Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File:                     frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier:          EEarR4rwowg8EvXdbwLDHWIlwn6M6ylk1grEDxiR2NI=
Subject key identifier:   DF:AB:EC:14:31:1A:34:AB:84:BB:48:34:82:E0:A5:57:00:3F:10:7B
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer:       /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial:       0196C239170B3A8F4CBF3DE29CEC90BA4BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number:          0518
Signing time:             Mon 12 May 2025 02:00:43 +0000
Manifest this update:     Mon 12 May 2025 02:00:43 +0000
Manifest next update:     Tue 13 May 2025 02:00:43 +0000
Files and hashes:         1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: Y8b5gRmH+hWn/+rnGFiCIQxnKQ7GQ2lgfB0/nZWM/co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:17:0b:3a:8f:4c:bf:3d:e2:9c:ec:90:ba:4b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
        Validity
            Not Before: May 12 02:00:43 2025 GMT
            Not After : May 13 02:00:43 2025 GMT
        Subject: CN=dfabec14311a34ab84bb483482e0a557003f107b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:ad:80:3f:b1:24:c3:1d:9a:1b:05:0a:49:
                    b5:95:64:f3:b4:96:d7:90:dd:a7:4f:eb:f2:74:4a:
                    30:4d:b3:0a:d3:5e:42:2b:9c:33:10:00:3b:d7:65:
                    4f:d0:53:2c:55:26:ad:43:8d:c0:e6:bb:57:c9:7b:
                    4b:47:12:7f:fe:f0:e6:2e:99:e4:42:10:d3:d4:14:
                    a9:24:da:31:7b:7e:80:01:1b:43:a9:1d:38:57:9a:
                    3a:c0:26:42:ba:5b:ce:fa:94:81:d5:2e:27:41:16:
                    11:07:87:ad:63:a1:e4:97:9d:c0:07:73:41:24:72:
                    33:00:ae:7e:b4:14:f6:8d:43:0b:3f:f8:42:4b:41:
                    94:d5:e0:3e:58:14:9c:44:e4:0b:d2:2d:1a:a9:31:
                    25:57:72:47:93:ab:9e:17:30:1c:ce:06:89:f6:c0:
                    32:fa:57:a1:9e:76:b4:1e:7b:7e:cb:d3:dc:92:43:
                    f0:4a:b7:0a:c1:6d:38:a6:79:35:ce:7a:21:77:50:
                    4b:f1:b6:17:68:50:af:4f:49:ee:ca:90:17:30:5e:
                    78:99:99:ea:80:62:37:17:0e:31:75:df:78:4e:4d:
                    1e:e0:0d:fb:bd:d0:76:e6:43:94:58:62:09:71:a0:
                    85:d4:76:50:a6:28:f4:ff:bb:81:0d:f9:66:c8:66:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AB:EC:14:31:1A:34:AB:84:BB:48:34:82:E0:A5:57:00:3F:10:7B
            X509v3 Authority Key Identifier:
                keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:ad:ac:e6:fd:ab:62:3d:df:40:ad:6b:35:1f:7c:7f:d3:
         e4:3f:dd:f3:a1:39:2c:29:61:ed:f8:37:b0:2b:1c:9e:da:50:
         38:0a:d6:28:02:a3:66:46:83:42:e4:68:b7:a5:d1:69:51:5a:
         79:b2:e5:d7:51:ac:0f:46:cd:6d:84:ef:84:06:1b:68:64:47:
         ce:b7:15:29:07:e3:90:6c:c6:49:19:91:ad:8d:cb:2e:89:d0:
         12:42:3a:1b:62:05:fd:26:5a:0f:0e:d8:68:9d:0a:4c:5b:74:
         8b:35:bb:a1:2c:7a:c6:3f:d8:54:89:d1:2b:23:eb:0a:9a:52:
         2d:d9:ad:01:a2:c1:88:8c:27:67:b4:41:1c:83:3f:f5:d3:04:
         82:29:59:8a:0f:5e:63:76:f8:d1:27:80:9a:19:03:23:e9:ac:
         ea:3f:8a:be:f0:93:83:cc:0d:61:8a:17:44:ce:83:7b:12:09:
         32:8e:61:d6:d8:a6:84:cf:02:c5:2a:c5:26:5e:ae:79:aa:6b:
         d9:6f:ab:93:2b:1a:02:c1:ee:6b:f9:a5:2d:ac:07:ad:7a:cc:
         9d:2c:c4:cc:b9:07:51:e9:40:ad:c5:98:73:27:09:c9:bd:5c:
         70:ea:f9:c0:b5:13:7a:d7:8a:1c:b6:98:66:25:30:81:74:4d:
         91:9c:ab:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCORcLOo9Mvz3inOyQukvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjYwMzcwNDBhODYwY2Q5MWJhNzdhMzcxOGVkNTgwY2Fk
ZjVkZDgwHhcNMjUwNTEyMDIwMDQzWhcNMjUwNTEzMDIwMDQzWjAzMTEwLwYDVQQD
EyhkZmFiZWMxNDMxMWEzNGFiODRiYjQ4MzQ4MmUwYTU1NzAwM2YxMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IStgD+xJMMdmhsFCkm1lWTztJbX
kN2nT+vydEowTbMK015CK5wzEAA712VP0FMsVSatQ43A5rtXyXtLRxJ//vDmLpnk
QhDT1BSpJNoxe36AARtDqR04V5o6wCZCulvO+pSB1S4nQRYRB4etY6Hkl53AB3NB
JHIzAK5+tBT2jUMLP/hCS0GU1eA+WBScROQL0i0aqTElV3JHk6ueFzAczgaJ9sAy
+lehnna0Hnt+y9PckkPwSrcKwW04pnk1znohd1BL8bYXaFCvT0nuypAXMF54mZnq
gGI3Fw4xdd94Tk0e4A37vdB25kOUWGIJcaCF1HZQpij0/7uBDflmyGblhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+r7BQxGjSrhLtINILgpVcAPxB7MB8GA1UdIwQY
MBaAFH62A3BAqGDNkbp3o3GO1YDK313YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTkt
Yjg4NjZlOTQxOTYzLzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTktYjg4NjZlOTQxOTYz
LzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+utrOb9
q2I930CtazUffH/T5D/d86E5LClh7fg3sCscntpQOArWKAKjZkaDQuRot6XRaVFa
ebLl11GsD0bNbYTvhAYbaGRHzrcVKQfjkGzGSRmRrY3LLonQEkI6G2IF/SZaDw7Y
aJ0KTFt0izW7oSx6xj/YVInRKyPrCppSLdmtAaLBiIwnZ7RBHIM/9dMEgilZig9e
Y3b40SeAmhkDI+ms6j+KvvCTg8wNYYoXRM6DexIJMo5h1timhM8CxSrFJl6ueapr
2W+rkysaAsHua/mlLawHrXrMnSzEzLkHUelArcWYcycJyb1ccOr5wLUTeteKHLaY
ZiUwgXRNkZyr5w==
-----END CERTIFICATE-----
Generated at Mon May 12 07:19:15 2025 by rpki-client