Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
File:                     H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft (raw, json)
Hash identifier:          eAWkvCGX9aICwXnXZniAnBbuLUKYY3gSZf06Um+K9TM=
Subject key identifier:   C3:99:F5:3C:5E:5F:AC:68:E1:E2:2E:26:66:3E:57:EC:B7:06:08:1C
Authority key identifier: 1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
Certificate issuer:       /CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Certificate serial:       0196A277CFC1523806B46C399E4DB1F1A5FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
Manifest number:          1522
Signing time:             Mon 05 May 2025 22:01:22 +0000
Manifest this update:     Mon 05 May 2025 22:01:22 +0000
Manifest next update:     Tue 06 May 2025 22:01:22 +0000
Files and hashes:         1: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl (hash: Hm2LjGdh2g8idhWqI4u4GWTs9c1xW6+hrgUmuaCvpjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:cf:c1:52:38:06:b4:6c:39:9e:4d:b1:f1:a5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
        Validity
            Not Before: May  5 22:01:22 2025 GMT
            Not After : May  6 22:01:22 2025 GMT
        Subject: CN=c399f53c5e5fac68e1e22e26663e57ecb706081c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:cb:44:c5:68:8e:ac:59:41:c5:bc:84:94:
                    60:3f:8c:c5:57:58:78:a8:d4:d6:fa:f1:b0:0f:09:
                    2f:05:ca:3b:d4:ca:7c:bb:e8:fc:72:92:62:ba:53:
                    41:4a:da:46:7d:99:94:59:61:ec:2f:3d:24:a1:0f:
                    87:00:e1:98:c1:52:df:ac:10:a0:47:c8:69:99:76:
                    60:37:26:84:d3:44:85:ee:81:01:5b:b7:27:c4:c7:
                    a9:17:89:fa:ed:da:54:8c:a1:74:bd:13:63:45:fc:
                    1c:7f:f7:0b:05:61:f3:e4:c6:2a:24:99:ea:e6:31:
                    9f:e6:ed:35:6e:da:d4:32:f4:3b:41:99:aa:40:7f:
                    2c:80:8e:bc:58:a8:27:fb:df:b0:16:dc:fb:c3:2f:
                    55:ec:9a:50:6c:e3:70:1f:aa:d3:4a:d4:14:b9:1e:
                    b2:61:69:e0:d0:7d:f5:b7:1d:f1:93:4f:9b:a4:eb:
                    ea:c7:f0:bc:07:f9:38:6f:f6:e1:54:9e:8a:de:35:
                    dd:3e:5e:5d:7e:74:29:b2:9f:fb:05:ca:c0:d8:65:
                    40:15:b3:d8:12:d4:85:4f:d2:f5:1c:56:6c:cc:02:
                    83:db:5c:81:69:8e:5a:d1:2e:13:61:1e:36:e0:f8:
                    1c:ea:ca:e0:c9:f9:fe:d9:1e:ed:8b:61:a5:e1:f4:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:99:F5:3C:5E:5F:AC:68:E1:E2:2E:26:66:3E:57:EC:B7:06:08:1C
            X509v3 Authority Key Identifier:
