Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File:                     l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier:          4Byvjnr/kJlhag9DIdfh7TEIzN9oKMUnvqKTeKtr7lc=
Subject key identifier:   1E:E7:7F:DE:66:07:E8:27:C9:5B:C1:05:5B:98:C4:DA:0A:AF:5E:7C
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer:       /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial:       0196C68380A4D56E3880DA476261D2A03BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number:          132F
Signing time:             Mon 12 May 2025 22:00:28 +0000
Manifest this update:     Mon 12 May 2025 22:00:28 +0000
Manifest next update:     Tue 13 May 2025 22:00:28 +0000
Files and hashes:         1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
                          2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: gDP1dE7oi07+jZDqXTf3F1Eil0kvk3OZ/sTDQ/+0lhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:80:a4:d5:6e:38:80:da:47:62:61:d2:a0:3b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
        Validity
            Not Before: May 12 22:00:28 2025 GMT
            Not After : May 13 22:00:28 2025 GMT
        Subject: CN=1ee77fde6607e827c95bc1055b98c4da0aaf5e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a5:04:61:d3:54:84:d5:d4:ab:28:2e:fe:96:
                    be:c9:e6:02:98:4f:9b:9e:75:6b:15:f0:53:88:27:
                    c1:c9:fc:57:d4:46:67:ee:ea:19:65:1d:f4:8d:a8:
                    dd:ac:ea:92:60:1e:34:a4:bf:cf:56:c6:93:d3:76:
                    e4:c0:b2:f6:e2:c8:58:1a:b1:49:5f:c1:3e:03:c3:
                    bc:11:65:39:4e:23:14:81:98:b3:e8:46:bb:c0:2b:
                    f6:48:b7:26:a1:cb:d8:a6:8f:c5:23:ff:8c:4a:31:
                    78:a9:a0:a7:a1:96:08:cc:81:8a:d7:f7:da:87:b5:
                    f5:18:3d:98:9b:13:d3:8d:61:43:41:fb:89:e7:2f:
                    04:12:93:ae:6b:26:48:7d:3c:28:d7:75:e4:93:a3:
                    1b:ce:28:9d:ef:a4:26:37:de:a2:06:d9:a8:27:5b:
                    22:bf:f6:0c:2d:5e:48:e0:d1:d2:44:2a:01:73:27:
                    a3:e9:0f:bf:66:6e:9f:29:f6:19:12:6b:c9:4c:c7:
                    1c:e1:d6:68:5d:2d:c7:41:a8:7e:b5:b0:f1:ed:c0:
                    aa:f3:9c:f3:d9:cd:0a:50:e9:77:87:61:36:47:bd:
                    5a:46:70:b4:5e:2a:2c:fb:c5:31:2c:1c:95:2f:60:
                    a4:35:9b:9d:49:d8:30:5d:9e:40:d4:f5:92:ff:08:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E7:7F:DE:66:07:E8:27:C9:5B:C1:05:5B:98:C4:DA:0A:AF:5E:7C
            X509v3 Authority Key Identifier:
                keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:b8:d9:93:03:24:e1:93:4f:7a:a1:20:98:e4:65:77:e8:
         25:0c:f7:90:be:60:ff:47:43:51:9a:9e:38:76:35:e0:bb:5e:
         92:33:76:77:e4:6e:3a:71:70:4c:d8:0e:f3:8c:c5:52:09:e9:
         2d:ba:b4:63:90:e6:81:40:4f:66:fd:13:33:43:ca:7f:27:0a:
         e0:e5:e6:e9:7e:fe:56:42:d5:a4:31:4e:51:a9:22:88:ac:1c:
         5b:97:8b:20:ce:40:98:12:c8:6a:1b:84:99:24:8b:68:af:cb:
         cb:2a:b0:06:46:50:68:76:cb:0c:71:03:53:e8:02:0c:62:47:
         5b:c6:8b:1b:02:c3:68:26:e8:b4:2c:ad:0f:ee:06:43:38:11:
         0b:c5:98:f2:70:4e:81:7a:c5:73:03:bc:5f:71:5c:43:bd:8d:
         82:5f:cf:f5:f2:b9:6a:9f:8f:e9:92:a7:7f:a5:ac:65:cd:2b:
         ab:5e:7a:0a:88:27:dc:cc:41:a9:2f:35:27:09:58:d9:9a:63:
         fc:57:4a:27:d9:17:6c:6b:2d:98:35:5b:86:76:a0:33:30:13:
         45:32:8a:b9:bf:65:de:d4:02:d0:c6:6f:c7:48:a8:9d:e2:86:
         69:38:c5:38:51:34:a6:5c:1d:14:40:1a:00:c5:2d:b6:f3:ff:
         17:5a:59:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGg4Ck1W44gNpHYmHSoDvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDg4MjhkN2I5OWIwYTk3MDE3ZWMyNmJjYmVmZTk2ZmRi
ZTk1NzkwHhcNMjUwNTEyMjIwMDI4WhcNMjUwNTEzMjIwMDI4WjAzMTEwLwYDVQQD
EygxZWU3N2ZkZTY2MDdlODI3Yzk1YmMxMDU1Yjk4YzRkYTBhYWY1ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qUEYdNUhNXUqygu/pa+yeYCmE+b
nnVrFfBTiCfByfxX1EZn7uoZZR30jajdrOqSYB40pL/PVsaT03bkwLL24shYGrFJ
X8E+A8O8EWU5TiMUgZiz6Ea7wCv2SLcmocvYpo/FI/+MSjF4qaCnoZYIzIGK1/fa
h7X1GD2YmxPTjWFDQfuJ5y8EEpOuayZIfTwo13Xkk6Mbziid76QmN96iBtmoJ1si
v/YMLV5I4NHSRCoBcyej6Q+/Zm6fKfYZEmvJTMcc4dZoXS3HQah+tbDx7cCq85zz
2c0KUOl3h2E2R71aRnC0Xios+8UxLByVL2CkNZudSdgwXZ5A1PWS/wiNNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7nf95mB+gnyVvBBVuYxNoKr158MB8GA1UdIwQY
MBaAFJdIgo17mbCpcBfsJry+/pb9vpV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgt
YTRhMDc1Mzk4YjBlLzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgtYTRhMDc1Mzk4YjBl
LzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocG42ZMD
JOGTT3qhIJjkZXfoJQz3kL5g/0dDUZqeOHY14LtekjN2d+RuOnFwTNgO84zFUgnp
Lbq0Y5DmgUBPZv0TM0PKfycK4OXm6X7+VkLVpDFOUakiiKwcW5eLIM5AmBLIahuE
mSSLaK/LyyqwBkZQaHbLDHEDU+gCDGJHW8aLGwLDaCbotCytD+4GQzgRC8WY8nBO
gXrFcwO8X3FcQ72Ngl/P9fK5ap+P6ZKnf6WsZc0rq156Cogn3MxBqS81JwlY2Zpj
/FdKJ9kXbGstmDVbhnagMzATRTKKub9l3tQC0MZvx0ioneKGaTjFOFE0plwdFEAa
AMUttvP/F1pZmg==
-----END CERTIFICATE-----
Generated at Tue May 13 06:21:27 2025 by rpki-client