Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File:                     gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier:          R1Fpq9CWU2Kyb5Q6ZSVGry/JZ1vy7//7OzcBz5N8jSY=
Subject key identifier:   F2:CC:B8:19:90:BC:13:73:5C:A8:17:35:F1:5C:17:73:93:F1:BC:D1
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer:       /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial:       0196BB92A8DB6817BD6C56F9A8A093BBCFD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number:          152F
Signing time:             Sat 10 May 2025 19:01:12 +0000
Manifest this update:     Sat 10 May 2025 19:01:12 +0000
Manifest next update:     Sun 11 May 2025 19:01:12 +0000
Files and hashes:         1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: bsAppCQFP7kQQvDvf6ZNzCm6an6m/QVRRwm/MHvytoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:a8:db:68:17:bd:6c:56:f9:a8:a0:93:bb:cf:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81689572b200ba4879381c8574274265592a14ab
        Validity
            Not Before: May 10 19:01:12 2025 GMT
            Not After : May 11 19:01:12 2025 GMT
        Subject: CN=f2ccb81990bc13735ca81735f15c177393f1bcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:58:4b:ab:3d:b5:e9:dc:28:7d:ed:a5:66:
                    56:eb:a2:3b:31:e7:91:c2:dc:99:7c:a6:bd:ba:4b:
                    43:b9:39:2b:b2:0f:26:c0:31:b8:55:38:1a:32:aa:
                    21:4e:fc:58:eb:24:35:57:3d:4b:08:6d:a5:61:db:
                    d1:0b:d4:41:6c:b5:d4:28:c7:f9:8d:bd:18:27:43:
                    f6:61:1c:37:af:01:e2:a2:50:f6:00:61:1f:92:52:
                    78:b2:67:08:36:d3:5f:52:e0:bb:41:a7:b4:dc:5c:
                    98:d5:4c:40:10:f3:5b:d8:74:04:71:d0:4d:94:aa:
                    0a:2a:ca:7a:51:e2:3d:cb:33:48:28:28:fd:e9:a3:
                    1d:82:76:d4:59:d4:52:73:4e:0a:8f:39:3a:a6:01:
                    22:43:c4:42:ee:5e:41:a7:0a:b7:25:8f:86:9d:65:
                    c4:ed:c0:b4:99:3d:c0:16:16:dc:6e:db:7d:d6:97:
                    27:52:4c:f5:16:d5:2b:0a:6a:24:03:18:d9:46:fa:
                    2b:be:30:91:8d:46:83:84:5d:29:5f:63:ab:35:4f:
                    5b:89:a2:f0:a6:24:95:8b:62:ca:11:83:a4:a8:43:
                    e5:54:a3:0e:8a:1e:aa:51:6a:07:9d:e8:de:9a:78:
                    d6:dc:7f:c6:0a:f9:36:c3:33:80:a4:3b:1c:e6:62:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CC:B8:19:90:BC:13:73:5C:A8:17:35:F1:5C:17:73:93:F1:BC:D1
            X509v3 Authority Key Identifier:
                keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:70:56:97:59:9f:5e:d3:82:78:48:b3:a0:55:a8:46:8a:
         e2:c3:30:6d:3e:7a:62:da:66:55:b0:cf:f4:86:d0:51:2a:d6:
         5d:4d:fe:0a:89:f8:c2:ed:22:67:e5:11:df:1d:b7:ac:58:75:
         a7:91:19:bb:b6:73:8d:14:09:3a:06:59:87:1a:db:cc:c9:de:
         1c:9e:82:c3:cb:fc:c5:65:25:f7:e2:a4:ff:93:bb:71:2f:7d:
         22:59:b0:61:6a:3d:fa:9a:ac:e5:8d:d5:0c:e1:7a:52:c6:ea:
         a7:03:ee:95:b2:c6:49:6d:bc:6a:c9:8f:07:ca:67:b2:12:6d:
         f4:dc:99:01:fd:87:dd:58:7c:42:77:a5:2a:63:7e:e0:8d:fb:
         aa:83:5e:12:07:df:95:4d:ea:d2:c3:27:e6:ee:db:96:fc:7a:
         97:68:38:e4:5f:52:08:cd:1c:a3:81:a0:a4:b6:3d:3b:fb:0d:
         3d:d8:c5:af:f1:28:ff:19:e0:f0:c2:2e:17:a2:14:ff:5c:7c:
         47:c5:94:32:8a:d4:a6:23:f8:b0:32:2f:cb:2a:2f:77:87:05:
         01:d4:c4:ad:8c:24:5f:e0:09:28:f5:86:82:0e:1e:80:fc:e5:
         25:d5:4a:07:79:50:0c:5f:12:db:a2:a3:66:6b:fc:85:b0:7e:
         6b:16:0f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kqjbaBe9bFb5qKCTu8/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjg5NTcyYjIwMGJhNDg3OTM4MWM4NTc0Mjc0MjY1NTky
YTE0YWIwHhcNMjUwNTEwMTkwMTEyWhcNMjUwNTExMTkwMTEyWjAzMTEwLwYDVQQD
EyhmMmNjYjgxOTkwYmMxMzczNWNhODE3MzVmMTVjMTc3MzkzZjFiY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW9YS6s9tencKH3tpWZW66I7MeeR
wtyZfKa9uktDuTkrsg8mwDG4VTgaMqohTvxY6yQ1Vz1LCG2lYdvRC9RBbLXUKMf5
jb0YJ0P2YRw3rwHiolD2AGEfklJ4smcINtNfUuC7Qae03FyY1UxAEPNb2HQEcdBN
lKoKKsp6UeI9yzNIKCj96aMdgnbUWdRSc04Kjzk6pgEiQ8RC7l5Bpwq3JY+GnWXE
7cC0mT3AFhbcbtt91pcnUkz1FtUrCmokAxjZRvorvjCRjUaDhF0pX2OrNU9biaLw
piSVi2LKEYOkqEPlVKMOih6qUWoHnejemnjW3H/GCvk2wzOApDsc5mL72QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLMuBmQvBNzXKgXNfFcF3OT8bzRMB8GA1UdIwQY
MBaAFIFolXKyALpIeTgchXQnQmVZKhSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGIt
NjI0MTU5MmE5NDRiLzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGItNjI0MTU5MmE5NDRi
LzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG1wVpdZ
n17TgnhIs6BVqEaK4sMwbT56YtpmVbDP9IbQUSrWXU3+Con4wu0iZ+UR3x23rFh1
p5EZu7ZzjRQJOgZZhxrbzMneHJ6Cw8v8xWUl9+Kk/5O7cS99IlmwYWo9+pqs5Y3V
DOF6UsbqpwPulbLGSW28asmPB8pnshJt9NyZAf2H3Vh8QnelKmN+4I37qoNeEgff
lU3q0sMn5u7blvx6l2g45F9SCM0co4GgpLY9O/sNPdjFr/Eo/xng8MIuF6IU/1x8
R8WUMorUpiP4sDIvyyovd4cFAdTErYwkX+AJKPWGgg4egPzlJdVKB3lQDF8S26Kj
Zmv8hbB+axYPgg==
-----END CERTIFICATE-----
Generated at Sun May 11 01:11:16 2025 by rpki-client