Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft
File:                     biMhBwGL_QMoH3lexopxGcWA7CU.mft (raw, json)
Hash identifier:          S4W3AK1KyTUMer8MQ+fV82NCLjbk2eVrrPtrm3YeWS8=
Subject key identifier:   13:AB:C0:54:58:79:9A:8E:3D:5B:67:EF:E7:9D:75:04:AE:72:48:87
Authority key identifier: 6E:23:21:07:01:8B:FD:03:28:1F:79:5E:C6:8A:71:19:C5:80:EC:25
Certificate issuer:       /CN=6e232107018bfd03281f795ec68a7119c580ec25
Certificate serial:       0196A54149B742CA4FE6CAACD64799D6F466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biMhBwGL_QMoH3lexopxGcWA7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft
Manifest number:          1524
Signing time:             Tue 06 May 2025 11:00:41 +0000
Manifest this update:     Tue 06 May 2025 11:00:41 +0000
Manifest next update:     Wed 07 May 2025 11:00:41 +0000
Files and hashes:         1: biMhBwGL_QMoH3lexopxGcWA7CU.crl (hash: m2UxNm75KFSG0rgn2bDN76nOG3iCWP9LhZJuzWEMP+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biMhBwGL_QMoH3lexopxGcWA7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:49:b7:42:ca:4f:e6:ca:ac:d6:47:99:d6:f4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e232107018bfd03281f795ec68a7119c580ec25
        Validity
            Not Before: May  6 11:00:41 2025 GMT
            Not After : May  7 11:00:41 2025 GMT
        Subject: CN=13abc05458799a8e3d5b67efe79d7504ae724887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:6b:28:bd:fc:3c:26:ec:8e:6e:c9:92:6e:
                    39:f0:29:dd:ba:ec:31:15:81:b9:96:68:ca:ba:a2:
                    98:5e:b7:64:bf:6a:e7:81:ee:63:db:92:c9:86:74:
                    71:d4:35:e0:d9:69:2c:58:57:01:3b:c4:34:96:eb:
                    1f:d0:bb:8e:12:6b:ad:6f:ae:9a:bf:4c:7c:2f:fc:
                    7f:5a:d7:79:66:0b:b9:b1:6a:3e:17:13:cd:90:6a:
                    5d:49:1e:91:b1:26:98:cc:f1:16:4f:85:4f:58:5c:
                    ba:c4:cc:24:0e:1d:d3:5b:55:d4:88:91:b6:9a:0b:
                    8c:7a:ea:de:b9:e0:ec:c2:cd:96:f2:15:69:3d:50:
                    be:1d:dc:e3:9e:8f:58:f9:80:14:16:4a:91:6f:8b:
                    17:b1:81:0c:09:07:34:8d:ba:ec:67:96:71:d9:c4:
                    fc:13:21:44:52:99:78:8d:70:aa:a6:0b:da:9a:a8:
                    c6:8d:62:ce:7a:07:f7:9b:17:c2:53:6a:53:f3:f0:
                    75:13:76:b7:96:e5:71:10:d6:a3:6e:ff:89:d5:e1:
                    46:e2:7a:b5:f2:eb:a6:06:11:7c:ac:de:34:9b:4f:
                    b8:3f:cc:72:2e:6a:6a:d8:7c:15:f5:3e:40:72:9b:
                    d1:ea:a6:ed:b7:ac:ef:bd:73:dc:c4:7f:76:5f:3f:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AB:C0:54:58:79:9A:8E:3D:5B:67:EF:E7:9D:75:04:AE:72:48:87
            X509v3 Authority Key Identifier:
