Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File:                     _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier:          ntYiAQt+XSIzq+dtLcpJo5u/+b6ehbkEenk/QX+JgV0=
Subject key identifier:   EF:44:EE:99:14:B7:28:03:FD:11:1B:3A:05:AC:F1:7B:D1:2F:C6:8B
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer:       /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial:       0196D0D0AB0231D3EBD8A3A05936A824E75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 22:00:58 +0000
Manifest this update:     Wed 14 May 2025 22:00:58 +0000
Manifest next update:     Thu 15 May 2025 22:00:58 +0000
Files and hashes:         1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: APW1HEhiuGPnvsdLX1dKko3V66dRd3e/GhjaQ2aveq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:d0:ab:02:31:d3:eb:d8:a3:a0:59:36:a8:24:e7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
        Validity
            Not Before: May 14 22:00:58 2025 GMT
            Not After : May 15 22:00:58 2025 GMT
        Subject: CN=ef44ee9914b72803fd111b3a05acf17bd12fc68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:b4:c5:23:b9:82:98:16:c9:c2:05:18:ae:
                    25:51:00:ab:ea:08:a0:9b:22:16:c2:51:8d:67:75:
                    94:06:c0:e8:24:89:15:d9:25:4d:8f:e3:c8:d9:e3:
                    55:5c:22:d1:77:49:e1:ec:30:2c:77:e4:cb:e7:5e:
                    d2:6e:f8:34:63:3d:b2:bf:36:59:94:7e:90:85:96:
                    b8:45:33:9d:f1:f9:65:4c:ad:5d:1e:93:d0:d5:3a:
                    87:e0:0a:0e:84:11:d1:19:0d:0d:cc:d4:78:1f:1e:
                    ac:95:ac:0f:1c:44:dc:d3:65:cb:07:20:fc:65:1f:
                    4a:e5:49:06:b4:89:78:6f:ac:4d:ea:03:b3:10:cc:
                    42:04:85:f9:e4:da:c3:a9:60:42:0b:57:24:4b:66:
                    c9:ad:09:ef:77:45:38:47:c9:62:35:71:70:4c:49:
                    33:d6:f2:c0:55:b6:53:e6:b2:5a:f9:c6:a7:c2:97:
                    12:61:0f:6d:88:55:ff:28:75:ef:be:83:78:af:36:
                    d1:46:7c:f5:ee:cb:b1:0d:a9:8a:d6:44:ba:19:3e:
                    94:22:11:59:34:2c:77:b7:62:60:37:18:f7:40:e5:
                    de:58:6e:74:1e:e3:d4:e6:65:8a:68:ac:7f:0e:91:
                    42:ae:94:44:97:36:65:d1:29:df:4d:fc:27:57:21:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:44:EE:99:14:B7:28:03:FD:11:1B:3A:05:AC:F1:7B:D1:2F:C6:8B
            X509v3 Authority Key Identifier:
                keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:80:92:42:a7:78:b7:ed:79:1a:88:64:d0:f8:9f:88:f4:
         fa:d1:ea:a7:6d:02:2e:7e:6f:21:e9:93:df:95:8c:ed:e4:4c:
         64:29:c3:58:aa:78:84:05:59:11:52:18:a3:e1:82:f7:1e:5a:
         c0:16:94:fa:a8:a4:68:f8:f4:7e:b0:a8:b3:71:7d:51:31:5b:
         b8:b5:0f:de:ce:6c:a7:b3:97:e0:45:6f:01:d4:4c:12:e8:c4:
         d6:7a:39:cb:2f:fe:ee:2b:e0:23:08:12:1f:37:ec:21:13:85:
         5c:62:3e:25:dd:dc:f1:95:e1:b7:bf:14:cf:fc:b3:c9:c6:9d:
         fe:e7:08:39:f7:ad:ce:43:82:5a:dc:03:a1:14:0a:9e:bb:80:
         88:72:ec:09:bd:11:50:41:58:a3:99:c3:24:2e:53:18:ef:64:
         9f:b7:4d:d6:cd:40:17:a3:4a:24:0c:83:62:b6:c6:e8:28:a9:
         31:3f:0f:5f:a0:53:6c:3a:40:86:b4:e7:5a:94:19:36:47:82:
         e5:e6:fb:31:b3:e9:22:ab:d6:3b:f2:ec:43:18:99:df:ee:08:
         9f:fc:b8:00:6c:f6:cb:97:f1:f7:6d:05:a4:0d:14:e8:16:aa:
         d4:d6:52:15:79:06:c3:cd:cf:4f:ed:6d:fb:6f:af:19:35:a7:
         2e:9f:91:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbQ0KsCMdPr2KOgWTaoJOddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGJlYjM0OTcyMzJiNmY1YWM5YTI2ODc1MzcyMTEwMTVh
Mjg3MTAwHhcNMjUwNTE0MjIwMDU4WhcNMjUwNTE1MjIwMDU4WjAzMTEwLwYDVQQD
EyhlZjQ0ZWU5OTE0YjcyODAzZmQxMTFiM2EwNWFjZjE3YmQxMmZjNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthG0xSO5gpgWycIFGK4lUQCr6gig
myIWwlGNZ3WUBsDoJIkV2SVNj+PI2eNVXCLRd0nh7DAsd+TL517Sbvg0Yz2yvzZZ
lH6QhZa4RTOd8fllTK1dHpPQ1TqH4AoOhBHRGQ0NzNR4Hx6slawPHETc02XLByD8
ZR9K5UkGtIl4b6xN6gOzEMxCBIX55NrDqWBCC1ckS2bJrQnvd0U4R8liNXFwTEkz
1vLAVbZT5rJa+canwpcSYQ9tiFX/KHXvvoN4rzbRRnz17suxDamK1kS6GT6UIhFZ
NCx3t2JgNxj3QOXeWG50HuPU5mWKaKx/DpFCrpRElzZl0SnfTfwnVyFA7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9E7pkUtygD/REbOgWs8XvRL8aLMB8GA1UdIwQY
MBaAFP7b6zSXIytvWsmiaHU3IRAVoocQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjIt
MGU1MTZmOWM0ZDQ1LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjItMGU1MTZmOWM0ZDQ1
LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0GAkkKn
eLfteRqIZND4n4j0+tHqp20CLn5vIemT35WM7eRMZCnDWKp4hAVZEVIYo+GC9x5a
wBaU+qikaPj0frCos3F9UTFbuLUP3s5sp7OX4EVvAdRMEujE1no5yy/+7ivgIwgS
HzfsIROFXGI+Jd3c8ZXht78Uz/yzycad/ucIOfetzkOCWtwDoRQKnruAiHLsCb0R
UEFYo5nDJC5TGO9kn7dN1s1AF6NKJAyDYrbG6CipMT8PX6BTbDpAhrTnWpQZNkeC
5eb7MbPpIqvWO/LsQxiZ3+4In/y4AGz2y5fx920FpA0U6Baq1NZSFXkGw83PT+1t
+2+vGTWnLp+RNA==
-----END CERTIFICATE-----
Generated at Thu May 15 07:50:18 2025 by rpki-client