Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File:                     xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier:          Ld2Q3NfUSPuxW0wgh9z9jl1Bjjzs0H70bIdpbOYlaKs=
Subject key identifier:   84:D5:7B:E3:4F:26:AB:5B:0A:A7:AE:58:76:89:CA:07:82:63:96:90
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer:       /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial:       01969D879062A8454420E09A90CAA0DE897A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number:          1024
Signing time:             Sun 04 May 2025 23:00:29 +0000
Manifest this update:     Sun 04 May 2025 23:00:29 +0000
Manifest next update:     Mon 05 May 2025 23:00:29 +0000
Files and hashes:         1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: gBI07TkBAososkXlHYGnR5hysZsBSeEnWJTHc2QRnPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:90:62:a8:45:44:20:e0:9a:90:ca:a0:de:89:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
        Validity
            Not Before: May  4 23:00:29 2025 GMT
            Not After : May  5 23:00:29 2025 GMT
        Subject: CN=84d57be34f26ab5b0aa7ae587689ca0782639690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:e3:21:77:2d:f8:b1:59:d4:91:cd:0f:5f:
                    9c:db:fc:53:94:ab:1f:ad:fb:ab:c3:b5:43:07:52:
                    96:e6:70:95:dc:cf:ac:5e:93:47:eb:cd:98:93:01:
                    d1:90:b6:03:78:bf:4d:67:fd:04:7f:23:9c:09:10:
                    27:63:fc:6a:8f:f1:28:1a:58:2c:70:2d:5e:a7:ab:
                    11:2b:0a:ab:8d:49:8c:61:55:bf:90:1a:1f:30:4b:
                    2f:ae:be:a0:47:52:31:2d:05:99:5e:04:af:00:22:
                    a2:88:5b:01:c7:88:fa:a4:ed:75:ff:60:1f:3f:5c:
                    ec:8d:70:c2:ff:8d:16:66:1d:54:06:b3:5b:66:05:
                    db:1a:d6:6a:45:dd:05:41:f7:3e:f6:bc:ca:75:e5:
                    1d:b2:91:05:97:30:04:81:c5:a2:c0:02:88:dc:26:
                    67:b4:37:56:f6:47:19:1b:ed:02:23:f5:9f:7c:ea:
                    6b:c4:d9:81:c9:7f:d3:21:89:67:f8:a3:12:c3:b5:
                    05:e8:7d:80:06:e8:9e:06:1f:78:d0:36:8a:7e:07:
                    2d:45:e8:16:2b:a6:b3:c1:46:3f:c9:9b:85:ea:c3:
                    64:e2:9f:f8:ee:1e:bd:88:9a:00:23:7e:fc:f4:8f:
                    ad:23:da:fb:dc:43:10:5c:f1:87:be:10:f6:c1:47:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D5:7B:E3:4F:26:AB:5B:0A:A7:AE:58:76:89:CA:07:82:63:96:90
            X509v3 Authority Key Identifier:
                keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:03:e5:1f:36:2c:78:24:3e:5a:28:24:d1:99:0e:0a:b0:
         14:78:3d:bd:f0:1c:98:60:5c:1f:26:c5:cb:6e:ae:49:ef:cd:
         71:5b:e5:2d:95:7b:5c:8a:a9:3e:a8:53:94:87:b7:25:8a:b5:
         b8:59:62:dd:c7:0b:8c:09:9e:1a:61:ac:60:21:42:c5:78:9b:
         86:bf:57:3e:4b:9e:97:28:2d:d5:84:07:00:be:24:ba:32:41:
         82:1e:75:28:82:42:e6:ea:63:ce:36:aa:7a:17:03:d3:c0:92:
         e0:c6:58:ba:76:c2:dd:28:7b:9d:87:e9:f0:cb:4f:20:82:8b:
         9a:05:23:9f:4a:81:2b:62:4f:60:d7:2e:ce:36:d3:7c:7e:d4:
         8f:30:92:05:50:f0:5e:bb:fd:4e:36:88:b5:cd:dd:dc:c9:45:
         7c:04:4c:58:2b:54:eb:55:65:88:cf:39:6d:43:e8:08:1b:85:
         26:fa:88:a5:94:b6:b5:89:d2:98:8e:19:a9:55:18:d1:be:93:
         dc:fe:0e:7a:ca:14:6b:9d:49:88:a4:fd:30:f8:f3:ed:d0:96:
         12:66:f5:1f:51:fa:57:74:3b:4f:3b:2d:08:22:1e:e4:29:08:
         ba:24:d2:09:15:72:d3:a1:2a:af:cd:70:9d:01:f2:45:5c:7a:
         a7:b3:ed:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh5BiqEVEIOCakMqg3ol6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmZiNjEwNTNiYTJkYWJjNTE3MTViMGY1M2NkN2I2Yjk0
NTRkMGMwHhcNMjUwNTA0MjMwMDI5WhcNMjUwNTA1MjMwMDI5WjAzMTEwLwYDVQQD
Eyg4NGQ1N2JlMzRmMjZhYjViMGFhN2FlNTg3Njg5Y2EwNzgyNjM5NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOLjIXct+LFZ1JHND1+c2/xTlKsf
rfurw7VDB1KW5nCV3M+sXpNH682YkwHRkLYDeL9NZ/0EfyOcCRAnY/xqj/EoGlgs
cC1ep6sRKwqrjUmMYVW/kBofMEsvrr6gR1IxLQWZXgSvACKiiFsBx4j6pO11/2Af
P1zsjXDC/40WZh1UBrNbZgXbGtZqRd0FQfc+9rzKdeUdspEFlzAEgcWiwAKI3CZn
tDdW9kcZG+0CI/WffOprxNmByX/TIYln+KMSw7UF6H2ABuieBh940DaKfgctRegW
K6azwUY/yZuF6sNk4p/47h69iJoAI3789I+tI9r73EMQXPGHvhD2wUeunQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITVe+NPJqtbCqeuWHaJygeCY5aQMB8GA1UdIwQY
MBaAFMQvthBTui2rxRcVsPU817a5RU0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjIt
OGYxMWY2Mjc1YWFmLzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjItOGYxMWY2Mjc1YWFm
LzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU8D5R82
LHgkPlooJNGZDgqwFHg9vfAcmGBcHybFy26uSe/NcVvlLZV7XIqpPqhTlIe3JYq1
uFli3ccLjAmeGmGsYCFCxXibhr9XPkuelygt1YQHAL4kujJBgh51KIJC5upjzjaq
ehcD08CS4MZYunbC3Sh7nYfp8MtPIIKLmgUjn0qBK2JPYNcuzjbTfH7UjzCSBVDw
Xrv9TjaItc3d3MlFfARMWCtU61VliM85bUPoCBuFJvqIpZS2tYnSmI4ZqVUY0b6T
3P4OesoUa51JiKT9MPjz7dCWEmb1H1H6V3Q7TzstCCIe5CkIuiTSCRVy06Eqr81w
nQHyRVx6p7Ptug==
-----END CERTIFICATE-----
Generated at Mon May 5 04:00:48 2025 by rpki-client