Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File:                     fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier:          gJuAEqroTYfDRVdsAXe5SMD3KtA0ZK5cwXYa3B01ZLk=
Subject key identifier:   11:27:04:ED:04:EF:59:20:4F:64:A8:F9:C0:0F:5B:DA:5F:6D:2F:AD
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer:       /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial:       0196C5DF205423F5842CA6DB5071258FB0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number:          0517
Signing time:             Mon 12 May 2025 19:00:56 +0000
Manifest this update:     Mon 12 May 2025 19:00:56 +0000
Manifest next update:     Tue 13 May 2025 19:00:56 +0000
Files and hashes:         1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: 7WJYuWRY2xoE6srwlaaxHv+g5DRvGNbH4rJyGbu9gAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:df:20:54:23:f5:84:2c:a6:db:50:71:25:8f:b0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
        Validity
            Not Before: May 12 19:00:56 2025 GMT
            Not After : May 13 19:00:56 2025 GMT
        Subject: CN=112704ed04ef59204f64a8f9c00f5bda5f6d2fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:ad:41:91:e4:48:dc:2f:a8:2c:fe:4d:0a:
                    fa:88:ff:78:d8:dc:ee:15:d3:9c:25:4f:16:05:e7:
                    8f:9a:63:12:84:cc:46:51:19:67:73:b9:85:11:49:
                    ed:e2:4e:e4:64:af:ac:83:eb:67:a8:75:ca:bd:c4:
                    91:88:d2:fe:67:af:b6:c0:3e:24:fa:3b:f8:d2:00:
                    48:b1:9c:a1:62:9b:aa:60:f3:a7:8a:d1:83:7c:a7:
                    b8:6d:7c:00:2b:c3:98:50:5a:10:99:c6:e1:b4:70:
                    01:4b:86:6d:c4:c5:7a:df:5d:47:25:28:50:09:b0:
                    d0:99:98:aa:0d:3a:58:56:54:93:ef:c1:ea:a5:6e:
                    7d:01:1d:d0:ad:8d:5e:a3:3a:b9:f4:01:e8:25:52:
                    3f:48:c7:e7:62:52:2e:8c:f8:27:95:95:9b:9c:85:
                    56:6c:1f:4a:dd:f8:7a:32:21:f8:31:52:ae:86:b9:
                    98:2a:b1:09:9a:7c:ae:23:a7:d1:92:c9:88:3b:47:
                    48:51:aa:f6:2e:45:80:4d:1a:93:f6:6e:0b:2f:de:
                    71:f2:d2:da:dd:4b:c9:c5:03:08:95:fa:80:ed:82:
                    77:d7:c6:ba:cd:95:11:1a:5f:2c:46:b9:e9:c9:ee:
                    0f:7d:af:e1:01:aa:9c:ab:d3:cb:7c:9e:ad:40:ef:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:27:04:ED:04:EF:59:20:4F:64:A8:F9:C0:0F:5B:DA:5F:6D:2F:AD
            X509v3 Authority Key Identifier:
                keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:bb:cf:8f:b5:22:27:a8:43:21:6a:87:f6:c2:8e:99:d2:
         ff:79:5c:82:d4:dc:28:d2:56:26:2b:73:96:6b:cf:b5:6d:41:
         a0:36:58:23:7a:f3:00:59:15:0f:99:e5:3b:1b:b0:70:82:f1:
         e5:4f:66:73:ed:be:11:bf:88:17:1f:c9:e6:2f:22:ec:51:2d:
         21:29:47:88:90:d9:7c:42:1d:e7:6a:a1:dd:eb:db:09:65:23:
         cd:5b:cc:77:64:d5:07:58:e7:4c:b0:af:09:e8:bb:08:ff:38:
         6a:0b:6b:c9:52:e4:dd:19:a0:32:db:09:62:da:25:d6:c8:0b:
         27:02:33:9a:b6:f0:46:fa:43:47:c1:fd:b1:c3:9e:89:ac:d7:
         8f:40:18:d8:96:4f:d0:69:ae:aa:f3:19:86:fe:6e:a7:0c:9e:
         fa:f4:1c:ab:42:f9:cb:b2:23:10:6f:de:cf:b2:cf:f4:31:9e:
         25:b6:54:0a:e8:36:4d:95:b7:f5:0e:e3:6b:fd:ff:8f:2f:f0:
         81:bf:2c:e6:86:f1:a9:f4:db:01:0f:0c:52:83:4c:e7:3c:7b:
         ee:36:0d:a7:90:d5:9d:2c:cf:f0:21:28:32:b7:6f:62:f9:98:
         ea:3a:59:d1:cc:45:17:db:35:34:72:91:db:20:85:89:4d:78:
         54:93:d9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3yBUI/WELKbbUHElj7D+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYThhMDEwY2M2ZDdjOTMyMGUwMTJlYTFkMWUzNmUwYTc2
MWMxMzgwHhcNMjUwNTEyMTkwMDU2WhcNMjUwNTEzMTkwMDU2WjAzMTEwLwYDVQQD
EygxMTI3MDRlZDA0ZWY1OTIwNGY2NGE4ZjljMDBmNWJkYTVmNmQyZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3+tQZHkSNwvqCz+TQr6iP942Nzu
FdOcJU8WBeePmmMShMxGURlnc7mFEUnt4k7kZK+sg+tnqHXKvcSRiNL+Z6+2wD4k
+jv40gBIsZyhYpuqYPOnitGDfKe4bXwAK8OYUFoQmcbhtHABS4ZtxMV6311HJShQ
CbDQmZiqDTpYVlST78HqpW59AR3QrY1eozq59AHoJVI/SMfnYlIujPgnlZWbnIVW
bB9K3fh6MiH4MVKuhrmYKrEJmnyuI6fRksmIO0dIUar2LkWATRqT9m4LL95x8tLa
3UvJxQMIlfqA7YJ318a6zZURGl8sRrnpye4Pfa/hAaqcq9PLfJ6tQO+6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEnBO0E71kgT2So+cAPW9pfbS+tMB8GA1UdIwQY
MBaAFH6ooBDMbXyTIOAS6h0eNuCnYcE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEt
NDViZWZiZjFlZjdmLzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEtNDViZWZiZjFlZjdm
LzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDa7z4+1
IieoQyFqh/bCjpnS/3lcgtTcKNJWJitzlmvPtW1BoDZYI3rzAFkVD5nlOxuwcILx
5U9mc+2+Eb+IFx/J5i8i7FEtISlHiJDZfEId52qh3evbCWUjzVvMd2TVB1jnTLCv
Cei7CP84agtryVLk3RmgMtsJYtol1sgLJwIzmrbwRvpDR8H9scOeiazXj0AY2JZP
0GmuqvMZhv5upwye+vQcq0L5y7IjEG/ez7LP9DGeJbZUCug2TZW39Q7ja/3/jy/w
gb8s5obxqfTbAQ8MUoNM5zx77jYNp5DVnSzP8CEoMrdvYvmY6jpZ0cxFF9s1NHKR
2yCFiU14VJPZxw==
-----END CERTIFICATE-----
Generated at Tue May 13 00:01:50 2025 by rpki-client