Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File:                     c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier:          eF5nzCpB1Hi/zQQQnTJErfshYSBgD5O9KL8T3vx8H7s=
Subject key identifier:   17:51:D7:A4:F9:BC:9B:47:CF:D8:7F:B8:52:BA:F9:76:3A:49:EF:E0
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer:       /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial:       0196AE0E18EE1FC46E6C7E58259B56BFCD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number:          05DD
Signing time:             Thu 08 May 2025 04:01:21 +0000
Manifest this update:     Thu 08 May 2025 04:01:21 +0000
Manifest next update:     Fri 09 May 2025 04:01:21 +0000
Files and hashes:         1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: eVAvmophyqXIRP+VuWRH7PMFiialGhdjX8x/EVBdyoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0e:18:ee:1f:c4:6e:6c:7e:58:25:9b:56:bf:cd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
        Validity
            Not Before: May  8 04:01:21 2025 GMT
            Not After : May  9 04:01:21 2025 GMT
        Subject: CN=1751d7a4f9bc9b47cfd87fb852baf9763a49efe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:71:0f:b2:93:ef:10:64:cb:9e:08:38:44:
                    72:96:5b:19:7e:7e:dd:3e:7a:08:38:04:d7:cd:bf:
                    e5:6b:6b:b6:b8:7e:92:62:a9:f4:a3:75:56:08:0d:
                    8c:df:95:e5:b1:1c:82:e2:c4:6c:5a:07:11:86:b0:
                    1c:3d:8c:7d:d5:b3:80:b0:fb:43:ec:5d:92:0e:8a:
                    ad:cb:99:94:f1:7a:3d:33:e8:74:d2:10:d8:5b:a7:
                    6c:71:57:a4:04:a4:a4:69:33:e9:2e:37:91:55:f4:
                    68:68:fb:a2:1a:ad:e5:6c:ab:36:70:02:66:0a:dd:
                    0f:01:ac:80:19:bb:01:d4:c0:e5:29:90:2c:4b:b6:
                    9b:b4:4e:f2:8b:fc:98:32:1e:dc:8e:a9:3f:08:92:
                    8f:d8:68:06:7b:1d:46:4d:71:6a:d8:24:86:c9:5d:
                    02:04:17:f4:97:3b:59:ae:41:29:11:aa:e2:64:8c:
                    ba:2c:5d:a0:f2:55:a1:18:4a:0c:f1:f9:c1:0f:37:
                    60:76:d7:9f:62:57:3e:ea:de:5d:21:9b:e3:8e:23:
                    15:63:d6:4c:98:ec:7f:aa:d6:af:3c:50:f2:13:b4:
                    db:71:f2:a1:f6:60:a3:22:5a:35:04:3d:96:fd:c7:
                    b5:1d:03:dc:13:b5:80:d3:93:a4:d1:52:f0:f0:91:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:51:D7:A4:F9:BC:9B:47:CF:D8:7F:B8:52:BA:F9:76:3A:49:EF:E0
            X509v3 Authority Key Identifier:
                keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:db:d7:e5:47:bd:ef:28:0c:85:02:72:fa:d5:72:73:e5:
         c4:b0:d2:06:40:1d:88:80:aa:fb:e7:4b:b8:43:dc:7a:67:f3:
         f5:3f:bc:57:b9:c7:51:a0:37:44:1c:73:3f:ab:3e:f2:91:1e:
         ca:25:d7:97:64:1b:49:8d:2b:5a:3d:92:de:85:6c:94:23:4f:
         36:c7:b2:2a:7e:5d:dd:74:4b:5f:a4:03:37:a5:af:c5:45:78:
         ca:b3:a2:3b:fc:9b:bd:a2:7f:b0:9d:76:69:ab:c8:27:1d:f5:
         57:e6:1b:2f:79:e3:b5:f7:62:c1:64:51:80:ef:2b:4d:51:9b:
         76:2e:d3:ed:07:56:5a:26:e2:ff:f3:9f:fb:4f:56:36:18:07:
         64:bd:a5:a7:84:2a:24:73:79:84:69:a2:a6:60:a8:bd:8a:a3:
         29:b2:22:7a:84:88:e1:56:79:ee:82:47:ef:35:9d:bd:01:f1:
         b5:3b:8e:a4:7a:4b:62:df:f9:66:72:1c:93:bf:49:df:28:96:
         bc:06:7c:4e:ea:f2:5c:b1:a8:22:6e:81:f3:48:45:59:58:c1:
         00:ec:37:1c:bf:ea:cc:74:c4:87:81:a4:bc:ff:8d:73:59:90:
         6e:68:27:a0:22:2b:6e:48:71:e8:3c:88:29:2c:80:af:23:f7:
         42:41:8e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDhjuH8RubH5YJZtWv80JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy
MzY0MzQwHhcNMjUwNTA4MDQwMTIxWhcNMjUwNTA5MDQwMTIxWjAzMTEwLwYDVQQD
EygxNzUxZDdhNGY5YmM5YjQ3Y2ZkODdmYjg1MmJhZjk3NjNhNDllZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1xD7KT7xBky54IOERyllsZfn7d
PnoIOATXzb/la2u2uH6SYqn0o3VWCA2M35XlsRyC4sRsWgcRhrAcPYx91bOAsPtD
7F2SDoqty5mU8Xo9M+h00hDYW6dscVekBKSkaTPpLjeRVfRoaPuiGq3lbKs2cAJm
Ct0PAayAGbsB1MDlKZAsS7abtE7yi/yYMh7cjqk/CJKP2GgGex1GTXFq2CSGyV0C
BBf0lztZrkEpEariZIy6LF2g8lWhGEoM8fnBDzdgdtefYlc+6t5dIZvjjiMVY9ZM
mOx/qtavPFDyE7TbcfKh9mCjIlo1BD2W/ce1HQPcE7WA05Ok0VLw8JG2sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdR16T5vJtHz9h/uFK6+XY6Se/gMB8GA1UdIwQY
MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt
N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3
LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrLb1+VH
ve8oDIUCcvrVcnPlxLDSBkAdiICq++dLuEPcemfz9T+8V7nHUaA3RBxzP6s+8pEe
yiXXl2QbSY0rWj2S3oVslCNPNseyKn5d3XRLX6QDN6WvxUV4yrOiO/ybvaJ/sJ12
aavIJx31V+YbL3njtfdiwWRRgO8rTVGbdi7T7QdWWibi//Of+09WNhgHZL2lp4Qq
JHN5hGmipmCovYqjKbIieoSI4VZ57oJH7zWdvQHxtTuOpHpLYt/5ZnIck79J3yiW
vAZ8TuryXLGoIm6B80hFWVjBAOw3HL/qzHTEh4GkvP+Nc1mQbmgnoCIrbkhx6DyI
KSyAryP3QkGO5Q==
-----END CERTIFICATE-----
Generated at Thu May 8 07:12:15 2025 by rpki-client