Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File:                     7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier:          Ds6znFnW3KE8Ej8K9yh83hCE2Qhows6+SVwxVMOeifs=
Subject key identifier:   F3:FF:85:8F:AB:43:D5:A9:A2:F8:2D:6A:AC:C1:EF:01:48:A0:6F:51
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer:       /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial:       0196BECA0602B62CE9943F8A60D48AA6809D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number:          11DC
Signing time:             Sun 11 May 2025 10:00:32 +0000
Manifest this update:     Sun 11 May 2025 10:00:32 +0000
Manifest next update:     Mon 12 May 2025 10:00:32 +0000
Files and hashes:         1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: U7NpKaYAuSLruuA87oVJm/HlLXEZpfUoHhT5yx4ItXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:ca:06:02:b6:2c:e9:94:3f:8a:60:d4:8a:a6:80:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
        Validity
            Not Before: May 11 10:00:32 2025 GMT
            Not After : May 12 10:00:32 2025 GMT
        Subject: CN=f3ff858fab43d5a9a2f82d6aacc1ef0148a06f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:79:3e:b5:54:b0:33:de:38:89:63:e6:70:
                    a6:47:1e:85:fa:9e:b1:99:ea:11:88:ba:22:bf:d1:
                    69:6c:50:b9:d1:9c:2e:d2:42:03:8f:63:6f:7d:b5:
                    50:b2:8e:e1:4b:1e:b5:00:27:46:ac:88:ec:17:86:
                    61:60:ae:2c:b7:eb:57:9a:20:11:6b:32:43:2a:f6:
                    59:2f:84:95:4a:b6:83:30:e5:29:4e:c9:90:ad:bb:
                    b7:63:72:15:28:3c:06:ca:ee:ba:08:4e:b7:53:d0:
                    ff:69:47:37:bf:50:ce:5b:70:00:7a:94:b7:09:3b:
                    9d:3a:a7:e1:cb:71:66:64:b3:d7:39:d6:70:29:89:
                    aa:3f:93:7a:66:77:bf:fa:55:72:19:85:62:45:c8:
                    52:fd:55:10:9f:ef:3b:34:60:eb:2f:e4:8c:d8:e0:
                    64:a5:b9:ff:2f:cd:ec:c2:5d:35:af:ee:40:a5:98:
                    3c:f5:63:84:f7:e2:ed:55:60:5b:c4:c6:b3:16:cf:
                    67:a8:70:02:f5:a3:a2:8c:95:05:ff:ef:a4:f8:fa:
                    d3:00:66:c4:f3:81:93:0c:37:42:05:a7:7c:74:6d:
                    ef:33:a8:7b:e3:4d:0e:18:22:80:d5:2d:88:b0:f9:
                    6b:55:95:2d:7e:30:e2:6a:61:e2:3e:f5:64:d4:a5:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:85:8F:AB:43:D5:A9:A2:F8:2D:6A:AC:C1:EF:01:48:A0:6F:51
            X509v3 Authority Key Identifier:
                keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:4a:fa:09:4b:a3:b5:fa:8d:f5:69:d3:86:49:e1:78:16:
         fa:5d:ab:9d:cc:35:36:46:90:58:86:24:7d:b0:58:36:84:5a:
         ac:ee:3e:8f:91:f7:26:b9:f8:d8:5f:29:16:a7:52:0d:cb:c2:
         9b:23:6b:1a:cb:60:86:3b:69:f0:87:bf:65:88:f8:ca:4d:17:
         02:31:84:25:bf:a0:f9:2e:aa:b2:d4:e4:05:55:cd:f8:95:4f:
         f9:66:32:a4:cc:1e:67:56:fb:7b:87:fc:cc:3a:87:64:f8:43:
         6a:26:27:b1:b5:e0:32:e0:35:50:86:18:9d:cf:1c:20:14:aa:
         6b:fa:51:34:f4:af:6e:68:f1:0d:3f:83:c5:ad:2d:0f:65:19:
         bd:a1:fe:c3:5e:30:0e:8e:92:eb:5b:b6:45:65:be:78:0a:f6:
         1c:08:04:1b:5d:b1:f6:e6:8d:98:4c:e8:36:40:bb:3b:87:d7:
         83:00:04:e5:1d:2e:1a:aa:1c:11:15:5e:c9:e3:83:41:d9:23:
         59:2b:3e:8c:a2:d0:13:5c:f7:09:d5:fb:91:02:c7:72:73:72:
         8d:bf:71:1e:3b:40:53:39:7d:65:0e:5e:a5:50:80:ed:82:c5:
         07:9a:c1:9d:58:92:9a:54:6e:c9:95:57:e8:d9:81:cd:25:a1:
         42:97:80:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+ygYCtizplD+KYNSKpoCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDBiYTUxZDYzYjE3NzU4MzdlODcyZmJkZTg0ZTJkZDA4
NzRmNjMwHhcNMjUwNTExMTAwMDMyWhcNMjUwNTEyMTAwMDMyWjAzMTEwLwYDVQQD
EyhmM2ZmODU4ZmFiNDNkNWE5YTJmODJkNmFhY2MxZWYwMTQ4YTA2ZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNx5PrVUsDPeOIlj5nCmRx6F+p6x
meoRiLoiv9FpbFC50Zwu0kIDj2NvfbVQso7hSx61ACdGrIjsF4ZhYK4st+tXmiAR
azJDKvZZL4SVSraDMOUpTsmQrbu3Y3IVKDwGyu66CE63U9D/aUc3v1DOW3AAepS3
CTudOqfhy3FmZLPXOdZwKYmqP5N6Zne/+lVyGYViRchS/VUQn+87NGDrL+SM2OBk
pbn/L83swl01r+5ApZg89WOE9+LtVWBbxMazFs9nqHAC9aOijJUF/++k+PrTAGbE
84GTDDdCBad8dG3vM6h7400OGCKA1S2IsPlrVZUtfjDiamHiPvVk1KXHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPP/hY+rQ9WpovgtaqzB7wFIoG9RMB8GA1UdIwQY
MBaAFO8AulHWOxd1g36HL73oTi3Qh09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDIt
ODVjNTk1NDRjNmYzLzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDItODVjNTk1NDRjNmYz
LzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPVK+glL
o7X6jfVp04ZJ4XgW+l2rncw1NkaQWIYkfbBYNoRarO4+j5H3Jrn42F8pFqdSDcvC
myNrGstghjtp8Ie/ZYj4yk0XAjGEJb+g+S6qstTkBVXN+JVP+WYypMweZ1b7e4f8
zDqHZPhDaiYnsbXgMuA1UIYYnc8cIBSqa/pRNPSvbmjxDT+Dxa0tD2UZvaH+w14w
Do6S61u2RWW+eAr2HAgEG12x9uaNmEzoNkC7O4fXgwAE5R0uGqocERVeyeODQdkj
WSs+jKLQE1z3CdX7kQLHcnNyjb9xHjtAUzl9ZQ5epVCA7YLFB5rBnViSmlRuyZVX
6NmBzSWhQpeAEQ==
-----END CERTIFICATE-----
Generated at Sun May 11 18:57:02 2025 by rpki-client