Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          OJ5e57Kmd7UM6Y/FWRsu9JGDvksX/VvBZH1emcjnedo=
Subject key identifier:   27:F7:57:12:A8:7C:C7:2B:0B:86:5B:EF:B1:19:10:C0:CE:93:13:F1
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       0196BC6DDD5EBB7A96ED87786018DBD34734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          085F
Signing time:             Sat 10 May 2025 23:00:38 +0000
Manifest this update:     Sat 10 May 2025 23:00:38 +0000
Manifest next update:     Sun 11 May 2025 23:00:38 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: yFE4bm5mAZ9uevlDh8Tio6P9xt+dmHm51ZfsuNPrkFE=)
                          2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6d:dd:5e:bb:7a:96:ed:87:78:60:18:db:d3:47:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: May 10 23:00:38 2025 GMT
            Not After : May 11 23:00:38 2025 GMT
        Subject: CN=27f75712a87cc72b0b865befb11910c0ce9313f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:16:aa:33:f3:d3:56:b2:ce:d1:cd:b0:ad:
                    d7:23:eb:e2:97:27:d5:69:61:c7:40:e3:77:f4:dd:
                    10:aa:7d:91:cd:2e:f1:e3:6b:9a:a0:2b:da:90:04:
                    31:53:7e:8a:97:0d:54:d3:37:a0:81:12:a8:54:5b:
                    0d:60:83:e8:a8:cd:45:91:bf:ab:5a:8c:ca:71:67:
                    90:5c:0e:b2:fc:0c:4a:44:3c:1d:13:7b:f9:ea:75:
                    e3:d4:d0:50:7f:07:ae:7a:14:43:49:e4:9e:c2:e9:
                    92:57:89:c0:ff:a8:fb:93:25:29:e3:fb:cc:54:cb:
                    1c:3c:e6:07:d2:d4:2b:8b:0f:a1:ef:9e:7f:43:43:
                    d4:71:51:b8:7d:92:98:c2:1f:e1:7a:7a:b2:66:31:
                    f1:76:71:e4:92:6d:c5:60:32:7c:68:3e:87:53:55:
                    9c:c6:f7:ad:80:ce:73:1a:6e:11:e6:66:3e:6a:32:
                    9e:19:c2:f0:3c:fb:25:cf:fa:79:46:e0:15:6d:4e:
                    9b:bb:2a:75:c0:19:c7:96:2d:74:e0:93:0f:ae:66:
                    12:2b:16:73:db:ff:a2:02:93:dc:5a:d7:5f:11:b8:
                    cc:62:60:d1:33:27:db:1f:c8:3a:c6:ef:eb:69:6a:
                    b0:62:74:5d:f8:e9:24:ca:7b:b7:ac:e5:bc:0a:98:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:57:12:A8:7C:C7:2B:0B:86:5B:EF:B1:19:10:C0:CE:93:13:F1
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:da:33:40:50:3d:96:f3:25:2c:32:1c:d3:a0:43:f6:fc:a4:
         f2:ed:92:4e:19:6d:24:69:73:dc:6d:78:79:94:03:63:ca:fb:
         4f:93:1c:e8:c0:9c:0e:5c:f3:9b:df:8b:dc:fa:bb:b4:b2:31:
         2a:e7:71:aa:8a:0d:b7:47:25:37:d2:96:ff:8e:16:b3:9f:28:
         4b:18:57:54:e1:bb:84:0e:dc:32:37:2b:7e:5c:cc:f2:67:fe:
         4c:53:af:ad:79:84:ae:90:d2:b3:4b:76:14:b4:0e:49:6e:5f:
         fa:8b:6d:8a:48:98:37:8b:db:b0:37:90:0a:26:af:17:fc:5d:
         f0:1a:b7:8c:0f:f8:bd:28:0a:43:fb:b0:8b:2f:84:01:58:3e:
         41:5c:34:00:dc:4f:f5:be:40:16:a3:7a:71:e4:bf:a2:b6:85:
         03:2a:5d:0e:bf:9d:20:9c:36:e7:bf:ce:7d:1f:52:ae:ad:6d:
         33:8c:2f:4f:2f:6d:b6:ed:0e:2f:c4:88:da:f6:c4:ca:18:39:
         97:ba:54:42:ce:13:4b:5f:51:dc:07:45:eb:4c:2e:31:f0:4e:
         ac:7d:cc:53:83:4e:75:40:f7:4a:66:31:d7:23:e2:45:cc:49:
         54:a0:64:67:a6:2d:0b:c5:47:b1:a1:fe:d2:a8:b5:3f:4d:ae:
         59:fc:71:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bd1eu3qW7Yd4YBjb00c0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5
OGY2MjcwHhcNMjUwNTEwMjMwMDM4WhcNMjUwNTExMjMwMDM4WjAzMTEwLwYDVQQD
EygyN2Y3NTcxMmE4N2NjNzJiMGI4NjViZWZiMTE5MTBjMGNlOTMxM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0WqjPz01ayztHNsK3XI+vilyfV
aWHHQON39N0Qqn2RzS7x42uaoCvakAQxU36Klw1U0zeggRKoVFsNYIPoqM1Fkb+r
WozKcWeQXA6y/AxKRDwdE3v56nXj1NBQfweuehRDSeSewumSV4nA/6j7kyUp4/vM
VMscPOYH0tQriw+h755/Q0PUcVG4fZKYwh/henqyZjHxdnHkkm3FYDJ8aD6HU1Wc
xvetgM5zGm4R5mY+ajKeGcLwPPslz/p5RuAVbU6buyp1wBnHli104JMPrmYSKxZz
2/+iApPcWtdfEbjMYmDRMyfbH8g6xu/raWqwYnRd+Okkynu3rOW8Cpi4vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf3VxKofMcrC4Zb77EZEMDOkxPxMB8GA1UdIwQY
MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt
YzQxOWU3MTI5OTI4LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4
LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6dozQFA9
lvMlLDIc06BD9vyk8u2SThltJGlz3G14eZQDY8r7T5Mc6MCcDlzzm9+L3Pq7tLIx
KudxqooNt0clN9KW/44Ws58oSxhXVOG7hA7cMjcrflzM8mf+TFOvrXmErpDSs0t2
FLQOSW5f+ottikiYN4vbsDeQCiavF/xd8Bq3jA/4vSgKQ/uwiy+EAVg+QVw0ANxP
9b5AFqN6ceS/oraFAypdDr+dIJw257/OfR9Srq1tM4wvTy9ttu0OL8SI2vbEyhg5
l7pUQs4TS19R3AdF60wuMfBOrH3MU4NOdUD3SmYx1yPiRcxJVKBkZ6YtC8VHsaH+
0qi1P02uWfxxlg==
-----END CERTIFICATE-----
Generated at Sun May 11 06:34:16 2025 by rpki-client