Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          qTB42z8ZrkIV38jrNNsBAbzmo+gij/27g2BURdxQHPQ=
Subject key identifier:   52:8D:65:9F:3A:41:91:80:68:C3:02:89:6B:A7:56:84:B4:83:F5:98
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       0196BAB6485EADFDDE5E3AE43134871AD72D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          0D96
Signing time:             Sat 10 May 2025 15:00:30 +0000
Manifest this update:     Sat 10 May 2025 15:00:30 +0000
Manifest next update:     Sun 11 May 2025 15:00:30 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: lvgL5iLsLZNaiEIRoxikXQ0HLg6MvpSP4EC4TJ6Q9FA=)
                          2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=)
                          3: G2wclPtQ-NTyFu49JfeZRSYyyxY.roa (hash: X+HR6/7YVlIIqv7OyveCmM7668weB9c1FsbPbUXjZ6M=)
                          4: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=)
                          5: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:48:5e:ad:fd:de:5e:3a:e4:31:34:87:1a:d7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: May 10 15:00:30 2025 GMT
            Not After : May 11 15:00:30 2025 GMT
        Subject: CN=528d659f3a41918068c302896ba75684b483f598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:6b:de:e8:87:b6:e2:d6:4e:f8:3b:25:2b:
                    78:e7:f8:76:8b:7f:00:64:cf:19:ce:bd:24:86:9c:
                    57:a1:94:04:be:a9:75:7e:d2:8a:64:38:34:29:09:
                    8e:49:8c:ec:f1:48:5c:25:f0:1c:1d:d6:1e:70:55:
                    ac:c7:7a:ae:2f:87:df:66:dc:a5:46:83:f4:75:35:
                    87:91:5d:2d:a2:ca:fe:f1:5f:01:3a:c1:b4:c0:8c:
                    39:ea:32:52:8e:72:eb:1d:9b:68:83:26:17:0e:0b:
                    90:cf:1c:0e:85:a3:89:86:6d:bd:0c:38:6f:6a:88:
                    e8:1a:75:75:d9:5a:43:f6:e8:4a:0d:8b:bf:ca:39:
                    b5:40:af:48:40:2c:c7:ea:2d:4d:3f:3a:72:1a:07:
                    4a:e7:f0:50:60:ae:32:cc:fa:3d:3d:46:5e:30:8e:
                    23:98:a5:a1:3f:00:55:fa:25:b5:de:c1:c8:2f:22:
                    6d:35:da:6b:39:fa:a9:e4:16:d3:7e:51:8b:19:4d:
                    4e:7d:ff:74:58:77:df:8c:94:a2:4a:03:dc:93:f1:
                    b9:da:a3:ba:a8:73:b9:e8:73:e2:bf:37:26:11:dd:
                    80:c5:0c:3d:b0:6c:90:d3:b2:0e:2c:ac:60:da:db:
                    ff:77:d1:5e:72:8f:74:eb:ac:a1:ac:76:cf:61:75:
                    3a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:65:9F:3A:41:91:80:68:C3:02:89:6B:A7:56:84:B4:83:F5:98
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:3b:39:b7:ea:f3:b7:34:2f:c5:66:f7:db:c2:09:5b:90:
         23:24:c9:74:99:b4:84:bf:53:1d:73:9f:92:ca:c3:de:12:97:
         1d:19:fb:eb:a2:c9:2c:f1:51:52:a3:bf:03:fc:ae:38:f9:38:
         95:41:75:30:cc:4a:af:fb:86:79:57:e2:76:01:8f:35:e7:6d:
         fc:a0:26:50:de:ed:82:e2:4a:1f:c5:a9:ef:b8:1a:68:1b:59:
         86:dc:09:f1:b0:fd:25:2f:d0:15:08:48:09:8d:fc:93:a4:5f:
         15:4f:a0:e1:37:b2:50:82:78:55:23:af:9b:9d:cc:cb:33:76:
         21:0e:ef:67:9f:be:4a:be:bd:f5:f8:8e:99:1d:76:b4:e9:2e:
         6d:51:60:71:2e:c3:3a:ef:76:3b:85:8c:1c:7e:18:9d:e6:18:
         fc:91:75:89:9e:99:a6:7b:51:66:a7:d9:38:79:68:8f:65:e7:
         86:21:fd:18:60:bd:c3:00:2a:2b:6e:87:99:f9:ff:99:6e:9b:
         0b:37:76:a5:8c:94:d6:18:7a:9b:65:e6:a8:ba:50:a3:71:28:
         dc:6f:13:74:48:65:c2:17:77:cc:3c:14:74:9d:35:bc:a7:74:
         ab:42:6b:5e:9b:b7:b1:39:93:4a:20:f9:43:93:26:60:8e:4a:
         c2:f8:7c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tkherf3eXjrkMTSHGtctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzJmZTJjODA1ZWQ2M2FmYzljODllOTMyNGFjOTRkMzA5
MzlhYWIwHhcNMjUwNTEwMTUwMDMwWhcNMjUwNTExMTUwMDMwWjAzMTEwLwYDVQQD
Eyg1MjhkNjU5ZjNhNDE5MTgwNjhjMzAyODk2YmE3NTY4NGI0ODNmNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c5r3uiHtuLWTvg7JSt45/h2i38A
ZM8Zzr0khpxXoZQEvql1ftKKZDg0KQmOSYzs8UhcJfAcHdYecFWsx3quL4ffZtyl
RoP0dTWHkV0tosr+8V8BOsG0wIw56jJSjnLrHZtogyYXDguQzxwOhaOJhm29DDhv
aojoGnV12VpD9uhKDYu/yjm1QK9IQCzH6i1NPzpyGgdK5/BQYK4yzPo9PUZeMI4j
mKWhPwBV+iW13sHILyJtNdprOfqp5BbTflGLGU1Off90WHffjJSiSgPck/G52qO6
qHO56HPivzcmEd2AxQw9sGyQ07IOLKxg2tv/d9Feco9066yhrHbPYXU6qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKNZZ86QZGAaMMCiWunVoS0g/WYMB8GA1UdIwQY
MBaAFA1y/iyAXtY6/JyJ6TJKyU0wk5qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgt
Y2Y4MThjN2M0NTFhLzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgtY2Y4MThjN2M0NTFh
LzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFE7Obfq
87c0L8Vm99vCCVuQIyTJdJm0hL9THXOfksrD3hKXHRn766LJLPFRUqO/A/yuOPk4
lUF1MMxKr/uGeVfidgGPNedt/KAmUN7tguJKH8Wp77gaaBtZhtwJ8bD9JS/QFQhI
CY38k6RfFU+g4TeyUIJ4VSOvm53MyzN2IQ7vZ5++Sr699fiOmR12tOkubVFgcS7D
Ou92O4WMHH4YneYY/JF1iZ6ZpntRZqfZOHloj2XnhiH9GGC9wwAqK26Hmfn/mW6b
Czd2pYyU1hh6m2XmqLpQo3Eo3G8TdEhlwhd3zDwUdJ01vKd0q0JrXpu3sTmTSiD5
Q5MmYI5Kwvh8Vw==
-----END CERTIFICATE-----
Generated at Sat May 10 17:36:32 2025 by rpki-client