Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
File:                     11ugWU0GWrciRlz6MF7_jUFhf6g.mft (raw, json)
Hash identifier:          ZNFFXoiREiTHl62ykJR+xiUZutpF1LuIljq5/Oxez7E=
Subject key identifier:   34:FA:6A:8C:49:C3:80:9A:E7:3F:51:AB:74:9C:EC:74:01:09:43:F1
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Certificate issuer:       /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial:       0196B8232C7283B1AC90DBFF47615003E623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
Manifest number:          0BE7
Signing time:             Sat 10 May 2025 03:00:34 +0000
Manifest this update:     Sat 10 May 2025 03:00:34 +0000
Manifest next update:     Sun 11 May 2025 03:00:34 +0000
Files and hashes:         1: 11ugWU0GWrciRlz6MF7_jUFhf6g.crl (hash: uFlPD9ZUr1575rgHLaZulUmetXk6PuWTf2auwui7tXw=)
                          2: BZIfQV280o1RO6UXQb7qG3btz5c.roa (hash: yjsFnIbhow6GJJcPdKVr4HkLXwHEMiYNE9BzFU3IEyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:2c:72:83:b1:ac:90:db:ff:47:61:50:03:e6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
        Validity
            Not Before: May 10 03:00:34 2025 GMT
            Not After : May 11 03:00:34 2025 GMT
        Subject: CN=34fa6a8c49c3809ae73f51ab749cec74010943f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:20:7a:6f:09:78:00:cd:6d:ca:ac:14:60:
                    63:a0:16:55:30:8c:c4:f7:a3:2d:10:2b:67:0e:49:
                    39:be:27:fd:f1:68:1e:1f:07:75:6f:99:92:ed:77:
                    12:60:4c:f6:ae:ef:2d:a5:12:c8:ca:6a:54:a1:0c:
                    f7:eb:15:65:bd:a9:08:8c:5d:54:46:1b:fe:11:0a:
                    9b:64:98:85:8b:05:43:d2:ac:d3:23:cd:21:8c:27:
                    02:29:70:b5:90:fc:b5:a3:e6:7b:a5:75:c2:be:7e:
                    28:82:8e:af:c5:c4:f8:33:2e:dd:f8:09:b0:d8:14:
                    99:60:e5:9a:b1:c6:68:41:62:98:87:d5:3c:23:e2:
                    1f:87:a2:db:f5:91:f5:7a:c0:d3:a1:0c:bb:4e:23:
                    2a:9c:c9:c5:09:31:29:f4:36:da:6d:51:ed:03:b6:
                    c2:75:af:2b:82:b7:41:d8:66:81:c7:f3:d0:7a:ec:
                    0c:44:0d:0e:52:be:a7:6b:61:8e:bb:fb:7c:87:d4:
                    51:2f:12:db:38:19:95:43:7b:7a:6e:10:d6:61:30:
                    7f:77:ea:1d:a2:4b:3e:1d:06:5f:62:10:fa:92:17:
                    66:87:de:18:15:b4:d6:b2:fd:57:94:c9:3e:5d:6a:
                    84:87:23:df:de:a3:72:bc:38:59:1d:1e:09:bd:f8:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:6A:8C:49:C3:80:9A:E7:3F:51:AB:74:9C:EC:74:01:09:43:F1