                keyid:1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:eb:cc:4b:77:c8:74:7e:59:c1:fc:17:64:1e:79:a2:91:80:
         72:ca:4d:90:51:62:e8:9d:e9:27:66:99:90:68:00:25:20:e1:
         0c:4d:6d:56:19:2c:77:bb:3b:dd:c1:30:bb:15:a3:4b:b0:08:
         0b:a9:a4:80:26:e3:c6:8f:41:55:12:5a:40:7b:76:6c:80:7e:
         2f:8e:63:1a:9f:d5:b7:4a:15:53:92:32:18:ad:06:c1:4b:36:
         c4:e2:71:6c:e6:0f:12:ad:3e:f0:7d:fe:85:c4:55:d9:9b:08:
         b7:c5:40:50:a7:6f:21:32:3e:3b:af:f3:e2:31:7f:0d:63:60:
         6d:44:64:04:55:20:0d:2d:6e:ae:6f:c1:7a:73:45:03:05:59:
         91:39:dc:f6:56:98:82:c7:35:b8:8a:b7:f7:04:30:10:17:89:
         12:03:65:c6:7c:5a:07:b1:e1:b6:56:21:5e:94:7c:ad:1c:fc:
         fd:d1:c7:b1:e6:55:73:56:9d:f6:79:a6:3d:28:12:1e:73:8f:
         9e:d1:0a:d5:1a:5e:4d:68:a2:1e:f5:78:ce:9d:a8:5b:cb:14:
         b7:c8:56:ce:6e:b1:26:7e:f2:65:e3:df:93:28:05:11:65:13:
         a8:89:35:2e:99:79:b4:08:c8:80:81:59:b5:8d:b1:eb:d6:2e:
         a5:72:db:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid8/BUjgGtGw5nk2x8aX+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDlkOWU4NWRjMjU3MWZkMzZiMWI0NzQ2MzBmNThlYjkw
Y2ZmMjYwHhcNMjUwNTA1MjIwMTIyWhcNMjUwNTA2MjIwMTIyWjAzMTEwLwYDVQQD
EyhjMzk5ZjUzYzVlNWZhYzY4ZTFlMjJlMjY2NjNlNTdlY2I3MDYwODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB7LRMVojqxZQcW8hJRgP4zFV1h4
qNTW+vGwDwkvBco71Mp8u+j8cpJiulNBStpGfZmUWWHsLz0koQ+HAOGYwVLfrBCg
R8hpmXZgNyaE00SF7oEBW7cnxMepF4n67dpUjKF0vRNjRfwcf/cLBWHz5MYqJJnq
5jGf5u01btrUMvQ7QZmqQH8sgI68WKgn+9+wFtz7wy9V7JpQbONwH6rTStQUuR6y
YWng0H31tx3xk0+bpOvqx/C8B/k4b/bhVJ6K3jXdPl5dfnQpsp/7BcrA2GVAFbPY
EtSFT9L1HFZszAKD21yBaY5a0S4TYR424Pgc6srgyfn+2R7ti2Gl4fQvzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOZ9TxeX6xo4eIuJmY+V+y3BggcMB8GA1UdIwQY
MBaAFB/Z2ehdwlcf02sbR0Yw9Y65DP8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDluWjZGM0NWeF9UYXh0SFJqRDFqcmtNX3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yNmFmYTItNjQzNi00NDNjLWI3YWYt
YzA4YjE3Zjk5OTkzLzEvSDluWjZGM0NWeF9UYXh0SFJqRDFqcmtNX3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8yNmFmYTItNjQzNi00NDNjLWI3YWYtYzA4YjE3Zjk5OTkz
LzEvSDluWjZGM0NWeF9UYXh0SFJqRDFqcmtNX3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuvMS3fI
dH5ZwfwXZB55opGAcspNkFFi6J3pJ2aZkGgAJSDhDE1tVhksd7s73cEwuxWjS7AI
C6mkgCbjxo9BVRJaQHt2bIB+L45jGp/Vt0oVU5IyGK0GwUs2xOJxbOYPEq0+8H3+
hcRV2ZsIt8VAUKdvITI+O6/z4jF/DWNgbURkBFUgDS1urm/BenNFAwVZkTnc9laY
gsc1uIq39wQwEBeJEgNlxnxaB7HhtlYhXpR8rRz8/dHHseZVc1ad9nmmPSgSHnOP
ntEK1RpeTWiiHvV4zp2oW8sUt8hWzm6xJn7yZePfkygFEWUTqIk1Lpl5tAjIgIFZ
tY2x69YupXLb9g==
-----END CERTIFICATE-----
Generated at Tue May 6 03:54:33 2025 by rpki-client