Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          7AdFhDqUDoBgOpzx+Eeyo608+4JtAnMHrR4/a0zpuQo=
Subject key identifier:   C3:AC:C1:E8:FE:C4:73:A4:7E:2C:33:D3:9D:16:EB:FE:45:FB:10:1E
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       0196DB53A5EDBD71A06C93CD2E005FD187DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0C23
Signing time:             Fri 16 May 2025 23:00:14 +0000
Manifest this update:     Fri 16 May 2025 23:00:14 +0000
Manifest next update:     Sat 17 May 2025 23:00:14 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: ecFLgCCw95ralb2Zwf5G9K9Xfc9W/wsXdJUqOninERk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:53:a5:ed:bd:71:a0:6c:93:cd:2e:00:5f:d1:87:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: May 16 23:00:14 2025 GMT
            Not After : May 17 23:00:14 2025 GMT
        Subject: CN=c3acc1e8fec473a47e2c33d39d16ebfe45fb101e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:24:8a:f1:f8:6c:23:86:dc:0b:f6:d3:ee:
                    91:90:19:2a:bf:74:95:0d:a2:b8:cc:c8:96:01:6f:
                    21:0a:ab:7a:ae:a6:c6:45:1b:4b:de:36:74:92:3f:
                    0f:46:df:40:31:4b:ee:53:28:16:a6:33:d5:81:c2:
                    15:52:c2:d7:8c:95:0c:4a:0b:69:d7:ea:78:be:da:
                    6e:f7:4e:38:bc:80:22:26:a6:ad:8c:32:81:8b:5e:
                    e4:92:86:a6:38:16:ab:3c:35:58:6b:69:55:c6:c4:
                    b9:55:05:e7:d5:17:9c:6f:1d:62:d6:c9:e0:11:83:
                    ed:e5:c0:9a:92:f3:f2:57:86:bf:78:6b:4f:d9:51:
                    ae:25:7d:ec:25:8d:5f:f6:07:30:33:ca:6f:3f:e7:
                    96:2a:6a:ba:22:58:a1:40:d4:64:59:72:6a:35:4e:
                    63:2b:e3:fa:be:41:08:b0:59:e9:50:d0:2e:71:ee:
                    26:f8:0f:f9:04:5a:2d:f6:a1:eb:8b:07:bd:8c:55:
                    b9:57:cf:c9:bb:4b:2d:07:f0:e6:75:00:63:ca:42:
                    1d:b0:5a:4d:ed:19:ab:1b:96:47:db:da:71:8c:bc:
                    c7:10:a2:02:20:d1:88:27:e6:dc:12:f1:f2:c7:ac:
                    9a:62:21:30:27:be:72:bd:15:a3:6e:ba:4f:e0:71:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AC:C1:E8:FE:C4:73:A4:7E:2C:33:D3:9D:16:EB:FE:45:FB:10:1E
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:26:d8:b6:21:05:1b:71:05:ff:9a:f6:e2:41:75:52:5c:e9:
         89:8a:d8:e2:cb:f5:ac:12:0c:1b:19:f7:ef:de:4b:8b:93:f1:
         e8:99:32:c8:5f:eb:51:3e:28:37:b9:f7:4a:9d:c4:0b:df:47:
         a1:bf:87:fa:ce:f7:bc:03:39:1f:2e:62:d7:2f:f0:83:47:ce:
         17:64:56:a6:12:f2:a8:7f:cb:e4:ad:0d:e7:e9:de:3e:18:a2:
         78:e0:f1:33:95:6a:ca:9b:f7:06:e9:09:f7:80:a7:4b:e1:a3:
         85:4b:5e:b5:35:61:b3:03:43:30:c0:59:af:ee:87:ce:98:d8:
         d4:f3:95:58:34:d9:3c:2e:a5:94:19:f2:5c:1b:65:8b:dc:a8:
         06:dc:85:f4:74:46:37:9f:3b:e2:d5:09:f1:32:b8:3a:5f:1a:
         14:23:1f:61:41:95:ff:0f:72:5d:e8:b8:6a:d4:65:b4:c9:ce:
         1f:8d:df:1e:a3:ff:e0:74:fd:5d:d7:3b:63:22:6a:60:65:25:
         50:dc:c2:7c:37:62:61:e4:d6:1d:2b:b3:4f:88:c4:70:4c:b2:
         b9:e8:85:f2:e1:44:34:ec:9e:cd:fd:aa:49:f8:95:8c:df:60:
         12:09:e0:18:c6:7d:0f:2a:03:b9:2e:e0:6f:3c:35:99:63:08:
         7c:32:b2:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbbU6XtvXGgbJPNLgBf0YfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OGNmNWRmNzdlYjY2NmMwNGVmYjdlYmIzY2EzNDA0YWRl
YzM0ZmIwHhcNMjUwNTE2MjMwMDE0WhcNMjUwNTE3MjMwMDE0WjAzMTEwLwYDVQQD
EyhjM2FjYzFlOGZlYzQ3M2E0N2UyYzMzZDM5ZDE2ZWJmZTQ1ZmIxMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cAkivH4bCOG3Av20+6RkBkqv3SV
DaK4zMiWAW8hCqt6rqbGRRtL3jZ0kj8PRt9AMUvuUygWpjPVgcIVUsLXjJUMSgtp
1+p4vtpu9044vIAiJqatjDKBi17kkoamOBarPDVYa2lVxsS5VQXn1Recbx1i1sng
EYPt5cCakvPyV4a/eGtP2VGuJX3sJY1f9gcwM8pvP+eWKmq6IlihQNRkWXJqNU5j
K+P6vkEIsFnpUNAuce4m+A/5BFot9qHriwe9jFW5V8/Ju0stB/DmdQBjykIdsFpN
7RmrG5ZH29pxjLzHEKICINGIJ+bcEvHyx6yaYiEwJ75yvRWjbrpP4HFxpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOswej+xHOkfiwz050W6/5F+xAeMB8GA1UdIwQY
MBaAFOeM9d9362ZsBO+367PKNASt7DT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0Yjkt
MjExYjQzOTQ3MDA3LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0YjktMjExYjQzOTQ3MDA3
LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSbYtiEF
G3EF/5r24kF1UlzpiYrY4sv1rBIMGxn3795Li5Px6JkyyF/rUT4oN7n3Sp3EC99H
ob+H+s73vAM5Hy5i1y/wg0fOF2RWphLyqH/L5K0N5+nePhiieODxM5Vqypv3BukJ
94CnS+GjhUtetTVhswNDMMBZr+6HzpjY1POVWDTZPC6llBnyXBtli9yoBtyF9HRG
N5874tUJ8TK4Ol8aFCMfYUGV/w9yXei4atRltMnOH43fHqP/4HT9Xdc7YyJqYGUl
UNzCfDdiYeTWHSuzT4jEcEyyueiF8uFENOyezf2qSfiVjN9gEgngGMZ9DyoDuS7g
bzw1mWMIfDKy2w==
-----END CERTIFICATE-----
Generated at Sat May 17 02:31:27 2025 by rpki-client