Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File:                     bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier:          Wit26JpGM9QsaDGJCyL2d4Rw7Iw5TZZXbOEShB3ttDw=
Subject key identifier:   5D:46:D3:E8:BA:76:10:67:EA:81:3A:FF:57:B9:E3:CB:FF:9D:44:F0
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer:       /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial:       0196DC2FA15DACD67B25B341F76E71939D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number:          1543
Signing time:             Sat 17 May 2025 03:00:31 +0000
Manifest this update:     Sat 17 May 2025 03:00:31 +0000
Manifest next update:     Sun 18 May 2025 03:00:31 +0000
Files and hashes:         1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: JV+Guur73AV1oMWXbI8a7+6iUg6NSBP4Q8VxBbDOAzc=)
                          2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dc:2f:a1:5d:ac:d6:7b:25:b3:41:f7:6e:71:93:9d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
        Validity
            Not Before: May 17 03:00:31 2025 GMT
            Not After : May 18 03:00:31 2025 GMT
        Subject: CN=5d46d3e8ba761067ea813aff57b9e3cbff9d44f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:0f:25:0d:91:4c:9e:4e:26:07:a7:12:3b:
                    a6:dd:fe:09:91:a6:47:78:ae:a8:74:64:b7:e1:b2:
                    58:b9:fc:a2:21:28:ab:97:1f:fa:3e:e5:2b:16:c6:
                    83:d7:e5:db:86:92:9c:20:6c:4f:2e:94:94:10:08:
                    ee:f2:0f:ce:02:ce:df:1d:2b:3b:40:26:02:f4:7e:
                    60:36:46:39:57:f6:49:a0:5d:38:3f:3f:22:92:c5:
                    3d:f3:fb:96:94:de:1a:88:f8:45:54:41:bf:f6:c1:
                    a7:d3:9c:50:88:40:3c:dd:bf:11:94:68:dc:bf:3b:
                    e5:e5:2c:ee:6c:3f:38:5e:5a:24:c9:48:c5:52:0c:
                    96:44:e1:9f:18:0f:93:84:a6:1b:8b:64:f3:e3:40:
                    57:a8:f3:9c:8b:d8:79:45:40:d2:e5:61:0d:a7:a7:
                    b5:f1:9f:76:24:e4:bd:18:f7:c6:06:42:12:c1:37:
                    0e:9f:5a:2f:b5:9f:7f:02:16:72:fd:79:c4:62:2a:
                    1c:37:9d:e2:1f:9d:5f:72:69:41:b7:4d:39:df:de:
                    42:1c:a6:b5:5a:45:96:72:b4:21:d0:f6:63:e4:eb:
                    71:e4:0a:cd:92:57:90:1d:d6:40:af:a3:43:13:bb:
                    2b:9a:80:e9:ad:96:27:01:1b:01:3d:21:df:0c:75:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:46:D3:E8:BA:76:10:67:EA:81:3A:FF:57:B9:E3:CB:FF:9D:44:F0
            X509v3 Authority Key Identifier:
                keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b6:a3:fd:23:d0:b6:01:8a:ce:5f:6b:00:45:77:54:82:9a:
         87:c7:74:cd:85:78:3c:21:1e:1f:a9:a8:39:cb:af:6a:14:cb:
         0c:86:cf:1e:d5:40:cd:1b:1c:92:7d:f7:1b:ab:e5:03:f2:0b:
         f3:cf:bd:2c:70:fc:98:f4:b5:af:df:f6:f6:51:e5:65:51:fc:
         91:61:d7:14:a8:69:73:e8:95:77:db:66:83:40:45:1c:1c:49:
         b1:77:f2:07:a5:ba:5f:d0:13:32:83:67:13:ef:42:48:9c:87:
         ff:9d:f9:09:82:24:2e:5a:89:48:44:3d:d2:8c:f0:92:85:95:
         b6:86:dc:2d:8d:ff:45:5d:5f:67:0b:c6:c2:14:e5:94:96:e9:
         21:61:3d:75:1d:b7:89:4f:f6:29:b7:9a:6d:9e:50:b8:e7:0c:
         25:f0:83:a4:c1:06:a6:0c:ec:24:10:a1:3c:50:4b:12:88:c4:
         5a:49:d8:a8:4b:93:71:53:79:01:d5:83:aa:6b:c0:c9:22:ef:
         7c:65:34:df:9b:2d:56:7b:68:92:4f:7d:d4:29:32:28:cb:fb:
         3c:7f:31:0c:d0:e1:2f:ed:04:c9:20:1b:de:ed:69:7d:df:0a:
         23:c0:3d:01:9e:a6:5a:fa:a9:b4:8d:35:d4:2e:c2:7a:6b:89:
         77:54:cc:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbcL6FdrNZ7JbNB925xk52MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2VjOTcyZjk3NjBiODU1ZjFkNDM5MGJjMzc1YjNmYTNk
NDExYjYwHhcNMjUwNTE3MDMwMDMxWhcNMjUwNTE4MDMwMDMxWjAzMTEwLwYDVQQD
Eyg1ZDQ2ZDNlOGJhNzYxMDY3ZWE4MTNhZmY1N2I5ZTNjYmZmOWQ0NGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPgPJQ2RTJ5OJgenEjum3f4JkaZH
eK6odGS34bJYufyiISirlx/6PuUrFsaD1+XbhpKcIGxPLpSUEAju8g/OAs7fHSs7
QCYC9H5gNkY5V/ZJoF04Pz8iksU98/uWlN4aiPhFVEG/9sGn05xQiEA83b8RlGjc
vzvl5SzubD84XlokyUjFUgyWROGfGA+ThKYbi2Tz40BXqPOci9h5RUDS5WENp6e1
8Z92JOS9GPfGBkISwTcOn1ovtZ9/AhZy/XnEYiocN53iH51fcmlBt005395CHKa1
WkWWcrQh0PZj5Otx5ArNkleQHdZAr6NDE7srmoDprZYnARsBPSHfDHU4JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1G0+i6dhBn6oE6/1e548v/nUTwMB8GA1UdIwQY
MBaAFG4+yXL5dguFXx1DkLw3Wz+j1BG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAt
MTQ1MTJlN2U1OWVmLzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAtMTQ1MTJlN2U1OWVm
LzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbaj/SPQ
tgGKzl9rAEV3VIKah8d0zYV4PCEeH6moOcuvahTLDIbPHtVAzRsckn33G6vlA/IL
88+9LHD8mPS1r9/29lHlZVH8kWHXFKhpc+iVd9tmg0BFHBxJsXfyB6W6X9ATMoNn
E+9CSJyH/535CYIkLlqJSEQ90ozwkoWVtobcLY3/RV1fZwvGwhTllJbpIWE9dR23
iU/2KbeabZ5QuOcMJfCDpMEGpgzsJBChPFBLEojEWknYqEuTcVN5AdWDqmvAySLv
fGU035stVntokk991CkyKMv7PH8xDNDhL+0EySAb3u1pfd8KI8A9AZ6mWvqptI01
1C7CemuJd1TM2w==
-----END CERTIFICATE-----
Generated at Sat May 17 08:31:15 2025 by rpki-client