                keyid:6E:23:21:07:01:8B:FD:03:28:1F:79:5E:C6:8A:71:19:C5:80:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biMhBwGL_QMoH3lexopxGcWA7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:00:dc:c9:7d:05:8a:85:f4:48:1c:9a:05:87:17:8a:a0:
         bc:52:32:05:10:3a:0d:e5:f4:ee:2f:b6:d0:8e:9c:54:bb:79:
         5e:58:c4:f2:1d:0b:8e:6f:94:31:77:68:58:83:79:85:a3:d1:
         c8:9d:b6:e5:b0:03:64:96:57:fd:60:24:e8:ba:e7:d4:49:18:
         8d:9d:29:69:96:40:e6:1d:76:47:e5:17:0c:ff:34:c2:0b:4d:
         11:bc:12:b8:97:bf:77:98:8d:a5:a4:5b:e6:d9:55:11:8d:d8:
         d5:29:9f:b1:be:41:3e:41:0d:35:bd:d1:50:d2:12:60:d1:4b:
         c6:d4:6f:3a:65:4b:41:0b:3c:06:11:f6:34:6a:1f:8b:e7:80:
         b9:40:6a:b5:ee:2d:5f:24:88:35:e2:fa:cf:02:1c:dd:30:7a:
         bd:d2:a0:4f:61:3c:42:4b:d9:83:c9:25:1c:ae:a6:4a:46:04:
         8f:72:69:9e:b8:fa:80:3e:45:f5:cb:06:fc:1c:45:b5:48:e3:
         21:a2:82:94:e6:7f:bd:33:1d:9f:e4:4e:d0:a2:19:0a:da:a2:
         30:37:6c:e8:de:1c:05:4d:74:45:89:28:22:a3:28:2f:fc:3f:
         28:07:39:33:b8:0c:1e:9c:a1:d9:ff:a6:d5:fc:ff:7e:52:c0:
         c4:fc:0c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalQUm3QspP5sqs1keZ1vRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMjMyMTA3MDE4YmZkMDMyODFmNzk1ZWM2OGE3MTE5YzU4
MGVjMjUwHhcNMjUwNTA2MTEwMDQxWhcNMjUwNTA3MTEwMDQxWjAzMTEwLwYDVQQD
EygxM2FiYzA1NDU4Nzk5YThlM2Q1YjY3ZWZlNzlkNzUwNGFlNzI0ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcJrKL38PCbsjm7Jkm458Cnduuwx
FYG5lmjKuqKYXrdkv2rnge5j25LJhnRx1DXg2WksWFcBO8Q0lusf0LuOEmutb66a
v0x8L/x/Wtd5Zgu5sWo+FxPNkGpdSR6RsSaYzPEWT4VPWFy6xMwkDh3TW1XUiJG2
mguMeureueDsws2W8hVpPVC+Hdzjno9Y+YAUFkqRb4sXsYEMCQc0jbrsZ5Zx2cT8
EyFEUpl4jXCqpgvamqjGjWLOegf3mxfCU2pT8/B1E3a3luVxENajbv+J1eFG4nq1
8uumBhF8rN40m0+4P8xyLmpq2HwV9T5AcpvR6qbtt6zvvXPcxH92Xz+Z9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOrwFRYeZqOPVtn7+eddQSuckiHMB8GA1UdIwQY
MBaAFG4jIQcBi/0DKB95XsaKcRnFgOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmlNaEJ3R0xfUU1vSDNsZXhvcHhHY1dBN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lNDc1M2MtNjU4Yi00ZDdjLThiM2Mt
YjEzODI5YTk4YzU3LzEvYmlNaEJ3R0xfUU1vSDNsZXhvcHhHY1dBN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9lNDc1M2MtNjU4Yi00ZDdjLThiM2MtYjEzODI5YTk4YzU3
LzEvYmlNaEJ3R0xfUU1vSDNsZXhvcHhHY1dBN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT4A3Ml9
BYqF9EgcmgWHF4qgvFIyBRA6DeX07i+20I6cVLt5XljE8h0Ljm+UMXdoWIN5haPR
yJ225bADZJZX/WAk6Lrn1EkYjZ0paZZA5h12R+UXDP80wgtNEbwSuJe/d5iNpaRb
5tlVEY3Y1Smfsb5BPkENNb3RUNISYNFLxtRvOmVLQQs8BhH2NGofi+eAuUBqte4t
XySINeL6zwIc3TB6vdKgT2E8QkvZg8klHK6mSkYEj3Jpnrj6gD5F9csG/BxFtUjj
IaKClOZ/vTMdn+RO0KIZCtqiMDds6N4cBU10RYkoIqMoL/w/KAc5M7gMHpyh2f+m
1fz/flLAxPwMcw==
-----END CERTIFICATE-----
Generated at Tue May 6 17:19:03 2025 by rpki-client