            X509v3 Authority Key Identifier:
                keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3b:47:fd:b5:86:a3:ae:98:36:f1:c8:2d:33:fd:69:90:1f:
         3b:45:1b:f6:4b:1e:04:35:f5:b4:8e:05:88:e1:bf:40:5b:7d:
         31:26:20:f2:73:60:12:cd:1b:a0:d1:84:14:9e:fe:80:81:0c:
         65:fb:f2:22:bf:5c:61:b9:5b:22:e1:53:1f:62:89:5f:f0:53:
         71:89:7f:99:ae:c2:c8:f2:49:19:90:e5:91:f3:3f:36:fe:21:
         09:f5:0d:fe:ae:9a:9a:aa:6d:7e:c0:a2:d7:1b:09:15:ee:e6:
         80:d6:91:0d:3b:dd:f1:f5:18:3f:c5:e4:83:55:e0:ea:31:f8:
         6b:76:fd:e5:fb:73:d0:50:26:ef:ec:ae:50:41:b6:6a:61:e4:
         39:9d:5f:8b:05:a3:9d:da:33:dc:1b:76:12:82:3a:6f:b7:a6:
         16:ff:9d:cf:f5:75:e6:61:c4:46:ac:61:27:1b:4c:48:39:65:
         fc:18:44:fe:4a:92:7a:15:d8:dd:03:8d:20:d6:18:82:67:cc:
         ae:72:9b:b2:f5:df:05:74:50:c0:e9:7b:0c:d3:79:2d:13:96:
         b4:6e:96:21:91:47:10:81:92:f5:b4:3d:d5:9c:6c:90:6a:4a:
         2f:31:1e:81:b3:50:62:b6:5a:96:17:3e:56:c1:3a:0d:ec:b9:
         6a:ab:8f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4Iyxyg7GskNv/R2FQA+YjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NWJhMDU5NGQwNjVhYjcyMjQ2NWNmYTMwNWVmZjhkNDE2
MTdmYTgwHhcNMjUwNTEwMDMwMDM0WhcNMjUwNTExMDMwMDM0WjAzMTEwLwYDVQQD
EygzNGZhNmE4YzQ5YzM4MDlhZTczZjUxYWI3NDljZWM3NDAxMDk0M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm08gem8JeADNbcqsFGBjoBZVMIzE
96MtECtnDkk5vif98WgeHwd1b5mS7XcSYEz2ru8tpRLIympUoQz36xVlvakIjF1U
Rhv+EQqbZJiFiwVD0qzTI80hjCcCKXC1kPy1o+Z7pXXCvn4ogo6vxcT4My7d+Amw
2BSZYOWascZoQWKYh9U8I+Ifh6Lb9ZH1esDToQy7TiMqnMnFCTEp9DbabVHtA7bC
da8rgrdB2GaBx/PQeuwMRA0OUr6na2GOu/t8h9RRLxLbOBmVQ3t6bhDWYTB/d+od
oks+HQZfYhD6khdmh94YFbTWsv1XlMk+XWqEhyPf3qNyvDhZHR4Jvfgb3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT6aoxJw4Ca5z9Rq3Sc7HQBCUPxMB8GA1UdIwQY
MBaAFNdboFlNBlq3IkZc+jBe/41BYX+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hNmNhMGYtNTQ4OS00M2ExLWExYTUt
MmRlZjM4ZTQ1YmEwLzEvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9hNmNhMGYtNTQ4OS00M2ExLWExYTUtMmRlZjM4ZTQ1YmEw
LzEvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDtH/bWG
o66YNvHILTP9aZAfO0Ub9kseBDX1tI4FiOG/QFt9MSYg8nNgEs0boNGEFJ7+gIEM
ZfvyIr9cYblbIuFTH2KJX/BTcYl/ma7CyPJJGZDlkfM/Nv4hCfUN/q6amqptfsCi
1xsJFe7mgNaRDTvd8fUYP8Xkg1Xg6jH4a3b95ftz0FAm7+yuUEG2amHkOZ1fiwWj
ndoz3Bt2EoI6b7emFv+dz/V15mHERqxhJxtMSDll/BhE/kqSehXY3QONINYYgmfM
rnKbsvXfBXRQwOl7DNN5LROWtG6WIZFHEIGS9bQ91ZxskGpKLzEegbNQYrZalhc+
VsE6Dey5aquPrQ==
-----END CERTIFICATE-----
Generated at Sat May 10 05:16:58 2025 by rpki-client