Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
File:                     daRvv8jeUjM5XHPeUflVO7doRgU.mft (raw, json)
Hash identifier:          lPeaeA8uLNpiRjwKiH6/V4dcpnahqTU+3lhH1mJ7QZs=
Subject key identifier:   65:F1:CF:01:7F:9E:0A:16:F3:85:AC:4C:62:A5:CA:F8:87:BD:24:CB
Authority key identifier: 75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
Certificate issuer:       /CN=75a46fbfc8de5233395c73de51f9553bb7684605
Certificate serial:       0196C72841B4506E96A96070DCDEF87D10AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
Manifest number:          1534
Signing time:             Tue 13 May 2025 01:00:26 +0000
Manifest this update:     Tue 13 May 2025 01:00:26 +0000
Manifest next update:     Wed 14 May 2025 01:00:26 +0000
Files and hashes:         1: daRvv8jeUjM5XHPeUflVO7doRgU.crl (hash: nZPjDQYyIyGMG3JpUeFZ1DADAMMQ4fwEvCUC1ZP/KhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:41:b4:50:6e:96:a9:60:70:dc:de:f8:7d:10:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a46fbfc8de5233395c73de51f9553bb7684605
        Validity
            Not Before: May 13 01:00:26 2025 GMT
            Not After : May 14 01:00:26 2025 GMT
        Subject: CN=65f1cf017f9e0a16f385ac4c62a5caf887bd24cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:86:a3:09:e2:93:4c:48:3e:ae:f3:e4:b9:
                    02:97:a4:35:54:4c:92:b8:39:a9:7e:1f:ce:31:87:
                    3c:22:a4:9f:ba:e7:ea:9d:c2:a7:2b:1b:b2:f8:7b:
                    0a:cc:1e:41:c3:38:1e:11:c6:8f:41:43:d8:ab:43:
                    bb:41:c5:93:d2:19:10:91:5b:90:2e:2d:90:bf:26:
                    e3:2f:3d:f7:08:87:9f:15:db:15:c7:e1:84:e4:fe:
                    15:71:78:aa:28:32:53:76:2b:53:31:66:8d:2c:bc:
                    54:7d:53:f0:43:e3:fc:6d:03:88:f3:06:e4:9d:57:
                    4c:6d:09:63:9b:a1:7a:a1:bb:7c:55:d8:33:76:c6:
                    4d:96:2c:79:b2:96:0b:e3:09:bd:7a:87:26:3c:4b:
                    36:1e:8d:38:63:e3:1f:77:f7:00:6f:0e:60:40:de:
                    b2:e9:0d:24:d4:29:38:87:dc:25:65:d6:55:a7:3a:
                    e0:38:61:97:be:11:56:4c:a9:a6:05:47:30:c0:b2:
                    f7:65:4b:38:ca:3a:4f:79:61:06:df:9e:fc:fc:35:
                    b0:48:ef:ee:ac:eb:3d:4d:b3:e4:97:01:88:7d:66:
                    0c:4d:8f:ef:bb:bb:86:81:10:c9:22:18:3e:9e:ab:
                    c0:94:95:f6:ff:a7:e9:1a:86:88:22:1a:19:57:5f:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F1:CF:01:7F:9E:0A:16:F3:85:AC:4C:62:A5:CA:F8:87:BD:24:CB
            X509v3 Authority Key Identifier:
