNHDu1yrDTSSbB
p/Blw1zIvhsba0ubsi8WSMg2LBVAQwmZKs9H+0Ohv2Q4tGxAM6qxtDuQnsGQVWbB
AkjdwXtqrqH66piyhzw1yATPsmkvpEttPnlmbDQgDGdctJO/WXuuYsEr18pmz3pe
LJlZii1lFf+EI2wTey1dgr5/QrKRsyEReSfawDY1V/RHC0BMefaSKZWOGEFI3V+m
4d3O5E86u6/vQnAZzIyqOFVdx5V0sMNZj2Dk9ttLxi+DKVCYtsJqAvuDoCeVTvRh
IEcWtr2hPWYRVg==
-----END CERTIFICATE-----
Generated at Sat May 10 13:30:40 2025 by rpki-client