Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File:                     Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier:          icm/SiTs2jUUko8cgjfa/Qq1gcT510VpJjxHcRKz/DA=
Subject key identifier:   07:BE:D2:46:18:07:3B:A0:16:99:B6:85:81:7F:3A:D8:88:C5:46:22
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer:       /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial:       0196C15D1EF0EAFA10AFC7DCA39786E78BA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number:          0F5A
Signing time:             Sun 11 May 2025 22:00:27 +0000
Manifest this update:     Sun 11 May 2025 22:00:27 +0000
Manifest next update:     Mon 12 May 2025 22:00:27 +0000
Files and hashes:         1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: 3384Lxyb6xEpxiYmkkb1WzfYFTglhy64Sxm0kils9Hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:1e:f0:ea:fa:10:af:c7:dc:a3:97:86:e7:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
        Validity
            Not Before: May 11 22:00:27 2025 GMT
            Not After : May 12 22:00:27 2025 GMT
        Subject: CN=07bed24618073ba01699b685817f3ad888c54622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:39:28:c2:5c:b9:da:bf:ea:6e:24:44:ae:
                    77:18:f0:51:6e:03:8a:e8:ca:5c:71:8e:6f:9c:f3:
                    58:53:a5:88:4d:5b:ed:12:7b:a7:f5:f4:db:8f:93:
                    5c:59:cb:4f:36:6d:4e:c1:24:df:c7:43:72:8b:cb:
                    19:97:17:9f:67:52:73:95:9f:4b:25:5a:30:30:56:
                    3f:b6:55:2e:bf:26:f1:ce:dc:7a:ba:27:e4:f9:15:
                    3e:41:6b:1d:b0:17:15:23:f5:4e:ad:d2:ee:f9:7e:
                    1a:9a:d5:b8:a0:60:d5:d7:bf:51:d9:87:27:db:00:
                    29:50:1a:e3:24:ba:35:48:3e:c0:ff:d9:87:bd:59:
                    63:6d:32:4a:86:61:3f:a3:74:0a:07:86:08:11:db:
                    ae:23:95:c3:0d:13:2a:07:31:1e:51:d5:ed:eb:91:
                    e3:b1:f7:c1:ab:9d:b9:91:62:2a:98:56:89:06:56:
                    3f:ac:ed:36:d5:4b:a9:dc:52:66:6d:f8:c5:d8:b8:
                    4b:85:f9:06:37:cb:c9:6a:9d:3f:c9:23:5e:fa:5a:
                    ca:34:fe:9b:c1:24:10:f9:ef:90:46:42:18:d1:eb:
                    dd:17:75:ed:c0:b5:22:50:1d:16:82:c4:77:6a:ce:
                    7c:ae:d7:cf:ed:e2:61:85:01:cf:9e:ab:74:1b:45:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BE:D2:46:18:07:3B:A0:16:99:B6:85:81:7F:3A:D8:88:C5:46:22
            X509v3 Authority Key Identifier:
                keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7a:5b:76:72:27:01:77:4e:be:e7:22:e9:5e:a4:d6:d3:d7:
         6e:14:f3:74:17:b5:7e:08:9e:34:8b:39:01:c8:52:39:1f:3e:
         43:aa:4c:64:f6:33:ab:f9:36:5b:51:e6:bf:c8:5d:bc:a8:ab:
         0b:99:d3:27:61:50:01:eb:e5:1a:54:ae:ac:8a:63:e0:9b:08:
         3d:5c:67:c9:c8:ac:8c:7a:44:1c:c6:b1:69:5f:e2:d4:8a:d3:
         e4:9d:70:73:08:09:52:35:4e:52:e0:0c:b2:6a:2f:5a:17:e4:
         31:34:a5:f0:bf:cc:5f:ae:2b:72:d1:1d:21:09:ae:53:61:37:
         2e:5e:36:69:08:7a:4e:60:ea:51:da:e0:89:cf:d2:2a:1d:ee:
         02:7f:e0:df:dc:d0:4b:c9:0e:a4:72:3d:de:03:96:27:f9:ac:
         83:12:d0:df:25:b4:77:aa:60:56:64:2f:01:29:ac:52:e2:fd:
         00:dc:30:7e:f0:97:e7:05:e6:87:da:e4:21:9b:bc:ca:49:42:
         0a:56:21:5c:5d:cc:09:45:69:8b:9a:6b:af:37:7e:46:93:7d:
         17:ab:34:42:8a:1e:f0:8b:2d:44:7e:4f:fc:36:ae:00:6f:6e:
         3a:a6:55:52:8c:e7:eb:0a:fb:35:94:89:28:05:85:fa:8c:0a:
         7e:e1:2c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXR7w6voQr8fco5eG54ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGQ5ZDhiMDUwNDU1NTY3NmI5MThlZTM5MWRjMTUzYTk4
N2UzOGEwHhcNMjUwNTExMjIwMDI3WhcNMjUwNTEyMjIwMDI3WjAzMTEwLwYDVQQD
EygwN2JlZDI0NjE4MDczYmEwMTY5OWI2ODU4MTdmM2FkODg4YzU0NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn85KMJcudq/6m4kRK53GPBRbgOK
6MpccY5vnPNYU6WITVvtEnun9fTbj5NcWctPNm1OwSTfx0Nyi8sZlxefZ1JzlZ9L
JVowMFY/tlUuvybxztx6uifk+RU+QWsdsBcVI/VOrdLu+X4amtW4oGDV179R2Ycn
2wApUBrjJLo1SD7A/9mHvVljbTJKhmE/o3QKB4YIEduuI5XDDRMqBzEeUdXt65Hj
sffBq525kWIqmFaJBlY/rO021Uup3FJmbfjF2LhLhfkGN8vJap0/ySNe+lrKNP6b
wSQQ+e+QRkIY0evdF3XtwLUiUB0WgsR3as58rtfP7eJhhQHPnqt0G0VunQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe+0kYYBzugFpm2hYF/OtiIxUYiMB8GA1UdIwQY
MBaAFDJNnYsFBFVWdrkY7jkdwVOph+OKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWsyZGl3VUVWVloydVJqdU9SM0JVNm1INDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xNmViMDMtNDE0YS00ODUyLTgxZGEt
ZGIyNjFhYTQ2ZjIxLzEvTWsyZGl3VUVWVloydVJqdU9SM0JVNm1INDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xNmViMDMtNDE0YS00ODUyLTgxZGEtZGIyNjFhYTQ2ZjIx
LzEvTWsyZGl3VUVWVloydVJqdU9SM0JVNm1INDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXpbdnIn
AXdOvuci6V6k1tPXbhTzdBe1fgieNIs5AchSOR8+Q6pMZPYzq/k2W1Hmv8hdvKir
C5nTJ2FQAevlGlSurIpj4JsIPVxnycisjHpEHMaxaV/i1IrT5J1wcwgJUjVOUuAM
smovWhfkMTSl8L/MX64rctEdIQmuU2E3Ll42aQh6TmDqUdrgic/SKh3uAn/g39zQ
S8kOpHI93gOWJ/msgxLQ3yW0d6pgVmQvASmsUuL9ANwwfvCX5wXmh9rkIZu8yklC
ClYhXF3MCUVpi5prrzd+RpN9F6s0Qooe8IstRH5P/DauAG9uOqZVUozn6wr7NZSJ
KAWF+owKfuEsew==
-----END CERTIFICATE-----
Generated at Mon May 12 02:18:37 2025 by rpki-client