Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File:                     z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier:          Sl+M5LSna4Motulw5jwrBWyzcVMcQ1a3DhOnarXEXy4=
Subject key identifier:   EE:FD:6A:11:7B:4C:DD:EC:D7:A5:AA:D6:3A:C0:E0:1F:0C:CD:BC:E2
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer:       /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial:       0196E0B134C508699775AF097B4FDE5AE96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number:          04F0
Signing time:             Sun 18 May 2025 00:00:31 +0000
Manifest this update:     Sun 18 May 2025 00:00:31 +0000
Manifest next update:     Mon 19 May 2025 00:00:31 +0000
Files and hashes:         1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: yNr7ImPAPepDjUaeZHHak06Z0HS33KLBOP4cEL/FbnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 21:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:e0:b1:34:c5:08:69:97:75:af:09:7b:4f:de:5a:e9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
        Validity
            Not Before: May 18 00:00:31 2025 GMT
            Not After : May 19 00:00:31 2025 GMT
        Subject: CN=eefd6a117b4cddecd7a5aad63ac0e01f0ccdbce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:5d:a3:95:cd:17:d6:09:c7:87:74:98:81:
                    c1:89:56:8a:cb:e7:5d:c1:f3:47:83:2a:61:49:3c:
                    81:f9:77:f1:a2:ce:f6:f1:dc:47:77:7c:0a:d1:36:
                    f0:4d:b5:7d:ed:89:bb:5b:af:88:ca:3b:46:f7:4a:
                    9d:b7:35:4c:5e:bd:bd:11:e8:ec:be:10:db:0f:fc:
                    1a:18:1b:ea:cd:dc:22:44:25:b9:b2:a1:e4:df:f4:
                    ee:e7:00:19:5a:f7:56:ef:23:65:2a:9b:57:31:cc:
                    76:2a:09:70:67:74:5e:20:41:db:63:91:09:71:82:
                    70:54:75:ce:22:9a:d5:7b:16:26:06:20:59:d2:1e:
                    90:ee:0f:9f:93:dd:d0:67:bb:1a:f4:a8:cc:e3:af:
                    47:4a:c8:da:06:84:bb:ed:2e:bd:c4:37:fb:53:40:
                    84:c5:d8:37:44:e4:5b:9f:d4:2b:31:fa:d5:cc:4c:
                    f1:c3:07:16:d2:d0:9f:d7:84:48:93:0d:38:a6:10:
                    4d:8b:6e:7c:94:c9:12:a5:b2:09:92:33:91:cc:b4:
                    29:46:36:f0:8e:c8:38:c9:1a:32:80:d2:e1:34:ba:
                    9f:10:19:11:1c:d0:32:2e:be:5f:e9:7c:4f:48:24:
                    fa:cd:f7:06:94:82:f5:06:ae:66:a3:8b:31:10:11:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:6A:11:7B:4C:DD:EC:D7:A5:AA:D6:3A:C0:E0:1F:0C:CD:BC:E2
            X509v3 Authority Key Identifier:
                keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:a2:ec:ea:d4:fb:09:f8:e7:ac:09:fe:3b:fd:59:ab:f7:
         00:a4:88:80:cb:b0:a4:29:7c:12:73:3f:29:9b:b2:3d:23:30:
         3d:1f:17:9d:5f:af:b2:37:d3:c1:78:c7:47:e3:27:04:6e:0c:
         cb:05:58:13:3a:31:bd:16:89:ff:43:a5:2f:06:fb:74:29:fa:
         bc:dc:a2:11:c0:49:48:e1:a8:82:d0:55:b7:4a:75:ef:66:12:
         de:ba:7b:da:8c:c2:fe:7a:30:dc:43:70:cc:a9:c7:57:fa:aa:
         76:18:6b:77:8d:4c:f3:bd:70:15:a2:99:dd:7e:c9:3e:a8:29:
         f1:9a:c2:ff:28:ee:9e:f1:8e:09:4a:8e:11:a6:56:79:f9:96:
         86:8b:b4:3c:10:9a:8f:00:fb:3d:45:24:2b:6d:00:1a:4e:6a:
         95:05:d6:ba:41:84:c2:90:7e:a7:f1:5e:e8:36:8a:25:af:f4:
         49:73:a5:64:0f:cf:cd:61:a1:c4:0e:4d:d6:ff:eb:0c:0f:67:
         37:2e:9f:11:f1:ea:b7:cb:e5:a9:ce:6a:7a:19:7b:96:7f:57:
         0a:00:51:58:39:e9:5a:54:c9:cf:e4:c0:94:8f:18:7e:d4:95:
         39:ae:af:78:b6:6a:1e:70:58:21:d2:fb:6d:09:80:38:95:67:
         19:33:da:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbgsTTFCGmXda8Je0/eWulrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm
Y2M3ODEwHhcNMjUwNTE4MDAwMDMxWhcNMjUwNTE5MDAwMDMxWjAzMTEwLwYDVQQD
EyhlZWZkNmExMTdiNGNkZGVjZDdhNWFhZDYzYWMwZTAxZjBjY2RiY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt5do5XNF9YJx4d0mIHBiVaKy+dd
wfNHgyphSTyB+Xfxos728dxHd3wK0TbwTbV97Ym7W6+IyjtG90qdtzVMXr29Eejs
vhDbD/waGBvqzdwiRCW5sqHk3/Tu5wAZWvdW7yNlKptXMcx2KglwZ3ReIEHbY5EJ
cYJwVHXOIprVexYmBiBZ0h6Q7g+fk93QZ7sa9KjM469HSsjaBoS77S69xDf7U0CE
xdg3RORbn9QrMfrVzEzxwwcW0tCf14RIkw04phBNi258lMkSpbIJkjORzLQpRjbw
jsg4yRoygNLhNLqfEBkRHNAyLr5f6XxPSCT6zfcGlIL1Bq5mo4sxEBF9GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO79ahF7TN3s16Wq1jrA4B8MzbziMB8GA1UdIwQY
MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt
ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm
LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOP2i7OrU
+wn456wJ/jv9Wav3AKSIgMuwpCl8EnM/KZuyPSMwPR8XnV+vsjfTwXjHR+MnBG4M
ywVYEzoxvRaJ/0OlLwb7dCn6vNyiEcBJSOGogtBVt0p172YS3rp72ozC/now3ENw
zKnHV/qqdhhrd41M871wFaKZ3X7JPqgp8ZrC/yjunvGOCUqOEaZWefmWhou0PBCa
jwD7PUUkK20AGk5qlQXWukGEwpB+p/Fe6DaKJa/0SXOlZA/PzWGhxA5N1v/rDA9n
Ny6fEfHqt8vlqc5qehl7ln9XCgBRWDnpWlTJz+TAlI8YftSVOa6veLZqHnBYIdL7
bQmAOJVnGTPaFg==
-----END CERTIFICATE-----
Generated at Sun May 18 07:48:40 2025 by rpki-client