Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File:                     fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier:          Mo2tWsf6yltvbredt16nvysEDGS47vk1T2is+n72OLU=
Subject key identifier:   A5:58:00:01:DD:20:CB:0F:F4:27:B2:5C:BD:EE:B0:6F:AE:BC:56:E5
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer:       /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial:       0196D69B9DCE31CC2194CB1F84C040F8850E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number:          153F
Signing time:             Fri 16 May 2025 01:00:44 +0000
Manifest this update:     Fri 16 May 2025 01:00:44 +0000
Manifest next update:     Sat 17 May 2025 01:00:44 +0000
Files and hashes:         1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: Ma45YZBKWCnBSbrub4qB1lmvTckpdruGp1PZUho2lxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:9b:9d:ce:31:cc:21:94:cb:1f:84:c0:40:f8:85:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
        Validity
            Not Before: May 16 01:00:44 2025 GMT
            Not After : May 17 01:00:44 2025 GMT
        Subject: CN=a5580001dd20cb0ff427b25cbdeeb06faebc56e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:df:24:69:c8:fd:37:ef:b2:a7:e2:c6:0c:
                    3a:b4:80:8b:10:fd:84:6b:8e:c4:c6:1c:66:d5:b3:
                    14:eb:2b:02:10:80:b8:e2:6e:9a:be:e5:e1:e2:c7:
                    bc:ef:18:ed:c8:25:75:c8:24:d7:3e:d2:bb:2b:03:
                    fc:6d:0e:24:82:b5:c5:ab:f4:87:3d:5c:bb:2b:c1:
                    e3:39:26:cb:ee:37:a1:9a:64:41:7c:63:3c:70:4d:
                    65:bb:0a:9d:c3:bd:bd:be:49:bb:f8:4f:9f:86:25:
                    7e:24:b0:e3:70:ed:a5:be:8d:b8:f2:09:aa:9b:f9:
                    45:4f:51:71:8a:ef:5c:41:03:07:01:66:d7:1d:af:
                    04:40:34:e1:7f:26:7c:d3:d5:7f:d1:59:35:6a:38:
                    b0:ae:04:bb:63:11:36:d3:4a:a0:66:6c:bb:fd:29:
                    af:81:0c:f1:98:81:b2:93:1e:28:dc:14:de:5e:0f:
                    1e:60:6a:ce:49:b6:41:34:2e:d9:50:58:41:79:86:
                    89:93:c1:cf:6b:3e:2e:3c:10:32:af:84:a7:5b:41:
                    9d:28:c9:85:b9:d7:24:48:06:8d:fe:2c:6c:0e:6a:
                    1d:3b:44:c5:5f:1f:e0:c1:6a:8a:e5:37:50:98:24:
                    c5:58:ce:bf:1f:a7:17:78:79:40:78:7e:03:5e:34:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:58:00:01:DD:20:CB:0F:F4:27:B2:5C:BD:EE:B0:6F:AE:BC:56:E5
            X509v3 Authority Key Identifier:
                keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:9b:f8:18:c3:6e:ec:95:6f:c4:a3:b6:86:f1:fd:ff:70:
         d1:5f:08:a9:95:ce:88:10:c0:d5:7b:49:1f:bf:8c:c4:17:3a:
         de:ac:d6:13:8d:44:18:6d:48:1b:a0:ec:13:ad:cd:f2:a4:41:
         cb:01:16:c6:56:b4:9d:eb:f0:0d:44:74:2a:20:14:6d:5c:c5:
         40:e4:01:27:d6:eb:f2:13:40:c9:d6:53:17:49:03:a8:3a:14:
         0a:4d:fd:ac:c0:73:e2:c8:a6:76:85:c2:31:d1:86:76:1c:be:
         8b:84:36:92:93:d9:bf:4f:9e:b9:ee:ae:4f:54:37:29:3f:9f:
         a9:f6:e3:4e:90:bf:3b:1c:cf:fc:88:02:63:32:f9:e7:b8:6f:
         a9:2e:1b:82:bc:60:af:34:aa:7d:9b:ca:bd:45:4c:a5:0e:aa:
         cd:0f:54:f9:16:10:ec:d1:ad:b3:00:63:8a:66:13:12:cd:64:
         0c:6a:66:7c:e2:fb:50:50:a6:b4:1b:1c:a8:5d:8f:d8:84:fe:
         67:ea:65:83:b0:f4:58:69:d3:4d:b8:4a:6f:bb:f1:f9:b0:06:
         a0:5c:4e:8e:69:e1:08:d8:25:bd:e2:2b:d0:f5:60:35:1b:dc:
         31:72:58:28:62:cf:97:e8:b5:92:78:ed:83:65:c9:ec:38:68:
         e5:f9:0e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbWm53OMcwhlMsfhMBA+IUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNmQ3YTE2YzNmY2Q2NzlkMDVkMjhlZDkyMDkzNWMwODZh
ZThjZmQwHhcNMjUwNTE2MDEwMDQ0WhcNMjUwNTE3MDEwMDQ0WjAzMTEwLwYDVQQD
EyhhNTU4MDAwMWRkMjBjYjBmZjQyN2IyNWNiZGVlYjA2ZmFlYmM1NmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv13fJGnI/Tfvsqfixgw6tICLEP2E
a47Exhxm1bMU6ysCEIC44m6avuXh4se87xjtyCV1yCTXPtK7KwP8bQ4kgrXFq/SH
PVy7K8HjOSbL7jehmmRBfGM8cE1luwqdw729vkm7+E+fhiV+JLDjcO2lvo248gmq
m/lFT1Fxiu9cQQMHAWbXHa8EQDThfyZ809V/0Vk1ajiwrgS7YxE200qgZmy7/Smv
gQzxmIGykx4o3BTeXg8eYGrOSbZBNC7ZUFhBeYaJk8HPaz4uPBAyr4SnW0GdKMmF
udckSAaN/ixsDmodO0TFXx/gwWqK5TdQmCTFWM6/H6cXeHlAeH4DXjTvAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVYAAHdIMsP9CeyXL3usG+uvFblMB8GA1UdIwQY
MBaAFH5tehbD/NZ50F0o7ZIJNcCGroz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81Yzc0NjgtMWEzMy00MjU1LTgyN2Yt
NGJmYzY2YWQwOGM5LzEvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC81Yzc0NjgtMWEzMy00MjU1LTgyN2YtNGJmYzY2YWQwOGM5
LzEvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1ab+BjD
buyVb8Sjtobx/f9w0V8IqZXOiBDA1XtJH7+MxBc63qzWE41EGG1IG6DsE63N8qRB
ywEWxla0nevwDUR0KiAUbVzFQOQBJ9br8hNAydZTF0kDqDoUCk39rMBz4simdoXC
MdGGdhy+i4Q2kpPZv0+eue6uT1Q3KT+fqfbjTpC/OxzP/IgCYzL557hvqS4bgrxg
rzSqfZvKvUVMpQ6qzQ9U+RYQ7NGtswBjimYTEs1kDGpmfOL7UFCmtBscqF2P2IT+
Z+plg7D0WGnTTbhKb7vx+bAGoFxOjmnhCNglveIr0PVgNRvcMXJYKGLPl+i1knjt
g2XJ7Dho5fkONw==
-----END CERTIFICATE-----
Generated at Fri May 16 10:44:45 2025 by rpki-client