Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File:                     Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier:          rAAZDZamG5M9XGt5VjXfpO7g0Fgu1JHwoTxObYhOs4g=
Subject key identifier:   58:E7:C3:5B:86:E8:3C:27:57:C8:A2:29:AF:A7:89:6E:47:DF:F0:D6
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer:       /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial:       01969F08A5E6F3709D4E50C1E577D67C2CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number:          0C1B
Signing time:             Mon 05 May 2025 06:01:06 +0000
Manifest this update:     Mon 05 May 2025 06:01:06 +0000
Manifest next update:     Tue 06 May 2025 06:01:06 +0000
Files and hashes:         1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: b3TAH411eLi1fkdwu2t94oLjvQJE2UpfsI6b+BIoyFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:a5:e6:f3:70:9d:4e:50:c1:e5:77:d6:7c:2c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
        Validity
            Not Before: May  5 06:01:06 2025 GMT
            Not After : May  6 06:01:06 2025 GMT
        Subject: CN=58e7c35b86e83c2757c8a229afa7896e47dff0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:27:b0:1a:61:69:8f:64:4e:7e:09:46:4e:
                    58:d5:63:55:5a:79:34:be:74:ab:03:b2:39:04:6b:
                    8b:4b:c2:14:86:1d:0b:aa:1a:90:4d:58:0c:68:24:
                    7c:f2:91:ae:b4:ae:d2:78:eb:12:f5:7b:b7:24:f1:
                    bd:93:d9:08:00:f9:32:df:3c:44:76:cb:56:dc:fb:
                    cd:3e:12:97:a4:e0:18:56:6e:5f:83:1d:ab:59:f6:
                    e1:c1:7a:e7:5b:a5:67:1c:75:e4:d5:78:69:d5:e9:
                    c3:d1:d2:39:55:8d:1e:42:ac:f5:9a:fc:26:5a:c9:
                    4d:45:16:56:cd:77:0f:30:43:fc:bc:d0:18:5c:66:
                    24:ac:76:8a:6b:75:15:82:b3:79:fe:4d:cc:09:25:
                    9e:6e:73:88:62:41:8b:01:a0:27:06:96:10:a2:31:
                    27:c6:4f:9b:a9:80:63:21:f2:e4:e4:17:d8:87:4c:
                    96:08:cb:7a:12:72:b9:26:66:58:91:51:0e:7c:da:
                    54:71:dc:96:23:28:23:4f:df:c3:58:f9:a3:e9:e3:
                    ce:70:98:c3:12:e6:11:da:01:fb:9a:39:dc:e1:70:
                    56:15:93:65:e1:91:1a:1f:0d:cc:ca:95:65:f6:70:
                    b8:6f:9c:a6:2a:52:3e:de:b6:d4:7f:ca:a7:97:6e:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E7:C3:5B:86:E8:3C:27:57:C8:A2:29:AF:A7:89:6E:47:DF:F0:D6
            X509v3 Authority Key Identifier:
                keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:22:07:96:0d:74:4c:7d:98:4f:24:ef:78:f7:6d:ae:b4:d8:
         ea:2c:67:7d:c4:a5:22:7d:c1:98:a3:1b:29:74:4d:cf:5a:86:
         78:69:b3:7b:8f:7f:22:19:e3:ac:59:1b:40:68:2f:8e:c5:96:
         9f:00:a1:6c:77:9d:f9:7b:07:1d:6c:86:e5:f4:de:e4:3f:70:
         c0:75:ab:06:95:8d:85:d9:8b:86:b3:06:e9:23:4a:22:b1:eb:
         5b:bd:73:32:d9:a8:44:30:42:0e:9e:8c:94:c9:bb:fc:94:5d:
         c2:6a:af:ea:4f:33:c5:1f:7d:92:24:66:04:17:2b:54:8b:f9:
         c8:be:1e:bf:c3:a2:10:17:e5:50:13:84:36:f1:30:14:05:dd:
         49:66:1d:c7:aa:80:f7:7b:04:1b:38:d6:dc:94:12:4b:d1:9b:
         3d:a2:51:14:b2:85:5c:ac:37:53:c8:0b:9a:0b:ae:63:61:02:
         97:c4:83:5e:1d:34:49:37:4d:9a:f8:65:68:d7:9e:f1:d2:fd:
         7e:95:2c:ea:12:06:9f:3c:13:0a:76:fb:ec:c2:94:f6:b2:f3:
         b0:6a:05:b9:cc:00:7b:5f:25:66:1e:8d:ea:f4:0a:00:6a:9e:
         09:a2:88:39:d1:7d:7c:88:32:f6:fe:ac:aa:2c:91:d6:ff:50:
         41:12:44:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCKXm83CdTlDB5XfWfCzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGY4YWU0YTI2N2M4MTJmMjQyYmYwMmMwNjRlYjkyODdj
MzUxNTUwHhcNMjUwNTA1MDYwMTA2WhcNMjUwNTA2MDYwMTA2WjAzMTEwLwYDVQQD
Eyg1OGU3YzM1Yjg2ZTgzYzI3NTdjOGEyMjlhZmE3ODk2ZTQ3ZGZmMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfEnsBphaY9kTn4JRk5Y1WNVWnk0
vnSrA7I5BGuLS8IUhh0LqhqQTVgMaCR88pGutK7SeOsS9Xu3JPG9k9kIAPky3zxE
dstW3PvNPhKXpOAYVm5fgx2rWfbhwXrnW6VnHHXk1Xhp1enD0dI5VY0eQqz1mvwm
WslNRRZWzXcPMEP8vNAYXGYkrHaKa3UVgrN5/k3MCSWebnOIYkGLAaAnBpYQojEn
xk+bqYBjIfLk5BfYh0yWCMt6EnK5JmZYkVEOfNpUcdyWIygjT9/DWPmj6ePOcJjD
EuYR2gH7mjnc4XBWFZNl4ZEaHw3MypVl9nC4b5ymKlI+3rbUf8qnl24/pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjnw1uG6DwnV8iiKa+niW5H3/DWMB8GA1UdIwQY
MBaAFEaPiuSiZ8gS8kK/AsBk65KHw1FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUt
N2E0MDdkYTY2NmQ0LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUtN2E0MDdkYTY2NmQ0
LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSIHlg10
TH2YTyTvePdtrrTY6ixnfcSlIn3BmKMbKXRNz1qGeGmze49/IhnjrFkbQGgvjsWW
nwChbHed+XsHHWyG5fTe5D9wwHWrBpWNhdmLhrMG6SNKIrHrW71zMtmoRDBCDp6M
lMm7/JRdwmqv6k8zxR99kiRmBBcrVIv5yL4ev8OiEBflUBOENvEwFAXdSWYdx6qA
93sEGzjW3JQSS9GbPaJRFLKFXKw3U8gLmguuY2ECl8SDXh00STdNmvhlaNee8dL9
fpUs6hIGnzwTCnb77MKU9rLzsGoFucwAe18lZh6N6vQKAGqeCaKIOdF9fIgy9v6s
qiyR1v9QQRJENQ==
-----END CERTIFICATE-----
Generated at Mon May 5 10:17:25 2025 by rpki-client