Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          c2vfXHszbJekdmfop/vFBq5wcDQ/t++dNVYIOL4B0go=
Subject key identifier:   1E:76:B2:9F:06:E0:04:3B:1C:4E:69:C8:E9:3A:7C:CB:94:A4:D2:A0
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       0196BD807FBD31A8B6473FD9F02C5706E10C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          11C9
Signing time:             Sun 11 May 2025 04:00:37 +0000
Manifest this update:     Sun 11 May 2025 04:00:37 +0000
Manifest next update:     Mon 12 May 2025 04:00:37 +0000
Files and hashes:         1: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: l3JubCH9nD+F0K5KvAtO45w9LcO4VyOwF46OYmtaSBY=)
                          2: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (hash: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:7f:bd:31:a8:b6:47:3f:d9:f0:2c:57:06:e1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: May 11 04:00:37 2025 GMT
            Not After : May 12 04:00:37 2025 GMT
        Subject: CN=1e76b29f06e0043b1c4e69c8e93a7ccb94a4d2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:eb:69:5b:19:ec:b0:a3:d2:f0:92:16:45:
                    c1:ed:04:07:b0:92:31:36:1d:96:a3:d0:10:f1:7b:
                    7e:1f:2b:77:02:8f:ce:a4:45:46:25:05:0f:7b:54:
                    8a:29:c8:69:6d:33:64:10:0c:89:b1:06:99:80:ae:
                    35:88:1f:ee:f7:69:9b:21:60:fa:f7:ca:cd:60:6f:
                    5b:57:bc:5b:83:07:ee:a3:75:ce:8b:6f:6a:13:5f:
                    f7:bb:48:c9:e2:c0:1b:94:21:86:e4:e2:9e:08:0c:
                    19:f9:35:de:a4:ff:6a:1b:2b:25:12:da:42:68:6c:
                    94:21:09:c8:e3:0a:61:27:d8:11:a0:7a:ee:2c:52:
                    69:58:10:9e:57:d1:29:fb:a2:ba:05:7f:94:94:0d:
                    75:7e:a9:69:95:42:22:04:0e:1b:a6:23:21:71:50:
                    60:34:61:9f:bc:83:2c:30:07:ab:69:df:87:71:f1:
                    90:6e:30:c4:fb:94:ea:c4:75:bb:b5:4b:5b:9a:4e:
                    d3:66:70:89:87:1e:43:c1:55:e1:e9:f1:aa:73:99:
                    78:0b:c2:2e:96:87:c9:0d:56:d5:cd:b1:68:11:0a:
                    77:f7:9c:ce:75:29:b0:22:74:1d:9f:b9:94:eb:d8:
                    89:fb:c4:2d:be:84:39:8b:ff:36:6d:54:8e:f9:e3:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:B2:9F:06:E0:04:3B:1C:4E:69:C8:E9:3A:7C:CB:94:A4:D2:A0
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:06:cf:38:2a:76:01:31:b5:09:49:79:ce:b2:10:0a:5b:36:
         58:7d:1c:64:a1:47:f9:09:f9:d7:05:8a:5a:a6:e4:a5:9d:61:
         76:bd:fd:6d:c5:d9:d7:ed:99:f3:0f:83:d3:bc:fc:13:81:df:
         ea:bb:ae:7a:25:06:80:ff:c9:4f:45:dd:1a:33:f0:e1:70:23:
         cd:c2:0f:4f:15:10:e7:d2:ee:30:36:aa:d4:b6:a3:5e:f1:bb:
         d5:f8:d8:6d:ec:1e:84:78:ad:bc:c8:13:51:49:8a:76:4f:35:
         e4:b4:9e:3f:70:99:c9:f2:7e:05:23:7f:c1:83:38:99:82:11:
         c7:34:bc:9a:57:b2:be:40:01:a5:56:b8:3c:a0:e1:55:26:96:
         24:47:f7:a2:23:8e:72:02:f1:69:ce:73:05:b1:04:ae:5c:44:
         9f:19:95:29:05:a2:4b:a1:1e:e3:22:d3:ca:e3:67:f2:50:88:
         33:85:3f:84:80:8d:cc:82:73:05:8c:3d:db:48:da:50:6f:24:
         34:4b:12:f0:4a:0c:0f:fa:cc:49:31:e0:cd:77:c4:0b:eb:25:
         48:c5:f4:3b:3d:d4:6b:dd:e0:19:53:0d:22:ea:e9:61:f3:33:
         18:cc:84:4d:cb:f9:84:05:17:8d:a3:f4:7b:93:0d:4e:e6:76:
         79:30:29:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gH+9Mai2Rz/Z8CxXBuEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGVlMGFlODgzNDcwNTA4ODgwNTA0NGJlNzVjNzQwM2Ix
ZGM3ZTIwHhcNMjUwNTExMDQwMDM3WhcNMjUwNTEyMDQwMDM3WjAzMTEwLwYDVQQD
EygxZTc2YjI5ZjA2ZTAwNDNiMWM0ZTY5YzhlOTNhN2NjYjk0YTRkMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndTraVsZ7LCj0vCSFkXB7QQHsJIx
Nh2Wo9AQ8Xt+Hyt3Ao/OpEVGJQUPe1SKKchpbTNkEAyJsQaZgK41iB/u92mbIWD6
98rNYG9bV7xbgwfuo3XOi29qE1/3u0jJ4sAblCGG5OKeCAwZ+TXepP9qGyslEtpC
aGyUIQnI4wphJ9gRoHruLFJpWBCeV9Ep+6K6BX+UlA11fqlplUIiBA4bpiMhcVBg
NGGfvIMsMAerad+HcfGQbjDE+5TqxHW7tUtbmk7TZnCJhx5DwVXh6fGqc5l4C8Iu
lofJDVbVzbFoEQp395zOdSmwInQdn7mU69iJ+8QtvoQ5i/82bVSO+eNc0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB52sp8G4AQ7HE5pyOk6fMuUpNKgMB8GA1UdIwQY
MBaAFD7e4K6INHBQiIBQRL51x0A7HcfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUt
NzlhYjQ4ZDgzYmFiLzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUtNzlhYjQ4ZDgzYmFi
LzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAbPOCp2
ATG1CUl5zrIQCls2WH0cZKFH+Qn51wWKWqbkpZ1hdr39bcXZ1+2Z8w+D07z8E4Hf
6ruueiUGgP/JT0XdGjPw4XAjzcIPTxUQ59LuMDaq1LajXvG71fjYbewehHitvMgT
UUmKdk815LSeP3CZyfJ+BSN/wYM4mYIRxzS8mleyvkABpVa4PKDhVSaWJEf3oiOO
cgLxac5zBbEErlxEnxmVKQWiS6Ee4yLTyuNn8lCIM4U/hICNzIJzBYw920jaUG8k
NEsS8EoMD/rMSTHgzXfEC+slSMX0Oz3Ua93gGVMNIurpYfMzGMyETcv5hAUXjaP0
e5MNTuZ2eTApMg==
-----END CERTIFICATE-----
Generated at Sun May 11 11:49:29 2025 by rpki-client