Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File:                     8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier:          ihQQcVN1eqwKl8FO3H4Mn5NTISIyI2GDfXZ+I1s2pnE=
Subject key identifier:   10:37:7A:09:90:39:78:BB:B2:E8:5A:68:E3:CC:3C:6B:03:64:B6:38
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer:       /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial:       0196BC6E32C85BD0872CA24DC6263AC3C956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number:          0CD8
Signing time:             Sat 10 May 2025 23:01:00 +0000
Manifest this update:     Sat 10 May 2025 23:01:00 +0000
Manifest next update:     Sun 11 May 2025 23:01:00 +0000
Files and hashes:         1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: Wht7b92N34YtBNbVu+r9CliHl/SUaA+/m/Cu5wdbGh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:32:c8:5b:d0:87:2c:a2:4d:c6:26:3a:c3:c9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
        Validity
            Not Before: May 10 23:01:00 2025 GMT
            Not After : May 11 23:01:00 2025 GMT
        Subject: CN=10377a09903978bbb2e85a68e3cc3c6b0364b638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:24:12:93:c2:9f:9a:ff:e4:fc:a7:ca:ae:
                    53:23:45:71:80:b4:0d:6f:a1:14:90:17:c7:c8:f9:
                    f7:3b:d8:cc:c8:7d:18:40:65:51:4a:bb:f0:8c:ad:
                    d8:42:b5:4f:a6:f7:9e:30:50:e6:6b:e1:39:f6:7a:
                    86:4d:ef:35:ce:48:37:6e:42:c5:79:e0:f6:f2:f0:
                    89:d1:0d:a4:bb:a4:ad:92:c0:39:7f:1d:ae:e9:fd:
                    79:ab:9f:a6:7e:04:e5:cd:70:65:73:00:ba:6b:be:
                    e1:bb:fa:dc:69:8c:78:8c:3d:e6:1c:0f:a1:20:a3:
                    11:f3:b9:be:28:f2:d2:8b:74:17:3c:3e:a8:53:3e:
                    13:c5:6f:bb:11:3e:dc:ee:f2:53:7c:b1:e0:7a:5d:
                    e7:7a:7d:94:d8:3e:c3:7d:e0:8c:5f:88:cc:4a:d7:
                    83:55:31:03:94:dd:6e:f6:09:41:ed:9c:c9:b6:6a:
                    0a:1b:ab:40:3d:40:9c:94:d8:95:4b:47:e6:24:9c:
                    dd:92:ef:7c:3a:b0:65:a5:11:9d:87:db:2f:62:e8:
                    c4:9c:f0:ea:3d:b8:11:52:6e:e4:7c:a9:99:7f:b3:
                    b6:f9:26:71:9c:7b:a0:55:69:98:f7:2b:00:f2:f8:
                    db:03:8c:95:fa:15:77:75:3d:4d:00:68:16:53:b1:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:37:7A:09:90:39:78:BB:B2:E8:5A:68:E3:CC:3C:6B:03:64:B6:38
            X509v3 Authority Key Identifier:
                keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7d:af:38:a0:5e:37:1c:56:ef:57:da:6c:3f:9b:4e:a8:26:
         81:c8:b4:df:45:d4:9c:aa:52:5d:1d:55:ec:e3:b9:cf:a7:78:
         77:c3:eb:e6:9c:69:ff:1b:54:20:ed:87:e6:7d:5c:93:c6:47:
         02:9a:54:79:18:39:71:99:cd:17:b1:f6:2c:70:70:02:87:f7:
         28:96:59:bc:ec:d3:74:9b:7e:ca:4e:3b:29:15:0b:64:3c:9d:
         e5:d2:2d:33:35:2d:30:52:d6:a9:17:1f:30:81:31:ec:f9:76:
         08:70:54:15:04:82:cd:65:e5:b2:63:f8:8d:12:f9:01:80:8a:
         f4:e7:3d:97:22:c5:75:35:52:39:d7:9f:f9:dd:5a:60:4d:6d:
         bb:50:b2:e6:a6:f1:25:9e:08:19:4a:4a:6c:fa:51:0e:c3:80:
         e4:df:a8:4d:95:3f:af:58:1c:03:1e:ad:46:cf:20:76:a1:2a:
         63:de:e2:dc:32:80:e4:84:66:fc:d5:f4:35:7b:db:3e:b8:97:
         29:36:e8:23:17:ac:7f:a9:61:95:c4:33:f4:17:24:cd:68:e6:
         a6:51:69:ac:bf:2f:f0:e3:4e:e4:e9:10:d8:bc:e9:33:e7:51:
         53:c5:83:49:e5:38:38:7a:25:56:01:df:8b:78:5a:ce:a8:85:
         71:05:2e:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bjLIW9CHLKJNxiY6w8lWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi
ZWExNzkwHhcNMjUwNTEwMjMwMTAwWhcNMjUwNTExMjMwMTAwWjAzMTEwLwYDVQQD
EygxMDM3N2EwOTkwMzk3OGJiYjJlODVhNjhlM2NjM2M2YjAzNjRiNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+MkEpPCn5r/5Pynyq5TI0VxgLQN
b6EUkBfHyPn3O9jMyH0YQGVRSrvwjK3YQrVPpveeMFDma+E59nqGTe81zkg3bkLF
eeD28vCJ0Q2ku6StksA5fx2u6f15q5+mfgTlzXBlcwC6a77hu/rcaYx4jD3mHA+h
IKMR87m+KPLSi3QXPD6oUz4TxW+7ET7c7vJTfLHgel3nen2U2D7DfeCMX4jMSteD
VTEDlN1u9glB7ZzJtmoKG6tAPUCclNiVS0fmJJzdku98OrBlpRGdh9svYujEnPDq
PbgRUm7kfKmZf7O2+SZxnHugVWmY9ysA8vjbA4yV+hV3dT1NAGgWU7HfBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBA3egmQOXi7suhaaOPMPGsDZLY4MB8GA1UdIwQY
MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt
ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl
LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnH2vOKBe
NxxW71fabD+bTqgmgci030XUnKpSXR1V7OO5z6d4d8Pr5pxp/xtUIO2H5n1ck8ZH
AppUeRg5cZnNF7H2LHBwAof3KJZZvOzTdJt+yk47KRULZDyd5dItMzUtMFLWqRcf
MIEx7Pl2CHBUFQSCzWXlsmP4jRL5AYCK9Oc9lyLFdTVSOdef+d1aYE1tu1Cy5qbx
JZ4IGUpKbPpRDsOA5N+oTZU/r1gcAx6tRs8gdqEqY97i3DKA5IRm/NX0NXvbPriX
KTboIxesf6lhlcQz9BckzWjmplFprL8v8ONO5OkQ2LzpM+dRU8WDSeU4OHolVgHf
i3hazqiFcQUunQ==
-----END CERTIFICATE-----
Generated at Sun May 11 08:36:36 2025 by rpki-client