Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
File:                     meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json)
Hash identifier:          0g7BI4LlMNMLq30M5tlzFNKHXtXrkky8yHHejDS/+Qw=
Subject key identifier:   E1:60:12:FB:36:13:67:C6:08:23:89:23:DA:98:FE:D7:48:77:E5:C1
Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
Certificate issuer:       /CN=99e07a31abfec24909b188463846fdf655872423
Certificate serial:       0196B9A3AFF09EC41F1B889B9FCA663C05BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
Manifest number:          1114
Signing time:             Sat 10 May 2025 10:00:34 +0000
Manifest this update:     Sat 10 May 2025 10:00:34 +0000
Manifest next update:     Sun 11 May 2025 10:00:34 +0000
Files and hashes:         1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: qtElI5oAT2RhxtuQkrVwNBgbpZDXXqDD8w9f4WCJlac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:af:f0:9e:c4:1f:1b:88:9b:9f:ca:66:3c:05:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e07a31abfec24909b188463846fdf655872423
        Validity
            Not Before: May 10 10:00:34 2025 GMT
            Not After : May 11 10:00:34 2025 GMT
        Subject: CN=e16012fb361367c608238923da98fed74877e5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f5:da:98:f9:ef:7a:16:f9:35:c7:78:56:55:
                    30:ee:b5:50:8a:9f:d0:56:0c:78:5f:58:80:2c:b5:
                    89:35:3f:47:12:f3:17:7a:8c:55:f3:eb:8b:dc:35:
                    8c:00:c5:7b:45:57:02:2b:25:57:61:f3:33:b0:d2:
                    00:20:d1:a0:08:7a:30:fc:9f:a8:ce:65:21:ee:09:
                    81:e6:10:04:7e:fb:5d:ca:0d:05:bb:6c:a1:5d:68:
                    a7:99:a7:89:f7:8a:45:bc:40:2d:0a:e5:a8:e3:78:
                    08:57:bb:0e:47:6b:3d:34:7b:f9:b5:ec:1d:1e:ed:
                    4c:7f:a3:90:89:6e:1c:9f:b4:16:2e:08:c7:19:32:
                    b2:5d:fa:bb:7c:f4:32:8a:7e:83:db:02:aa:ce:1a:
                    b9:d1:a6:d2:9e:3f:26:fa:06:2e:14:57:20:0e:bc:
                    65:dd:8c:fb:26:7a:7b:1b:9e:80:9d:2b:ef:21:18:
                    98:2a:b8:bd:a3:98:de:00:14:68:de:96:72:dd:d9:
                    df:4f:ca:d1:92:3f:f5:9c:07:e2:28:6e:22:1d:50:
                    a3:67:3e:8c:71:69:4e:7e:a5:68:1d:7f:0a:62:c5:
                    68:a4:cf:a2:e8:c7:67:78:72:f1:f1:70:bc:ba:e0:
                    95:c4:8e:dc:f5:71:b9:db:d3:0b:bf:eb:18:43:93:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:12:FB:36:13:67:C6:08:23:89:23:DA:98:FE:D7:48:77:E5:C1
            X509v3 Authority Key Identifier:
                keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5f:d8:d5:ae:fb:41:de:b3:8d:40:70:a1:99:a9:7d:5e:4e:
         a3:40:5c:a6:24:c9:ed:e7:da:a0:5b:a9:af:a3:8e:d8:cb:6f:
         85:c9:d5:9a:27:03:3a:32:6f:4d:57:6c:df:41:23:11:2e:bc:
         56:ab:d8:f7:51:62:b5:cf:a9:9b:2e:5d:72:30:ed:70:fa:d6:
         0a:16:75:ce:f6:fd:da:fe:ec:92:16:82:a7:a5:78:06:b6:ec:
         ac:e2:b1:44:26:c1:2b:fa:8d:d1:56:2d:11:ae:0e:ad:d7:90:
         d0:fa:4e:b8:f2:e7:4c:13:70:b1:c0:3b:5b:01:75:36:26:71:
         6b:a4:e3:59:6e:8d:ef:c7:26:d2:db:3b:b0:a6:4b:f8:71:0b:
         66:03:fa:da:f8:06:fd:69:6b:40:ca:37:71:7d:c0:7e:c3:3a:
         6d:24:cf:23:b3:be:89:bf:07:2b:c7:9f:58:7f:6a:d6:b5:5d:
         5c:ac:24:76:f6:c1:0f:f0:f4:b5:1a:d9:da:3d:d3:49:10:ab:
         10:93:a1:32:cb:f0:07:78:04:b0:61:d4:aa:45:6c:9d:1e:b5:
         ba:64:8a:88:d2:49:3a:8b:27:70:04:71:ed:62:5e:2e:f0:10:
         c1:07:34:6c:71:2d:a0:f1:0c:71:a4:99:32:80:00:3a:0a:42:
         e3:a8:af:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5o6/wnsQfG4ibn8pmPAW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTA3YTMxYWJmZWMyNDkwOWIxODg0NjM4NDZmZGY2NTU4
NzI0MjMwHhcNMjUwNTEwMTAwMDM0WhcNMjUwNTExMTAwMDM0WjAzMTEwLwYDVQQD
EyhlMTYwMTJmYjM2MTM2N2M2MDgyMzg5MjNkYTk4ZmVkNzQ4NzdlNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PXamPnvehb5Ncd4VlUw7rVQip/Q
Vgx4X1iALLWJNT9HEvMXeoxV8+uL3DWMAMV7RVcCKyVXYfMzsNIAINGgCHow/J+o
zmUh7gmB5hAEfvtdyg0Fu2yhXWinmaeJ94pFvEAtCuWo43gIV7sOR2s9NHv5tewd
Hu1Mf6OQiW4cn7QWLgjHGTKyXfq7fPQyin6D2wKqzhq50abSnj8m+gYuFFcgDrxl
3Yz7Jnp7G56AnSvvIRiYKri9o5jeABRo3pZy3dnfT8rRkj/1nAfiKG4iHVCjZz6M
cWlOfqVoHX8KYsVopM+i6MdneHLx8XC8uuCVxI7c9XG529MLv+sYQ5MoUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFgEvs2E2fGCCOJI9qY/tdId+XBMB8GA1UdIwQY
MBaAFJngejGr/sJJCbGIRjhG/fZVhyQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQt
MjE2MjQ1OGVhY2U1LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQtMjE2MjQ1OGVhY2U1
LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJF/Y1a77
Qd6zjUBwoZmpfV5Oo0BcpiTJ7efaoFupr6OO2MtvhcnVmicDOjJvTVds30EjES68
VqvY91Fitc+pmy5dcjDtcPrWChZ1zvb92v7skhaCp6V4BrbsrOKxRCbBK/qN0VYt
Ea4OrdeQ0PpOuPLnTBNwscA7WwF1NiZxa6TjWW6N78cm0ts7sKZL+HELZgP62vgG
/WlrQMo3cX3AfsM6bSTPI7O+ib8HK8efWH9q1rVdXKwkdvbBD/D0tRrZ2j3TSRCr
EJOhMsvwB3gEsGHUqkVsnR61umSKiNJJOosncARx7WJeLvAQwQc0bHEtoPEMcaSZ
MoAAOgpC46ivcg==
-----END CERTIFICATE-----
Generated at Sat May 10 13:45:11 2025 by rpki-client