Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File:                     MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier:          U9ixG0G1l8nY0AC2O+LEBFsUxuJMpc+D9PuT4hfdKOE=
Subject key identifier:   95:BB:12:AD:E2:A8:0A:B4:98:3E:05:00:A2:79:AF:36:0F:E1:47:2B
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer:       /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial:       0196C15DEE744791FA24132F49B31DFE1255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number:          091C
Signing time:             Sun 11 May 2025 22:01:20 +0000
Manifest this update:     Sun 11 May 2025 22:01:20 +0000
Manifest next update:     Mon 12 May 2025 22:01:20 +0000
Files and hashes:         1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: eAmmUlRUTkNaQVojFD6E6KnuJMqAR2ogkXTvWV0JNJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:ee:74:47:91:fa:24:13:2f:49:b3:1d:fe:12:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
        Validity
            Not Before: May 11 22:01:20 2025 GMT
            Not After : May 12 22:01:20 2025 GMT
        Subject: CN=95bb12ade2a80ab4983e0500a279af360fe1472b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:36:e3:01:da:81:16:c1:ff:30:0d:8b:75:
                    cb:f4:69:62:f9:74:a7:bf:24:a4:c7:dc:97:66:11:
                    e1:de:7d:2b:7e:3d:b4:c3:d9:49:3d:ab:29:57:44:
                    c7:0b:f2:b9:53:16:d6:48:bb:e4:51:59:e7:39:57:
                    6d:a6:ec:af:85:46:2b:b4:f8:70:7c:f8:63:65:51:
                    49:ef:c9:7f:74:50:b6:8c:23:25:74:1d:41:02:f3:
                    d8:44:af:5c:57:7f:20:98:66:d5:bf:09:52:4c:3f:
                    8c:c9:a3:54:77:86:b3:0a:cc:ec:3f:2a:a2:19:c0:
                    df:15:7b:5f:13:05:cc:b1:a1:1b:af:0d:91:1a:10:
                    27:ee:59:20:93:04:2b:e0:ef:0b:b9:da:9f:d5:21:
                    de:bb:a8:54:f3:c7:20:1e:c5:86:7f:a7:57:7b:4f:
                    ba:16:b0:a2:90:ed:a6:5e:97:57:83:ea:2e:2e:e0:
                    75:21:08:e6:ee:83:52:46:39:a9:80:ee:b4:ed:6d:
                    1e:3c:48:be:f8:5f:72:3c:d7:36:1d:b3:ab:c6:eb:
                    bf:c2:d0:6d:fa:22:80:8d:30:40:12:32:55:27:87:
                    16:1d:b6:6c:65:a8:58:59:9c:08:b7:f4:08:65:70:
                    fa:d9:74:c1:ae:06:35:81:c3:7d:1a:af:00:a6:e6:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BB:12:AD:E2:A8:0A:B4:98:3E:05:00:A2:79:AF:36:0F:E1:47:2B
            X509v3 Authority Key Identifier:
                keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ac:99:1e:9d:bc:ac:4a:0d:8d:9b:3d:28:b9:33:be:7b:14:
         b1:8e:b7:08:25:f0:37:07:20:0c:3c:d0:58:68:91:c5:dd:36:
         d9:e4:11:28:d8:c4:00:c8:1d:3f:8c:04:2d:f9:a8:98:8e:a9:
         b9:60:fc:29:cf:84:12:65:d8:d0:f5:c7:bb:d8:d1:35:55:2e:
         d9:55:86:33:c4:8d:fd:2f:a2:0e:6c:42:97:e8:45:ee:9c:79:
         50:bc:7c:f6:b3:1e:39:c5:39:86:6c:3c:ee:e2:ea:89:77:d2:
         68:52:9a:9f:bd:3c:6d:71:d1:b6:63:37:82:f8:66:a2:09:66:
         65:9c:e1:67:15:34:9b:69:56:b4:69:43:94:32:d5:c0:13:6d:
         93:8f:44:fe:0d:e7:1e:fe:aa:79:43:a6:25:9b:69:43:20:da:
         78:74:9d:d4:76:f5:7f:c7:88:aa:86:39:8d:35:5b:8c:f8:77:
         29:90:11:68:15:89:e2:e6:16:a5:ed:8e:96:e2:9e:ef:09:36:
         18:a5:ee:e2:a7:34:4a:e9:0f:c2:40:a8:16:f1:f6:03:5b:41:
         34:db:28:43:26:5a:8b:89:ae:75:27:d7:7c:39:3e:50:48:7c:
         1e:b2:2b:e3:4f:6d:74:f1:9a:b0:42:04:68:f0:ff:1a:e2:ff:
         35:f2:a1:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXe50R5H6JBMvSbMd/hJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODU1OTZhNmRlMWNjYmVhNjY1YjQ1NmM0ZDJjY2QwOTY0
OTliMWYwHhcNMjUwNTExMjIwMTIwWhcNMjUwNTEyMjIwMTIwWjAzMTEwLwYDVQQD
Eyg5NWJiMTJhZGUyYTgwYWI0OTgzZTA1MDBhMjc5YWYzNjBmZTE0NzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31s24wHagRbB/zANi3XL9Gli+XSn
vySkx9yXZhHh3n0rfj20w9lJPaspV0THC/K5UxbWSLvkUVnnOVdtpuyvhUYrtPhw
fPhjZVFJ78l/dFC2jCMldB1BAvPYRK9cV38gmGbVvwlSTD+MyaNUd4azCszsPyqi
GcDfFXtfEwXMsaEbrw2RGhAn7lkgkwQr4O8Ludqf1SHeu6hU88cgHsWGf6dXe0+6
FrCikO2mXpdXg+ouLuB1IQjm7oNSRjmpgO607W0ePEi++F9yPNc2HbOrxuu/wtBt
+iKAjTBAEjJVJ4cWHbZsZahYWZwIt/QIZXD62XTBrgY1gcN9Gq8ApuY6KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW7Eq3iqAq0mD4FAKJ5rzYP4UcrMB8GA1UdIwQY
MBaAFDCFWWpt4cy+pmW0VsTSzNCWSZsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYt
OGNjYjY3NGEzODc1LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYtOGNjYjY3NGEzODc1
LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKyZHp28
rEoNjZs9KLkzvnsUsY63CCXwNwcgDDzQWGiRxd022eQRKNjEAMgdP4wELfmomI6p
uWD8Kc+EEmXY0PXHu9jRNVUu2VWGM8SN/S+iDmxCl+hF7px5ULx89rMeOcU5hmw8
7uLqiXfSaFKan708bXHRtmM3gvhmoglmZZzhZxU0m2lWtGlDlDLVwBNtk49E/g3n
Hv6qeUOmJZtpQyDaeHSd1Hb1f8eIqoY5jTVbjPh3KZARaBWJ4uYWpe2OluKe7wk2
GKXu4qc0SukPwkCoFvH2A1tBNNsoQyZai4mudSfXfDk+UEh8HrIr409tdPGasEIE
aPD/GuL/NfKhUA==
-----END CERTIFICATE-----
Generated at Mon May 12 08:18:44 2025 by rpki-client