Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File:                     ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier:          b7S+SLVtW4rwYGlQB1SSvkpqAAeA0xB8eRJka14Ohr4=
Subject key identifier:   6B:5B:74:39:D9:49:C3:98:AF:F9:DF:86:8D:11:EE:D3:F4:0C:C7:E5
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer:       /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial:       0196C15D2B461B2949996FB725912ECD6A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 22:00:30 +0000
Manifest this update:     Sun 11 May 2025 22:00:30 +0000
Manifest next update:     Mon 12 May 2025 22:00:30 +0000
Files and hashes:         1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: 0S8ZVi6WZVPfZMjjyL3Zn5UdKexIayfzrT6Y/vE+rGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:2b:46:1b:29:49:99:6f:b7:25:91:2e:cd:6a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
        Validity
            Not Before: May 11 22:00:30 2025 GMT
            Not After : May 12 22:00:30 2025 GMT
        Subject: CN=6b5b7439d949c398aff9df868d11eed3f40cc7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:e4:b9:34:02:ea:28:8d:6f:74:af:b0:1b:
                    f3:6b:21:65:59:e8:ec:2c:4d:41:7e:82:d5:56:42:
                    a7:dc:9b:84:63:0e:9b:29:a4:f0:08:f6:a5:ba:ce:
                    b5:91:e7:cf:c1:ba:ae:09:d0:41:33:d7:bf:8b:73:
                    27:48:81:47:7b:dc:60:6b:a4:0d:e6:fb:06:c5:2b:
                    ac:ad:17:e7:45:cc:c6:e3:ee:8b:a1:13:ff:2d:48:
                    29:9b:09:57:25:d7:0a:47:f1:b3:6c:dd:30:cb:31:
                    ee:ad:20:99:9a:7e:5f:10:96:a0:ed:8d:9f:ef:68:
                    5b:48:b3:ca:2e:a3:c0:e6:84:4c:c8:59:89:90:3b:
                    ec:c4:79:07:c1:f8:90:73:d3:46:30:46:c0:16:f6:
                    88:71:f9:9d:45:a8:93:bf:54:12:c3:27:a6:62:6d:
                    82:b1:8e:ee:77:a0:bf:35:85:fd:c8:24:eb:e3:ed:
                    cf:42:c8:89:de:48:b9:27:70:20:4a:6c:b2:4a:e1:
                    a8:8e:9b:da:4c:6d:a7:27:10:bc:33:07:69:10:1e:
                    51:9f:53:6d:9e:a7:f7:c1:ff:9c:10:37:53:0c:ea:
                    ff:05:60:55:16:16:3f:a3:52:72:b6:70:2d:60:fa:
                    c5:c8:c6:37:70:fd:11:42:4c:1a:88:6b:57:28:e6:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:74:39:D9:49:C3:98:AF:F9:DF:86:8D:11:EE:D3:F4:0C:C7:E5
            X509v3 Authority Key Identifier:
                keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:0f:a3:f0:a1:17:85:49:96:71:96:d8:c1:05:4c:95:dd:
         79:a5:a5:2b:aa:6a:03:1e:dc:30:88:8c:56:1a:af:28:20:14:
         86:79:d3:7b:a9:fa:71:87:76:3a:26:01:43:b5:52:96:17:55:
         90:ec:a2:60:a8:3a:6c:4e:b5:8d:67:e5:20:17:61:27:ac:f7:
         1c:7a:d9:7d:25:97:e7:b5:31:f6:fe:7b:f7:71:03:cb:fb:16:
         d8:34:4b:76:71:c4:1b:0e:0f:83:2e:43:21:0a:14:f5:d8:e1:
         96:eb:52:fe:83:24:33:e5:e7:02:70:b6:75:5c:1b:ca:92:25:
         fa:4a:29:a3:05:17:30:bf:78:ac:16:73:54:e4:28:10:08:d4:
         81:53:69:4c:97:57:cc:e6:50:98:aa:f5:05:68:d9:d7:8e:6c:
         c4:6e:c5:e8:d3:1b:56:a1:f9:aa:92:d4:5e:93:6b:73:3e:b1:
         3d:a7:dc:7a:90:32:58:89:f7:f3:6e:e8:65:09:96:8f:e4:ea:
         76:7b:d8:2f:6f:8f:b1:b0:e9:cd:3c:3f:8e:d7:6d:59:c4:fd:
         ac:33:27:66:e1:67:22:27:15:27:53:65:99:b4:f9:38:76:9d:
         8e:1b:1e:aa:08:48:26:f5:b1:8e:45:dc:f2:d5:16:3d:1b:33:
         72:c2:c4:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXStGGylJmW+3JZEuzWoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj
ZTA3MjcwHhcNMjUwNTExMjIwMDMwWhcNMjUwNTEyMjIwMDMwWjAzMTEwLwYDVQQD
Eyg2YjViNzQzOWQ5NDljMzk4YWZmOWRmODY4ZDExZWVkM2Y0MGNjN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIXkuTQC6iiNb3SvsBvzayFlWejs
LE1BfoLVVkKn3JuEYw6bKaTwCPalus61kefPwbquCdBBM9e/i3MnSIFHe9xga6QN
5vsGxSusrRfnRczG4+6LoRP/LUgpmwlXJdcKR/GzbN0wyzHurSCZmn5fEJag7Y2f
72hbSLPKLqPA5oRMyFmJkDvsxHkHwfiQc9NGMEbAFvaIcfmdRaiTv1QSwyemYm2C
sY7ud6C/NYX9yCTr4+3PQsiJ3ki5J3AgSmyySuGojpvaTG2nJxC8MwdpEB5Rn1Nt
nqf3wf+cEDdTDOr/BWBVFhY/o1JytnAtYPrFyMY3cP0RQkwaiGtXKOY7qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtbdDnZScOYr/nfho0R7tP0DMflMB8GA1UdIwQY
MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt
NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1
LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPAPo/Ch
F4VJlnGW2MEFTJXdeaWlK6pqAx7cMIiMVhqvKCAUhnnTe6n6cYd2OiYBQ7VSlhdV
kOyiYKg6bE61jWflIBdhJ6z3HHrZfSWX57Ux9v5793EDy/sW2DRLdnHEGw4Pgy5D
IQoU9djhlutS/oMkM+XnAnC2dVwbypIl+kopowUXML94rBZzVOQoEAjUgVNpTJdX
zOZQmKr1BWjZ145sxG7F6NMbVqH5qpLUXpNrcz6xPafcepAyWIn3827oZQmWj+Tq
dnvYL2+PsbDpzTw/jtdtWcT9rDMnZuFnIicVJ1NlmbT5OHadjhseqghIJvWxjkXc
8tUWPRszcsLE4w==
-----END CERTIFICATE-----
Generated at Mon May 12 00:05:52 2025 by rpki-client