Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File:                     c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier:          lKZGJafukydgyj3TBOoi7TuT9MLVrMf7aECFooxwd3I=
Subject key identifier:   EB:FD:1E:E7:5F:8A:7E:BE:9F:F4:BF:7B:18:F4:5B:E9:17:24:77:D1
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer:       /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial:       0196A72F528103AFF1AA62DAE0A9D08059AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number:          09DD
Signing time:             Tue 06 May 2025 20:00:18 +0000
Manifest this update:     Tue 06 May 2025 20:00:18 +0000
Manifest next update:     Wed 07 May 2025 20:00:18 +0000
Files and hashes:         1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: sWYDes4vA4I3Y1xfWnSeUC1zJ3ewqDgSPv9H3Cg7M6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:52:81:03:af:f1:aa:62:da:e0:a9:d0:80:59:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
        Validity
            Not Before: May  6 20:00:18 2025 GMT
            Not After : May  7 20:00:18 2025 GMT
        Subject: CN=ebfd1ee75f8a7ebe9ff4bf7b18f45be9172477d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:42:86:08:75:0c:c2:2c:a1:1f:a4:b6:66:
                    58:b9:b4:39:a6:fe:82:83:25:bd:a3:ee:9a:e0:38:
                    f0:92:fa:b4:b3:71:0b:bd:a0:41:47:0d:51:9a:ad:
                    44:cd:14:94:a9:0f:91:aa:2b:6c:13:72:4d:38:90:
                    2e:95:f3:ab:aa:24:0a:ff:2b:f1:04:1c:20:08:4d:
                    6c:34:fa:77:45:26:b4:13:70:77:b3:06:ad:f4:10:
                    c4:c7:0a:55:7f:c7:fc:e6:ac:cd:94:35:0b:97:94:
                    f6:a2:11:9c:bd:4c:cd:2b:9c:23:ea:52:8e:4b:d7:
                    8f:a3:e7:b3:3c:13:91:c1:82:ee:54:26:88:08:a1:
                    09:7a:c5:7f:c7:d7:81:d2:72:bf:ee:4e:55:f3:06:
                    b8:19:30:a9:22:f5:0d:8b:b7:78:b9:10:e7:ef:df:
                    cb:b7:5f:be:d9:dc:d2:a2:c9:3b:89:ca:24:5c:0f:
                    06:81:83:eb:b5:25:79:a7:e8:24:8c:28:f2:94:4a:
                    99:71:c9:1a:e4:cf:51:8c:cb:32:4d:67:99:78:7e:
                    18:14:8d:47:66:a7:23:d2:86:62:2d:2e:d0:4a:42:
                    52:a0:bd:b4:06:3c:f6:40:84:15:ce:a1:29:36:b9:
                    23:a1:f5:eb:ee:32:df:d0:7f:02:38:c4:26:59:7c:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:1E:E7:5F:8A:7E:BE:9F:F4:BF:7B:18:F4:5B:E9:17:24:77:D1
            X509v3 Authority Key Identifier:
                keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:15:76:bd:15:8c:80:af:bb:6b:df:e3:c3:73:6c:05:c4:c6:
         b3:52:1e:f3:5d:a4:96:e4:d9:f8:99:95:b7:38:97:84:96:7a:
         8e:20:c8:17:17:6d:f5:67:4e:21:f2:2d:0e:04:1b:b0:95:a5:
         a0:9a:33:9b:fd:42:90:c7:99:63:42:40:4a:c4:e2:ab:5b:66:
         fb:a7:5f:fd:7a:20:7d:a1:20:28:58:57:02:ef:26:4c:2d:33:
         6a:22:ae:62:51:84:4c:81:9d:ac:b0:25:95:24:2a:5d:7b:ba:
         5f:d5:de:70:15:33:6b:54:0d:84:80:55:eb:f2:a3:93:67:21:
         51:d5:ad:c0:11:88:49:72:24:fa:70:33:18:c8:60:83:be:1b:
         f9:e4:46:70:0f:4b:32:92:13:0a:90:68:e5:c4:a8:ad:bf:20:
         59:77:70:60:40:dd:fc:94:67:38:df:d3:25:f4:77:1c:47:9d:
         a3:1a:b7:e4:87:6a:03:27:f5:24:48:a5:68:8a:ed:bf:33:db:
         0c:3d:b1:34:d2:ec:4a:b4:51:d2:73:5b:69:54:65:d2:8b:e2:
         74:62:dc:ec:54:69:66:66:8f:31:7d:05:bc:61:66:7c:e7:51:
         e3:72:f7:31:1b:07:1a:72:7c:9e:2d:5b:a1:dc:d7:cf:df:8b:
         ef:6e:2e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZanL1KBA6/xqmLa4KnQgFmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTY1NWRjNjc3OWQwOTVmY2IwOGI2MWFiZWI4NmIwY2Q5
OWE3OGMwHhcNMjUwNTA2MjAwMDE4WhcNMjUwNTA3MjAwMDE4WjAzMTEwLwYDVQQD
EyhlYmZkMWVlNzVmOGE3ZWJlOWZmNGJmN2IxOGY0NWJlOTE3MjQ3N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UlChgh1DMIsoR+ktmZYubQ5pv6C
gyW9o+6a4Djwkvq0s3ELvaBBRw1Rmq1EzRSUqQ+RqitsE3JNOJAulfOrqiQK/yvx
BBwgCE1sNPp3RSa0E3B3swat9BDExwpVf8f85qzNlDULl5T2ohGcvUzNK5wj6lKO
S9ePo+ezPBORwYLuVCaICKEJesV/x9eB0nK/7k5V8wa4GTCpIvUNi7d4uRDn79/L
t1++2dzSosk7icokXA8GgYPrtSV5p+gkjCjylEqZccka5M9RjMsyTWeZeH4YFI1H
Zqcj0oZiLS7QSkJSoL20Bjz2QIQVzqEpNrkjofXr7jLf0H8COMQmWXyANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv9Hudfin6+n/S/exj0W+kXJHfRMB8GA1UdIwQY
MBaAFHNWVdxnedCV/LCLYavrhrDNmaeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2Ut
M2I4NmEzZDAwZmU5LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2UtM2I4NmEzZDAwZmU5
LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhV2vRWM
gK+7a9/jw3NsBcTGs1Ie812kluTZ+JmVtziXhJZ6jiDIFxdt9WdOIfItDgQbsJWl
oJozm/1CkMeZY0JASsTiq1tm+6df/XogfaEgKFhXAu8mTC0zaiKuYlGETIGdrLAl
lSQqXXu6X9XecBUza1QNhIBV6/Kjk2chUdWtwBGISXIk+nAzGMhgg74b+eRGcA9L
MpITCpBo5cSorb8gWXdwYEDd/JRnON/TJfR3HEedoxq35IdqAyf1JEilaIrtvzPb
DD2xNNLsSrRR0nNbaVRl0ovidGLc7FRpZmaPMX0FvGFmfOdR43L3MRsHGnJ8ni1b
odzXz9+L724uVw==
-----END CERTIFICATE-----
Generated at Wed May 7 06:40:24 2025 by rpki-client