Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File:                     5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier:          sVWesy92L5ltoN6hN3NaaqUtqtKaXGwmN1TeBbLyWWg=
Subject key identifier:   F9:B0:8F:B5:D5:9A:42:11:58:F8:C5:42:12:64:D1:35:A7:E3:9E:09
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer:       /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial:       01965B03A2F47D4CE5E499948CE1072AAA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number:          0C61
Signing time:             Tue 22 Apr 2025 01:01:27 +0000
Manifest this update:     Tue 22 Apr 2025 01:01:27 +0000
Manifest next update:     Wed 23 Apr 2025 01:01:27 +0000
Files and hashes:         1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: rjbHUy4NPREexP52eWScCHmouyGYdM7B/QVkJeVg5kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:03:a2:f4:7d:4c:e5:e4:99:94:8c:e1:07:2a:aa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
        Validity
            Not Before: Apr 22 01:01:27 2025 GMT
            Not After : Apr 23 01:01:27 2025 GMT
        Subject: CN=f9b08fb5d59a421158f8c5421264d135a7e39e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:c7:9f:c2:57:7b:29:c7:ba:cf:c6:76:23:
                    cc:53:a9:e6:b3:a7:e6:ba:0a:82:4a:e5:40:fc:f6:
                    1d:2c:20:2b:8d:ce:cc:49:4e:1c:70:cd:c6:70:c9:
                    33:71:bb:bf:cc:84:34:6c:f9:17:94:2b:6b:c2:bb:
                    52:2d:8f:10:c7:b2:2f:41:2b:3e:56:7c:00:19:ee:
                    ce:3a:db:f7:95:5f:24:70:57:9e:84:da:e5:f7:c7:
                    6a:88:6c:a2:aa:c8:99:06:cb:66:1a:a0:f2:fa:02:
                    04:f0:74:64:28:8a:bb:1c:b4:cf:0a:21:ec:bb:52:
                    00:fa:6a:d2:4f:e7:32:a3:46:a6:8b:f8:3e:10:b1:
                    5c:f3:b6:6e:52:f5:db:d8:b8:71:2e:3a:c2:29:83:
                    f7:fe:c0:8e:88:b5:60:38:ca:4c:7a:54:49:85:5e:
                    ff:56:98:5b:dc:de:24:a6:58:17:0c:e5:52:e6:36:
                    d7:6b:e5:31:d6:89:2e:57:38:b7:ce:a9:70:89:f0:
                    6f:dd:49:5c:3e:b9:07:9d:2a:eb:f8:5e:27:9f:60:
                    53:de:fb:5e:76:e6:ef:ba:6c:58:8e:bf:47:bc:8f:
                    7e:14:68:31:82:a2:10:40:1c:7a:40:7f:f4:51:58:
                    67:32:4a:de:62:b5:f1:c4:8a:2d:28:2f:2d:d6:be:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:8F:B5:D5:9A:42:11:58:F8:C5:42:12:64:D1:35:A7:E3:9E:09
            X509v3 Authority Key Identifier:
                keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:09:b8:f7:b4:0e:0b:e5:ba:d0:7e:4f:4f:97:bd:63:d9:
         6b:d8:66:e2:1e:c9:31:8e:0e:83:54:6b:ed:1f:4a:f2:e4:28:
         58:ef:c5:58:6b:08:26:0a:a1:be:cf:83:06:a7:70:69:b3:80:
         a5:42:80:be:c3:32:6c:c0:94:77:ab:2f:65:d8:8d:b2:ad:52:
         43:7e:ff:71:8a:1c:d8:ed:79:8b:35:04:f6:17:6b:a5:f5:8c:
         10:27:58:bd:42:a5:e6:26:3e:a4:57:fa:6a:37:d0:4c:e8:1b:
         67:a1:fb:68:d7:e9:2b:cc:ad:9a:fd:1e:22:4f:47:20:f6:c9:
         2f:61:15:33:b5:7f:94:da:7e:de:9f:15:47:0d:b0:f7:3f:5d:
         8d:93:ff:7e:c5:40:aa:bf:e2:40:65:b6:86:62:b3:78:0f:c4:
         84:00:50:59:2b:52:72:8e:eb:7e:8f:f4:e3:3f:c0:ae:ee:cc:
         03:b6:63:70:fd:80:2c:d5:da:eb:b7:05:f7:54:f2:4b:5f:ee:
         38:b8:c7:3c:cf:9c:d5:e6:ec:21:51:57:e5:c6:fe:87:5d:ac:
         2e:1e:10:6c:f9:a1:96:70:ba:a6:56:9d:4f:8d:a9:37:af:cd:
         7a:6e:0d:bd:5c:07:14:f3:33:0a:b8:5c:33:2b:c6:c2:3d:89:
         dc:ac:62:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbA6L0fUzl5JmUjOEHKqoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzExMGI0OTQxYzMyMTFlMjg1NmZmMGU4YWRmZDE1Nzgy
YWM5NzMwHhcNMjUwNDIyMDEwMTI3WhcNMjUwNDIzMDEwMTI3WjAzMTEwLwYDVQQD
EyhmOWIwOGZiNWQ1OWE0MjExNThmOGM1NDIxMjY0ZDEzNWE3ZTM5ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YDHn8JXeynHus/GdiPMU6nms6fm
ugqCSuVA/PYdLCArjc7MSU4ccM3GcMkzcbu/zIQ0bPkXlCtrwrtSLY8Qx7IvQSs+
VnwAGe7OOtv3lV8kcFeehNrl98dqiGyiqsiZBstmGqDy+gIE8HRkKIq7HLTPCiHs
u1IA+mrST+cyo0ami/g+ELFc87ZuUvXb2LhxLjrCKYP3/sCOiLVgOMpMelRJhV7/
Vphb3N4kplgXDOVS5jbXa+Ux1okuVzi3zqlwifBv3UlcPrkHnSrr+F4nn2BT3vte
dubvumxYjr9HvI9+FGgxgqIQQBx6QH/0UVhnMkreYrXxxIotKC8t1r72swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmwj7XVmkIRWPjFQhJk0TWn454JMB8GA1UdIwQY
MBaAFOYxELSUHDIR4oVv8Oit/RV4KslzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2Et
OTE1ZTYxNDMzYjNiLzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2EtOTE1ZTYxNDMzYjNi
LzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3oJuPe0
DgvlutB+T0+XvWPZa9hm4h7JMY4Og1Rr7R9K8uQoWO/FWGsIJgqhvs+DBqdwabOA
pUKAvsMybMCUd6svZdiNsq1SQ37/cYoc2O15izUE9hdrpfWMECdYvUKl5iY+pFf6
ajfQTOgbZ6H7aNfpK8ytmv0eIk9HIPbJL2EVM7V/lNp+3p8VRw2w9z9djZP/fsVA
qr/iQGW2hmKzeA/EhABQWStSco7rfo/04z/Aru7MA7ZjcP2ALNXa67cF91TyS1/u
OLjHPM+c1ebsIVFX5cb+h12sLh4QbPmhlnC6pladT42pN6/Nem4NvVwHFPMzCrhc
MyvGwj2J3KxiFQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:34:43 2025 by rpki-client