Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File:                     w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier:          ZwbhcMsTOJIPIIo2qIlkKqWMp/Z/V6zAklJnjry7e50=
Subject key identifier:   35:69:82:A2:7A:BB:26:B2:8E:22:12:9C:A6:3E:2E:3A:F3:BB:D8:9C
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer:       /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial:       0196BA7F57CA31ECEC7BFF5F81D6DFFA5ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number:          04B9
Signing time:             Sat 10 May 2025 14:00:29 +0000
Manifest this update:     Sat 10 May 2025 14:00:29 +0000
Manifest next update:     Sun 11 May 2025 14:00:29 +0000
Files and hashes:         1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: +jT0XjazWy97SeNYKbsVS/ZmLu4tjgel6Yct4O3KXwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:57:ca:31:ec:ec:7b:ff:5f:81:d6:df:fa:5a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
        Validity
            Not Before: May 10 14:00:29 2025 GMT
            Not After : May 11 14:00:29 2025 GMT
        Subject: CN=356982a27abb26b28e22129ca63e2e3af3bbd89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8d:c3:0d:f7:97:62:fa:48:c6:14:de:45:c9:
                    6f:38:9d:82:27:35:3c:bb:14:cf:51:58:12:d4:80:
                    7e:a6:da:b9:f0:dd:24:59:d8:35:ea:d6:60:fd:bc:
                    98:ab:96:75:8f:0c:c5:f4:b8:20:a0:0b:af:35:75:
                    20:b8:f9:e1:9a:2e:bb:dc:b9:57:63:0a:bb:0a:d1:
                    18:89:67:99:53:4d:cd:37:62:3e:93:df:00:46:4d:
                    03:46:d5:27:61:88:48:ff:9b:c2:f0:ba:a5:9b:2e:
                    73:bd:3b:67:c5:f5:9c:02:42:41:bd:49:71:e5:96:
                    a8:00:01:5a:f5:8b:a8:59:cc:e9:17:ab:cf:43:41:
                    be:b9:6c:85:46:77:a3:c6:21:31:3d:42:0e:52:4c:
                    f6:84:b3:cb:df:03:4a:95:e3:70:e9:dc:3d:0d:e1:
                    64:e6:1f:4f:6f:85:00:91:49:38:6c:32:5b:59:72:
                    39:23:3d:4c:dd:1d:42:c6:32:a8:bf:ce:5a:c3:7d:
                    5f:a9:ba:24:c6:3a:3f:47:ac:ca:1c:7e:a0:2a:cc:
                    f7:d4:22:94:0d:da:f8:80:69:98:db:0a:d0:75:e6:
                    c0:a6:28:11:dc:8e:33:70:fd:06:50:a9:ac:56:32:
                    3a:15:25:f7:86:b4:1f:3c:70:72:df:c8:ab:4c:9e:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:82:A2:7A:BB:26:B2:8E:22:12:9C:A6:3E:2E:3A:F3:BB:D8:9C
            X509v3 Authority Key Identifier:
                keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:26:c8:27:43:78:c5:1d:75:f2:10:f5:7a:30:5c:e4:bd:76:
         45:8f:18:08:4e:ca:0c:01:97:81:8a:08:db:c7:70:07:eb:88:
         9d:62:27:29:57:21:be:87:0f:a5:f9:fb:79:4f:1b:75:ab:82:
         00:df:48:ca:bb:a7:6c:fc:1a:67:cb:d5:be:7c:b9:58:9c:30:
         c0:d6:71:77:5d:0a:a1:96:95:bf:c0:46:ec:c5:d6:d4:03:23:
         66:0e:dc:1a:d8:18:e4:ad:21:f1:8c:12:9c:49:dd:c8:88:97:
         d7:2a:41:c2:35:14:2e:92:ad:cd:ec:d7:b5:fb:c5:5e:3b:0f:
         58:28:0a:72:1e:de:9f:87:73:42:7a:fd:ca:f2:d2:01:ee:d7:
         2a:2d:70:b2:0b:b4:85:01:4a:39:42:08:c3:52:ef:8d:e5:c5:
         02:a4:7b:9d:2e:92:1e:f3:f4:b5:d5:83:f7:d6:cf:54:72:42:
         4d:ef:1a:e3:9f:6e:96:31:32:fd:90:50:43:67:d7:5e:92:02:
         59:ef:6b:5b:a6:17:2f:b3:f2:07:b7:bf:91:27:11:86:5e:24:
         c7:bd:43:ea:32:0e:b0:da:4a:90:ee:71:e9:d8:da:87:67:9d:
         18:f1:f0:35:a9:bc:cf:38:24:e3:df:74:3f:cf:86:c7:cb:66:
         66:10:5f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6f1fKMezse/9fgdbf+lrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw
OGY4NWYwHhcNMjUwNTEwMTQwMDI5WhcNMjUwNTExMTQwMDI5WjAzMTEwLwYDVQQD
EygzNTY5ODJhMjdhYmIyNmIyOGUyMjEyOWNhNjNlMmUzYWYzYmJkODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I3DDfeXYvpIxhTeRclvOJ2CJzU8
uxTPUVgS1IB+ptq58N0kWdg16tZg/byYq5Z1jwzF9LggoAuvNXUguPnhmi673LlX
Ywq7CtEYiWeZU03NN2I+k98ARk0DRtUnYYhI/5vC8Lqlmy5zvTtnxfWcAkJBvUlx
5ZaoAAFa9YuoWczpF6vPQ0G+uWyFRnejxiExPUIOUkz2hLPL3wNKleNw6dw9DeFk
5h9Pb4UAkUk4bDJbWXI5Iz1M3R1CxjKov85aw31fqbokxjo/R6zKHH6gKsz31CKU
Ddr4gGmY2wrQdebApigR3I4zcP0GUKmsVjI6FSX3hrQfPHBy38irTJ5utQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVpgqJ6uyayjiISnKY+Ljrzu9icMB8GA1UdIwQY
MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt
OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl
LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSbIJ0N4
xR118hD1ejBc5L12RY8YCE7KDAGXgYoI28dwB+uInWInKVchvocPpfn7eU8bdauC
AN9IyrunbPwaZ8vVvny5WJwwwNZxd10KoZaVv8BG7MXW1AMjZg7cGtgY5K0h8YwS
nEndyIiX1ypBwjUULpKtzezXtfvFXjsPWCgKch7en4dzQnr9yvLSAe7XKi1wsgu0
hQFKOUIIw1LvjeXFAqR7nS6SHvP0tdWD99bPVHJCTe8a459uljEy/ZBQQ2fXXpIC
We9rW6YXL7PyB7e/kScRhl4kx71D6jIOsNpKkO5x6djah2edGPHwNam8zzgk4990
P8+Gx8tmZhBfiA==
-----END CERTIFICATE-----
Generated at Sat May 10 18:52:49 2025 by rpki-client