Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
File:                     ee-AdXX1WsX-nfSkqExMh2CPAoU.mft (raw, json)
Hash identifier:          OYLdfOAi3wmXJZpHcPXnmk2+WQP/rhFBK/CUskYjqpE=
Subject key identifier:   B5:F4:17:50:53:17:DD:6E:46:27:2A:C0:2A:53:BE:32:53:54:AD:B5
Authority key identifier: 79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
Certificate issuer:       /CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
Certificate serial:       0196C3824158AA1EEC3DD02D76CFA6486586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
Manifest number:          0448
Signing time:             Mon 12 May 2025 08:00:15 +0000
Manifest this update:     Mon 12 May 2025 08:00:15 +0000
Manifest next update:     Tue 13 May 2025 08:00:15 +0000
Files and hashes:         1: ee-AdXX1WsX-nfSkqExMh2CPAoU.crl (hash: uYfH0FBMpMihKsymEVqc+T0Do/oxYuu+2TnQnGpJgCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:41:58:aa:1e:ec:3d:d0:2d:76:cf:a6:48:65:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
        Validity
            Not Before: May 12 08:00:15 2025 GMT
            Not After : May 13 08:00:15 2025 GMT
        Subject: CN=b5f417505317dd6e46272ac02a53be325354adb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:c3:c8:c7:c9:1c:44:4f:c4:b9:b7:10:3d:
                    7b:f1:f6:49:e7:db:b7:50:08:c5:f3:5e:a7:6f:ac:
                    85:a2:8f:eb:2b:46:34:47:aa:22:c1:1b:e4:3f:f1:
                    62:f8:3f:21:4d:79:c8:8a:ee:7c:51:fe:85:42:e0:
                    b8:4f:83:ed:92:50:dd:61:b3:4c:7b:d2:8f:3d:c8:
                    57:02:37:f8:44:cf:80:d6:32:5e:3a:cd:c8:9e:c6:
                    39:81:43:92:31:32:ad:d7:20:29:15:3c:4b:32:0b:
                    1d:bb:60:1f:b8:b5:01:3e:42:58:85:b3:98:ca:18:
                    00:50:bc:a5:da:be:dc:21:cb:62:a4:fa:4b:d5:7a:
                    a5:49:c1:77:6f:9e:09:a4:c9:ba:5b:64:5e:b6:c3:
                    ff:91:2a:ba:6f:be:3d:22:94:d0:03:fc:5a:c2:83:
                    08:55:86:e0:4b:8e:13:56:96:30:e7:07:d9:6a:62:
                    8e:18:cc:65:1c:a5:3e:bc:0e:dc:2d:3b:73:85:f9:
                    a2:4c:3e:57:bf:aa:07:4b:f0:ad:10:17:da:18:f6:
                    9f:06:b8:ab:fe:ed:a4:83:0d:16:bf:0a:5e:2d:71:
                    30:d5:77:3c:dc:29:40:82:f5:a8:5a:14:ac:72:95:
                    61:6a:aa:a4:bc:83:35:25:d0:f9:08:00:26:31:5e:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:17:50:53:17:DD:6E:46:27:2A:C0:2A:53:BE:32:53:54:AD:B5
            X509v3 Authority Key Identifier:
                keyid:79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9f:71:38:7e:03:69:49:53:6f:62:66:2b:0d:97:76:29:22:
         0f:05:d7:aa:5c:8b:db:1f:7f:2e:d7:ef:41:26:ff:57:cf:e4:
         e9:2c:9e:6c:d4:d5:b5:05:95:d7:99:53:ff:2b:7b:dc:74:65:
         26:af:5a:80:39:20:4a:b1:dd:02:52:d0:7a:70:03:97:1b:ea:
         e6:93:a9:85:81:e8:2c:f5:d1:08:e5:95:29:5e:d8:5b:39:a2:
         d4:5e:f3:04:7f:af:4e:81:92:70:9b:6c:e6:73:cb:db:1b:2a:
         e4:eb:9d:fc:31:5d:3b:b3:5c:ac:74:80:00:88:88:23:50:20:
         3e:f2:da:16:78:95:83:d0:3b:ee:9b:3c:bb:04:d5:c8:6d:3e:
         5f:f7:6c:74:5f:d5:61:22:70:20:2c:80:33:93:78:37:6e:c3:
         62:5e:69:ef:fc:64:5f:99:8f:93:3a:4b:43:28:75:ba:ec:3e:
         ee:a0:54:0d:a4:72:9a:54:ae:a1:09:72:41:70:b4:30:c0:30:
         c7:93:d8:07:a6:e0:97:95:f6:4e:c1:f6:09:60:2a:a3:29:04:
         fb:03:1b:5e:c1:3b:fc:3a:24:92:44:e5:3d:84:38:04:0e:c4:
         54:b4:62:49:78:5c:2f:6b:cd:31:d2:93:d9:db:14:1c:18:a5:
         34:3c:91:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDgkFYqh7sPdAtds+mSGWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZWY4MDc1NzVmNTVhYzVmZTlkZjRhNGE4NGM0Yzg3NjA4
ZjAyODUwHhcNMjUwNTEyMDgwMDE1WhcNMjUwNTEzMDgwMDE1WjAzMTEwLwYDVQQD
EyhiNWY0MTc1MDUzMTdkZDZlNDYyNzJhYzAyYTUzYmUzMjUzNTRhZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhzDyMfJHERPxLm3ED178fZJ59u3
UAjF816nb6yFoo/rK0Y0R6oiwRvkP/Fi+D8hTXnIiu58Uf6FQuC4T4PtklDdYbNM
e9KPPchXAjf4RM+A1jJeOs3InsY5gUOSMTKt1yApFTxLMgsdu2AfuLUBPkJYhbOY
yhgAULyl2r7cIctipPpL1XqlScF3b54JpMm6W2RetsP/kSq6b749IpTQA/xawoMI
VYbgS44TVpYw5wfZamKOGMxlHKU+vA7cLTtzhfmiTD5Xv6oHS/CtEBfaGPafBrir
/u2kgw0WvwpeLXEw1Xc83ClAgvWoWhSscpVhaqqkvIM1JdD5CAAmMV50wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX0F1BTF91uRicqwCpTvjJTVK21MB8GA1UdIwQY
MBaAFHnvgHV19VrF/p30pKhMTIdgjwKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZmI4NDMtNWNiYy00YmZkLWI0MTkt
OWE0YThiOTMzYmRkLzEvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85ZmI4NDMtNWNiYy00YmZkLWI0MTktOWE0YThiOTMzYmRk
LzEvZWUtQWRYWDFXc1gtbmZTa3FFeE1oMkNQQW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr59xOH4D
aUlTb2JmKw2XdikiDwXXqlyL2x9/LtfvQSb/V8/k6SyebNTVtQWV15lT/yt73HRl
Jq9agDkgSrHdAlLQenADlxvq5pOphYHoLPXRCOWVKV7YWzmi1F7zBH+vToGScJts
5nPL2xsq5Oud/DFdO7NcrHSAAIiII1AgPvLaFniVg9A77ps8uwTVyG0+X/dsdF/V
YSJwICyAM5N4N27DYl5p7/xkX5mPkzpLQyh1uuw+7qBUDaRymlSuoQlyQXC0MMAw
x5PYB6bgl5X2TsH2CWAqoykE+wMbXsE7/DokkkTlPYQ4BA7EVLRiSXhcL2vNMdKT
2dsUHBilNDyRQQ==
-----END CERTIFICATE-----
Generated at Mon May 12 15:49:30 2025 by rpki-client