Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File:                     K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier:          xKgE8mHONe5cqEe3U3gg0xXyaPAJcrM7zsxpPTXinuY=
Subject key identifier:   F9:D9:35:2E:86:00:27:FE:54:4D:CB:08:19:94:F0:4A:25:A8:18:CA
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer:       /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial:       01969F0825B8CFD2B38A061FC3A4CCB7E436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number:          0A4F
Signing time:             Mon 05 May 2025 06:00:33 +0000
Manifest this update:     Mon 05 May 2025 06:00:33 +0000
Manifest next update:     Tue 06 May 2025 06:00:33 +0000
Files and hashes:         1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: zi64ux3vcMZNrDyjvqPJY7HbyYqw870BWUdKjtorMjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:25:b8:cf:d2:b3:8a:06:1f:c3:a4:cc:b7:e4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
        Validity
            Not Before: May  5 06:00:33 2025 GMT
            Not After : May  6 06:00:33 2025 GMT
        Subject: CN=f9d9352e860027fe544dcb081994f04a25a818ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:78:ca:86:29:2d:2e:ac:75:6c:8d:71:a4:
                    d8:93:36:c8:35:a9:2b:14:d5:90:5d:f2:39:ac:9f:
                    b0:65:c6:91:1d:e0:f0:39:a9:ab:8c:17:24:8c:47:
                    d1:5f:3f:d6:5f:45:50:d6:67:73:34:da:b8:7f:23:
                    a4:ef:1c:c8:df:df:ba:9b:26:e1:bd:2f:79:e1:45:
                    69:57:63:3a:10:1e:c4:1a:6f:88:06:0e:3d:fb:d4:
                    09:71:ed:2f:3c:18:4f:bd:e5:de:0a:f9:ab:38:48:
                    77:8d:6f:fe:7a:73:90:90:0a:e1:9f:2a:72:39:84:
                    2e:88:ee:26:73:7c:9f:95:e3:9e:88:a5:58:f1:c3:
                    c7:7b:97:94:71:88:04:46:97:7f:79:be:cf:fd:a4:
                    b6:5a:f7:94:73:56:76:46:14:3e:de:6a:7f:14:3d:
                    1f:f0:20:cf:4e:3e:6e:22:96:31:70:66:b8:d6:1b:
                    ba:4a:4c:92:b5:61:20:6a:aa:cb:18:91:89:0b:5b:
                    5c:7f:e0:54:3f:f3:bf:cd:5c:71:75:b8:d0:ef:ef:
                    60:1c:fe:29:aa:d5:5b:53:10:7f:b9:20:16:c8:80:
                    04:37:3e:99:e7:30:30:41:92:46:f8:52:44:05:f4:
                    8a:55:a7:15:56:6a:9a:8a:4e:7a:6a:31:bd:e8:f5:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:35:2E:86:00:27:FE:54:4D:CB:08:19:94:F0:4A:25:A8:18:CA
            X509v3 Authority Key Identifier:
                keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:7b:31:06:23:19:7a:c8:35:1a:3c:4f:11:07:bb:8f:8f:
         2d:4f:1e:29:44:f2:d7:04:ec:20:cd:b5:51:5e:15:1b:f4:bf:
         95:ef:d4:4b:b4:3b:17:91:79:83:78:2e:8b:b3:a3:69:18:c0:
         b9:fa:c6:ee:a7:ec:0e:b1:1b:52:de:8d:b3:a6:14:1e:db:18:
         0b:2a:3b:c2:61:33:4d:2b:e6:d2:c7:88:7b:b7:b5:a8:68:bc:
         5e:77:0e:ea:a9:7b:82:d1:8f:cc:82:53:08:de:a3:ea:21:d7:
         ec:5a:ae:bb:36:70:4b:01:cb:6c:51:eb:1f:3a:41:5a:44:0d:
         7f:d7:e3:7c:92:28:16:6c:3e:3b:ad:a4:87:ce:ba:d9:05:78:
         b9:49:fa:a4:3d:c1:9e:58:c5:85:70:8e:0a:2d:70:47:1b:90:
         84:e0:1f:8b:2a:5f:5f:54:74:08:9d:20:e8:8c:dc:95:25:0d:
         da:32:f1:83:9e:80:c0:16:f0:d6:9f:8c:c6:1b:c8:f2:80:c5:
         4b:d1:89:90:07:a6:3e:cc:4a:92:7f:9f:31:87:e7:92:a6:85:
         05:96:f2:10:2e:60:2b:c9:a9:65:6d:7e:3a:e8:6f:c4:e5:c9:
         59:6b:48:bf:2d:88:45:04:04:e2:08:c4:02:2d:b0:f7:9d:23:
         20:f3:e4:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCCW4z9KzigYfw6TMt+Q2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmIzNTAwNWQzMDIyODA0NDM2ZDcyZGMzYzljODY1Y2Zh
YWEwMDMwHhcNMjUwNTA1MDYwMDMzWhcNMjUwNTA2MDYwMDMzWjAzMTEwLwYDVQQD
EyhmOWQ5MzUyZTg2MDAyN2ZlNTQ0ZGNiMDgxOTk0ZjA0YTI1YTgxOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdd4yoYpLS6sdWyNcaTYkzbINakr
FNWQXfI5rJ+wZcaRHeDwOamrjBckjEfRXz/WX0VQ1mdzNNq4fyOk7xzI39+6mybh
vS954UVpV2M6EB7EGm+IBg49+9QJce0vPBhPveXeCvmrOEh3jW/+enOQkArhnypy
OYQuiO4mc3yfleOeiKVY8cPHe5eUcYgERpd/eb7P/aS2WveUc1Z2RhQ+3mp/FD0f
8CDPTj5uIpYxcGa41hu6SkyStWEgaqrLGJGJC1tcf+BUP/O/zVxxdbjQ7+9gHP4p
qtVbUxB/uSAWyIAENz6Z5zAwQZJG+FJEBfSKVacVVmqaik56ajG96PUPHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnZNS6GACf+VE3LCBmU8EolqBjKMB8GA1UdIwQY
MBaAFCtrNQBdMCKARDbXLcPJyGXPqqADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgt
ZjE4ZmJmNTk2ZWJhLzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgtZjE4ZmJmNTk2ZWJh
LzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL397MQYj
GXrINRo8TxEHu4+PLU8eKUTy1wTsIM21UV4VG/S/le/US7Q7F5F5g3gui7OjaRjA
ufrG7qfsDrEbUt6Ns6YUHtsYCyo7wmEzTSvm0seIe7e1qGi8XncO6ql7gtGPzIJT
CN6j6iHX7FquuzZwSwHLbFHrHzpBWkQNf9fjfJIoFmw+O62kh8662QV4uUn6pD3B
nljFhXCOCi1wRxuQhOAfiypfX1R0CJ0g6IzclSUN2jLxg56AwBbw1p+MxhvI8oDF
S9GJkAemPsxKkn+fMYfnkqaFBZbyEC5gK8mpZW1+OuhvxOXJWWtIvy2IRQQE4gjE
Ai2w950jIPPkdQ==
-----END CERTIFICATE-----
Generated at Mon May 5 13:28:39 2025 by rpki-client