Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File:                     EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier:          uooqBwzYPKbXeAJkIO7ZhDfs4jVQSsXVjHOhVwEIPhg=
Subject key identifier:   AB:35:BF:E5:8C:5E:74:29:A3:C6:D0:13:88:42:A9:B9:E1:3F:C3:8C
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer:       /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial:       0196CC4E8232C9720C4C1ADC475BFFB7972A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number:          037D
Signing time:             Wed 14 May 2025 01:00:19 +0000
Manifest this update:     Wed 14 May 2025 01:00:19 +0000
Manifest next update:     Thu 15 May 2025 01:00:19 +0000
Files and hashes:         1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: Hc1xVaNEegYjy4snoTpeFxDPP9aRkoaSVYD6vFMFrQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:4e:82:32:c9:72:0c:4c:1a:dc:47:5b:ff:b7:97:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
        Validity
            Not Before: May 14 01:00:19 2025 GMT
            Not After : May 15 01:00:19 2025 GMT
        Subject: CN=ab35bfe58c5e7429a3c6d0138842a9b9e13fc38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ba:8a:7a:b6:a8:08:57:1e:e3:1c:03:32:00:
                    6d:27:e8:c4:66:93:4e:a8:4b:87:c5:07:fc:e0:48:
                    8f:4f:7b:26:ef:3e:c9:b5:a2:ce:cb:a5:c0:15:c8:
                    64:b7:79:4a:bc:35:7c:f9:68:b9:13:84:a5:84:77:
                    fc:b8:ee:fb:85:fa:74:37:e4:99:2b:91:00:97:87:
                    b6:eb:4d:16:21:09:a6:13:4f:53:97:57:41:04:ca:
                    c7:21:7d:c3:2e:53:ac:57:b3:eb:90:7a:87:a5:52:
                    b2:29:96:2f:3a:d0:f0:fe:fb:55:36:78:64:fb:20:
                    d3:42:6d:72:de:a9:d3:f0:aa:b7:9e:a2:60:e6:ef:
                    74:50:c6:b4:86:5d:23:aa:d5:d5:1f:2d:82:6e:bd:
                    c8:02:3f:2b:d7:2c:62:ba:0b:26:7a:3a:92:13:0f:
                    c5:0a:98:9c:0f:de:c9:b1:89:8f:dd:93:0c:63:18:
                    7d:3b:42:41:8e:58:ec:46:e2:a9:6a:88:ec:60:51:
                    82:af:b7:6f:91:37:66:53:5b:ba:49:e4:06:0f:63:
                    28:e2:af:0b:de:f0:7d:0c:29:e4:8b:ca:b0:d6:9e:
                    d1:76:54:04:f0:7a:6b:b5:10:42:05:33:db:80:29:
                    ec:bc:57:da:34:db:a4:07:ee:59:05:c6:b2:3e:76:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:35:BF:E5:8C:5E:74:29:A3:C6:D0:13:88:42:A9:B9:E1:3F:C3:8C
            X509v3 Authority Key Identifier:
                keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f0:75:40:d3:f3:c2:cd:df:5d:11:b9:6f:19:55:92:a0:95:
         b4:e9:7a:eb:2c:2b:13:96:49:28:ed:cc:af:ff:9e:7d:05:0a:
         0c:2d:07:85:3c:f3:87:b3:a9:d0:f6:0f:55:f5:ee:b1:4c:0a:
         0d:bc:76:30:2f:f3:8a:2c:d5:b7:00:c4:49:69:f5:de:57:d9:
         c3:a8:7a:f9:80:18:6c:9b:97:c1:12:d5:a9:41:87:d8:68:35:
         06:d5:23:c2:ad:0e:53:17:9e:48:14:67:67:7a:cd:f3:31:86:
         37:c3:cf:d7:ef:d5:c0:91:d1:76:a0:ce:64:cc:8a:18:6a:85:
         2c:9c:04:02:0a:f3:80:f7:77:25:6f:0e:bd:c4:f5:e6:24:3f:
         8e:fe:82:22:d4:95:ae:35:7a:d9:b2:07:ae:6b:f4:6b:fc:fd:
         fd:3f:3d:05:2f:9b:27:f6:ed:a8:56:29:89:cc:e9:d2:45:b9:
         97:18:d5:fe:b3:d6:03:1d:a4:92:f6:9a:1b:65:51:ee:a9:ee:
         50:80:2f:09:75:e0:69:1b:18:fc:82:db:ec:f2:b4:47:89:74:
         34:f0:44:29:3e:60:b2:49:85:90:c3:98:8f:29:92:e6:28:51:
         dd:92:b1:f4:b9:00:ff:c1:0f:bf:93:57:26:ba:08:65:30:f8:
         db:d5:08:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMToIyyXIMTBrcR1v/t5cqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNGQzOTA3YWNlNTE5YjI0NWZlYmNlZTMyYzNiN2FkNDkz
YjI4NmMwHhcNMjUwNTE0MDEwMDE5WhcNMjUwNTE1MDEwMDE5WjAzMTEwLwYDVQQD
EyhhYjM1YmZlNThjNWU3NDI5YTNjNmQwMTM4ODQyYTliOWUxM2ZjMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LqKeraoCFce4xwDMgBtJ+jEZpNO
qEuHxQf84EiPT3sm7z7JtaLOy6XAFchkt3lKvDV8+Wi5E4SlhHf8uO77hfp0N+SZ
K5EAl4e2600WIQmmE09Tl1dBBMrHIX3DLlOsV7PrkHqHpVKyKZYvOtDw/vtVNnhk
+yDTQm1y3qnT8Kq3nqJg5u90UMa0hl0jqtXVHy2Cbr3IAj8r1yxiugsmejqSEw/F
CpicD97JsYmP3ZMMYxh9O0JBjljsRuKpaojsYFGCr7dvkTdmU1u6SeQGD2Mo4q8L
3vB9DCnki8qw1p7RdlQE8HprtRBCBTPbgCnsvFfaNNukB+5ZBcayPnY3hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKs1v+WMXnQpo8bQE4hCqbnhP8OMMB8GA1UdIwQY
MBaAFBFNOQes5RmyRf687jLDt61JOyhsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVUwNUI2emxHYkpGX3J6dU1zTzNyVWs3S0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNWRmMDQtZGU1MS00ZmFmLTgwY2Et
YTA2ZjcxMTA1NDdiLzEvRVUwNUI2emxHYkpGX3J6dU1zTzNyVWs3S0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNWRmMDQtZGU1MS00ZmFmLTgwY2EtYTA2ZjcxMTA1NDdi
LzEvRVUwNUI2emxHYkpGX3J6dU1zTzNyVWs3S0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfB1QNPz
ws3fXRG5bxlVkqCVtOl66ywrE5ZJKO3Mr/+efQUKDC0HhTzzh7Op0PYPVfXusUwK
Dbx2MC/ziizVtwDESWn13lfZw6h6+YAYbJuXwRLVqUGH2Gg1BtUjwq0OUxeeSBRn
Z3rN8zGGN8PP1+/VwJHRdqDOZMyKGGqFLJwEAgrzgPd3JW8OvcT15iQ/jv6CItSV
rjV62bIHrmv0a/z9/T89BS+bJ/btqFYpiczp0kW5lxjV/rPWAx2kkvaaG2VR7qnu
UIAvCXXgaRsY/ILb7PK0R4l0NPBEKT5gskmFkMOYjymS5ihR3ZKx9LkA/8EPv5NX
JroIZTD429UI2Q==
-----END CERTIFICATE-----
Generated at Wed May 14 09:20:49 2025 by rpki-client