Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File:                     OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier:          o54GV/89z9kOiAgnnm+avR+1c6WuIdPDCV6/DqvLo0s=
Subject key identifier:   E2:4E:C9:D6:F4:6A:02:88:04:51:32:F9:E6:47:83:B4:9D:2D:2E:11
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer:       /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial:       0196BD80202A2ED20246008D8DC1048212F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number:          0852
Signing time:             Sun 11 May 2025 04:00:12 +0000
Manifest this update:     Sun 11 May 2025 04:00:12 +0000
Manifest next update:     Mon 12 May 2025 04:00:12 +0000
Files and hashes:         1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: aLENZQbqp82hv5/g99n3Vf1Hp/q0Zdtg/wk75kK+1vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:20:2a:2e:d2:02:46:00:8d:8d:c1:04:82:12:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
        Validity
            Not Before: May 11 04:00:12 2025 GMT
            Not After : May 12 04:00:12 2025 GMT
        Subject: CN=e24ec9d6f46a0288045132f9e64783b49d2d2e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:e2:55:51:56:03:1b:60:28:40:f4:e0:14:
                    50:db:29:a1:bd:19:97:f6:f8:c7:01:03:17:7d:df:
                    e4:dd:fd:9b:7c:90:b0:be:b2:96:76:c7:27:3d:89:
                    eb:8b:b3:b8:51:49:f2:12:52:fd:ac:f0:cd:d5:2d:
                    f0:9d:76:3e:c1:4b:2c:f5:56:1f:a3:27:99:3c:56:
                    52:78:2f:fd:28:e3:6b:fe:ef:b0:eb:43:bc:c7:5c:
                    8e:64:02:60:19:05:4f:31:2f:7b:9c:0c:72:bf:4a:
                    74:dd:5c:f5:bc:46:aa:58:8c:84:d7:3b:6a:10:5e:
                    71:12:fe:cd:56:a2:a0:ed:db:91:f0:ab:96:63:1a:
                    06:58:a0:4d:50:62:82:fa:85:7e:7f:c5:50:e5:be:
                    b9:c1:d2:5d:31:ce:cf:ca:15:bf:d4:a4:2a:91:15:
                    20:7a:fb:87:4c:dd:7a:2c:51:c3:00:63:9a:00:e1:
                    00:f5:6d:d3:ab:67:c7:e7:4f:3e:57:08:ae:04:28:
                    d7:bb:09:fc:45:b6:1a:41:58:57:1b:c5:dd:71:2f:
                    f4:8a:9f:fe:cd:1a:32:4b:58:59:ed:be:3d:23:78:
                    4a:3d:ec:db:5a:f1:ea:9e:6f:55:fd:0d:ff:1e:58:
                    07:ce:ee:95:0f:75:f0:3a:db:cb:f3:3d:fa:d2:d2:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4E:C9:D6:F4:6A:02:88:04:51:32:F9:E6:47:83:B4:9D:2D:2E:11
            X509v3 Authority Key Identifier:
                keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:2e:88:1e:ea:6f:38:f7:41:92:bb:17:a0:9c:91:63:53:72:
         fe:4e:bc:79:ed:56:98:a2:60:ed:ff:73:8a:b9:99:a0:ca:63:
         10:fb:29:70:39:8e:4d:11:8c:e2:7f:41:fd:a5:6d:38:44:32:
         05:da:f7:53:2d:74:42:10:c8:ad:b2:98:ba:67:f8:fb:da:be:
         c2:ca:30:dd:5c:90:64:32:73:68:20:05:ef:c8:50:1e:14:fc:
         75:98:86:54:42:36:86:bc:a2:6b:7b:30:26:1e:2c:a3:c6:60:
         41:ad:1f:8f:db:4d:45:af:04:a5:c7:00:7b:40:a2:ce:1f:44:
         41:26:9d:20:64:64:ea:fb:a7:a6:8f:3f:06:29:80:21:d6:b1:
         8c:d8:73:44:f1:47:f2:4e:c7:53:69:b9:de:45:8a:87:29:19:
         4f:69:01:84:b9:83:03:6d:50:70:1a:9d:44:90:00:36:98:12:
         cb:04:da:0d:73:de:13:be:f3:6c:9f:f8:af:3f:3a:ff:08:87:
         52:64:28:27:c7:21:bc:73:5b:31:b5:54:03:16:49:93:4f:a7:
         61:25:97:08:87:c4:e1:4b:49:cc:d2:1a:50:79:9c:ae:3f:42:
         08:99:92:aa:0b:93:10:d1:9f:cb:93:f1:f8:00:ae:fe:5a:d4:
         70:b3:f6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gCAqLtICRgCNjcEEghL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNTU1ZDg0ZGNkN2RkYjY0MDY5MWI5NDBjN2NhMDk3NzI4
OGExYzQwHhcNMjUwNTExMDQwMDEyWhcNMjUwNTEyMDQwMDEyWjAzMTEwLwYDVQQD
EyhlMjRlYzlkNmY0NmEwMjg4MDQ1MTMyZjllNjQ3ODNiNDlkMmQyZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ziVVFWAxtgKED04BRQ2ymhvRmX
9vjHAQMXfd/k3f2bfJCwvrKWdscnPYnri7O4UUnyElL9rPDN1S3wnXY+wUss9VYf
oyeZPFZSeC/9KONr/u+w60O8x1yOZAJgGQVPMS97nAxyv0p03Vz1vEaqWIyE1ztq
EF5xEv7NVqKg7duR8KuWYxoGWKBNUGKC+oV+f8VQ5b65wdJdMc7PyhW/1KQqkRUg
evuHTN16LFHDAGOaAOEA9W3Tq2fH508+VwiuBCjXuwn8RbYaQVhXG8XdcS/0ip/+
zRoyS1hZ7b49I3hKPezbWvHqnm9V/Q3/HlgHzu6VD3XwOtvL8z360tK23wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJOydb0agKIBFEy+eZHg7SdLS4RMB8GA1UdIwQY
MBaAFDpVXYTc1922QGkblAx8oJdyiKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAt
MWU2NzE3MGRmYmJhLzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAtMWU2NzE3MGRmYmJh
LzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzi6IHupv
OPdBkrsXoJyRY1Ny/k68ee1WmKJg7f9zirmZoMpjEPspcDmOTRGM4n9B/aVtOEQy
Bdr3Uy10QhDIrbKYumf4+9q+wsow3VyQZDJzaCAF78hQHhT8dZiGVEI2hryia3sw
Jh4so8ZgQa0fj9tNRa8EpccAe0Cizh9EQSadIGRk6vunpo8/BimAIdaxjNhzRPFH
8k7HU2m53kWKhykZT2kBhLmDA21QcBqdRJAANpgSywTaDXPeE77zbJ/4rz86/wiH
UmQoJ8chvHNbMbVUAxZJk0+nYSWXCIfE4UtJzNIaUHmcrj9CCJmSqguTENGfy5Px
+ACu/lrUcLP2zw==
-----END CERTIFICATE-----
Generated at Sun May 11 08:17:01 2025 by rpki-client