Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
File:                     R8VBw62lOmIHxADI-fOkhurrubA.mft (raw, json)
Hash identifier:          qQJHMrpc34LDhApBz3AFiTvj7xoFTf53NHL1042i5jw=
Subject key identifier:   5D:9D:C7:D0:2C:B4:E8:EE:AC:FE:39:D9:DE:D3:45:36:7A:1C:9F:80
Authority key identifier: 47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
Certificate issuer:       /CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Certificate serial:       0196B069D7594F8200B11E547B883E871459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
Manifest number:          01C7
Signing time:             Thu 08 May 2025 15:00:48 +0000
Manifest this update:     Thu 08 May 2025 15:00:48 +0000
Manifest next update:     Fri 09 May 2025 15:00:48 +0000
Files and hashes:         1: R8VBw62lOmIHxADI-fOkhurrubA.crl (hash: rKKEiraKGkEhIYLaiQQr4c5eKOJGR9Mo9+7GzBKhMu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:d7:59:4f:82:00:b1:1e:54:7b:88:3e:87:14:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
        Validity
            Not Before: May  8 15:00:48 2025 GMT
            Not After : May  9 15:00:48 2025 GMT
        Subject: CN=5d9dc7d02cb4e8eeacfe39d9ded345367a1c9f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:6c:3c:a9:58:5e:e7:3a:13:05:58:f1:55:
                    1b:9b:7f:ac:44:e2:c2:20:8e:49:a8:b1:7a:e3:80:
                    3a:0c:6b:bd:c6:c2:00:1b:11:c1:80:0d:28:06:87:
                    80:91:53:b0:8a:d9:5d:23:bb:1c:89:55:9d:ac:de:
                    da:ba:69:ee:01:42:4d:9b:b7:24:a4:e5:4d:be:e2:
                    f1:ca:5a:b8:be:31:cc:9c:a8:ee:97:21:a9:a3:79:
                    0c:1f:cb:28:ff:1d:f1:46:26:7e:65:2a:2d:78:01:
                    c3:b1:03:19:b9:c7:3b:a1:ae:f0:86:e6:57:43:1d:
                    01:cc:f3:e9:8f:e1:f8:ad:76:d5:90:e3:93:29:a3:
                    cc:43:09:e1:45:4c:9a:7d:d6:d6:d2:93:bb:38:3b:
                    49:0e:ed:d4:59:73:28:5e:e2:e6:bb:73:f8:a0:81:
                    c7:c3:d5:fe:88:ed:27:a4:f8:53:53:7a:77:3b:7a:
                    92:8e:e6:e9:f7:20:14:54:4b:fc:37:2a:e6:bf:3f:
                    b5:55:25:35:78:9b:a3:b9:42:78:32:a9:75:b3:8f:
                    8d:76:50:d3:6e:31:a9:fc:9e:2d:42:31:13:8c:f5:
                    a2:ce:44:98:4a:86:02:84:ef:4e:b8:ff:2f:d8:68:
                    62:0b:7d:e3:72:0f:ed:fa:cc:d4:06:28:58:87:81:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:C7:D0:2C:B4:E8:EE:AC:FE:39:D9:DE:D3:45:36:7A:1C:9F:80
            X509v3 Authority Key Identifier:
                keyid:47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:65:f9:b9:28:ff:f7:64:35:a0:4d:f2:c1:60:f8:1a:51:f0:
         9c:3a:c0:c0:ba:49:c6:9d:65:09:65:a6:f5:0a:2c:81:74:83:
         d5:97:92:3e:6d:c4:d3:93:e8:a1:83:cb:4e:74:63:5a:e1:14:
         54:b8:24:ba:f2:88:25:2a:61:19:76:7b:4f:c9:1f:a5:06:2f:
         43:5e:2c:79:4b:f4:98:ad:5d:b3:5a:48:85:82:c3:94:ba:ef:
         88:1a:4e:5a:c1:f7:c7:23:1d:6c:9e:21:8a:3e:da:61:2e:83:
         e0:9a:d9:d1:0a:3c:77:ae:e2:c9:92:7e:fb:5a:17:6b:ac:26:
         ce:21:ec:ee:b8:20:f8:f3:75:b1:00:4c:d2:1a:7e:24:9d:5e:
         4d:cf:93:b4:34:0e:71:bd:2f:91:fa:6c:30:b1:9a:92:dd:0a:
         86:f7:31:00:e5:87:13:71:18:cd:9b:01:e2:ac:17:95:cd:4a:
         e9:1c:27:0a:db:61:5d:1b:c4:99:b5:28:a0:bb:51:92:71:b0:
         ea:4d:a1:e5:ff:f6:c0:8a:32:db:69:67:52:54:96:0a:c0:d3:
         8f:d1:4c:88:6e:03:7a:64:64:f8:00:c2:ed:e7:97:b8:12:a6:
         39:92:df:04:c9:a3:55:82:f9:77:44:12:45:f7:5c:6c:d1:25:
         c9:0f:f4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawaddZT4IAsR5Ue4g+hxRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzU0MWMzYWRhNTNhNjIwN2M0MDBjOGY5ZjNhNDg2ZWFl
YmI5YjAwHhcNMjUwNTA4MTUwMDQ4WhcNMjUwNTA5MTUwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZDlkYzdkMDJjYjRlOGVlYWNmZTM5ZDlkZWQzNDUzNjdhMWM5ZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizxsPKlYXuc6EwVY8VUbm3+sROLC
II5JqLF644A6DGu9xsIAGxHBgA0oBoeAkVOwitldI7sciVWdrN7aumnuAUJNm7ck
pOVNvuLxylq4vjHMnKjulyGpo3kMH8so/x3xRiZ+ZSoteAHDsQMZucc7oa7whuZX
Qx0BzPPpj+H4rXbVkOOTKaPMQwnhRUyafdbW0pO7ODtJDu3UWXMoXuLmu3P4oIHH
w9X+iO0npPhTU3p3O3qSjubp9yAUVEv8Nyrmvz+1VSU1eJujuUJ4Mql1s4+NdlDT
bjGp/J4tQjETjPWizkSYSoYChO9OuP8v2GhiC33jcg/t+szUBihYh4GpSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2dx9AstOjurP452d7TRTZ6HJ+AMB8GA1UdIwQY
MBaAFEfFQcOtpTpiB8QAyPnzpIbq67mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNjI3MzgtOTY1Yi00MTg5LTg0NzQt
ZDg0NGY2MjNhOGIyLzEvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNjI3MzgtOTY1Yi00MTg5LTg0NzQtZDg0NGY2MjNhOGIy
LzEvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmX5uSj/
92Q1oE3ywWD4GlHwnDrAwLpJxp1lCWWm9QosgXSD1ZeSPm3E05PooYPLTnRjWuEU
VLgkuvKIJSphGXZ7T8kfpQYvQ14seUv0mK1ds1pIhYLDlLrviBpOWsH3xyMdbJ4h
ij7aYS6D4JrZ0Qo8d67iyZJ++1oXa6wmziHs7rgg+PN1sQBM0hp+JJ1eTc+TtDQO
cb0vkfpsMLGakt0KhvcxAOWHE3EYzZsB4qwXlc1K6RwnCtthXRvEmbUooLtRknGw
6k2h5f/2wIoy22lnUlSWCsDTj9FMiG4DemRk+ADC7eeXuBKmOZLfBMmjVYL5d0QS
RfdcbNElyQ/0MQ==
-----END CERTIFICATE-----
Generated at Thu May 8 22:13:21 2025 by rpki-client