Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File:                     lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier:          UG/HrTdLiyay1skU07gUJkaZ3iwdnZIi5yNL43/8oYQ=
Subject key identifier:   94:23:18:05:A3:81:C6:5D:4D:D4:49:04:3D:BB:B2:E2:6E:5D:F9:08
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer:       /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial:       0196B7102FCB7E3FA0D291396B08020A3EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number:          07F0
Signing time:             Fri 09 May 2025 22:00:13 +0000
Manifest this update:     Fri 09 May 2025 22:00:13 +0000
Manifest next update:     Sat 10 May 2025 22:00:13 +0000
Files and hashes:         1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: 3Oxj7FrS0X08BP12J/A0qZSzmPqaVsK6Fl2fP8MfwRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:10:2f:cb:7e:3f:a0:d2:91:39:6b:08:02:0a:3e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
        Validity
            Not Before: May  9 22:00:13 2025 GMT
            Not After : May 10 22:00:13 2025 GMT
        Subject: CN=94231805a381c65d4dd449043dbbb2e26e5df908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:aa:b2:c6:46:09:00:0f:4e:b3:4e:ab:63:
                    d1:ee:88:17:bb:ab:a8:7c:e7:a5:8e:cd:5c:74:f5:
                    a6:00:2e:37:27:3c:e7:bf:5b:0d:60:04:58:ec:17:
                    a9:c5:67:db:65:33:0b:11:20:43:c3:2b:e9:da:55:
                    93:0d:89:38:92:17:99:09:b4:7a:78:a6:1f:e5:83:
                    34:8d:d3:fb:ba:25:e6:3d:f6:59:0b:cb:51:23:4b:
                    54:8b:74:29:ee:6a:6b:36:ef:eb:53:d1:65:53:3d:
                    75:58:06:d4:90:d6:98:60:91:d4:53:40:06:94:1b:
                    fc:70:0d:bd:66:b6:6d:cd:0d:94:cd:48:b3:1e:fb:
                    5a:84:c3:b2:d5:e8:aa:4a:20:c3:3b:be:15:0e:43:
                    77:ca:84:bc:4d:b9:59:d1:ad:bd:55:c8:03:58:81:
                    7b:99:b1:f1:7d:0c:fe:bf:a6:27:b0:54:a9:6c:27:
                    ab:11:3e:30:53:6b:6e:6b:c7:17:a9:3c:4c:12:1b:
                    52:e6:49:30:61:3c:34:b6:1a:c7:f4:da:df:4a:5a:
                    d1:03:cf:1f:65:b1:05:c0:cf:b3:b1:15:3c:28:b9:
                    71:ff:41:e2:d7:c4:02:24:46:83:05:12:a9:95:3d:
                    e3:38:13:98:77:b1:e8:f3:4d:0f:e6:ac:40:a4:61:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:23:18:05:A3:81:C6:5D:4D:D4:49:04:3D:BB:B2:E2:6E:5D:F9:08
            X509v3 Authority Key Identifier:
                keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:7a:08:bc:f6:76:14:90:34:4b:80:19:22:a2:6f:37:7f:
         ec:d7:32:8a:fa:2f:7e:fa:8a:76:a0:03:3d:ba:45:27:af:de:
         ed:34:f6:68:65:85:bb:fe:dd:11:93:7c:73:a1:74:d2:b2:6d:
         f7:73:a6:6b:6f:b7:da:56:4c:2a:38:5f:63:8d:15:1d:f4:7a:
         19:40:85:f9:c8:31:13:89:52:8e:74:3d:da:3a:69:c6:e9:c8:
         d3:0c:d7:5f:4d:9c:2d:a5:6c:39:e5:93:1f:1b:22:23:4d:f1:
         93:c3:4c:fc:fc:27:0c:21:e2:a2:4c:0c:d1:9b:d0:39:da:81:
         fb:b5:82:8f:96:55:2c:5e:46:00:51:75:45:f6:77:68:73:04:
         c8:67:e2:bd:f3:7f:86:e1:fd:1e:3a:1a:dd:d8:ab:0c:ab:55:
         11:56:62:c5:b6:57:0c:25:dc:14:42:5d:33:9c:9a:be:d5:62:
         cf:08:c1:26:92:fb:52:4c:ae:f3:d0:5d:ee:f7:09:b1:9f:2e:
         a4:c7:95:05:0a:bc:3f:c4:76:cb:a3:1f:e0:03:d1:3e:7e:45:
         81:e4:85:7d:b2:2c:79:28:0a:9d:20:0d:3b:87:f2:64:56:df:
         fd:4e:ba:fc:c1:2c:3a:78:fb:08:3f:bc:5e:bc:48:d4:e3:ff:
         f7:47:45:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EC/Lfj+g0pE5awgCCj7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjlkMzUwNmI3N2MxYWVmNWIxMzcwZGFhMmJiNGJjZTM4
MDZjOTQwHhcNMjUwNTA5MjIwMDEzWhcNMjUwNTEwMjIwMDEzWjAzMTEwLwYDVQQD
Eyg5NDIzMTgwNWEzODFjNjVkNGRkNDQ5MDQzZGJiYjJlMjZlNWRmOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0haqssZGCQAPTrNOq2PR7ogXu6uo
fOeljs1cdPWmAC43Jzznv1sNYARY7BepxWfbZTMLESBDwyvp2lWTDYk4kheZCbR6
eKYf5YM0jdP7uiXmPfZZC8tRI0tUi3Qp7mprNu/rU9FlUz11WAbUkNaYYJHUU0AG
lBv8cA29ZrZtzQ2UzUizHvtahMOy1eiqSiDDO74VDkN3yoS8TblZ0a29VcgDWIF7
mbHxfQz+v6YnsFSpbCerET4wU2tua8cXqTxMEhtS5kkwYTw0thrH9NrfSlrRA88f
ZbEFwM+zsRU8KLlx/0Hi18QCJEaDBRKplT3jOBOYd7Ho800P5qxApGFkmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQjGAWjgcZdTdRJBD27suJuXfkIMB8GA1UdIwQY
MBaAFJRp01Brd8Gu9bE3DaortLzjgGyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEt
NzExNmEzMGRhOTQ1LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEtNzExNmEzMGRhOTQ1
LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW16CLz2
dhSQNEuAGSKibzd/7NcyivovfvqKdqADPbpFJ6/e7TT2aGWFu/7dEZN8c6F00rJt
93Oma2+32lZMKjhfY40VHfR6GUCF+cgxE4lSjnQ92jppxunI0wzXX02cLaVsOeWT
HxsiI03xk8NM/PwnDCHiokwM0ZvQOdqB+7WCj5ZVLF5GAFF1RfZ3aHMEyGfivfN/
huH9Hjoa3dirDKtVEVZixbZXDCXcFEJdM5yavtVizwjBJpL7Ukyu89Bd7vcJsZ8u
pMeVBQq8P8R2y6Mf4APRPn5FgeSFfbIseSgKnSANO4fyZFbf/U66/MEsOnj7CD+8
XrxI1OP/90dFFA==
-----END CERTIFICATE-----
Generated at Fri May 9 23:48:01 2025 by rpki-client