Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File:                     ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier:          2seRc17cYuR+IDP6OZTFG+AhfgBOBzpjGf7HNGi1xXg=
Subject key identifier:   CF:26:49:0A:EB:B8:EB:7D:15:7F:F6:3C:78:1D:E0:E8:AD:EA:AB:92
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer:       /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial:       01969E9AA39ACD9A5C815CC5036F74663FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number:          0D21
Signing time:             Mon 05 May 2025 04:00:56 +0000
Manifest this update:     Mon 05 May 2025 04:00:56 +0000
Manifest next update:     Tue 06 May 2025 04:00:56 +0000
Files and hashes:         1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: IWwfADlk9pRszUeUs+g85nqbWGc3zCLNU8iQu8g1sFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:a3:9a:cd:9a:5c:81:5c:c5:03:6f:74:66:3f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
        Validity
            Not Before: May  5 04:00:56 2025 GMT
            Not After : May  6 04:00:56 2025 GMT
        Subject: CN=cf26490aebb8eb7d157ff63c781de0e8adeaab92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:35:50:f2:de:9b:a1:de:b5:2a:f2:a7:32:
                    8d:48:1d:25:d5:3d:14:fa:47:d4:38:b4:c2:bb:8a:
                    50:b3:39:a1:c9:e1:1d:67:25:b1:bb:62:2b:f9:82:
                    a8:b3:72:03:f5:a3:80:b9:8a:c6:6d:a3:40:ac:f4:
                    75:ee:9f:70:3e:35:42:98:74:ac:d3:24:be:5b:43:
                    86:39:cf:3a:82:98:00:21:e9:d5:54:a5:64:bd:a8:
                    67:ec:2f:bc:b4:1f:e9:57:97:37:d9:83:46:65:d0:
                    4e:84:5e:bf:12:03:e3:7e:84:e0:6a:ba:3c:4f:bf:
                    d2:02:c4:62:7a:4f:60:cf:d1:d9:68:68:9f:a9:f9:
                    8b:98:ab:d2:d3:fd:a0:1c:39:74:2c:40:4d:62:58:
                    cc:1d:3a:96:9f:b0:9c:03:0a:59:26:69:5c:4b:0c:
                    fd:14:a1:c2:5c:69:36:fc:49:95:df:d5:0d:f6:dc:
                    e8:df:54:99:92:94:a6:d5:1b:e8:91:72:c7:c2:a9:
                    05:75:43:9b:4a:50:83:74:aa:26:af:54:f3:bd:3d:
                    62:36:43:be:35:8b:72:0e:57:32:55:21:41:fa:cf:
                    13:6e:c0:b8:7a:1a:67:69:13:03:0b:a8:8c:8f:8e:
                    b9:25:5e:06:ab:ea:7c:0e:3f:42:7a:f5:f3:c2:b8:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:26:49:0A:EB:B8:EB:7D:15:7F:F6:3C:78:1D:E0:E8:AD:EA:AB:92
            X509v3 Authority Key Identifier:
                keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a2:10:d9:ab:5c:f2:57:28:64:5c:01:ca:b2:7c:a7:d7:50:
         d1:78:e9:20:32:a1:f0:81:39:dc:b4:ec:10:73:13:4b:65:81:
         36:d3:44:b7:a8:97:95:c4:8b:ac:5e:85:92:69:08:cd:f9:17:
         ad:fe:2a:b9:0b:75:78:fe:3d:4e:a2:54:ef:f0:c3:5d:19:47:
         af:df:f7:41:ab:42:66:15:46:3c:3e:93:7f:88:2e:39:1d:a0:
         74:76:62:9d:38:1a:eb:1b:9d:bf:1b:9a:ec:7c:23:13:ee:f8:
         f2:f1:ab:c0:23:7c:6c:4f:3b:ac:be:26:da:1e:85:83:1e:7f:
         63:e9:6f:16:46:91:62:c9:4a:a2:e7:7e:17:88:5c:76:6c:d2:
         59:d4:db:90:8d:5a:2e:92:d8:94:dd:3f:70:6f:a5:b4:7c:6c:
         a7:ec:2c:ef:4a:48:9f:00:76:00:15:ba:ad:08:4c:c2:1b:a4:
         cc:a4:4d:38:ab:99:ed:d4:47:fc:e6:48:ff:3a:b7:31:d0:12:
         fe:c0:e5:1d:38:e7:c4:5d:45:90:25:a7:47:0f:59:0f:a3:ca:
         20:48:0f:30:1c:98:f2:1a:14:68:e1:49:29:86:43:cd:7a:11:
         14:fa:62:bb:ad:9b:81:91:fc:eb:51:cd:32:f4:4d:da:0a:32:
         2c:ad:7f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemqOazZpcgVzFA290Zj+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1
YzY0NWMwHhcNMjUwNTA1MDQwMDU2WhcNMjUwNTA2MDQwMDU2WjAzMTEwLwYDVQQD
EyhjZjI2NDkwYWViYjhlYjdkMTU3ZmY2M2M3ODFkZTBlOGFkZWFhYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TU1UPLem6HetSrypzKNSB0l1T0U
+kfUOLTCu4pQszmhyeEdZyWxu2Ir+YKos3ID9aOAuYrGbaNArPR17p9wPjVCmHSs
0yS+W0OGOc86gpgAIenVVKVkvahn7C+8tB/pV5c32YNGZdBOhF6/EgPjfoTgaro8
T7/SAsRiek9gz9HZaGifqfmLmKvS0/2gHDl0LEBNYljMHTqWn7CcAwpZJmlcSwz9
FKHCXGk2/EmV39UN9tzo31SZkpSm1RvokXLHwqkFdUObSlCDdKomr1TzvT1iNkO+
NYtyDlcyVSFB+s8TbsC4ehpnaRMDC6iMj465JV4Gq+p8Dj9CevXzwrgxBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8mSQrruOt9FX/2PHgd4Oit6quSMB8GA1UdIwQY
MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt
NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5
LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6IQ2atc
8lcoZFwByrJ8p9dQ0XjpIDKh8IE53LTsEHMTS2WBNtNEt6iXlcSLrF6FkmkIzfkX
rf4quQt1eP49TqJU7/DDXRlHr9/3QatCZhVGPD6Tf4guOR2gdHZinTga6xudvxua
7HwjE+748vGrwCN8bE87rL4m2h6Fgx5/Y+lvFkaRYslKoud+F4hcdmzSWdTbkI1a
LpLYlN0/cG+ltHxsp+ws70pInwB2ABW6rQhMwhukzKRNOKuZ7dRH/OZI/zq3MdAS
/sDlHTjnxF1FkCWnRw9ZD6PKIEgPMByY8hoUaOFJKYZDzXoRFPpiu62bgZH861HN
MvRN2goyLK1/NA==
-----END CERTIFICATE-----
Generated at Mon May 5 05:55:59 2025 by rpki-client