Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          VUwlDuk4lbaDmK8QmBl+dpHYfgDQRYFonXlHH8bfMSE=
Subject key identifier:   78:1B:3B:4D:0D:7D:6E:8F:39:1A:97:F4:1E:BE:0D:31:73:D2:73:0D
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       0196A9F982E71A1DD22E3B1EFECCD1E4C3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          0B7C
Signing time:             Wed 07 May 2025 09:00:23 +0000
Manifest this update:     Wed 07 May 2025 09:00:23 +0000
Manifest next update:     Thu 08 May 2025 09:00:23 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: l7hFcFmbhrjRHgNZbT2F1fOayDkiD3SDUOhFUZEvNuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:82:e7:1a:1d:d2:2e:3b:1e:fe:cc:d1:e4:c3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: May  7 09:00:23 2025 GMT
            Not After : May  8 09:00:23 2025 GMT
        Subject: CN=781b3b4d0d7d6e8f391a97f41ebe0d3173d2730d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:57:0b:91:23:5c:62:f4:96:f5:6f:bb:a6:
                    03:e4:9e:dc:e2:b0:90:1e:c6:17:64:a3:09:9b:83:
                    61:c8:89:da:1a:30:77:6c:1b:e4:5f:c8:79:41:9c:
                    d4:53:0c:ac:8c:8d:3d:20:5f:c2:bb:75:a0:31:ca:
                    2a:e2:07:ee:c4:0a:84:06:6b:06:a3:74:a0:37:10:
                    10:f2:7d:2f:82:07:91:49:ac:c4:4d:15:f8:16:1e:
                    b7:cf:78:45:cf:2f:8d:86:ee:60:d0:6a:e7:24:49:
                    e6:53:9d:a1:e4:d5:b6:0c:56:db:f6:62:37:16:52:
                    b1:e0:b5:d2:4e:55:95:52:ac:06:ce:04:5b:9e:b0:
                    14:9d:91:6b:eb:e2:51:f9:fd:2b:01:28:49:35:56:
                    56:42:31:88:e5:09:64:c3:e1:de:9d:99:8a:93:7a:
                    a4:28:8c:88:89:df:f7:de:28:2e:fb:a2:66:cb:86:
                    b5:4a:59:09:4e:b1:f0:5a:80:0d:e6:66:68:c5:2a:
                    fa:10:03:28:72:25:d9:12:3f:48:27:18:8c:29:f2:
                    1f:f0:c1:f5:ac:f0:a8:47:60:4d:d0:26:c9:74:9f:
                    b8:aa:8f:8f:5a:b5:be:0d:ce:69:d2:f1:bb:ed:48:
                    06:d4:86:22:e2:9e:b4:57:9a:82:d8:97:08:f7:c8:
                    29:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1B:3B:4D:0D:7D:6E:8F:39:1A:97:F4:1E:BE:0D:31:73:D2:73:0D
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:6a:55:1e:99:c1:c9:35:1c:9c:bb:ba:0d:32:2d:23:4e:
         38:aa:b5:28:a3:a0:35:ac:25:75:48:53:bc:b0:dd:27:88:e6:
         22:ac:6b:8c:56:55:65:db:49:f9:1f:48:e2:ce:ae:2d:cc:06:
         4f:98:a0:8e:1a:8e:17:46:cc:35:78:33:aa:63:65:6f:2b:5c:
         a6:ec:98:2e:bb:39:69:01:05:e5:3f:73:bc:5f:0d:45:ab:8d:
         be:99:a5:08:78:20:7e:2b:e4:87:c7:2c:27:2d:1a:09:85:0e:
         24:af:a4:8e:d5:db:41:fa:3d:46:d3:a3:63:82:dd:70:87:9c:
         c5:8f:e2:53:9c:0f:a7:ec:af:9e:91:86:f7:52:00:2d:68:76:
         7a:22:79:cb:95:c3:6d:73:fa:93:33:6a:bf:ae:16:85:42:d5:
         58:b6:ef:c7:07:a1:e5:7f:c2:73:0a:b4:1a:50:3c:3c:eb:3c:
         86:64:7c:22:47:46:84:cc:27:90:ea:cf:dc:11:0e:47:d5:d3:
         69:63:26:ef:79:a6:2a:d3:49:fa:c9:a0:90:be:b1:a9:90:70:
         d5:03:c2:86:56:57:b0:8f:b7:70:5b:24:2c:70:75:47:22:4f:
         89:ca:e3:5b:8d:fd:a6:45:49:94:91:aa:63:5a:80:16:a4:da:
         04:d7:31:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZap+YLnGh3SLjse/szR5MO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTA5NzZhZTI1Yzc4OGZhYmZjMmE4NTM3ODFkNWRmZjBj
YTU2MGYwHhcNMjUwNTA3MDkwMDIzWhcNMjUwNTA4MDkwMDIzWjAzMTEwLwYDVQQD
Eyg3ODFiM2I0ZDBkN2Q2ZThmMzkxYTk3ZjQxZWJlMGQzMTczZDI3MzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t1XC5EjXGL0lvVvu6YD5J7c4rCQ
HsYXZKMJm4NhyInaGjB3bBvkX8h5QZzUUwysjI09IF/Cu3WgMcoq4gfuxAqEBmsG
o3SgNxAQ8n0vggeRSazETRX4Fh63z3hFzy+Nhu5g0GrnJEnmU52h5NW2DFbb9mI3
FlKx4LXSTlWVUqwGzgRbnrAUnZFr6+JR+f0rAShJNVZWQjGI5Qlkw+HenZmKk3qk
KIyIid/33igu+6Jmy4a1SlkJTrHwWoAN5mZoxSr6EAMociXZEj9IJxiMKfIf8MH1
rPCoR2BN0CbJdJ+4qo+PWrW+Dc5p0vG77UgG1IYi4p60V5qC2JcI98gpBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgbO00NfW6PORqX9B6+DTFz0nMNMB8GA1UdIwQY
MBaAFO+gl2riXHiPq/wqhTeB1d/wylYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMt
ZDE2NTQ5NzVjM2JjLzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMtZDE2NTQ5NzVjM2Jj
LzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwlqVR6Z
wck1HJy7ug0yLSNOOKq1KKOgNawldUhTvLDdJ4jmIqxrjFZVZdtJ+R9I4s6uLcwG
T5igjhqOF0bMNXgzqmNlbytcpuyYLrs5aQEF5T9zvF8NRauNvpmlCHggfivkh8cs
Jy0aCYUOJK+kjtXbQfo9RtOjY4LdcIecxY/iU5wPp+yvnpGG91IALWh2eiJ5y5XD
bXP6kzNqv64WhULVWLbvxweh5X/Ccwq0GlA8POs8hmR8IkdGhMwnkOrP3BEOR9XT
aWMm73mmKtNJ+smgkL6xqZBw1QPChlZXsI+3cFskLHB1RyJPicrjW439pkVJlJGq
Y1qAFqTaBNcxvQ==
-----END CERTIFICATE-----
Generated at Wed May 7 13:31:32 2025 by rpki-client