Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File:                     pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier:          UWSiLirlRXRLi4KCsw9v8ao1k80SptnZgzKJ1j0rqqQ=
Subject key identifier:   EA:53:05:ED:16:3E:92:69:96:79:42:08:97:4F:BD:F7:0B:99:19:96
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer:       /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial:       01969DBE533BF4548A7D1FDB1B7653CFBBEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number:          1520
Signing time:             Mon 05 May 2025 00:00:18 +0000
Manifest this update:     Mon 05 May 2025 00:00:18 +0000
Manifest next update:     Tue 06 May 2025 00:00:18 +0000
Files and hashes:         1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: SBXh5ANPwdyDBxccFXoXzijqrCWD4opY9GzS0MTi1O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:53:3b:f4:54:8a:7d:1f:db:1b:76:53:cf:bb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
        Validity
            Not Before: May  5 00:00:18 2025 GMT
            Not After : May  6 00:00:18 2025 GMT
        Subject: CN=ea5305ed163e926996794208974fbdf70b991996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:34:0e:6d:6d:1b:56:5c:ce:8b:f5:48:6d:
                    1f:e8:72:45:20:fd:29:82:99:95:50:fe:bc:02:52:
                    b9:39:b6:7e:6e:e2:25:d6:f0:ba:da:5c:5a:aa:c5:
                    72:a2:9b:6c:69:8f:e4:e8:12:91:7f:87:99:1e:b3:
                    2e:e4:38:ba:d4:ff:11:07:21:a2:8a:de:b0:83:dc:
                    3f:e5:dc:6f:d3:f0:0f:1a:65:be:78:e6:0a:4b:60:
                    ac:cf:62:b1:c8:55:c3:1d:e3:28:5e:05:09:1a:46:
                    86:76:1e:4f:3b:a4:fa:50:c8:55:99:18:a1:e6:a5:
                    ed:3f:e0:b4:34:be:fa:ec:71:17:74:74:e0:af:bb:
                    cd:a0:04:36:24:d7:74:53:3c:af:29:71:4e:f8:99:
                    7e:fa:68:4c:0b:c2:d8:1a:ea:2c:7c:af:8d:44:2c:
                    63:b7:05:e2:ab:1d:d1:99:39:81:e3:69:ff:a7:73:
                    e3:fb:0d:a8:9a:2c:8b:07:56:31:22:9f:c5:68:0b:
                    82:77:97:f6:7f:25:8a:7a:02:b3:d6:fb:a9:59:05:
                    a6:0f:3c:cb:b5:84:7f:72:43:32:de:8c:c8:34:40:
                    c0:b4:cc:96:35:d8:40:cc:eb:e7:d0:83:42:16:8b:
                    1c:34:14:54:ba:16:a9:2d:68:bc:9e:01:67:b9:67:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:53:05:ED:16:3E:92:69:96:79:42:08:97:4F:BD:F7:0B:99:19:96
            X509v3 Authority Key Identifier:
                keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:39:13:5a:51:10:b9:e5:5b:68:64:cc:33:04:31:13:df:7b:
         9d:ba:df:03:67:73:f3:44:cb:23:e5:15:e0:e6:60:01:2d:10:
         9c:e8:35:25:96:0d:f0:d5:d1:bf:5e:7b:75:d7:2d:84:48:e4:
         5b:ec:10:bd:05:10:89:c3:e7:c0:94:5e:5e:97:ad:6a:60:42:
         a1:8d:e9:ad:16:4f:bb:03:eb:85:8b:c7:3b:c2:fc:2a:59:0e:
         a7:68:d9:7d:9e:7f:65:d1:5f:86:99:04:74:b3:89:0b:e2:07:
         47:45:bf:08:cf:8e:c4:07:a4:03:52:74:bd:ca:56:72:5d:09:
         a5:ff:6d:61:8d:b3:8b:94:7f:4b:fc:0b:16:de:0c:f3:93:22:
         d8:7d:4d:ec:82:ae:ea:2f:1e:3d:76:d7:ab:5c:e9:33:7a:bf:
         8f:c1:d0:ec:3f:5a:00:25:ca:32:ff:39:b4:c7:59:fb:0d:3d:
         cc:29:91:ce:16:fc:12:ef:87:21:ec:d6:3f:e5:ee:b2:49:55:
         ea:51:0c:d8:28:d9:9e:25:5b:ea:87:b2:ae:92:b6:fb:29:05:
         20:94:3f:4a:52:8f:bd:06:3a:74:36:7e:22:7f:61:c8:3f:75:
         84:9b:96:7c:28:0f:06:28:9b:ea:16:05:4a:04:56:ae:0b:1b:
         00:bc:20:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadvlM79FSKfR/bG3ZTz7vuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzViZjI0NTA1NzM3NDFmOTQzNWU5NDgyMTAxNmEyMmU2
YmMxNDcwHhcNMjUwNTA1MDAwMDE4WhcNMjUwNTA2MDAwMDE4WjAzMTEwLwYDVQQD
EyhlYTUzMDVlZDE2M2U5MjY5OTY3OTQyMDg5NzRmYmRmNzBiOTkxOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BM0Dm1tG1Zczov1SG0f6HJFIP0p
gpmVUP68AlK5ObZ+buIl1vC62lxaqsVyoptsaY/k6BKRf4eZHrMu5Di61P8RByGi
it6wg9w/5dxv0/APGmW+eOYKS2Csz2KxyFXDHeMoXgUJGkaGdh5PO6T6UMhVmRih
5qXtP+C0NL767HEXdHTgr7vNoAQ2JNd0UzyvKXFO+Jl++mhMC8LYGuosfK+NRCxj
twXiqx3RmTmB42n/p3Pj+w2omiyLB1YxIp/FaAuCd5f2fyWKegKz1vupWQWmDzzL
tYR/ckMy3ozINEDAtMyWNdhAzOvn0INCFoscNBRUuhapLWi8ngFnuWdFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpTBe0WPpJplnlCCJdPvfcLmRmWMB8GA1UdIwQY
MBaAFKU1vyRQVzdB+UNelIIQFqIua8FHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjhkNzEtZWVjNS00ZDNkLWE3YTEt
YjAzMjExMjA1MWIxLzEvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yZjhkNzEtZWVjNS00ZDNkLWE3YTEtYjAzMjExMjA1MWIx
LzEvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTkTWlEQ
ueVbaGTMMwQxE997nbrfA2dz80TLI+UV4OZgAS0QnOg1JZYN8NXRv157ddcthEjk
W+wQvQUQicPnwJReXpetamBCoY3prRZPuwPrhYvHO8L8KlkOp2jZfZ5/ZdFfhpkE
dLOJC+IHR0W/CM+OxAekA1J0vcpWcl0Jpf9tYY2zi5R/S/wLFt4M85Mi2H1N7IKu
6i8ePXbXq1zpM3q/j8HQ7D9aACXKMv85tMdZ+w09zCmRzhb8Eu+HIezWP+XusklV
6lEM2CjZniVb6oeyrpK2+ykFIJQ/SlKPvQY6dDZ+In9hyD91hJuWfCgPBiib6hYF
SgRWrgsbALwgBw==
-----END CERTIFICATE-----
Generated at Mon May 5 04:42:35 2025 by rpki-client