Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          5dlNvZVVRGUqg+ZbaIUnV7mDOjH5yCZVRUMjQa31VEI=
Subject key identifier:   EE:86:5D:8C:87:2A:25:A6:51:98:C9:6D:A7:6B:1E:A0:47:99:0D:A3
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       0196D250CBF048728428E0C79E10EAD59C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          0429
Signing time:             Thu 15 May 2025 05:00:32 +0000
Manifest this update:     Thu 15 May 2025 05:00:32 +0000
Manifest next update:     Fri 16 May 2025 05:00:32 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: T7DNv5PA5fYClL8WUIfWq8c5I086DHZppYQjfY++0B0=)
                          2: uYWwRm4H6YcSfThBlj9ZG4s8g-o.roa (hash: k7HHEyNrsyk4kGL9qKSfgAwu15JappUHRUGh3h3zAJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:50:cb:f0:48:72:84:28:e0:c7:9e:10:ea:d5:9c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: May 15 05:00:32 2025 GMT
            Not After : May 16 05:00:32 2025 GMT
        Subject: CN=ee865d8c872a25a65198c96da76b1ea047990da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:36:e7:15:97:16:1f:57:c7:2a:11:5b:18:58:
                    f3:ce:18:74:f7:55:69:53:28:fe:76:62:24:01:c4:
                    98:56:68:c9:8d:e8:64:c4:20:9e:d7:68:6a:c1:9f:
                    ae:83:1c:dc:f7:4a:93:87:9a:b3:b6:3e:90:1a:51:
                    91:ef:0d:eb:81:8f:a3:4f:df:81:8d:70:ab:bd:ed:
                    fd:e3:46:c7:34:87:ff:f4:d5:a8:b5:96:4c:77:ed:
                    1e:2b:8c:b6:61:73:a5:34:dd:90:b4:01:3e:63:f2:
                    e9:d8:2b:ce:02:93:8f:2e:11:09:fa:f7:87:45:90:
                    a7:98:fd:2b:71:e7:6f:35:9c:85:04:6b:48:8c:9d:
                    41:f3:0e:04:3e:8b:dc:1d:86:77:d2:39:9b:62:ad:
                    f3:f8:cc:59:b2:bf:e8:a2:f1:92:ed:96:45:e2:d9:
                    4f:63:f0:4b:46:36:c5:89:08:0d:ce:95:df:12:83:
                    bb:0a:dd:38:08:3b:67:0c:c6:5b:03:75:c6:d3:83:
                    6c:74:27:f0:49:47:eb:df:36:47:c9:0b:20:55:3f:
                    e8:05:58:81:08:96:29:42:18:26:81:cd:32:ef:95:
                    e8:dc:14:10:6c:93:5d:6e:c1:b4:34:93:db:54:9d:
                    4d:bc:67:c1:ea:df:18:d1:3a:c3:98:ad:2d:83:2c:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:5D:8C:87:2A:25:A6:51:98:C9:6D:A7:6B:1E:A0:47:99:0D:A3
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:ab:09:21:e2:4c:b6:b0:14:9f:03:8e:31:19:4a:fe:61:
         60:41:ba:9a:5d:4a:a3:ad:56:1f:91:84:ad:f1:bc:63:9c:1c:
         4c:6e:e2:79:ac:0c:38:f6:47:13:e4:07:c4:69:69:ea:17:dc:
         29:a2:d5:7e:9d:76:45:65:73:96:41:0a:9c:06:16:65:a7:0b:
         c2:53:04:77:75:0f:3a:b5:7c:5f:b0:72:cb:89:95:77:97:00:
         a7:e2:85:30:89:e3:db:17:55:2b:75:dc:ce:72:b9:3a:2b:8f:
         be:8a:e1:69:77:74:a8:b8:d2:55:1f:8b:09:52:70:63:ea:47:
         42:42:6e:d1:67:da:56:3a:bb:6a:d2:37:bd:d7:bb:94:0f:ff:
         81:9f:1b:cb:f3:fd:f0:18:01:13:9b:d7:d3:7a:95:36:ff:66:
         93:30:7a:67:b9:8d:81:9d:95:9a:17:8b:67:a4:14:ce:c5:94:
         65:2a:12:a3:0b:33:ed:3f:02:b7:96:66:f2:6c:48:ad:88:81:
         f9:a6:d6:16:1a:19:46:9a:6e:4b:28:1d:8c:48:3c:86:d2:64:
         50:f1:4a:7c:b6:47:86:52:fe:bc:55:5c:53:e8:51:23:db:a4:
         99:5b:e1:43:7a:d1:8d:af:05:07:d9:90:82:72:d1:2d:02:7a:
         20:25:db:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSUMvwSHKEKODHnhDq1ZxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDc3YTk5N2M5NWJkMDFhNjRkNDA4YWZjZjU1NGQ4OGI0
ZGI1ZTUwHhcNMjUwNTE1MDUwMDMyWhcNMjUwNTE2MDUwMDMyWjAzMTEwLwYDVQQD
EyhlZTg2NWQ4Yzg3MmEyNWE2NTE5OGM5NmRhNzZiMWVhMDQ3OTkwZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzbnFZcWH1fHKhFbGFjzzhh091Vp
Uyj+dmIkAcSYVmjJjehkxCCe12hqwZ+ugxzc90qTh5qztj6QGlGR7w3rgY+jT9+B
jXCrve3940bHNIf/9NWotZZMd+0eK4y2YXOlNN2QtAE+Y/Lp2CvOApOPLhEJ+veH
RZCnmP0rcedvNZyFBGtIjJ1B8w4EPovcHYZ30jmbYq3z+MxZsr/oovGS7ZZF4tlP
Y/BLRjbFiQgNzpXfEoO7Ct04CDtnDMZbA3XG04NsdCfwSUfr3zZHyQsgVT/oBViB
CJYpQhgmgc0y75Xo3BQQbJNdbsG0NJPbVJ1NvGfB6t8Y0TrDmK0tgyzGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6GXYyHKiWmUZjJbadrHqBHmQ2jMB8GA1UdIwQY
MBaAFJMHepl8lb0Bpk1Aivz1VNiLTbXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2Et
NjUyNTdiMWZlYzZkLzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2EtNjUyNTdiMWZlYzZk
LzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxurCSHi
TLawFJ8DjjEZSv5hYEG6ml1Ko61WH5GErfG8Y5wcTG7ieawMOPZHE+QHxGlp6hfc
KaLVfp12RWVzlkEKnAYWZacLwlMEd3UPOrV8X7Byy4mVd5cAp+KFMInj2xdVK3Xc
znK5OiuPvorhaXd0qLjSVR+LCVJwY+pHQkJu0WfaVjq7atI3vde7lA//gZ8by/P9
8BgBE5vX03qVNv9mkzB6Z7mNgZ2VmheLZ6QUzsWUZSoSowsz7T8Ct5Zm8mxIrYiB
+abWFhoZRppuSygdjEg8htJkUPFKfLZHhlL+vFVcU+hRI9ukmVvhQ3rRja8FB9mQ
gnLRLQJ6ICXbeg==
-----END CERTIFICATE-----
Generated at Thu May 15 13:56:32 2025 by rpki-client