Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          kLDk5V/pb17YNmOdDYRQ8HSDXEMCES7O/5G0iFX+99A=
Subject key identifier:   35:41:0B:5E:B2:E1:D5:84:8C:32:77:59:61:81:32:75:B1:F6:70:BB
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       0196BD124F2F03E28FEEBDAA22BBE243997D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          0493
Signing time:             Sun 11 May 2025 02:00:15 +0000
Manifest this update:     Sun 11 May 2025 02:00:15 +0000
Manifest next update:     Mon 12 May 2025 02:00:15 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: UuPaEQRsVGCjisgykY0Odxsq0jYqnWiD7CCsSaJcq4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:12:4f:2f:03:e2:8f:ee:bd:aa:22:bb:e2:43:99:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: May 11 02:00:15 2025 GMT
            Not After : May 12 02:00:15 2025 GMT
        Subject: CN=35410b5eb2e1d5848c32775961813275b1f670bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:9d:2e:c1:42:d6:15:fa:aa:4e:5e:2c:42:
                    07:53:42:8e:d4:07:a9:a2:0f:c4:25:83:6d:82:7c:
                    77:42:9c:56:f0:ea:7c:5e:06:07:1a:3e:85:07:7d:
                    41:b0:37:28:9f:50:13:7a:25:a6:4d:0c:60:db:00:
                    fc:b9:0e:85:bc:74:c1:cb:10:b6:36:57:68:9a:2f:
                    ef:8b:d3:2f:2a:bc:ac:8b:4d:58:5c:3a:32:dd:8b:
                    28:3c:e1:15:f0:7a:a9:7a:e2:d3:4a:f6:ea:51:00:
                    05:73:60:ec:59:62:2e:b3:0f:39:d9:80:83:6d:e2:
                    7b:98:6d:35:33:1f:45:cd:3a:d5:a4:5e:2a:60:2d:
                    4f:c5:2a:e6:44:4c:55:af:ce:91:07:68:3e:91:c7:
                    3b:83:25:c7:17:86:d7:e9:52:ad:1d:3d:63:21:88:
                    cd:89:33:d6:94:55:7b:6c:9d:78:72:1e:cd:e4:69:
                    3c:94:69:be:b5:52:7f:28:18:3c:42:2d:3e:2d:f6:
                    e9:65:b0:68:b9:8a:a7:99:32:a3:d4:7d:d6:90:e2:
                    2e:54:5d:59:22:0d:d3:da:93:55:b9:35:fa:79:97:
                    5b:8d:e7:cc:6a:97:84:65:e7:9b:61:18:bd:6d:4b:
                    38:06:16:51:14:fb:c5:83:06:f1:d5:c0:6a:50:1a:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:0B:5E:B2:E1:D5:84:8C:32:77:59:61:81:32:75:B1:F6:70:BB
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:1d:33:86:6b:38:e9:f9:94:9e:af:0e:cb:4c:42:bc:eb:
         12:c8:43:58:3d:90:f1:c2:a5:d7:59:50:aa:84:22:5e:bb:dc:
         72:e6:6a:4e:7f:e2:8c:c1:4f:38:2d:db:32:e6:6b:cd:70:3b:
         97:3b:90:89:40:3d:ba:89:67:18:79:8f:5c:f7:35:a2:f1:7a:
         88:22:af:b4:30:81:d2:f8:70:20:44:5f:b0:35:16:65:eb:98:
         7b:69:9a:93:26:65:9c:66:74:90:fb:52:dd:84:42:55:84:36:
         aa:ca:08:57:df:92:fd:5b:f9:fb:1a:ee:36:d5:f9:a1:8d:af:
         0e:9c:27:e8:f4:77:4a:ab:f3:59:52:22:61:47:d4:91:34:50:
         3d:e0:27:75:ec:6a:1f:6a:d1:88:26:2c:fa:17:15:63:8b:8a:
         8b:2a:68:3a:f2:c2:f6:fe:ce:dd:65:d3:a1:1b:ba:e0:15:3a:
         56:c4:14:a0:e9:ee:93:44:29:05:be:ab:16:8f:ac:5a:72:c9:
         fb:c1:99:d6:c4:53:5e:69:c0:89:32:be:18:23:cf:1b:0e:11:
         7d:dc:3f:da:87:e7:53:90:e2:58:10:f0:4d:39:8d:05:e0:e2:
         cf:8d:b1:63:d6:58:7e:1d:6b:a5:d0:52:cf:11:20:dd:c2:df:
         cb:a2:2a:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9Ek8vA+KP7r2qIrviQ5l9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNzZiYTRkMmI5ZTAwZmJiZjhlYzQzMzExZTkxYjk1NGFh
YTUzNmUwHhcNMjUwNTExMDIwMDE1WhcNMjUwNTEyMDIwMDE1WjAzMTEwLwYDVQQD
EygzNTQxMGI1ZWIyZTFkNTg0OGMzMjc3NTk2MTgxMzI3NWIxZjY3MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAqdLsFC1hX6qk5eLEIHU0KO1Aep
og/EJYNtgnx3QpxW8Op8XgYHGj6FB31BsDcon1ATeiWmTQxg2wD8uQ6FvHTByxC2
Nldomi/vi9MvKrysi01YXDoy3YsoPOEV8HqpeuLTSvbqUQAFc2DsWWIusw852YCD
beJ7mG01Mx9FzTrVpF4qYC1PxSrmRExVr86RB2g+kcc7gyXHF4bX6VKtHT1jIYjN
iTPWlFV7bJ14ch7N5Gk8lGm+tVJ/KBg8Qi0+LfbpZbBouYqnmTKj1H3WkOIuVF1Z
Ig3T2pNVuTX6eZdbjefMapeEZeebYRi9bUs4BhZRFPvFgwbx1cBqUBo07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVBC16y4dWEjDJ3WWGBMnWx9nC7MB8GA1UdIwQY
MBaAFOF2uk0rngD7v47EMxHpG5VKqlNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEt
ZDc4ZDhhYjZlNjY4LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEtZDc4ZDhhYjZlNjY4
LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIodM4Zr
OOn5lJ6vDstMQrzrEshDWD2Q8cKl11lQqoQiXrvccuZqTn/ijMFPOC3bMuZrzXA7
lzuQiUA9uolnGHmPXPc1ovF6iCKvtDCB0vhwIERfsDUWZeuYe2makyZlnGZ0kPtS
3YRCVYQ2qsoIV9+S/Vv5+xruNtX5oY2vDpwn6PR3SqvzWVIiYUfUkTRQPeAndexq
H2rRiCYs+hcVY4uKiypoOvLC9v7O3WXToRu64BU6VsQUoOnuk0QpBb6rFo+sWnLJ
+8GZ1sRTXmnAiTK+GCPPGw4Rfdw/2ofnU5DiWBDwTTmNBeDiz42xY9ZYfh1rpdBS
zxEg3cLfy6Iqmw==
-----END CERTIFICATE-----
Generated at Sun May 11 10:38:43 2025 by rpki-client