Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          AHtwLHhuAIlHyXUe/z370Wn7BlkVfcDZIC5adwMNcgw=
Subject key identifier:   77:F3:96:B9:D4:D2:7C:86:7D:F9:AF:C9:80:33:C2:D1:84:99:C0:47
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       0196C34B8AFB07991836B0845DD3719187AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          0C97
Signing time:             Mon 12 May 2025 07:00:29 +0000
Manifest this update:     Mon 12 May 2025 07:00:29 +0000
Manifest next update:     Tue 13 May 2025 07:00:29 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: k5dGITdX5vLTAD40q90F+Xq6vvUwQ4DBu55LNB39Aaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:8a:fb:07:99:18:36:b0:84:5d:d3:71:91:87:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: May 12 07:00:29 2025 GMT
            Not After : May 13 07:00:29 2025 GMT
        Subject: CN=77f396b9d4d27c867df9afc98033c2d18499c047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:f4:66:c1:04:06:7d:d6:5d:c8:9d:ef:f4:
                    cc:f5:0a:36:7b:91:b9:6a:16:d2:00:ba:af:94:5d:
                    23:70:c1:47:ae:b8:52:97:eb:fe:a0:10:8b:6b:12:
                    ff:68:df:a5:7f:a3:2e:65:48:64:b1:d2:a2:8d:95:
                    d4:23:cb:be:de:ad:fd:16:f4:22:94:29:1d:74:45:
                    2a:00:e1:9a:1f:fd:10:91:89:70:5e:cb:10:57:6c:
                    fe:ee:05:a1:0c:9c:68:10:2e:2a:6d:70:77:6d:39:
                    6f:6a:af:0a:34:42:62:a0:a9:36:b3:7a:f1:e0:f9:
                    c6:e6:e5:c8:25:d9:cc:e5:69:4c:35:de:4f:70:3b:
                    d5:54:1c:3e:21:7e:cb:f4:b4:d7:c3:23:3a:ab:e7:
                    94:a0:d4:98:cb:9e:b4:17:1d:68:fc:0a:8f:81:8f:
                    e4:ea:de:41:0a:f1:42:6c:04:6d:bd:2f:8d:c4:9d:
                    4a:24:a2:a9:5e:92:b5:33:87:1f:79:98:6e:b0:6c:
                    91:1b:d0:7d:8a:23:f8:e5:99:d6:e4:22:fd:8e:be:
                    85:98:78:de:ea:d6:ff:6a:60:53:12:d3:c5:f6:eb:
                    72:ba:75:d1:ac:d1:f9:7a:81:90:d6:55:0e:93:cc:
                    0b:c6:83:8c:44:36:af:d4:8a:6e:74:81:64:4e:2c:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:96:B9:D4:D2:7C:86:7D:F9:AF:C9:80:33:C2:D1:84:99:C0:47
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4f:29:02:b0:1c:f2:7a:c9:30:a2:ef:a5:f1:1f:53:6b:24:
         e9:49:e8:6f:6c:71:fb:a7:ed:cb:4d:ae:9d:c2:a2:f7:a1:54:
         e7:f4:35:28:e4:16:91:4b:ce:8e:3b:7e:e4:f8:12:fb:be:c0:
         2a:62:32:0c:97:5b:32:89:7d:4b:80:b9:bb:9c:96:10:6b:f5:
         29:a4:db:9a:4f:ce:a9:16:13:a2:fc:a7:43:77:56:82:b3:09:
         f0:8e:82:34:d0:67:a1:d3:53:49:10:c4:6e:a0:2c:a6:f9:bc:
         48:4a:c1:41:06:51:26:d3:d0:00:12:1e:cf:c8:d6:0d:a2:75:
         62:0d:0b:7f:7a:f2:90:e1:a9:27:3a:5e:d2:ef:02:50:4e:e9:
         2b:aa:0d:e8:e9:d0:51:a8:6c:9b:5b:f2:75:e9:7b:44:2a:d3:
         a8:18:09:45:98:6f:6f:51:6e:e9:f2:cb:f8:b7:a9:06:36:ba:
         25:7d:ad:a5:8f:7f:bd:ef:47:80:2b:d7:67:e1:0a:d8:e0:c7:
         9b:59:78:b2:d7:52:07:9c:fa:ad:40:28:30:79:a4:3f:91:ff:
         e6:3b:b1:3d:9e:70:4f:2a:69:e2:6a:60:25:12:79:a5:e7:5b:
         55:ab:97:52:82:c8:73:be:b4:e3:e2:f0:22:90:48:92:74:35:
         36:ac:8c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS4r7B5kYNrCEXdNxkYesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGExODcxNWRiY2I0ODUzNjhmYWZlOTliOGFlMmM5ZjA0
YWY3NjMwHhcNMjUwNTEyMDcwMDI5WhcNMjUwNTEzMDcwMDI5WjAzMTEwLwYDVQQD
Eyg3N2YzOTZiOWQ0ZDI3Yzg2N2RmOWFmYzk4MDMzYzJkMTg0OTljMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlX0ZsEEBn3WXcid7/TM9Qo2e5G5
ahbSALqvlF0jcMFHrrhSl+v+oBCLaxL/aN+lf6MuZUhksdKijZXUI8u+3q39FvQi
lCkddEUqAOGaH/0QkYlwXssQV2z+7gWhDJxoEC4qbXB3bTlvaq8KNEJioKk2s3rx
4PnG5uXIJdnM5WlMNd5PcDvVVBw+IX7L9LTXwyM6q+eUoNSYy560Fx1o/AqPgY/k
6t5BCvFCbARtvS+NxJ1KJKKpXpK1M4cfeZhusGyRG9B9iiP45ZnW5CL9jr6FmHje
6tb/amBTEtPF9utyunXRrNH5eoGQ1lUOk8wLxoOMRDav1IpudIFkTizk1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfzlrnU0nyGffmvyYAzwtGEmcBHMB8GA1UdIwQY
MBaAFPBKGHFdvLSFNo+v6ZuK4snwSvdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTIt
MGY0MTAwN2E0Y2UwLzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTItMGY0MTAwN2E0Y2Uw
LzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE8pArAc
8nrJMKLvpfEfU2sk6Unob2xx+6fty02uncKi96FU5/Q1KOQWkUvOjjt+5PgS+77A
KmIyDJdbMol9S4C5u5yWEGv1KaTbmk/OqRYTovynQ3dWgrMJ8I6CNNBnodNTSRDE
bqAspvm8SErBQQZRJtPQABIez8jWDaJ1Yg0Lf3rykOGpJzpe0u8CUE7pK6oN6OnQ
Uahsm1vydel7RCrTqBgJRZhvb1Fu6fLL+LepBja6JX2tpY9/ve9HgCvXZ+EK2ODH
m1l4stdSB5z6rUAoMHmkP5H/5juxPZ5wTypp4mpgJRJ5pedbVauXUoLIc7604+Lw
IpBIknQ1NqyMug==
-----END CERTIFICATE-----
Generated at Mon May 12 13:31:52 2025 by rpki-client