                keyid:75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:be:77:15:50:61:41:ac:38:75:4d:da:60:4e:93:d1:5b:40:
         14:6d:28:21:cb:51:5f:90:00:d5:88:08:9a:f7:60:89:8f:3a:
         a1:2a:ae:e2:fd:be:02:67:cc:b9:75:3b:7a:2b:1c:4f:75:eb:
         96:5e:56:b6:ec:7b:81:b2:4a:cc:01:88:5f:68:c5:b3:2f:3c:
         19:0e:53:64:98:74:ae:14:95:60:25:7e:11:25:5e:f9:42:a1:
         94:df:c1:0c:7a:e4:25:73:e0:3b:67:84:1a:9b:1b:1b:58:c9:
         85:5e:51:37:cd:d0:d2:2a:22:66:49:e9:19:49:f5:2f:5d:7e:
         4d:29:fc:73:e3:8b:65:df:b3:b3:53:9f:69:c5:7e:37:b5:40:
         5a:e9:0c:6d:8a:59:21:2f:1a:0e:8a:f2:97:02:bd:92:3e:f0:
         20:5f:13:5d:87:e5:bb:2a:17:5f:82:ad:e6:69:4e:fa:d6:1b:
         b3:c3:d9:0d:8d:cb:32:42:66:e3:f5:0f:42:9b:6e:30:cd:94:
         5c:e0:09:15:5b:fc:53:a6:a2:5f:99:58:97:cf:b1:d0:66:e6:
         43:f2:a3:25:56:1d:53:ff:84:c8:65:92:2a:26:90:e1:df:1c:
         87:b0:6b:14:b5:40:24:f2:e5:f0:06:02:88:ad:50:de:05:64:
         f9:8f:60:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKEG0UG6WqWBw3N74fRCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTQ2ZmJmYzhkZTUyMzMzOTVjNzNkZTUxZjk1NTNiYjc2
ODQ2MDUwHhcNMjUwNTEzMDEwMDI2WhcNMjUwNTE0MDEwMDI2WjAzMTEwLwYDVQQD
Eyg2NWYxY2YwMTdmOWUwYTE2ZjM4NWFjNGM2MmE1Y2FmODg3YmQyNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXSGownik0xIPq7z5LkCl6Q1VEyS
uDmpfh/OMYc8IqSfuufqncKnKxuy+HsKzB5BwzgeEcaPQUPYq0O7QcWT0hkQkVuQ
Li2QvybjLz33CIefFdsVx+GE5P4VcXiqKDJTditTMWaNLLxUfVPwQ+P8bQOI8wbk
nVdMbQljm6F6obt8VdgzdsZNlix5spYL4wm9eocmPEs2Ho04Y+Mfd/cAbw5gQN6y
6Q0k1Ck4h9wlZdZVpzrgOGGXvhFWTKmmBUcwwLL3ZUs4yjpPeWEG3578/DWwSO/u
rOs9TbPklwGIfWYMTY/vu7uGgRDJIhg+nqvAlJX2/6fpGoaIIhoZV1/dJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXxzwF/ngoW84WsTGKlyviHvSTLMB8GA1UdIwQY
MBaAFHWkb7/I3lIzOVxz3lH5VTu3aEYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFSdnY4amVVak01WEhQZVVmbFZPN2RvUmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MjdlMmMtOTZmNi00ZTQzLTkxNGEt
OGM3YzU0ZjNjNWIwLzEvZGFSdnY4amVVak01WEhQZVVmbFZPN2RvUmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MjdlMmMtOTZmNi00ZTQzLTkxNGEtOGM3YzU0ZjNjNWIw
LzEvZGFSdnY4amVVak01WEhQZVVmbFZPN2RvUmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo753FVBh
Qaw4dU3aYE6T0VtAFG0oIctRX5AA1YgImvdgiY86oSqu4v2+AmfMuXU7eiscT3Xr
ll5Wtux7gbJKzAGIX2jFsy88GQ5TZJh0rhSVYCV+ESVe+UKhlN/BDHrkJXPgO2eE
GpsbG1jJhV5RN83Q0ioiZknpGUn1L11+TSn8c+OLZd+zs1OfacV+N7VAWukMbYpZ
IS8aDorylwK9kj7wIF8TXYfluyoXX4Kt5mlO+tYbs8PZDY3LMkJm4/UPQptuMM2U
XOAJFVv8U6aiX5lYl8+x0GbmQ/KjJVYdU/+EyGWSKiaQ4d8ch7BrFLVAJPLl8AYC
iK1Q3gVk+Y9gzQ==
-----END CERTIFICATE-----
Generated at Tue May 13 06:30:38 2025 by rpki-client