Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File:                     Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier:          nv44b3LQaLgPWWndsJWeaDVjTGZrD+y96bhrB+iwblw=
Subject key identifier:   90:C9:D9:9B:9B:69:10:93:88:C2:F2:DF:23:45:4B:CF:F9:8C:74:55
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer:       /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial:       0196C7CCEEB8D8D4A4885EF1DB7AEB3B57A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number:          137F
Signing time:             Tue 13 May 2025 04:00:18 +0000
Manifest this update:     Tue 13 May 2025 04:00:18 +0000
Manifest next update:     Wed 14 May 2025 04:00:18 +0000
Files and hashes:         1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: 1mylL14HGjqjs87hdcNxzMWXc5Klj8JBsA8yNEEI178=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cc:ee:b8:d8:d4:a4:88:5e:f1:db:7a:eb:3b:57:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
        Validity
            Not Before: May 13 04:00:18 2025 GMT
            Not After : May 14 04:00:18 2025 GMT
        Subject: CN=90c9d99b9b69109388c2f2df23454bcff98c7455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1d:83:1d:d2:af:a9:cc:f1:b7:35:76:a7:d0:
                    af:9f:6e:ba:a3:0d:57:2c:93:73:d4:00:cf:98:97:
                    cb:56:77:f0:b3:73:41:b8:a6:6c:f4:78:9d:49:c8:
                    cc:64:c1:43:44:95:34:de:a0:73:85:16:1b:13:58:
                    61:66:46:95:6f:04:48:1f:15:9a:3a:ed:d7:f8:21:
                    5e:77:0c:c7:fa:40:56:ce:07:8c:b5:a0:8b:50:13:
                    b9:c1:8f:ee:b9:7b:75:43:ef:1c:2c:ae:3b:02:15:
                    cf:6a:5a:71:dd:d7:fd:54:d7:37:86:37:3b:69:bd:
                    55:63:8d:a5:3f:97:28:3b:87:bd:cc:a1:33:f3:ae:
                    b3:64:f5:34:50:f3:ac:79:89:b0:8d:ba:28:e1:aa:
                    69:2f:b3:f5:4f:18:6f:3a:97:c3:c6:8b:5d:52:35:
                    58:64:c4:29:72:10:d4:ac:bf:0a:20:ba:7b:0d:27:
                    30:db:ed:14:24:cb:21:d6:27:7b:71:ea:f7:d4:02:
                    d6:13:2c:36:ac:db:4f:69:fc:4a:eb:12:f0:89:d2:
                    cb:84:f3:9f:6a:2c:77:bd:a9:b7:78:3e:17:c4:f4:
                    4a:2f:f3:f6:dd:73:2c:e5:29:89:5b:6b:ae:9b:0f:
                    0b:32:27:a5:7a:03:7c:7e:64:a9:e4:5c:88:2e:6b:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C9:D9:9B:9B:69:10:93:88:C2:F2:DF:23:45:4B:CF:F9:8C:74:55
            X509v3 Authority Key Identifier:
                keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1b:0a:19:eb:ef:1c:22:c0:67:af:fd:f1:b3:b1:9c:43:35:
         3e:00:b9:b9:ef:51:d3:6a:0b:eb:22:6b:76:c5:9d:84:4e:7f:
         84:6d:ec:09:5d:3b:5a:6a:3d:00:56:fd:14:e9:50:fb:0a:e2:
         2b:9e:7b:6a:f6:8f:6b:9c:75:3a:03:58:3b:e3:91:fa:08:37:
         03:59:2d:df:70:03:99:65:2c:e8:d5:0f:67:d1:b1:89:2f:f6:
         15:8e:82:5d:4e:c3:48:a9:74:fb:25:99:8f:6b:34:c3:03:8c:
         3c:6b:cd:01:8a:31:ca:69:bc:de:f6:a0:61:1a:62:a1:a0:c1:
         87:1f:3d:84:8b:71:d4:85:89:26:7c:30:70:5b:b7:8d:b4:e6:
         f3:9d:fb:4f:93:f1:ed:09:eb:54:6e:91:12:78:79:da:39:0f:
         fa:25:1c:df:59:6f:94:cd:c2:4a:17:ec:78:52:29:49:9b:2a:
         80:df:ce:4b:9d:a4:fd:8c:f0:6d:b4:dd:e4:78:ec:e6:ee:07:
         17:a0:56:80:48:74:a7:f4:6f:18:d7:c9:c2:4b:d0:1e:10:d0:
         b1:19:96:0d:6b:e9:7e:e0:2a:b0:37:9a:1d:8e:89:e4:38:49:
         26:ae:23:f9:3d:f4:9f:fd:fb:e7:9b:16:27:78:9e:9a:99:dd:
         3f:9a:06:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHzO642NSkiF7x23rrO1elMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YjZmOTc3MmE4ZGUyYTAyYWY2MWE0ZWE2MjdkM2U1MWQ4
NGY5YmQwHhcNMjUwNTEzMDQwMDE4WhcNMjUwNTE0MDQwMDE4WjAzMTEwLwYDVQQD
Eyg5MGM5ZDk5YjliNjkxMDkzODhjMmYyZGYyMzQ1NGJjZmY5OGM3NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B2DHdKvqczxtzV2p9Cvn266ow1X
LJNz1ADPmJfLVnfws3NBuKZs9HidScjMZMFDRJU03qBzhRYbE1hhZkaVbwRIHxWa
Ou3X+CFedwzH+kBWzgeMtaCLUBO5wY/uuXt1Q+8cLK47AhXPalpx3df9VNc3hjc7
ab1VY42lP5coO4e9zKEz866zZPU0UPOseYmwjboo4appL7P1TxhvOpfDxotdUjVY
ZMQpchDUrL8KILp7DScw2+0UJMsh1id7cer31ALWEyw2rNtPafxK6xLwidLLhPOf
aix3vam3eD4XxPRKL/P23XMs5SmJW2uumw8LMielegN8fmSp5FyILmsBowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDJ2ZubaRCTiMLy3yNFS8/5jHRVMB8GA1UdIwQY
MBaAFBW2+XcqjeKgKvYaTqYn0+UdhPm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYt
ZTU3OWUyYWFmOWVhLzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYtZTU3OWUyYWFmOWVh
LzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhsKGevv
HCLAZ6/98bOxnEM1PgC5ue9R02oL6yJrdsWdhE5/hG3sCV07Wmo9AFb9FOlQ+wri
K557avaPa5x1OgNYO+OR+gg3A1kt33ADmWUs6NUPZ9GxiS/2FY6CXU7DSKl0+yWZ
j2s0wwOMPGvNAYoxymm83vagYRpioaDBhx89hItx1IWJJnwwcFu3jbTm8537T5Px
7QnrVG6REnh52jkP+iUc31lvlM3CShfseFIpSZsqgN/OS52k/YzwbbTd5Hjs5u4H
F6BWgEh0p/RvGNfJwkvQHhDQsRmWDWvpfuAqsDeaHY6J5DhJJq4j+T30n/3755sW
J3iempndP5oG4g==
-----END CERTIFICATE-----
Generated at Tue May 13 08:21:04 2025 by rpki-client