Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File:                     dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier:          00dv/Bu3JQ3dVFj0aV9OdoSUUQanmQTEq5Fwq3NZ6cY=
Subject key identifier:   BB:98:26:26:D8:FF:7E:A0:A7:AB:52:71:C7:62:C2:B1:16:FB:65:77
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer:       /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial:       0196C1CAF1C8D1805D9726049B40E8D2FCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number:          0D0D
Signing time:             Mon 12 May 2025 00:00:24 +0000
Manifest this update:     Mon 12 May 2025 00:00:24 +0000
Manifest next update:     Tue 13 May 2025 00:00:24 +0000
Files and hashes:         1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: Lp3iluazB7FLe2J3Y9jyRKDDz5JaGilfJP7kjQlJq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:ca:f1:c8:d1:80:5d:97:26:04:9b:40:e8:d2:fc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
        Validity
            Not Before: May 12 00:00:24 2025 GMT
            Not After : May 13 00:00:24 2025 GMT
        Subject: CN=bb982626d8ff7ea0a7ab5271c762c2b116fb6577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:2c:46:5c:bc:4f:73:b2:df:f8:73:7c:66:
                    01:2d:b3:1e:9e:89:74:69:ec:fb:fa:3a:3f:0d:24:
                    9b:31:51:53:c1:eb:5f:91:88:fd:d1:c8:cd:4a:89:
                    7e:44:cd:e9:ec:d7:0a:b0:f4:ba:dd:80:90:fb:8d:
                    2a:0b:7e:71:d3:15:74:d2:3f:73:ca:49:65:b7:c1:
                    a5:4c:e2:eb:f9:9b:0a:44:85:f8:c5:45:25:6d:fa:
                    b4:0a:ab:25:8d:c3:78:a0:58:62:64:ff:18:98:bf:
                    c9:9f:36:7c:6a:db:ca:60:62:27:ba:9e:5f:09:e1:
                    90:38:eb:77:08:7a:bf:c4:b6:b1:94:12:c6:d9:03:
                    2b:18:5e:c6:6d:a8:14:ab:b1:88:d9:71:66:13:15:
                    02:db:e2:4f:a6:54:99:ea:36:f0:77:97:9d:b0:6b:
                    02:73:b7:4f:c2:d8:76:5d:87:d4:4d:5f:e0:1f:e9:
                    22:c4:88:5e:f6:52:97:86:a6:b9:ef:d2:24:f6:75:
                    7e:b8:8e:65:13:94:18:bf:40:20:f5:72:c7:ca:d2:
                    04:f6:17:51:2a:2c:57:7e:a3:9c:ad:03:ea:78:43:
                    51:71:4a:a3:ea:b9:01:0d:e8:5e:46:63:65:0f:43:
                    8d:7c:17:ea:0d:6d:a5:17:dc:61:48:b1:c3:13:0f:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:98:26:26:D8:FF:7E:A0:A7:AB:52:71:C7:62:C2:B1:16:FB:65:77
            X509v3 Authority Key Identifier:
                keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:02:08:e1:af:c0:fa:3e:2f:4f:68:72:13:d9:0d:a4:29:
         f1:d9:d3:ac:52:0e:17:80:c9:d6:56:9b:ea:56:d6:42:c0:11:
         ca:5d:ac:36:16:07:83:92:6c:20:31:21:f9:12:61:71:7f:88:
         82:cb:67:c5:1d:c4:da:27:e4:d5:39:13:25:5b:27:91:77:e0:
         c1:4b:c5:85:29:86:06:a8:12:ff:6b:4a:66:6f:4b:32:c7:3d:
         c4:10:9b:f0:53:66:bb:0a:17:98:7f:d4:63:5a:ce:aa:81:38:
         b1:4f:36:9f:ea:13:46:d3:ad:3c:6c:55:f4:db:3d:0a:3a:fb:
         77:7e:a8:8c:f0:47:b5:4f:f1:c2:d2:0c:57:75:f2:e1:45:ea:
         a9:60:d3:30:fc:44:15:3e:63:9a:3e:51:ae:60:2d:1f:bf:36:
         db:7b:37:2f:1c:55:01:fc:0b:0b:91:e7:5f:c0:68:4b:c1:11:
         36:6b:e7:84:85:03:cc:04:53:2f:74:55:b8:e2:2a:3f:ec:1e:
         d2:20:3c:89:41:1d:be:42:fb:3d:5c:12:6b:69:c9:93:0c:54:
         ce:38:b6:2d:21:6d:56:e0:c8:d2:3e:5b:33:3e:18:46:f2:d6:
         e1:1c:37:f1:27:8c:54:16:68:17:85:c6:57:d1:c5:96:32:7e:
         17:de:15:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByvHI0YBdlyYEm0Do0vy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3
MDNlY2YwHhcNMjUwNTEyMDAwMDI0WhcNMjUwNTEzMDAwMDI0WjAzMTEwLwYDVQQD
EyhiYjk4MjYyNmQ4ZmY3ZWEwYTdhYjUyNzFjNzYyYzJiMTE2ZmI2NTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9IsRly8T3Oy3/hzfGYBLbMenol0
aez7+jo/DSSbMVFTwetfkYj90cjNSol+RM3p7NcKsPS63YCQ+40qC35x0xV00j9z
ykllt8GlTOLr+ZsKRIX4xUUlbfq0CqsljcN4oFhiZP8YmL/JnzZ8atvKYGInup5f
CeGQOOt3CHq/xLaxlBLG2QMrGF7GbagUq7GI2XFmExUC2+JPplSZ6jbwd5edsGsC
c7dPwth2XYfUTV/gH+kixIhe9lKXhqa579Ik9nV+uI5lE5QYv0Ag9XLHytIE9hdR
KixXfqOcrQPqeENRcUqj6rkBDeheRmNlD0ONfBfqDW2lF9xhSLHDEw+6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuYJibY/36gp6tSccdiwrEW+2V3MB8GA1UdIwQY
MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt
NjIxMDY0MWU1MmQ2LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2
LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/gCCOGv
wPo+L09ochPZDaQp8dnTrFIOF4DJ1lab6lbWQsARyl2sNhYHg5JsIDEh+RJhcX+I
gstnxR3E2ifk1TkTJVsnkXfgwUvFhSmGBqgS/2tKZm9LMsc9xBCb8FNmuwoXmH/U
Y1rOqoE4sU82n+oTRtOtPGxV9Ns9Cjr7d36ojPBHtU/xwtIMV3Xy4UXqqWDTMPxE
FT5jmj5RrmAtH78223s3LxxVAfwLC5HnX8BoS8ERNmvnhIUDzARTL3RVuOIqP+we
0iA8iUEdvkL7PVwSa2nJkwxUzji2LSFtVuDI0j5bMz4YRvLW4Rw38SeMVBZoF4XG
V9HFljJ+F94V2Q==
-----END CERTIFICATE-----
Generated at Mon May 12 02:07:24 2025 by rpki-client