Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File:                     335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier:          G9LuZwnsw3OBmmM/VN6aQLArHAp9R7FaLxyN3An9EQs=
Subject key identifier:   B7:DB:F6:8B:B2:C3:BD:A7:88:9F:36:8F:31:51:57:4A:48:89:E8:B4
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer:       /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial:       0196D51B0088194AA2EF4ED6F262C290CC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number:          0A48
Signing time:             Thu 15 May 2025 18:00:38 +0000
Manifest this update:     Thu 15 May 2025 18:00:38 +0000
Manifest next update:     Fri 16 May 2025 18:00:38 +0000
Files and hashes:         1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: N4OgjbHEmHiOi7G4mrsI9ur+Vkhv7ZTTQdnx6rdyPs4=)
                          2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d5:1b:00:88:19:4a:a2:ef:4e:d6:f2:62:c2:90:cc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
        Validity
            Not Before: May 15 18:00:38 2025 GMT
            Not After : May 16 18:00:38 2025 GMT
        Subject: CN=b7dbf68bb2c3bda7889f368f3151574a4889e8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:67:21:90:31:8c:4d:5c:f6:e6:2d:5c:c6:
                    e5:bb:31:54:0f:17:59:fc:a5:a5:ff:31:d5:d8:de:
                    95:88:e7:88:2d:ad:99:62:3b:67:4e:c0:95:9b:0f:
                    a2:48:49:1d:19:c1:19:08:3f:70:5d:c6:e4:09:58:
                    75:ee:4b:f8:99:8e:d0:31:14:c4:1d:68:bb:44:37:
                    34:1a:67:c2:e2:74:fb:1d:b5:47:c8:05:10:35:81:
                    8a:fd:12:9d:c8:11:82:4a:11:6f:61:3d:ca:a6:be:
                    41:24:ee:a5:9b:13:fb:08:ec:89:99:74:34:aa:a4:
                    98:00:66:f9:80:89:99:b1:1a:f0:36:9d:d8:99:1a:
                    7d:5c:cf:98:a6:49:de:29:86:32:19:31:8e:a2:6a:
                    5c:9f:70:42:ea:30:d7:7a:1e:00:f7:d1:1e:13:6f:
                    d1:1a:d8:cf:9d:06:27:60:af:4a:3c:e1:2e:64:2c:
                    3c:45:85:ca:05:21:67:e9:f6:0d:74:d7:d2:48:01:
                    ee:5b:13:6f:a9:b5:98:cf:7a:4f:4b:c1:5f:fb:77:
                    dc:e7:f6:31:8c:e9:18:39:da:de:ed:e6:fb:c5:6b:
                    76:13:b1:bf:34:12:72:bb:c9:01:a3:ed:16:3e:a6:
                    ed:56:42:24:f6:28:93:3e:ac:85:ea:53:75:07:b3:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:F6:8B:B2:C3:BD:A7:88:9F:36:8F:31:51:57:4A:48:89:E8:B4
            X509v3 Authority Key Identifier:
                keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:29:37:cf:47:36:7b:cc:1d:b6:90:2b:9a:b3:f4:99:11:
         b4:32:e8:18:a3:9e:fc:fc:6f:8f:4b:7f:f5:a5:d5:80:18:50:
         e1:cf:94:65:87:a5:2c:64:f0:dd:a4:e9:b9:01:fa:69:3a:41:
         ba:97:e0:97:ab:6f:39:bd:a1:20:cc:26:fc:71:1c:a2:78:d7:
         c8:07:28:6b:c8:bc:49:d7:21:aa:df:65:c2:28:da:07:4f:aa:
         4f:83:fb:3d:64:63:4a:bf:5d:3c:b7:77:78:5f:71:2a:19:79:
         8e:fa:51:52:e4:c9:43:be:3e:66:64:8b:84:9b:5f:dd:6e:6c:
         48:e1:53:c2:27:73:44:2d:00:ab:4e:fa:2a:aa:09:06:7d:7e:
         65:7b:82:dd:01:5b:be:ea:82:c5:83:be:5c:64:e3:db:95:34:
         ff:5d:10:32:ac:d8:f5:7f:23:e7:3e:df:3b:08:27:ae:a0:b8:
         28:e4:c2:be:6c:6a:2b:16:7f:1e:52:44:39:c6:1d:d6:39:20:
         ac:99:f3:7b:05:a8:e2:c3:ba:17:16:b4:f9:1b:d6:36:0b:c1:
         73:09:55:42:1a:ff:ff:4e:a3:cf:39:ba:1b:37:48:a0:c6:b3:
         02:9f:2a:62:c0:b2:a7:2a:40:b6:16:58:97:87:c3:16:04:54:
         83:27:68:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbVGwCIGUqi707W8mLCkMyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2U3MTY2NDlkYWNiZjZlYTk4NjAyMzUxNGRmZTQwZGYx
YTdjZjAwHhcNMjUwNTE1MTgwMDM4WhcNMjUwNTE2MTgwMDM4WjAzMTEwLwYDVQQD
EyhiN2RiZjY4YmIyYzNiZGE3ODg5ZjM2OGYzMTUxNTc0YTQ4ODllOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT5nIZAxjE1c9uYtXMbluzFUDxdZ
/KWl/zHV2N6ViOeILa2ZYjtnTsCVmw+iSEkdGcEZCD9wXcbkCVh17kv4mY7QMRTE
HWi7RDc0GmfC4nT7HbVHyAUQNYGK/RKdyBGCShFvYT3Kpr5BJO6lmxP7COyJmXQ0
qqSYAGb5gImZsRrwNp3YmRp9XM+YpkneKYYyGTGOompcn3BC6jDXeh4A99EeE2/R
GtjPnQYnYK9KPOEuZCw8RYXKBSFn6fYNdNfSSAHuWxNvqbWYz3pPS8Ff+3fc5/Yx
jOkYOdre7eb7xWt2E7G/NBJyu8kBo+0WPqbtVkIk9iiTPqyF6lN1B7MuBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfb9ouyw72niJ82jzFRV0pIiei0MB8GA1UdIwQY
MBaAFN9+cWZJ2sv26phgI1FN/kDfGnzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQt
YTY2Mjg5ODUxY2Q5LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQtYTY2Mjg5ODUxY2Q5
LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5IpN89H
NnvMHbaQK5qz9JkRtDLoGKOe/Pxvj0t/9aXVgBhQ4c+UZYelLGTw3aTpuQH6aTpB
upfgl6tvOb2hIMwm/HEconjXyAcoa8i8Sdchqt9lwijaB0+qT4P7PWRjSr9dPLd3
eF9xKhl5jvpRUuTJQ74+ZmSLhJtf3W5sSOFTwidzRC0Aq076KqoJBn1+ZXuC3QFb
vuqCxYO+XGTj25U0/10QMqzY9X8j5z7fOwgnrqC4KOTCvmxqKxZ/HlJEOcYd1jkg
rJnzewWo4sO6Fxa0+RvWNgvBcwlVQhr//06jzzm6GzdIoMazAp8qYsCypypAthZY
l4fDFgRUgydoDA==
-----END CERTIFICATE-----
Generated at Thu May 15 20:38:45 2025 by rpki-client