Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          G8gZUZobg9Y4HK5ZAhtZzDkCfzGSRKMuPdEpjDsqFhc=
Subject key identifier:   81:00:DA:FA:B2:96:79:15:11:E4:8B:9C:CC:2F:4D:F9:B6:FE:80:16
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       0196A276E5BFA2C942D2E96006E2988082CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 22:00:22 +0000
Manifest this update:     Mon 05 May 2025 22:00:22 +0000
Manifest next update:     Tue 06 May 2025 22:00:22 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: 6MGN7BGuuQeI/lQzkwyLDeJY5p95Khp80DZ5r0UOWoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:76:e5:bf:a2:c9:42:d2:e9:60:06:e2:98:80:82:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: May  5 22:00:22 2025 GMT
            Not After : May  6 22:00:22 2025 GMT
        Subject: CN=8100dafab296791511e48b9ccc2f4df9b6fe8016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0f:5a:1d:8e:24:23:ec:7b:a2:79:05:e9:3e:
                    aa:c8:cf:be:a9:46:04:e4:86:c9:fd:85:cc:0f:4d:
                    72:18:d9:94:6b:e8:c6:32:7b:f7:65:55:ff:38:83:
                    ca:72:91:6c:2b:c0:dc:aa:5c:d2:b2:77:8b:a3:89:
                    ee:72:de:90:6d:a7:30:51:8b:c0:da:89:25:ba:3c:
                    f0:c5:e2:f0:3f:b7:2b:62:c2:27:21:11:f1:57:ac:
                    f2:9d:52:02:a3:73:9d:44:2d:15:64:2e:10:62:8a:
                    fe:e7:22:88:33:19:8c:14:4b:6e:70:8d:9d:25:e2:
                    0f:bd:51:8d:30:84:85:36:a3:a8:d8:f3:e7:26:a0:
                    3e:95:ff:90:f3:4c:da:77:14:c2:19:59:53:e4:28:
                    fa:9d:0e:e1:a0:99:2e:df:f8:e3:91:eb:b8:f1:11:
                    ec:c6:b1:fd:fa:83:8c:50:41:14:3e:66:1e:94:db:
                    d4:e8:85:b6:07:a8:3d:4a:97:b5:7e:19:b8:7d:c0:
                    10:71:fd:07:28:c2:b4:3b:bb:31:8b:5f:a8:36:87:
                    62:51:b5:55:1e:af:07:a8:1a:52:74:e6:3f:1e:82:
                    09:1e:09:c8:12:23:c2:b3:5c:b5:cc:15:a2:de:c8:
                    91:5f:5d:bc:d4:d4:ef:b6:d0:25:ca:f6:ff:64:f3:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:00:DA:FA:B2:96:79:15:11:E4:8B:9C:CC:2F:4D:F9:B6:FE:80:16
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:25:35:90:e8:ed:3a:3b:97:66:4d:46:2d:c5:06:20:40:07:
         97:f5:65:bd:c6:33:e2:76:a4:97:2f:0b:8e:ce:20:04:83:a1:
         81:a8:52:f7:bf:80:9c:78:4a:4f:32:51:3c:aa:c4:06:4b:68:
         ff:c5:ae:d8:25:39:6b:96:fc:b1:45:c9:22:37:47:04:53:ea:
         e0:6b:4d:10:cb:0a:37:58:7e:4c:a3:f4:64:ba:cf:1b:78:ec:
         b6:af:9e:a6:36:a4:e5:b0:8a:d9:a5:8d:d3:7c:21:e6:25:56:
         53:8d:b0:9a:cd:3c:c2:b0:6f:25:06:21:a5:17:6f:1c:fa:38:
         31:83:94:a5:6b:d5:13:66:43:e7:06:dc:ed:e1:22:3d:7c:59:
         db:07:d2:fd:7b:0e:85:66:c7:d4:f3:3e:de:cd:0a:ae:0e:82:
         de:4f:5c:e5:21:b4:87:f7:6c:7f:a8:da:94:b9:ac:16:91:c2:
         4e:e6:46:0b:49:bb:ef:9e:96:78:73:eb:72:8f:98:53:5b:83:
         31:9a:77:c7:bd:35:a1:6d:80:b4:00:a3:f6:78:a5:df:84:2f:
         6c:30:61:90:0b:14:2f:66:9e:dc:4f:af:1e:ff:57:ff:5c:d9:
         ac:bb:13:3d:84:40:44:8c:3e:43:cb:2c:9e:75:6a:95:e8:57:
         c9:86:d4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiduW/oslC0ulgBuKYgILNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWZmZjhhZGM2ZWU3NTEyNzJjMGE5MWQwNWRjYWZmN2U4
ZDJkNjkwHhcNMjUwNTA1MjIwMDIyWhcNMjUwNTA2MjIwMDIyWjAzMTEwLwYDVQQD
Eyg4MTAwZGFmYWIyOTY3OTE1MTFlNDhiOWNjYzJmNGRmOWI2ZmU4MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g9aHY4kI+x7onkF6T6qyM++qUYE
5IbJ/YXMD01yGNmUa+jGMnv3ZVX/OIPKcpFsK8DcqlzSsneLo4nuct6QbacwUYvA
2oklujzwxeLwP7crYsInIRHxV6zynVICo3OdRC0VZC4QYor+5yKIMxmMFEtucI2d
JeIPvVGNMISFNqOo2PPnJqA+lf+Q80zadxTCGVlT5Cj6nQ7hoJku3/jjkeu48RHs
xrH9+oOMUEEUPmYelNvU6IW2B6g9Spe1fhm4fcAQcf0HKMK0O7sxi1+oNodiUbVV
Hq8HqBpSdOY/HoIJHgnIEiPCs1y1zBWi3siRX1281NTvttAlyvb/ZPM8+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEA2vqylnkVEeSLnMwvTfm2/oAWMB8GA1UdIwQY
MBaAFPFf/4rcbudRJywKkdBdyv9+jS1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQt
YzNmNGI5ODU3MTRjLzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQtYzNmNGI5ODU3MTRj
LzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSU1kOjt
OjuXZk1GLcUGIEAHl/VlvcYz4nakly8Ljs4gBIOhgahS97+AnHhKTzJRPKrEBkto
/8Wu2CU5a5b8sUXJIjdHBFPq4GtNEMsKN1h+TKP0ZLrPG3jstq+epjak5bCK2aWN
03wh5iVWU42wms08wrBvJQYhpRdvHPo4MYOUpWvVE2ZD5wbc7eEiPXxZ2wfS/XsO
hWbH1PM+3s0Krg6C3k9c5SG0h/dsf6jalLmsFpHCTuZGC0m7756WeHPrco+YU1uD
MZp3x701oW2AtACj9nil34QvbDBhkAsUL2ae3E+vHv9X/1zZrLsTPYRARIw+Q8ss
nnVqlehXyYbU3w==
-----END CERTIFICATE-----
Generated at Tue May 6 00:56:27 2025 by rpki-client